This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft File: TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft (raw, json) Hash identifier: guKTki3XHm/UYdw2TSrD8NHblUJT8n+mW0pqyAp7dRU= Subject key identifier: F3:DD:DB:F7:33:00:2C:77:DC:01:13:4C:BC:80:CD:C5:CD:7B:51:64 Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30 Certificate issuer: /CN=4cbfd3e72d4a0396f95347336b42678f68c26430 Certificate serial: 019B390FDAB5BFD4B2A0AF73D96091CB32C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft Manifest number: 1795 Signing time: Sat 20 Dec 2025 00:01:38 +0000 Manifest this update: Sat 20 Dec 2025 00:01:38 +0000 Manifest next update: Sun 21 Dec 2025 00:01:38 +0000 Files and hashes: 1: IF7POYmH2s6_XyYc1YSgmRclBfU.roa (hash: vkWkPszh+VD/raa/NYL5vb45rCVCasfYYp1M1TBPCxY=) 2: JEYd_tTpdWRz3pFCNxB3FFwgT6Y.roa (hash: Cf4mCXc4k2uDXgbB44mtC61vJtEhAxi4CrnAuvkGzGk=) 3: TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl (hash: P8NGnagW2kG79YUvnCvwA3IaEI/kcwDvxwrRqrpkpEk=) 4: aC7DUlOCYd4ZrOlGrZ-OMdQYyBE.roa (hash: gIed90T8oX8NcIFpqOYwduIUaAgChpM53a4QzPH0Bg8=) 5: e0P4zqHajvo1XtAyySozyOucDY0.roa (hash: uBYNOSzSg+Z80PXiuAGXfKeocd8WYWEry+iBGwq/1mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:da:b5:bf:d4:b2:a0:af:73:d9:60:91:cb:32:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430 Validity Not Before: Dec 20 00:01:38 2025 GMT Not After : Dec 21 00:01:38 2025 GMT Subject: CN=f3dddbf733002c77dc01134cbc80cdc5cd7b5164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d9:0c:2a:77:3d:e0:36:e6:53:da:78:71:fa: 7f:2d:eb:45:71:7d:f1:57:08:55:90:b6:66:9d:b7: cd:a7:ce:31:e8:3e:a7:93:c7:c4:b9:88:af:29:74: 32:bc:66:d6:fd:fd:af:df:c4:05:5b:15:40:14:60: 75:a7:b4:3f:6c:93:50:7e:2e:cc:98:e3:3f:4f:42: 28:7f:03:e1:2a:4b:87:09:92:a3:16:6a:56:27:b2: cb:f1:cb:8a:c0:67:a5:04:ee:4a:f7:1b:81:e1:ab: 74:de:d5:f5:0c:f8:6d:d3:56:d4:19:83:c0:87:f5: c2:0f:53:97:75:cb:d8:f7:f0:2a:40:2a:44:68:9a: 3a:48:03:ca:7e:c6:58:0e:f6:59:a5:4c:4a:73:e4: 05:b4:42:d3:4f:f1:51:db:d7:cf:dd:4d:58:e7:ee: eb:ea:5a:79:51:05:80:4f:e7:cd:3c:7f:3c:da:91: 30:ed:38:b9:d0:90:40:ce:28:88:32:5e:51:7a:e9: bf:1a:af:7f:c0:a2:f6:2d:27:ba:4b:ea:67:18:30: a9:7d:c9:cf:b1:59:e4:9e:5a:ed:f6:75:84:aa:f6: be:d8:80:d4:15:11:1e:6c:5c:e0:0d:40:7c:a3:9b: 87:d7:6a:92:b9:72:f1:3b:60:66:67:40:a5:ab:40: be:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DD:DB:F7:33:00:2C:77:DC:01:13:4C:BC:80:CD:C5:CD:7B:51:64 X509v3 Authority Key Identifier: keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:b2:eb:a9:f3:d2:63:a6:0c:c4:57:4a:a2:0a:2b:10:ff:10: e4:60:6b:c0:05:fe:74:32:f7:3a:ff:0b:01:d2:2f:b4:3c:62: 4b:78:98:6a:d6:1c:37:a6:55:c1:3a:4c:32:c1:29:b9:1c:fd: 0b:21:03:40:5d:70:3e:2d:1a:dd:a4:fb:e5:37:1a:1b:87:85: 24:df:6a:5c:3f:03:bc:57:b7:14:ac:01:02:91:48:66:41:81: df:87:8a:de:86:3f:cf:d0:65:45:4f:cd:5d:d8:13:31:f7:57: 8c:19:18:9d:f4:78:94:da:a0:22:b7:0d:a1:7c:35:fd:90:3e: 14:2c:a5:78:ce:9e:db:4a:a3:63:34:d1:7e:f9:6d:c8:53:8e: ed:23:a0:d1:24:4b:ea:01:8f:bf:9d:19:53:16:e2:53:fd:7e: 21:7a:9f:c7:85:14:96:0d:e1:02:2c:39:01:5d:3b:c3:36:5d: 03:35:ef:e0:bb:1c:0c:8b:40:3b:e6:75:61:db:99:92:21:f0: 89:ee:ce:23:2f:82:33:4d:da:6d:53:1e:1d:a7:93:18:1c:9f: 54:ce:af:c4:2e:13:cd:84:29:1a:85:d8:f5:53:7d:b4:2e:f6: 9a:fe:01:42:6c:9d:4f:a5:14:ac:37:55:cc:7f:26:7f:d1:98: 6a:61:b2:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D9q1v9SyoK9z2WCRyzLGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYmZkM2U3MmQ0YTAzOTZmOTUzNDczMzZiNDI2NzhmNjhj MjY0MzAwHhcNMjUxMjIwMDAwMTM4WhcNMjUxMjIxMDAwMTM4WjAzMTEwLwYDVQQD EyhmM2RkZGJmNzMzMDAyYzc3ZGMwMTEzNGNiYzgwY2RjNWNkN2I1MTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdkMKnc94DbmU9p4cfp/LetFcX3x VwhVkLZmnbfNp84x6D6nk8fEuYivKXQyvGbW/f2v38QFWxVAFGB1p7Q/bJNQfi7M mOM/T0IofwPhKkuHCZKjFmpWJ7LL8cuKwGelBO5K9xuB4at03tX1DPht01bUGYPA h/XCD1OXdcvY9/AqQCpEaJo6SAPKfsZYDvZZpUxKc+QFtELTT/FR29fP3U1Y5+7r 6lp5UQWAT+fNPH882pEw7Ti50JBAziiIMl5Reum/Gq9/wKL2LSe6S+pnGDCpfcnP sVnknlrt9nWEqva+2IDUFREebFzgDUB8o5uH12qSuXLxO2BmZ0Clq0C+pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPd2/czACx33AETTLyAzcXNe1FkMB8GA1UdIwQY MBaAFEy/0+ctSgOW+VNHM2tCZ49owmQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAt ZmY2MGUyMThlZDQxLzEvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAtZmY2MGUyMThlZDQx LzEvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArbLrqfPS Y6YMxFdKogorEP8Q5GBrwAX+dDL3Ov8LAdIvtDxiS3iYatYcN6ZVwTpMMsEpuRz9 CyEDQF1wPi0a3aT75TcaG4eFJN9qXD8DvFe3FKwBApFIZkGB34eK3oY/z9BlRU/N XdgTMfdXjBkYnfR4lNqgIrcNoXw1/ZA+FCyleM6e20qjYzTRfvltyFOO7SOg0SRL 6gGPv50ZUxbiU/1+IXqfx4UUlg3hAiw5AV07wzZdAzXv4LscDItAO+Z1YduZkiHw ie7OIy+CM03abVMeHaeTGByfVM6vxC4TzYQpGoXY9VN9tC72mv4BQmydT6UUrDdV zH8mf9GYamGyZg== -----END CERTIFICATE-----Generated at Sat Dec 20 05:47:49 2025 by rpki-client