This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft File: Tl67mwUa1ex6Npifw_zJTByrzHQ.mft (raw, json) Hash identifier: qpmWtA0wQa9HhzzRFy8z2l+ntc3GzSoeXZlIb/6VWtU= Subject key identifier: CC:B7:E9:43:96:EA:D8:4B:57:4C:43:A9:C3:4A:4B:5D:1A:D3:4C:60 Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74 Certificate issuer: /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74 Certificate serial: 019B3CB4EBC405474CA8428D6F81E830E43B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft Manifest number: 17A1 Signing time: Sat 20 Dec 2025 17:00:48 +0000 Manifest this update: Sat 20 Dec 2025 17:00:48 +0000 Manifest next update: Sun 21 Dec 2025 17:00:48 +0000 Files and hashes: 1: Tl67mwUa1ex6Npifw_zJTByrzHQ.crl (hash: vZzY/sKipuRQc5ntrf+/6vC+QrcZxvblW1I35C7PxmI=) 2: sPL5rUlzKx5_eiK0H41Atshaecg.roa (hash: gZZ6IxCmuB2B723uD8tUyKBaH66Mb5llFLuK/jyTEBM=) 3: wgOqnnsWlsLcY-e3U904w3g_rl0.roa (hash: Ww7qe8WtK5P+D80awiXawU9bPGz6ArE4FuPa1FSF2jU=) 4: wub3ojVvtYVNr5_D3zKLLbWF2_M.roa (hash: 0Ivv/JEf+s+UoAgsprFNMguw897KPBdxp9YKz2VJrNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 17:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:eb:c4:05:47:4c:a8:42:8d:6f:81:e8:30:e4:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74 Validity Not Before: Dec 20 17:00:48 2025 GMT Not After : Dec 21 17:00:48 2025 GMT Subject: CN=ccb7e94396ead84b574c43a9c34a4b5d1ad34c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b3:47:4c:8a:6c:44:e4:70:d4:58:31:34:0b: e9:04:61:3e:76:62:e5:92:43:12:c2:bd:2c:53:c6: 8a:9f:08:5a:ea:0d:d1:16:c9:45:e9:58:59:8f:13: a6:78:2c:7f:2a:d1:8f:05:ca:89:a0:f1:99:85:d7: 75:57:17:5b:b7:80:d5:28:9c:63:da:f3:1c:c5:f4: 60:3d:76:07:a0:58:68:fe:15:98:63:0e:4e:9d:c7: 92:05:f1:89:3b:ff:63:5c:14:f7:3f:b8:a3:c0:09: 50:52:82:e3:e0:7d:c3:52:31:d1:eb:43:51:ca:4f: 4a:54:8b:18:12:a5:45:3b:3c:82:fb:1a:9a:fc:9e: c4:c1:d1:bb:a1:cb:42:d6:0a:ce:73:d9:6b:3c:1a: 9b:33:cb:f2:5f:b3:1d:7c:14:b7:a4:57:fc:61:a8: ee:c3:7e:9a:bc:c4:9f:68:7a:44:50:c4:4f:c0:a9: ad:dc:10:37:12:62:e7:60:6d:82:52:45:15:3f:c7: 17:5f:2d:46:fe:87:3a:22:de:08:90:d4:a8:62:bf: 68:2f:c4:be:79:9c:21:7f:7d:5c:12:b3:e6:ba:a8: 7d:72:50:b1:03:12:dc:6e:c3:09:f6:1d:d6:86:60: d1:b0:83:7a:5b:53:1b:67:63:bd:93:db:3c:ef:56: fd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B7:E9:43:96:EA:D8:4B:57:4C:43:A9:C3:4A:4B:5D:1A:D3:4C:60 X509v3 Authority Key Identifier: keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:71:61:71:eb:de:f4:36:c9:00:9a:bd:35:a9:ff:52:59:85: 0f:c5:68:f9:fb:19:6b:16:de:08:00:8e:15:32:7e:07:c6:94: 5e:19:4e:5d:d2:06:57:6e:90:55:ad:90:b7:90:10:b0:7e:83: f2:8c:99:47:05:7a:7a:c1:0c:b5:62:a6:0a:30:2a:2c:7f:79: 55:b3:14:a6:5c:a8:0e:9c:a7:0a:89:a6:c9:3e:de:c5:e3:6f: 0a:5e:51:4b:12:35:a1:7b:4f:5d:f7:6a:c8:75:60:31:16:26: 03:8f:f3:9f:d0:74:0e:d1:de:fc:de:16:c0:3c:ed:7d:97:9c: 9e:4c:cd:9e:e3:74:72:f6:8d:49:77:88:6d:db:25:c8:92:12: fd:69:d0:88:51:8f:07:ee:d4:d6:25:8c:fb:55:89:09:66:ea: f3:47:59:e0:0f:4a:c5:36:6d:79:17:e9:14:57:bb:80:be:e6: ff:0e:f4:3a:0a:8a:69:43:b0:86:af:2a:ef:7c:83:6e:ff:57: f1:d1:49:79:34:1b:2f:f2:da:cb:e5:dd:c6:00:ac:bf:af:7d: 9e:9d:1e:8b:0d:a9:95:b2:48:52:5d:59:fd:ea:42:cd:08:d0: 56:44:fc:c7:8f:23:17:a7:80:af:61:de:2e:c5:8d:71:4b:ab: dd:37:e2:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tOvEBUdMqEKNb4HoMOQ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNWViYjliMDUxYWQ1ZWM3YTM2OTg5ZmMzZmNjOTRjMWNh YmNjNzQwHhcNMjUxMjIwMTcwMDQ4WhcNMjUxMjIxMTcwMDQ4WjAzMTEwLwYDVQQD EyhjY2I3ZTk0Mzk2ZWFkODRiNTc0YzQzYTljMzRhNGI1ZDFhZDM0YzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLNHTIpsRORw1FgxNAvpBGE+dmLl kkMSwr0sU8aKnwha6g3RFslF6VhZjxOmeCx/KtGPBcqJoPGZhdd1Vxdbt4DVKJxj 2vMcxfRgPXYHoFho/hWYYw5OnceSBfGJO/9jXBT3P7ijwAlQUoLj4H3DUjHR60NR yk9KVIsYEqVFOzyC+xqa/J7EwdG7octC1grOc9lrPBqbM8vyX7MdfBS3pFf8Yaju w36avMSfaHpEUMRPwKmt3BA3EmLnYG2CUkUVP8cXXy1G/oc6It4IkNSoYr9oL8S+ eZwhf31cErPmuqh9clCxAxLcbsMJ9h3WhmDRsIN6W1MbZ2O9k9s871b9HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMy36UOW6thLV0xDqcNKS10a00xgMB8GA1UdIwQY MBaAFE5eu5sFGtXsejaYn8P8yUwcq8x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGw2N213VWExZXg2TnBpZndfekpUQnlyekhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lYzE3MjEtNzVjNS00MGY1LTkzNDUt YzJmZDBmOTU4ZDRiLzEvVGw2N213VWExZXg2TnBpZndfekpUQnlyekhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lYzE3MjEtNzVjNS00MGY1LTkzNDUtYzJmZDBmOTU4ZDRi LzEvVGw2N213VWExZXg2TnBpZndfekpUQnlyekhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXFhceve 9DbJAJq9Nan/UlmFD8Vo+fsZaxbeCACOFTJ+B8aUXhlOXdIGV26QVa2Qt5AQsH6D 8oyZRwV6esEMtWKmCjAqLH95VbMUplyoDpynCommyT7exeNvCl5RSxI1oXtPXfdq yHVgMRYmA4/zn9B0DtHe/N4WwDztfZecnkzNnuN0cvaNSXeIbdslyJIS/WnQiFGP B+7U1iWM+1WJCWbq80dZ4A9KxTZteRfpFFe7gL7m/w70OgqKaUOwhq8q73yDbv9X 8dFJeTQbL/Lay+XdxgCsv699np0eiw2plbJIUl1Z/epCzQjQVkT8x48jF6eAr2He LsWNcUur3TfiTQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:25:16 2025 by rpki-client