This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft File: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft (raw, json) Hash identifier: Y5FDCM1ZScg4QkbB+5O/I1Iuq/jNi3EuBI/OEM37Cho= Subject key identifier: D9:EF:0A:D6:04:E7:62:45:37:27:4D:4A:8C:A1:68:9C:64:3F:72:56 Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4 Certificate issuer: /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4 Certificate serial: 019B40C8691A00329590E72A0995F3016156 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 12:00:34 +0000 Manifest this update: Sun 21 Dec 2025 12:00:34 +0000 Manifest next update: Mon 22 Dec 2025 12:00:34 +0000 Files and hashes: 1: 88NNjHCiX9_36_Ap90bLZBoJu2g.roa (hash: ZT80OMK3BXF8ZC1FoGfNRJbcIwwVIXvLAOficLJgVoc=) 2: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl (hash: gRLm4IeNncT16u2iV1CYSCufE6CO1NiKzgnAOJBFFSg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:69:1a:00:32:95:90:e7:2a:09:95:f3:01:61:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4 Validity Not Before: Dec 21 12:00:34 2025 GMT Not After : Dec 22 12:00:34 2025 GMT Subject: CN=d9ef0ad604e7624537274d4a8ca1689c643f7256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b3:fe:77:06:7d:32:16:ae:18:61:9f:62:8a: 45:6b:1f:1b:a0:0d:44:1a:8e:2b:02:c7:7b:36:01: 39:aa:00:86:fe:1b:08:89:cf:61:00:4b:d7:c1:7b: e8:45:9f:24:6c:34:a4:72:23:bf:2c:9b:db:3b:92: 28:b3:49:ec:64:bb:35:f1:cb:91:ff:e9:92:f9:22: 77:28:5a:46:cf:f3:e5:94:2e:ea:ff:ed:56:e1:d9: db:d7:54:9c:2e:91:8f:97:1f:b6:b2:7d:10:d6:22: b3:cc:9f:dd:c0:50:64:b5:1e:fc:2c:49:a7:73:83: 1f:52:ce:a6:a4:be:a0:7f:44:7d:fb:4b:2b:1b:7f: 85:20:59:ec:f6:fc:8c:d9:42:d8:fa:3d:8f:fa:74: fc:b5:4d:b7:8b:a8:96:f0:82:e9:2b:32:38:29:c7: e9:fc:c4:3e:de:05:b3:ce:95:f1:b6:c4:ea:dd:fb: f3:ad:50:93:0e:04:d7:f9:7d:94:c3:ef:6b:52:8a: 44:1c:87:cc:ec:10:59:df:01:37:63:26:fe:5c:d6: 9a:c8:1d:e7:85:c3:49:45:6c:32:a2:aa:38:71:a7: 8d:0a:e6:66:07:05:11:b3:96:aa:ab:98:77:b0:87: 00:b0:7f:c9:29:29:82:51:e0:35:21:e5:01:bb:b5: 3b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:EF:0A:D6:04:E7:62:45:37:27:4D:4A:8C:A1:68:9C:64:3F:72:56 X509v3 Authority Key Identifier: keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f8:46:2b:e7:d2:83:e0:e0:72:b0:08:22:a6:9e:a3:c8:40: b1:90:88:42:48:1a:18:6e:cb:3d:ab:24:44:f0:85:97:51:d7: 35:ab:a6:a7:c8:0d:97:c6:8c:fc:47:e8:bd:1f:5a:06:ef:af: 04:28:96:b7:c1:1b:c1:af:3a:9b:d2:7b:3a:63:24:16:9b:17: 2b:09:e6:d6:b7:15:bc:e7:9a:75:0a:31:86:4e:aa:bc:7e:15: 47:d5:98:cf:9c:a8:6d:3a:ea:83:e0:6d:76:3d:f0:45:82:f4: 54:18:ea:ff:8a:51:06:87:cb:04:db:24:9a:1a:da:ea:2e:04: 00:23:77:6e:20:23:1b:06:e9:12:08:5e:7d:02:73:a3:3b:22: 46:d7:df:8d:7a:e4:02:61:a6:a0:2f:22:50:47:ff:ed:f9:0d: 44:c9:e6:03:2b:11:7b:d2:45:e1:b9:1e:bb:cc:74:c6:e7:66: 52:1e:69:76:d3:8e:c4:0c:ab:31:db:76:1c:68:cb:69:b2:9d: a8:44:3b:7b:71:e2:7b:29:9f:b5:4d:37:f5:5c:20:cc:ce:d2: 82:79:c1:79:ef:77:24:2b:3b:b5:a9:ef:9c:fc:eb:0e:89:9f: 8d:7b:5f:82:4b:c9:a8:24:92:02:f8:0e:82:1b:42:04:78:fc: 77:1e:76:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyGkaADKVkOcqCZXzAWFWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNWVjZmVjOWY1NGU0ZWMzOWMyMDA1ZWY0ZTYzZTcwYjUx ZmFlZDQwHhcNMjUxMjIxMTIwMDM0WhcNMjUxMjIyMTIwMDM0WjAzMTEwLwYDVQQD EyhkOWVmMGFkNjA0ZTc2MjQ1MzcyNzRkNGE4Y2ExNjg5YzY0M2Y3MjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLP+dwZ9MhauGGGfYopFax8boA1E Go4rAsd7NgE5qgCG/hsIic9hAEvXwXvoRZ8kbDSkciO/LJvbO5Ios0nsZLs18cuR /+mS+SJ3KFpGz/PllC7q/+1W4dnb11ScLpGPlx+2sn0Q1iKzzJ/dwFBktR78LEmn c4MfUs6mpL6gf0R9+0srG3+FIFns9vyM2ULY+j2P+nT8tU23i6iW8ILpKzI4Kcfp /MQ+3gWzzpXxtsTq3fvzrVCTDgTX+X2Uw+9rUopEHIfM7BBZ3wE3Yyb+XNaayB3n hcNJRWwyoqo4caeNCuZmBwURs5aqq5h3sIcAsH/JKSmCUeA1IeUBu7U7WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnvCtYE52JFNydNSoyhaJxkP3JWMB8GA1UdIwQY MBaAFE5ez+yfVOTsOcIAXvTmPnC1H67UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZjJhMWMtMThhZi00YmE1LWE0OWYt ZWNhZDNiNzE0OTM4LzEvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZjJhMWMtMThhZi00YmE1LWE0OWYtZWNhZDNiNzE0OTM4 LzEvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfhGK+fS g+DgcrAIIqaeo8hAsZCIQkgaGG7LPaskRPCFl1HXNaump8gNl8aM/EfovR9aBu+v BCiWt8Ebwa86m9J7OmMkFpsXKwnm1rcVvOeadQoxhk6qvH4VR9WYz5yobTrqg+Bt dj3wRYL0VBjq/4pRBofLBNskmhra6i4EACN3biAjGwbpEghefQJzozsiRtffjXrk AmGmoC8iUEf/7fkNRMnmAysRe9JF4bkeu8x0xudmUh5pdtOOxAyrMdt2HGjLabKd qEQ7e3HieymftU039VwgzM7SgnnBee93JCs7tanvnPzrDomfjXtfgkvJqCSSAvgO ghtCBHj8dx52LA== -----END CERTIFICATE-----Generated at Sun Dec 21 22:29:30 2025 by rpki-client