This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft File: TLIktT7JyLF_MYlbFqjUVx8OaXA.mft (raw, json) Hash identifier: Ex3Kp6l6n1dctJc1W9To0XmaW17SUr1JHJnKa9clqtA= Subject key identifier: 67:8D:A7:74:93:39:C1:E9:83:A3:F0:7B:67:74:26:11:A7:B3:A1:78 Authority key identifier: 4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70 Certificate issuer: /CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970 Certificate serial: 019B34C560FF29DBA1B7F49EAE8EF0CF6C63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft Manifest number: 051E Signing time: Fri 19 Dec 2025 04:01:49 +0000 Manifest this update: Fri 19 Dec 2025 04:01:49 +0000 Manifest next update: Sat 20 Dec 2025 04:01:49 +0000 Files and hashes: 1: M1M7HuPtGiosGSo4FBz1zc0zdo4.roa (hash: NcnqoCTtbPhCjxo06sSrzfv3k+hjFXX2MJeaGNHx2bI=) 2: TLIktT7JyLF_MYlbFqjUVx8OaXA.crl (hash: wFX6qn9sGK9fwlcs3MLZE4m1cycstc0P9g3y8Wuc41A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:60:ff:29:db:a1:b7:f4:9e:ae:8e:f0:cf:6c:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970 Validity Not Before: Dec 19 04:01:49 2025 GMT Not After : Dec 20 04:01:49 2025 GMT Subject: CN=678da7749339c1e983a3f07b67742611a7b3a178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:86:64:80:d3:c8:58:43:46:8c:e4:40:ac:f9: 7f:9a:a2:fa:1d:8c:43:56:a7:37:bc:19:de:72:e1: 10:54:42:56:14:7e:3f:b0:cf:13:54:a7:ad:40:67: 07:06:17:75:c9:99:7a:0b:07:5e:aa:8a:a5:96:03: 59:91:a7:75:ea:2c:7d:f6:d1:6b:04:09:a0:a4:c4: cf:d6:e6:8e:60:9f:5f:5f:a8:59:ba:36:c9:73:2d: 4e:12:55:b9:c7:2a:79:94:15:c6:0e:67:ab:85:d7: 29:0f:a4:9d:a3:55:e0:b9:f8:bb:f0:74:1b:a4:19: 47:7e:16:88:00:1a:5a:07:78:99:0b:df:91:64:7d: 4b:c8:b2:3a:94:cf:9a:98:86:bb:b6:35:2f:40:97: c0:6f:e0:85:d5:f3:6f:10:ce:e1:ed:4f:9f:dc:0c: e8:17:51:03:83:87:05:8d:27:67:5e:b3:81:e8:f6: e4:6f:a5:09:71:94:6b:12:1f:85:3a:ed:cc:a5:78: 45:28:b0:06:f3:29:ee:26:58:73:e0:09:31:5b:b4: b1:f8:82:60:fc:15:a8:d4:ce:7c:5a:b0:1e:8f:61: ce:5f:e7:16:c7:9d:36:bd:69:ea:74:54:2d:b6:60: fa:03:88:b9:0f:6a:33:19:06:23:fe:4d:23:02:66: 45:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8D:A7:74:93:39:C1:E9:83:A3:F0:7B:67:74:26:11:A7:B3:A1:78 X509v3 Authority Key Identifier: keyid:4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:9b:41:9b:ed:ec:d3:29:6d:53:76:dc:67:8f:07:b2:ec:1f: 13:81:3a:be:5f:7d:d3:eb:cd:7b:6a:4d:a2:8d:b0:c2:db:23: ca:50:8e:3e:1d:36:59:55:d2:3b:c9:73:ff:9e:41:f1:e2:7b: 96:cd:6c:2f:d5:8e:e0:b1:78:9a:2f:9e:34:e7:4a:6d:9d:9f: 60:90:72:9c:36:49:6c:01:5a:81:dd:21:a1:97:25:e6:f1:fb: 2d:ef:8b:71:f2:a5:83:de:6d:fd:af:36:bb:d8:08:c8:24:05: 56:88:37:e0:b8:9d:a6:13:80:c7:fe:b4:1f:a1:a5:c7:c9:60: 14:b1:c2:b8:60:54:9d:18:68:15:6f:02:43:f5:d3:fe:fe:fe: b3:cd:3a:04:29:6e:47:f4:6d:bb:39:a4:2f:40:4b:e4:47:01: 86:9b:d8:1b:fe:2c:30:49:84:c8:55:4d:20:af:0b:5d:22:bd: 68:9b:eb:64:35:ca:68:95:47:08:05:e1:05:b7:f6:c0:af:0d: 31:35:d4:7f:06:a5:91:a3:4d:d0:dd:fd:3c:03:46:70:59:30: d7:a6:d6:77:3b:80:92:cf:40:16:34:b0:0b:79:d5:e2:44:97: b6:f1:b8:9d:fd:56:2e:23:d8:29:bd:c3:d1:f8:e2:b8:ca:4f: ce:8e:12:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xWD/Kduht/Sero7wz2xjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYjIyNGI1M2VjOWM4YjE3ZjMxODk1YjE2YThkNDU3MWYw ZTY5NzAwHhcNMjUxMjE5MDQwMTQ5WhcNMjUxMjIwMDQwMTQ5WjAzMTEwLwYDVQQD Eyg2NzhkYTc3NDkzMzljMWU5ODNhM2YwN2I2Nzc0MjYxMWE3YjNhMTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooZkgNPIWENGjORArPl/mqL6HYxD Vqc3vBnecuEQVEJWFH4/sM8TVKetQGcHBhd1yZl6CwdeqoqllgNZkad16ix99tFr BAmgpMTP1uaOYJ9fX6hZujbJcy1OElW5xyp5lBXGDmerhdcpD6Sdo1Xgufi78HQb pBlHfhaIABpaB3iZC9+RZH1LyLI6lM+amIa7tjUvQJfAb+CF1fNvEM7h7U+f3Azo F1EDg4cFjSdnXrOB6Pbkb6UJcZRrEh+FOu3MpXhFKLAG8ynuJlhz4AkxW7Sx+IJg /BWo1M58WrAej2HOX+cWx502vWnqdFQttmD6A4i5D2ozGQYj/k0jAmZFHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGeNp3STOcHpg6Pwe2d0JhGns6F4MB8GA1UdIwQY MBaAFEyyJLU+ycixfzGJWxao1FcfDmlwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVExJa3RUN0p5TEZfTVlsYkZxalVWeDhPYVhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9lMmFhYzUtYzA0ZC00YWUwLThiZjMt OWUzZDg5ZDllNjE3LzEvVExJa3RUN0p5TEZfTVlsYkZxalVWeDhPYVhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9lMmFhYzUtYzA0ZC00YWUwLThiZjMtOWUzZDg5ZDllNjE3 LzEvVExJa3RUN0p5TEZfTVlsYkZxalVWeDhPYVhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZtBm+3s 0yltU3bcZ48HsuwfE4E6vl990+vNe2pNoo2wwtsjylCOPh02WVXSO8lz/55B8eJ7 ls1sL9WO4LF4mi+eNOdKbZ2fYJBynDZJbAFagd0hoZcl5vH7Le+LcfKlg95t/a82 u9gIyCQFVog34LidphOAx/60H6Glx8lgFLHCuGBUnRhoFW8CQ/XT/v7+s806BClu R/RtuzmkL0BL5EcBhpvYG/4sMEmEyFVNIK8LXSK9aJvrZDXKaJVHCAXhBbf2wK8N MTXUfwalkaNN0N39PANGcFkw16bWdzuAks9AFjSwC3nV4kSXtvG4nf1WLiPYKb3D 0fjiuMpPzo4SzQ== -----END CERTIFICATE-----Generated at Fri Dec 19 13:12:42 2025 by rpki-client