This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft File: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft (raw, json) Hash identifier: sc4dp73MpIt5m/FfoWM+Zhv4IlJEcoBpiVtAPg+SxDw= Subject key identifier: D6:97:8F:89:A6:AA:89:2D:D4:EC:2B:BC:58:7F:00:2A:B5:93:2A:AC Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4 Certificate issuer: /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4 Certificate serial: 019B3EDA0DFBA103DC5E93FEE1A4CD301FEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 03:00:36 +0000 Manifest this update: Sun 21 Dec 2025 03:00:36 +0000 Manifest next update: Mon 22 Dec 2025 03:00:36 +0000 Files and hashes: 1: 88NNjHCiX9_36_Ap90bLZBoJu2g.roa (hash: ZT80OMK3BXF8ZC1FoGfNRJbcIwwVIXvLAOficLJgVoc=) 2: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl (hash: YtPmLqizFIjRpPhdcJWMy3ShFQp7HS7D8QkHvVEw40I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:0d:fb:a1:03:dc:5e:93:fe:e1:a4:cd:30:1f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4 Validity Not Before: Dec 21 03:00:36 2025 GMT Not After : Dec 22 03:00:36 2025 GMT Subject: CN=d6978f89a6aa892dd4ec2bbc587f002ab5932aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:88:2b:39:2e:cf:be:7e:12:ee:e9:7e:44:62: 81:53:c5:bf:06:7e:6b:b9:bd:3d:0d:fa:3c:95:5e: 46:79:99:f6:70:e5:02:55:14:8e:e7:f1:9a:b9:12: 40:d5:bd:c5:18:2d:97:7a:e8:05:36:53:54:59:5c: 76:1a:18:e9:e8:e7:21:89:5c:d2:57:a3:76:21:7d: 25:37:8c:4e:9c:d6:c7:47:35:be:85:17:00:72:a4: f8:1e:50:98:ba:5a:d1:c9:29:f6:d9:75:59:20:2a: dd:d2:81:88:df:0d:b3:73:e5:0e:64:bc:ad:53:04: f1:41:ad:88:75:d8:63:4f:a5:eb:11:ff:e7:d9:71: 01:35:c0:09:c7:50:8a:33:81:f8:3a:5d:b3:54:36: 5e:b3:1e:81:a6:55:8a:ee:14:fe:7b:11:9b:0d:92: 92:bc:07:b2:6d:26:5a:6f:5a:b6:e9:94:4c:66:aa: 67:2f:e9:f0:29:3b:31:89:08:03:99:97:47:ab:5b: e5:d6:40:5c:1c:af:35:0e:76:2e:3e:fa:85:42:ab: 25:ef:17:cb:77:a7:ab:9c:a2:38:21:9e:f1:62:7d: 0d:85:ee:6a:78:8b:79:c9:99:ff:d5:ab:11:b8:68: 2f:48:ea:8d:98:b1:7f:9b:50:ed:9e:c9:1f:df:dc: b3:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:97:8F:89:A6:AA:89:2D:D4:EC:2B:BC:58:7F:00:2A:B5:93:2A:AC X509v3 Authority Key Identifier: keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c9:ff:d8:a4:15:24:3d:49:24:39:ba:0d:fd:18:7b:99:06: 91:e1:6a:26:25:4b:84:43:8a:63:93:47:f6:19:ee:19:32:d6: 20:2b:6a:ca:5e:a8:bc:75:fc:69:e8:e5:52:59:fe:1b:41:6d: 50:3c:e1:f3:18:43:df:08:44:20:ea:d9:8a:71:01:c2:21:01: f9:89:ef:ef:e7:11:91:80:8a:94:15:3e:c7:df:0f:fa:2f:6c: 34:e1:43:04:6b:46:db:7d:ce:99:ad:48:e5:d6:1d:f9:1b:70: ae:b2:af:14:eb:14:ac:6a:e5:e4:0f:9a:7b:88:7f:3e:48:6e: 7a:f4:49:c6:eb:bf:1d:12:24:7c:5c:b9:40:ed:34:a1:6d:bf: 05:58:1f:cc:99:5e:1f:56:c0:6e:ff:13:6e:c3:a3:81:a7:90: c2:b2:92:1b:22:91:05:f3:ee:a7:bb:1c:d5:95:b0:11:92:be: 96:ef:5b:af:93:5f:40:46:45:bf:69:9d:38:99:46:81:38:85: cb:af:14:a7:eb:76:4b:c3:1c:6c:af:5a:5c:39:62:8e:51:0a: 42:78:da:01:27:64:24:36:cd:3d:59:c5:f1:20:04:1b:85:2a: 41:fe:9f:80:44:91:92:58:55:d6:06:b8:4e:33:6e:69:97:dd: 07:b6:72:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2g37oQPcXpP+4aTNMB/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNWVjZmVjOWY1NGU0ZWMzOWMyMDA1ZWY0ZTYzZTcwYjUx ZmFlZDQwHhcNMjUxMjIxMDMwMDM2WhcNMjUxMjIyMDMwMDM2WjAzMTEwLwYDVQQD EyhkNjk3OGY4OWE2YWE4OTJkZDRlYzJiYmM1ODdmMDAyYWI1OTMyYWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24grOS7Pvn4S7ul+RGKBU8W/Bn5r ub09Dfo8lV5GeZn2cOUCVRSO5/GauRJA1b3FGC2XeugFNlNUWVx2Ghjp6OchiVzS V6N2IX0lN4xOnNbHRzW+hRcAcqT4HlCYulrRySn22XVZICrd0oGI3w2zc+UOZLyt UwTxQa2IddhjT6XrEf/n2XEBNcAJx1CKM4H4Ol2zVDZesx6BplWK7hT+exGbDZKS vAeybSZab1q26ZRMZqpnL+nwKTsxiQgDmZdHq1vl1kBcHK81DnYuPvqFQqsl7xfL d6ernKI4IZ7xYn0Nhe5qeIt5yZn/1asRuGgvSOqNmLF/m1Dtnskf39yzDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaXj4mmqokt1OwrvFh/ACq1kyqsMB8GA1UdIwQY MBaAFE5ez+yfVOTsOcIAXvTmPnC1H67UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZjJhMWMtMThhZi00YmE1LWE0OWYt ZWNhZDNiNzE0OTM4LzEvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZjJhMWMtMThhZi00YmE1LWE0OWYtZWNhZDNiNzE0OTM4 LzEvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARMn/2KQV JD1JJDm6Df0Ye5kGkeFqJiVLhEOKY5NH9hnuGTLWICtqyl6ovHX8aejlUln+G0Ft UDzh8xhD3whEIOrZinEBwiEB+Ynv7+cRkYCKlBU+x98P+i9sNOFDBGtG233Oma1I 5dYd+RtwrrKvFOsUrGrl5A+ae4h/PkhuevRJxuu/HRIkfFy5QO00oW2/BVgfzJle H1bAbv8TbsOjgaeQwrKSGyKRBfPup7sc1ZWwEZK+lu9br5NfQEZFv2mdOJlGgTiF y68Up+t2S8McbK9aXDlijlEKQnjaASdkJDbNPVnF8SAEG4UqQf6fgESRklhV1ga4 TjNuaZfdB7ZylQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:58:11 2025 by rpki-client