This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft File: i-tlpxrwKVknKswA1cTBlYOF3pQ.mft (raw, json) Hash identifier: ulPzL88+s4LUl6o88FGmziwwcjsbRC+PrEZ91XTd5D0= Subject key identifier: BC:60:7F:4A:73:51:51:19:DF:6D:2B:4F:E6:9A:4F:A3:54:FF:BB:CE Authority key identifier: 8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94 Certificate issuer: /CN=8beb65a71af02959272acc00d5c4c1958385de94 Certificate serial: 019B4E163A3D59D953C3A8C0052F1B6EAC2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft Manifest number: 1793 Signing time: Wed 24 Dec 2025 02:00:38 +0000 Manifest this update: Wed 24 Dec 2025 02:00:38 +0000 Manifest next update: Thu 25 Dec 2025 02:00:38 +0000 Files and hashes: 1: 8U8kKdz2fVZxTqZwqIjaA_g2nWA.roa (hash: VPZpp0pYKoi2I1Ak52XiESxXc7FZdh4MhOiiuF6UR+U=) 2: i-tlpxrwKVknKswA1cTBlYOF3pQ.crl (hash: OzcFlsUvNdNXDPHweyUllHIWs00OJR7DiNun4eCuXtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:16:3a:3d:59:d9:53:c3:a8:c0:05:2f:1b:6e:ac:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8beb65a71af02959272acc00d5c4c1958385de94 Validity Not Before: Dec 24 02:00:38 2025 GMT Not After : Dec 25 02:00:38 2025 GMT Subject: CN=bc607f4a73515119df6d2b4fe69a4fa354ffbbce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:90:0d:72:45:5e:10:ba:76:52:8a:27:16:fd: e7:6f:26:f8:27:e1:a9:d9:73:38:6b:e5:ba:80:a4: 7e:a7:d9:5c:b6:c7:a4:00:60:4e:40:6a:80:dd:cd: 11:e6:b2:1b:df:18:04:c2:a8:e1:f6:38:fe:03:ff: 03:f6:68:b0:4d:a0:9a:13:91:bf:b3:e9:05:c2:8b: 21:57:7e:21:8d:e6:88:f0:aa:f5:09:88:95:53:d7: 52:d8:a3:1f:eb:83:85:8c:9d:df:90:9a:e3:5c:9b: f2:30:72:4d:4c:51:54:f7:25:ce:cf:35:68:92:95: 46:6c:c3:41:b1:e5:32:aa:51:63:fd:29:4b:33:3c: a1:96:f1:1f:df:0c:bb:4a:00:b5:5d:ee:d1:be:40: 23:07:21:54:f9:5b:5d:fd:08:a1:83:81:db:91:d0: 64:a9:0e:e6:32:6c:67:f9:98:e7:13:33:f0:e0:af: 22:87:51:08:bc:2c:fa:1b:74:94:1e:78:1b:42:8e: 1f:cd:35:95:e9:87:67:fe:8e:f0:6b:da:98:8e:a6: 27:64:6f:e0:6c:64:fa:b6:2a:96:aa:3e:03:0c:bd: 46:15:ac:c1:f0:55:64:ea:7f:04:f1:27:42:59:7c: 26:b9:8c:75:e7:5a:58:78:d3:ab:74:d2:d9:b1:99: c1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:60:7F:4A:73:51:51:19:DF:6D:2B:4F:E6:9A:4F:A3:54:FF:BB:CE X509v3 Authority Key Identifier: keyid:8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:20:6d:69:e0:6c:94:10:6d:e4:85:b7:b3:7a:79:d3:31:37: 0a:d5:d9:6f:f1:3f:4d:79:de:24:bc:98:e8:7e:5f:ad:bd:53: 94:ca:73:e8:8c:d0:a9:ec:6f:5a:3d:a9:2c:b0:94:4c:c1:e6: 44:29:98:fb:75:b3:37:1e:ea:b8:37:81:4e:71:ed:92:fd:55: dd:c9:44:1e:7a:ea:f9:c2:30:9a:0a:cf:64:97:6a:c5:c9:a9: 8d:a6:b5:52:16:da:c4:94:36:f1:5f:98:b1:8a:55:7b:46:79: c9:24:a4:88:21:1d:23:06:49:79:9c:13:93:61:3d:ac:04:93: cd:50:b3:90:0a:7b:e7:78:a4:de:e3:e7:c2:0c:92:c2:6d:bc: 82:1d:12:4b:c0:3e:32:53:f8:51:0b:b1:99:ee:58:c4:68:73: 9c:a9:f7:b7:31:5c:e0:36:ea:f3:51:ba:b7:df:0a:39:2e:e3: 80:4e:3b:48:a7:fb:5f:17:82:4a:2a:ee:d7:b2:e4:eb:5d:29: dd:b6:e9:6d:4d:96:94:05:e1:5a:09:4e:43:59:28:22:6b:90: 38:20:ad:3e:72:47:80:42:ae:28:87:b0:80:78:c0:d4:de:12: 2c:b0:a2:45:70:98:bd:09:0f:32:3b:e2:6e:df:97:b4:25:de: c5:c7:90:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOFjo9WdlTw6jABS8bbqwvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZWI2NWE3MWFmMDI5NTkyNzJhY2MwMGQ1YzRjMTk1ODM4 NWRlOTQwHhcNMjUxMjI0MDIwMDM4WhcNMjUxMjI1MDIwMDM4WjAzMTEwLwYDVQQD EyhiYzYwN2Y0YTczNTE1MTE5ZGY2ZDJiNGZlNjlhNGZhMzU0ZmZiYmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJANckVeELp2UoonFv3nbyb4J+Gp 2XM4a+W6gKR+p9lctsekAGBOQGqA3c0R5rIb3xgEwqjh9jj+A/8D9miwTaCaE5G/ s+kFwoshV34hjeaI8Kr1CYiVU9dS2KMf64OFjJ3fkJrjXJvyMHJNTFFU9yXOzzVo kpVGbMNBseUyqlFj/SlLMzyhlvEf3wy7SgC1Xe7RvkAjByFU+Vtd/Qihg4HbkdBk qQ7mMmxn+ZjnEzPw4K8ih1EIvCz6G3SUHngbQo4fzTWV6Ydn/o7wa9qYjqYnZG/g bGT6tiqWqj4DDL1GFazB8FVk6n8E8SdCWXwmuYx151pYeNOrdNLZsZnBvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxgf0pzUVEZ320rT+aaT6NU/7vOMB8GA1UdIwQY MBaAFIvrZaca8ClZJyrMANXEwZWDhd6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmIt MTY1YTg0NmQ0ODFkLzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmItMTY1YTg0NmQ0ODFk LzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKCBtaeBs lBBt5IW3s3p50zE3CtXZb/E/TXneJLyY6H5frb1TlMpz6IzQqexvWj2pLLCUTMHm RCmY+3WzNx7quDeBTnHtkv1V3clEHnrq+cIwmgrPZJdqxcmpjaa1UhbaxJQ28V+Y sYpVe0Z5ySSkiCEdIwZJeZwTk2E9rASTzVCzkAp753ik3uPnwgySwm28gh0SS8A+ MlP4UQuxme5YxGhznKn3tzFc4Dbq81G6t98KOS7jgE47SKf7XxeCSiru17Lk610p 3bbpbU2WlAXhWglOQ1koImuQOCCtPnJHgEKuKIewgHjA1N4SLLCiRXCYvQkPMjvi bt+XtCXexceQ8A== -----END CERTIFICATE-----Generated at Wed Dec 24 10:33:09 2025 by rpki-client