This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft File: Tl67mwUa1ex6Npifw_zJTByrzHQ.mft (raw, json) Hash identifier: 8ySVnxPpE7NxDa6/KnVExwcTfiBoZxmdwLfhmTiZ1Gk= Subject key identifier: 02:01:24:60:0E:3F:20:2B:2F:40:9D:10:FB:7B:62:13:6C:3A:4A:23 Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74 Certificate issuer: /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74 Certificate serial: 019B3EA3A466E8BCB64EA1326BB481383F22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft Manifest number: 17A2 Signing time: Sun 21 Dec 2025 02:01:10 +0000 Manifest this update: Sun 21 Dec 2025 02:01:10 +0000 Manifest next update: Mon 22 Dec 2025 02:01:10 +0000 Files and hashes: 1: Tl67mwUa1ex6Npifw_zJTByrzHQ.crl (hash: Y5jMtNasqpyBJFYrUn29YTuUi13ua4mCKVsMhBO/BoM=) 2: sPL5rUlzKx5_eiK0H41Atshaecg.roa (hash: gZZ6IxCmuB2B723uD8tUyKBaH66Mb5llFLuK/jyTEBM=) 3: wgOqnnsWlsLcY-e3U904w3g_rl0.roa (hash: Ww7qe8WtK5P+D80awiXawU9bPGz6ArE4FuPa1FSF2jU=) 4: wub3ojVvtYVNr5_D3zKLLbWF2_M.roa (hash: 0Ivv/JEf+s+UoAgsprFNMguw897KPBdxp9YKz2VJrNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:a4:66:e8:bc:b6:4e:a1:32:6b:b4:81:38:3f:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74 Validity Not Before: Dec 21 02:01:10 2025 GMT Not After : Dec 22 02:01:10 2025 GMT Subject: CN=020124600e3f202b2f409d10fb7b62136c3a4a23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:d5:7d:12:cd:6c:e9:65:ea:94:ed:70:03: 77:1d:83:b0:5b:48:24:0a:1d:7a:ab:a8:3e:e7:f3: d5:aa:15:ab:f4:f2:2f:79:05:f2:c9:66:f3:52:5d: 94:f0:1e:d9:f1:d0:84:04:f7:86:0c:ab:30:b2:55: 8f:ae:66:6a:7b:2b:c3:16:9d:25:83:c5:80:34:b3: 78:05:e0:b9:98:b7:4d:39:83:62:8d:e9:7b:8a:cf: c3:19:fc:f0:a0:45:4e:c6:be:f3:0e:e5:5e:b2:52: 4a:c9:17:b7:68:01:19:48:50:40:1d:d6:4c:82:97: 7c:65:82:de:3a:f1:19:47:70:d0:5d:50:ea:28:f6: 63:1f:36:15:3b:b5:0a:6d:5b:79:4a:7b:8f:c9:91: 3c:97:2f:3a:85:51:fb:f6:08:ab:76:5e:c5:87:4a: 06:fa:32:a3:e3:18:95:07:ea:5b:f1:63:77:28:2b: 06:d5:f8:af:35:ad:78:11:04:72:e9:88:c0:ee:e4: 06:51:e0:be:18:dd:df:8d:d0:e2:f1:66:6b:51:f9: 9c:66:81:73:f7:e7:f0:4d:17:e0:81:f3:c9:0b:e2: a7:29:c3:8b:4e:68:e2:a1:03:90:a0:8c:09:ab:7e: 87:f0:b3:cd:1c:a1:14:f3:e4:44:c9:58:c0:a7:d0: f8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:01:24:60:0E:3F:20:2B:2F:40:9D:10:FB:7B:62:13:6C:3A:4A:23 X509v3 Authority Key Identifier: keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:b5:47:69:0f:e3:91:d7:7c:75:8a:79:64:3b:04:25:00:b8: 2a:e7:62:c3:88:2f:0e:f7:bd:ac:83:34:d8:ee:b0:e2:b1:ae: 36:74:dc:50:43:e4:d4:09:28:96:c9:c1:44:eb:fb:99:8f:bd: 7d:b9:c1:fd:95:a1:10:ad:07:cc:c6:cd:48:8d:a3:b6:91:bb: 16:2f:45:6b:ac:e3:8c:f2:1d:54:7b:8f:5f:e4:9c:2e:d9:88: e7:c1:31:45:87:a3:17:a2:b2:25:b7:82:23:23:7f:48:ae:2c: 8b:2a:8c:55:c6:83:3f:50:bb:5a:50:d8:cb:32:c8:7a:d3:db: 87:7d:1d:38:05:53:4c:cb:47:30:e4:4d:02:25:7c:1f:f1:51: b9:ff:18:d2:51:db:38:5d:be:1f:d9:19:5b:86:86:39:b0:82: ea:b3:70:f1:79:6c:b5:7f:50:bf:85:27:4d:5a:65:c9:1e:23: 20:99:70:18:24:a6:5b:4a:26:1b:dc:cd:39:7e:40:49:15:91: e9:b7:13:29:9f:60:33:f3:04:8a:82:94:2e:b7:32:ec:9e:87: 8b:42:64:39:99:af:ac:02:71:cc:b5:18:8d:94:2a:c5:4e:f0: 57:c3:d2:1f:52:00:76:89:b1:04:c3:20:52:80:56:5d:56:34: a4:26:2b:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o6Rm6Ly2TqEya7SBOD8iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNWViYjliMDUxYWQ1ZWM3YTM2OTg5ZmMzZmNjOTRjMWNh YmNjNzQwHhcNMjUxMjIxMDIwMTEwWhcNMjUxMjIyMDIwMTEwWjAzMTEwLwYDVQQD EygwMjAxMjQ2MDBlM2YyMDJiMmY0MDlkMTBmYjdiNjIxMzZjM2E0YTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3zVfRLNbOll6pTtcAN3HYOwW0gk Ch16q6g+5/PVqhWr9PIveQXyyWbzUl2U8B7Z8dCEBPeGDKswslWPrmZqeyvDFp0l g8WANLN4BeC5mLdNOYNijel7is/DGfzwoEVOxr7zDuVeslJKyRe3aAEZSFBAHdZM gpd8ZYLeOvEZR3DQXVDqKPZjHzYVO7UKbVt5SnuPyZE8ly86hVH79girdl7Fh0oG +jKj4xiVB+pb8WN3KCsG1fivNa14EQRy6YjA7uQGUeC+GN3fjdDi8WZrUfmcZoFz 9+fwTRfggfPJC+KnKcOLTmjioQOQoIwJq36H8LPNHKEU8+REyVjAp9D4XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIBJGAOPyArL0CdEPt7YhNsOkojMB8GA1UdIwQY MBaAFE5eu5sFGtXsejaYn8P8yUwcq8x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGw2N213VWExZXg2TnBpZndfekpUQnlyekhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lYzE3MjEtNzVjNS00MGY1LTkzNDUt YzJmZDBmOTU4ZDRiLzEvVGw2N213VWExZXg2TnBpZndfekpUQnlyekhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lYzE3MjEtNzVjNS00MGY1LTkzNDUtYzJmZDBmOTU4ZDRi LzEvVGw2N213VWExZXg2TnBpZndfekpUQnlyekhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAybVHaQ/j kdd8dYp5ZDsEJQC4Kudiw4gvDve9rIM02O6w4rGuNnTcUEPk1AkolsnBROv7mY+9 fbnB/ZWhEK0HzMbNSI2jtpG7Fi9Fa6zjjPIdVHuPX+ScLtmI58ExRYejF6KyJbeC IyN/SK4siyqMVcaDP1C7WlDYyzLIetPbh30dOAVTTMtHMORNAiV8H/FRuf8Y0lHb OF2+H9kZW4aGObCC6rNw8XlstX9Qv4UnTVplyR4jIJlwGCSmW0omG9zNOX5ASRWR 6bcTKZ9gM/MEioKULrcy7J6Hi0JkOZmvrAJxzLUYjZQqxU7wV8PSH1IAdomxBMMg UoBWXVY0pCYrBw== -----END CERTIFICATE-----Generated at Sun Dec 21 05:01:50 2025 by rpki-client