This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft File: i-tlpxrwKVknKswA1cTBlYOF3pQ.mft (raw, json) Hash identifier: dtq2jCuYhcwtoy0RzD7aoOteeRJ8iE/zuQSGI7ViwZA= Subject key identifier: 65:71:92:E1:4C:5F:06:1A:25:ED:A4:2E:9D:62:89:C1:B6:FE:32:17 Authority key identifier: 8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94 Certificate issuer: /CN=8beb65a71af02959272acc00d5c4c1958385de94 Certificate serial: 019B427FE55EA30D0CD27125E41082D80742 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 20:00:36 +0000 Manifest this update: Sun 21 Dec 2025 20:00:36 +0000 Manifest next update: Mon 22 Dec 2025 20:00:36 +0000 Files and hashes: 1: 8U8kKdz2fVZxTqZwqIjaA_g2nWA.roa (hash: VPZpp0pYKoi2I1Ak52XiESxXc7FZdh4MhOiiuF6UR+U=) 2: i-tlpxrwKVknKswA1cTBlYOF3pQ.crl (hash: icKe4R3/26euBFFq4Nl5b4Jwa46U46Ofgisdz4vNDII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:7f:e5:5e:a3:0d:0c:d2:71:25:e4:10:82:d8:07:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8beb65a71af02959272acc00d5c4c1958385de94 Validity Not Before: Dec 21 20:00:36 2025 GMT Not After : Dec 22 20:00:36 2025 GMT Subject: CN=657192e14c5f061a25eda42e9d6289c1b6fe3217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d2:9c:aa:76:29:a4:69:31:a4:40:4d:ce:db: 41:ff:fd:e7:49:8e:0d:b5:91:03:22:f3:12:28:1d: 11:8f:2c:c5:dc:c8:da:f9:23:df:ea:15:91:53:66: 98:c8:5e:26:6c:0a:25:c7:2f:2d:b2:1e:f2:7e:5b: ec:f2:20:44:97:8f:8b:b2:af:3a:8d:27:e7:89:1d: e8:97:8f:90:68:5a:62:17:46:85:17:ed:0a:be:3b: 5f:86:c5:0f:ee:15:01:30:b9:21:d5:70:ad:0f:4c: 7e:c2:50:f2:06:e0:f0:e6:00:d9:2d:99:a8:00:b8: a8:4d:35:37:b1:9f:d4:41:cb:a5:30:2f:09:ab:91: 5c:e4:19:d6:10:3d:6f:1c:93:11:bf:4f:0b:67:b2: 3d:57:16:66:11:b8:1a:d4:92:09:ea:f9:d2:40:65: 43:2a:2d:88:c9:c0:6a:d5:cf:81:8e:c5:8f:29:78: 1b:69:08:24:4d:b5:ce:f0:1c:56:9b:60:0a:df:28: 58:39:66:6b:a5:4f:44:8a:43:b0:2e:90:04:a9:e0: d7:ce:86:64:4d:65:f3:01:d5:2c:66:3f:72:89:09: 4c:c4:66:31:c6:23:b3:be:31:3e:ae:ee:bc:e5:98: ad:d6:21:46:68:6b:42:4e:a3:b9:e1:9a:18:6f:a6: e8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:71:92:E1:4C:5F:06:1A:25:ED:A4:2E:9D:62:89:C1:B6:FE:32:17 X509v3 Authority Key Identifier: keyid:8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:9a:cd:34:ab:a0:91:b9:c3:b4:89:19:34:89:84:66:74:09: 3b:19:87:e0:3b:73:56:22:b3:2c:40:59:58:51:d5:41:52:82: b1:c2:e7:01:c1:87:9d:7f:52:df:d4:19:b0:86:87:80:1c:76: cf:3c:bd:db:33:c5:46:9b:14:d9:24:12:fa:ac:c2:88:85:1c: 7b:78:2d:3c:c6:60:ac:b0:96:00:07:31:1a:08:a1:85:67:9b: bb:ac:35:6d:0d:b3:52:f9:bf:ac:40:af:1f:ea:d2:af:6a:91: aa:20:13:51:f7:8e:71:a4:b1:9a:bc:ce:4c:12:92:c5:c9:30: 06:23:52:fa:83:e4:e7:52:17:fe:d8:d0:96:9d:8c:5c:22:c3: 2e:3c:9f:a5:31:6e:b0:6d:1b:00:5c:e0:88:ab:fd:65:9c:fe: 01:41:5d:0b:83:af:11:8c:d9:85:ca:55:62:8e:eb:6f:44:d4: f2:2e:a8:c1:0d:58:24:f3:d7:1d:ee:23:b8:0b:d4:91:fa:75: 04:e6:86:64:af:4b:d9:3b:19:fb:de:2a:d5:05:7a:9e:ec:26: 27:5f:78:b2:4a:17:76:a7:8c:69:14:b6:cd:6a:b6:9c:e9:2a: 41:f0:49:f0:99:95:b8:61:f3:18:6c:1a:b2:45:6e:06:68:68: d7:1c:2f:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCf+Veow0M0nEl5BCC2AdCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZWI2NWE3MWFmMDI5NTkyNzJhY2MwMGQ1YzRjMTk1ODM4 NWRlOTQwHhcNMjUxMjIxMjAwMDM2WhcNMjUxMjIyMjAwMDM2WjAzMTEwLwYDVQQD Eyg2NTcxOTJlMTRjNWYwNjFhMjVlZGE0MmU5ZDYyODljMWI2ZmUzMjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9KcqnYppGkxpEBNzttB//3nSY4N tZEDIvMSKB0RjyzF3Mja+SPf6hWRU2aYyF4mbAolxy8tsh7yflvs8iBEl4+Lsq86 jSfniR3ol4+QaFpiF0aFF+0KvjtfhsUP7hUBMLkh1XCtD0x+wlDyBuDw5gDZLZmo ALioTTU3sZ/UQculMC8Jq5Fc5BnWED1vHJMRv08LZ7I9VxZmEbga1JIJ6vnSQGVD Ki2IycBq1c+BjsWPKXgbaQgkTbXO8BxWm2AK3yhYOWZrpU9EikOwLpAEqeDXzoZk TWXzAdUsZj9yiQlMxGYxxiOzvjE+ru685Zit1iFGaGtCTqO54ZoYb6boWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVxkuFMXwYaJe2kLp1iicG2/jIXMB8GA1UdIwQY MBaAFIvrZaca8ClZJyrMANXEwZWDhd6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmIt MTY1YTg0NmQ0ODFkLzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmItMTY1YTg0NmQ0ODFk LzEvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZrNNKug kbnDtIkZNImEZnQJOxmH4DtzViKzLEBZWFHVQVKCscLnAcGHnX9S39QZsIaHgBx2 zzy92zPFRpsU2SQS+qzCiIUce3gtPMZgrLCWAAcxGgihhWebu6w1bQ2zUvm/rECv H+rSr2qRqiATUfeOcaSxmrzOTBKSxckwBiNS+oPk51IX/tjQlp2MXCLDLjyfpTFu sG0bAFzgiKv9ZZz+AUFdC4OvEYzZhcpVYo7rb0TU8i6owQ1YJPPXHe4juAvUkfp1 BOaGZK9L2TsZ+94q1QV6nuwmJ194skoXdqeMaRS2zWq2nOkqQfBJ8JmVuGHzGGwa skVuBmho1xwvUw== -----END CERTIFICATE-----Generated at Mon Dec 22 03:58:59 2025 by rpki-client