This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft File: Tl67mwUa1ex6Npifw_zJTByrzHQ.mft (raw, json) Hash identifier: yEGBh9KsrgKEuOrDx8I5IAuaZDjlqpyIvWc61I5sdnY= Subject key identifier: E6:DD:C3:54:3C:E4:C2:7E:AF:97:A7:D9:5C:97:20:99:21:03:C8:55 Authority key identifier: 4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74 Certificate issuer: /CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74 Certificate serial: 019B5B9B12F2D3A92CAC3D887C1F68D2CD05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft Manifest number: 17B1 Signing time: Fri 26 Dec 2025 17:00:48 +0000 Manifest this update: Fri 26 Dec 2025 17:00:48 +0000 Manifest next update: Sat 27 Dec 2025 17:00:48 +0000 Files and hashes: 1: Tl67mwUa1ex6Npifw_zJTByrzHQ.crl (hash: 41aVCh/mMfQFCFLCsqAyn3JbI96FIh1ltOgsi/yQI00=) 2: sPL5rUlzKx5_eiK0H41Atshaecg.roa (hash: gZZ6IxCmuB2B723uD8tUyKBaH66Mb5llFLuK/jyTEBM=) 3: wgOqnnsWlsLcY-e3U904w3g_rl0.roa (hash: Ww7qe8WtK5P+D80awiXawU9bPGz6ArE4FuPa1FSF2jU=) 4: wub3ojVvtYVNr5_D3zKLLbWF2_M.roa (hash: 0Ivv/JEf+s+UoAgsprFNMguw897KPBdxp9YKz2VJrNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:9b:12:f2:d3:a9:2c:ac:3d:88:7c:1f:68:d2:cd:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e5ebb9b051ad5ec7a36989fc3fcc94c1cabcc74 Validity Not Before: Dec 26 17:00:48 2025 GMT Not After : Dec 27 17:00:48 2025 GMT Subject: CN=e6ddc3543ce4c27eaf97a7d95c9720992103c855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cc:54:73:8b:08:3f:6e:33:f5:ad:89:e7:43: f4:8a:04:a5:45:c7:2c:bc:22:34:44:70:a2:0d:43: 9f:85:64:8a:3c:9a:35:e6:69:b7:24:03:ef:5b:33: b6:46:e4:c4:b5:88:51:0e:b1:d2:a8:95:0e:7b:a4: ec:de:b1:3c:ff:c3:40:3c:e6:ac:e6:28:3e:44:01: bd:2f:a4:ca:18:19:45:ef:7d:ac:42:0a:51:2f:e4: e9:9f:0e:67:8a:ba:9f:7b:95:b9:c0:30:eb:54:6e: f6:12:0f:83:cc:b0:f9:dd:d8:db:24:73:d2:1e:7d: 8d:34:a2:bb:b6:77:7b:2b:94:ef:ea:86:59:d0:b9: dd:50:70:f4:57:19:d3:13:f7:ca:6b:a6:bc:04:d4: db:b3:97:0b:46:51:f8:16:98:ab:50:94:1a:63:26: 85:e5:da:a6:a8:78:4e:ab:27:ee:55:35:a2:f4:ae: 52:6a:50:f6:ac:2c:b8:2e:3a:f7:9e:f1:5f:c1:51: c9:a0:08:3d:db:e0:ff:09:a2:9d:4a:da:d6:74:0d: ec:ad:e8:77:4b:0f:26:0a:87:50:f6:ed:f6:0d:26: 30:97:e2:a6:b6:10:55:63:de:52:2f:92:4f:47:78: b3:61:50:5e:03:56:73:23:16:af:0b:87:df:69:9d: 59:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:DD:C3:54:3C:E4:C2:7E:AF:97:A7:D9:5C:97:20:99:21:03:C8:55 X509v3 Authority Key Identifier: keyid:4E:5E:BB:9B:05:1A:D5:EC:7A:36:98:9F:C3:FC:C9:4C:1C:AB:CC:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl67mwUa1ex6Npifw_zJTByrzHQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ec1721-75c5-40f5-9345-c2fd0f958d4b/1/Tl67mwUa1ex6Npifw_zJTByrzHQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:98:e9:08:3a:9e:7d:f9:64:9a:8e:f9:0a:29:13:c4:28:a1: d7:f8:52:82:84:f8:5a:f8:4b:4b:5f:a5:89:80:ff:1a:fe:85: af:43:44:99:0d:82:e0:9b:4a:4c:70:fd:93:02:10:b4:2f:de: 66:9c:3f:2a:ba:ab:69:53:e5:e0:4d:81:cd:bc:11:e1:00:aa: d8:5e:35:c7:db:82:88:2a:4b:4c:89:4b:56:38:61:ff:c0:2c: ef:48:d8:6d:ad:51:9e:99:80:15:38:4a:a3:bc:58:a7:7b:c9: e5:a5:4e:64:cd:66:e0:80:30:83:a9:e4:9f:16:8f:03:04:2e: 60:09:6b:e8:1b:3a:ca:e4:97:45:1a:99:1b:ff:14:8c:11:d2: a9:c0:c9:c0:83:93:48:39:2a:d7:05:1f:17:bf:bd:2e:79:a4: 7d:f3:38:7c:3b:62:2e:9e:bb:c1:b7:6e:9c:5f:b2:17:c6:0f: 45:43:dd:38:87:02:bd:8e:81:7b:a5:2f:2e:1e:7f:1e:de:c1: 68:32:1b:77:6b:4e:2c:82:21:e9:45:e6:7f:96:f7:ba:53:0e: 0e:42:de:7b:c3:4a:96:7b:30:f2:01:b9:85:fc:07:eb:3f:f7: 87:61:2e:24:b2:66:48:09:6b:a0:9c:1f:07:75:77:21:47:34: 06:27:ef:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbmxLy06ksrD2IfB9o0s0FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNWViYjliMDUxYWQ1ZWM3YTM2OTg5ZmMzZmNjOTRjMWNh YmNjNzQwHhcNMjUxMjI2MTcwMDQ4WhcNMjUxMjI3MTcwMDQ4WjAzMTEwLwYDVQQD EyhlNmRkYzM1NDNjZTRjMjdlYWY5N2E3ZDk1Yzk3MjA5OTIxMDNjODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsxUc4sIP24z9a2J50P0igSlRccs vCI0RHCiDUOfhWSKPJo15mm3JAPvWzO2RuTEtYhRDrHSqJUOe6Ts3rE8/8NAPOas 5ig+RAG9L6TKGBlF732sQgpRL+Tpnw5nirqfe5W5wDDrVG72Eg+DzLD53djbJHPS Hn2NNKK7tnd7K5Tv6oZZ0LndUHD0VxnTE/fKa6a8BNTbs5cLRlH4FpirUJQaYyaF 5dqmqHhOqyfuVTWi9K5SalD2rCy4Ljr3nvFfwVHJoAg92+D/CaKdStrWdA3sreh3 Sw8mCodQ9u32DSYwl+KmthBVY95SL5JPR3izYVBeA1ZzIxavC4ffaZ1ZnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObdw1Q85MJ+r5en2VyXIJkhA8hVMB8GA1UdIwQY MBaAFE5eu5sFGtXsejaYn8P8yUwcq8x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGw2N213VWExZXg2TnBpZndfekpUQnlyekhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9lYzE3MjEtNzVjNS00MGY1LTkzNDUt YzJmZDBmOTU4ZDRiLzEvVGw2N213VWExZXg2TnBpZndfekpUQnlyekhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9lYzE3MjEtNzVjNS00MGY1LTkzNDUtYzJmZDBmOTU4ZDRi LzEvVGw2N213VWExZXg2TnBpZndfekpUQnlyekhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY5jpCDqe fflkmo75CikTxCih1/hSgoT4WvhLS1+liYD/Gv6Fr0NEmQ2C4JtKTHD9kwIQtC/e Zpw/KrqraVPl4E2BzbwR4QCq2F41x9uCiCpLTIlLVjhh/8As70jYba1RnpmAFThK o7xYp3vJ5aVOZM1m4IAwg6nknxaPAwQuYAlr6Bs6yuSXRRqZG/8UjBHSqcDJwIOT SDkq1wUfF7+9LnmkffM4fDtiLp67wbdunF+yF8YPRUPdOIcCvY6Be6UvLh5/Ht7B aDIbd2tOLIIh6UXmf5b3ulMODkLee8NKlnsw8gG5hfwH6z/3h2EuJLJmSAlroJwf B3V3IUc0BifvGw== -----END CERTIFICATE-----Generated at Fri Dec 26 19:31:17 2025 by rpki-client