This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
File: Tl67mwUa1ex6Npifw_zJTByrzHQ.mft (raw, json)
Hash identifier: 8ySVnxPpE7NxDa6/KnVExwcTfiBoZxmdwLfhmTiZ1Gk=
Subject key identifier: 02:01:24:60:0E:3F:20:2B:2F:40:9D:10:FB:7B:62:13:6C:3A:4A:23
Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
Certificate issuer: /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Certificate serial: 019B3EA3A466E8BCB64EA1326BB481383F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
Manifest number: 17A2
Signing time: Sun 21 Dec 2025 02:01:10 +0000
Manifest this update: Sun 21 Dec 2025 02:01:10 +0000
Manifest next update: Mon 22 Dec 2025 02:01:10 +0000
Files and hashes: 1: Tl67mwUa1ex6Npifw_zJTByrzHQ.crl (hash: Y5jMtNasqpyBJFYrUn29YTuUi13ua4mCKVsMhBO/BoM=)
2: sPL5rUlzKx5_eiK0H41Atshaecg.roa (hash: gZZ6IxCmuB2B723uD8tUyKBaH66Mb5llFLuK/jyTEBM=)
3: wgOqnnsWlsLcY-e3U904w3g_rl0.roa (hash: Ww7qe8WtK5P+D80awiXawU9bPGz6ArE4FuPa1FSF2jU=)
4: wub3ojVvtYVNr5_D3zKLLbWF2_M.roa (hash: 0Ivv/JEf+s+UoAgsprFNMguw897KPBdxp9YKz2VJrNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3e:a3:a4:66:e8:bc:b6:4e:a1:32:6b:b4:81:38:3f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74
Validity
Not Before: Dec 21 02:01:10 2025 GMT
Not After : Dec 22 02:01:10 2025 GMT
Subject: CN=020124600e3f202b2f409d10fb7b62136c3a4a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7c:d5:7d:12:cd:6c:e9:65:ea:94:ed:70:03:
77:1d:83:b0:5b:48:24:0a:1d:7a:ab:a8:3e:e7:f3:
d5:aa:15:ab:f4:f2:2f:79:05:f2:c9:66:f3:52:5d:
94:f0:1e:d9:f1:d0:84:04:f7:86:0c:ab:30:b2:55:
8f:ae:66:6a:7b:2b:c3:16:9d:25:83:c5:80:34:b3:
78:05:e0:b9:98:b7:4d:39:83:62:8d:e9:7b:8a:cf:
c3:19:fc:f0:a0:45:4e:c6:be:f3:0e:e5:5e:b2:52:
4a:c9:17:b7:68:01:19:48:50:40:1d:d6:4c:82:97:
7c:65:82:de:3a:f1:19:47:70:d0:5d:50:ea:28:f6:
63:1f:36:15:3b:b5:0a:6d:5b:79:4a:7b:8f:c9:91:
3c:97:2f:3a:85:51:fb:f6:08:ab:76:5e:c5:87:4a:
06:fa:32:a3:e3:18:95:07:ea:5b:f1:63:77:28:2b:
06:d5:f8:af:35:ad:78:11:04:72:e9:88:c0:ee:e4:
06:51:e0:be:18:dd:df:8d:d0:e2:f1:66:6b:51:f9:
9c:66:81:73:f7:e7:f0:4d:17:e0:81:f3:c9:0b:e2:
a7:29:c3:8b:4e:68:e2:a1:03:90:a0:8c:09:ab:7e:
87:f0:b3:cd:1c:a1:14:f3:e4:44:c9:58:c0:a7:d0:
f8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:01:24:60:0E:3F:20:2B:2F:40:9D:10:FB:7B:62:13:6C:3A:4A:23
X509v3 Authority Key Identifier:
keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:b5:47:69:0f:e3:91:d7:7c:75:8a:79:64:3b:04:25:00:b8:
2a:e7:62:c3:88:2f:0e:f7:bd:ac:83:34:d8:ee:b0:e2:b1:ae:
36:74:dc:50:43:e4:d4:09:28:96:c9:c1:44:eb:fb:99:8f:bd:
7d:b9:c1:fd:95:a1:10:ad:07:cc:c6:cd:48:8d:a3:b6:91:bb:
16:2f:45:6b:ac:e3:8c:f2:1d:54:7b:8f:5f:e4:9c:2e:d9:88:
e7:c1:31:45:87:a3:17:a2:b2:25:b7:82:23:23:7f:48:ae:2c:
8b:2a:8c:55:c6:83:3f:50:bb:5a:50:d8:cb:32:c8:7a:d3:db:
87:7d:1d:38:05:53:4c:cb:47:30:e4:4d:02:25:7c:1f:f1:51:
b9:ff:18:d2:51:db:38:5d:be:1f:d9:19:5b:86:86:39:b0:82:
ea:b3:70:f1:79:6c:b5:7f:50:bf:85:27:4d:5a:65:c9:1e:23:
20:99:70:18:24:a6:5b:4a:26:1b:dc:cd:39:7e:40:49:15:91:
e9:b7:13:29:9f:60:33:f3:04:8a:82:94:2e:b7:32:ec:9e:87:
8b:42:64:39:99:af:ac:02:71:cc:b5:18:8d:94:2a:c5:4e:f0:
57:c3:d2:1f:52:00:76:89:b1:04:c3:20:52:80:56:5d:56:34:
a4:26:2b:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZs+o6Rm6Ly2TqEya7SBOD8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNWViYjliMDUxYWQ1ZWM3YTM2OTg5ZmMzZmNjOTRjMWNh
YmNjNzQwHhcNMjUxMjIxMDIwMTEwWhcNMjUxMjIyMDIwMTEwWjAzMTEwLwYDVQQD
EygwMjAxMjQ2MDBlM2YyMDJiMmY0MDlkMTBmYjdiNjIxMzZjM2E0YTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3zVfRLNbOll6pTtcAN3HYOwW0gk
Ch16q6g+5/PVqhWr9PIveQXyyWbzUl2U8B7Z8dCEBPeGDKswslWPrmZqeyvDFp0l
g8WANLN4BeC5mLdNOYNijel7is/DGfzwoEVOxr7zDuVeslJKyRe3aAEZSFBAHdZM
gpd8ZYLeOvEZR3DQXVDqKPZjHzYVO7UKbVt5SnuPyZE8ly86hVH79girdl7Fh0oG
+jKj4xiVB+pb8WN3KCsG1fivNa14EQRy6YjA7uQGUeC+GN3fjdDi8WZrUfmcZoFz
9+fwTRfggfPJC+KnKcOLTmjioQOQoIwJq36H8LPNHKEU8+REyVjAp9D4XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIBJGAOPyArL0CdEPt7YhNsOkojMB8GA1UdIwQY
MBaAFE5eu5sFGtXsejaYn8P8yUwcq8x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGw2N213VWExZXg2TnBpZndfekpUQnlyekhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lYzE3MjEtNzVjNS00MGY1LTkzNDUt
YzJmZDBmOTU4ZDRiLzEvVGw2N213VWExZXg2TnBpZndfekpUQnlyekhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9lYzE3MjEtNzVjNS00MGY1LTkzNDUtYzJmZDBmOTU4ZDRi
LzEvVGw2N213VWExZXg2TnBpZndfekpUQnlyekhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAybVHaQ/j
kdd8dYp5ZDsEJQC4Kudiw4gvDve9rIM02O6w4rGuNnTcUEPk1AkolsnBROv7mY+9
fbnB/ZWhEK0HzMbNSI2jtpG7Fi9Fa6zjjPIdVHuPX+ScLtmI58ExRYejF6KyJbeC
IyN/SK4siyqMVcaDP1C7WlDYyzLIetPbh30dOAVTTMtHMORNAiV8H/FRuf8Y0lHb
OF2+H9kZW4aGObCC6rNw8XlstX9Qv4UnTVplyR4jIJlwGCSmW0omG9zNOX5ASRWR
6bcTKZ9gM/MEioKULrcy7J6Hi0JkOZmvrAJxzLUYjZQqxU7wV8PSH1IAdomxBMMg
UoBWXVY0pCYrBw==
-----END CERTIFICATE-----
Generated at Sun Dec 21 05:01:50 2025 by rpki-client