This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft File: i-tlpxrwKVknKswA1cTBlYOF3pQ.mft (raw, json) Hash identifier: vOE7eZbMeJUjyHSrJvm3+V2Jp13me/RSmEmu70mraB4= Subject key identifier: 70:24:14:CA:DE:88:58:2D:24:CD:4D:47:A2:96:FE:17:24:13:DD:00 Authority key identifier: 8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94 Certificate issuer: /CN=8beb65a71af02959272acc00d5c4c1958385de94 Certificate serial: 019B53E15FF86C4EF5FA6BB19185CDC0B322 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft Manifest number: 1796 Signing time: Thu 25 Dec 2025 05:00:37 +0000 Manifest this update: Thu 25 Dec 2025 05:00:37 +0000 Manifest next update: Fri 26 Dec 2025 05:00:37 +0000 Files and hashes: 1: 8U8kKdz2fVZxTqZwqIjaA_g2nWA.roa (hash: VPZpp0pYKoi2I1Ak52XiESxXc7FZdh4MhOiiuF6UR+U=) 2: i-tlpxrwKVknKswA1cTBlYOF3pQ.crl (hash: sZ/iSFR1BcE9uhhggGoVGDERlFyySGeizqGe2KVFam8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:e1:5f:f8:6c:4e:f5:fa:6b:b1:91:85:cd:c0:b3:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8beb65a71af02959272acc00d5c4c1958385de94 Validity Not Before: Dec 25 05:00:37 2025 GMT Not After : Dec 26 05:00:37 2025 GMT Subject: CN=702414cade88582d24cd4d47a296fe172413dd00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7e:39:43:6d:8b:91:45:93:fd:02:73:21:af: 3d:8f:20:fd:3c:f1:3f:15:57:a9:87:db:a2:04:09: 25:77:c0:03:5c:94:be:7a:a1:d8:6c:7c:06:bc:46: 28:02:ad:73:04:00:d9:62:f0:bc:1c:f5:ad:fd:cd: d0:07:3c:28:0a:e4:17:df:4d:01:d3:19:2f:b7:e5: 01:59:9b:2b:c6:7d:f8:17:6c:a3:87:0b:75:70:7b: a4:b8:c3:95:3d:9e:fb:35:8c:28:b5:19:76:6d:9f: 3c:be:1c:73:c2:6f:9f:55:b8:c0:85:5e:13:ea:dd: 8e:bd:5a:88:e1:78:b3:18:b8:b2:80:f8:9e:74:55: 77:b1:41:49:a2:7c:1c:d0:bb:02:00:38:cf:8f:96: 06:ce:e3:96:9e:9a:82:2d:50:25:07:01:c2:7e:7f: 2f:3b:15:da:dc:02:1e:28:78:2f:ac:54:9c:9a:03: 69:ec:fe:ff:c0:f2:7f:87:fc:32:f6:f3:df:6a:46: 80:20:3d:f3:f9:3e:c4:ec:75:d4:41:c9:29:24:d2: 1c:82:4a:b8:0b:cb:78:06:f5:76:54:f3:48:29:3a: 3f:b4:dd:f5:5a:9e:84:91:6f:33:2e:29:8b:80:41: 91:e3:60:9e:58:15:9d:a4:ab:c7:55:90:32:52:05: ab:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:24:14:CA:DE:88:58:2D:24:CD:4D:47:A2:96:FE:17:24:13:DD:00 X509v3 Authority Key Identifier: keyid:8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:53:34:77:f4:e3:13:12:09:ff:7e:33:a9:d4:db:e7:a9:97: 8e:27:6a:f7:1e:48:8d:84:15:e8:01:3a:6d:4b:de:76:a3:00: de:7c:66:24:a3:8d:4b:84:75:02:c0:e7:76:83:a4:ce:95:a0: 90:d9:e9:b2:c9:dd:9d:22:2c:42:c5:7d:f4:65:91:78:cf:44: 79:cc:b6:10:48:aa:89:77:4d:9c:fb:f3:8c:c4:98:fd:8a:21: fd:17:73:64:fa:0b:1b:c4:be:ef:6e:3c:44:95:73:1f:45:89: d8:f7:00:13:24:fe:db:73:e0:cb:f1:a8:85:3a:ea:9b:c7:30: 09:f2:0b:9f:9d:ce:c5:e6:48:d1:c3:d8:64:37:e5:13:fc:9e: 0c:e3:9a:b1:4d:ea:3e:96:4e:17:a0:4b:2c:28:74:8a:82:cb: 32:a9:08:8f:0f:ee:e9:ae:df:8b:c6:f7:33:cf:d2:e7:22:7f: 0f:45:86:2c:b7:61:31:02:cd:a6:11:4b:7f:45:a3:e9:5e:be: 81:5a:3c:93:77:18:30:eb:0d:36:59:e7:9e:73:a9:1c:fd:dd: a8:cf:bf:60:71:c8:2a:d6:44:4a:f9:da:41:f5:2b:b1:9d:82: 56:0a:4a:23:69:f0:d1:e8:54:0d:71:af:09:d3:97:dd:73:64: 27:bd:a6:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtT4V/4bE71+muxkYXNwLMiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZWI2NWE3MWFmMDI5NTkyNzJhY2MwMGQ1YzRjMTk1ODM4 NWRlOTQwHhcNMjUxMjI1MDUwMDM3WhcNMjUxMjI2MDUwMDM3WjAzMTEwLwYDVQQD Eyg3MDI0MTRjYWRlODg1ODJkMjRjZDRkNDdhMjk2ZmUxNzI0MTNkZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln45Q22LkUWT/QJzIa89jyD9PPE/ FVeph9uiBAkld8ADXJS+eqHYbHwGvEYoAq1zBADZYvC8HPWt/c3QBzwoCuQX300B 0xkvt+UBWZsrxn34F2yjhwt1cHukuMOVPZ77NYwotRl2bZ88vhxzwm+fVbjAhV4T 6t2OvVqI4XizGLiygPiedFV3sUFJonwc0LsCADjPj5YGzuOWnpqCLVAlBwHCfn8v OxXa3AIeKHgvrFScmgNp7P7/wPJ/h/wy9vPfakaAID3z+T7E7HXUQckpJNIcgkq4 C8t4BvV2VPNIKTo/tN31Wp6EkW8zLimLgEGR42CeWBWdpKvHVZAyUgWrxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAkFMreiFgtJM1NR6KW/hckE90AMB8GA1UdIwQY MBaAFIvrZaca8ClZJyrMANXEwZWDhd6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmIt MTY1YTg0NmQ0ODFkLzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmItMTY1YTg0NmQ0ODFk LzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAllM0d/Tj ExIJ/34zqdTb56mXjidq9x5IjYQV6AE6bUvedqMA3nxmJKONS4R1AsDndoOkzpWg kNnpssndnSIsQsV99GWReM9Eecy2EEiqiXdNnPvzjMSY/Yoh/RdzZPoLG8S+7248 RJVzH0WJ2PcAEyT+23Pgy/GohTrqm8cwCfILn53OxeZI0cPYZDflE/yeDOOasU3q PpZOF6BLLCh0ioLLMqkIjw/u6a7fi8b3M8/S5yJ/D0WGLLdhMQLNphFLf0Wj6V6+ gVo8k3cYMOsNNlnnnnOpHP3dqM+/YHHIKtZESvnaQfUrsZ2CVgpKI2nw0ehUDXGv CdOX3XNkJ72mZA== -----END CERTIFICATE-----Generated at Thu Dec 25 07:23:54 2025 by rpki-client