This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft File: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft (raw, json) Hash identifier: euL4R/aIP0orH3iXegQFzJFeViQ8+1obIgrXrKFFf4Q= Subject key identifier: 81:A7:6B:80:EC:62:C0:64:04:BC:E6:C1:64:C2:94:BB:99:0B:70:69 Authority key identifier: 4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4 Certificate issuer: /CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4 Certificate serial: 019B1FF3D9DFB2FBBB996B233A0B969AE39A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 03:00:33 +0000 Manifest this update: Mon 15 Dec 2025 03:00:33 +0000 Manifest next update: Tue 16 Dec 2025 03:00:33 +0000 Files and hashes: 1: 88NNjHCiX9_36_Ap90bLZBoJu2g.roa (hash: ZT80OMK3BXF8ZC1FoGfNRJbcIwwVIXvLAOficLJgVoc=) 2: Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl (hash: o9AdOMMMnI8uV4E4IevYhQaezQiGAZRApkXjYi+wDDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 03:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f3:d9:df:b2:fb:bb:99:6b:23:3a:0b:96:9a:e3:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e5ecfec9f54e4ec39c2005ef4e63e70b51faed4 Validity Not Before: Dec 15 03:00:33 2025 GMT Not After : Dec 16 03:00:33 2025 GMT Subject: CN=81a76b80ec62c06404bce6c164c294bb990b7069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:84:0d:22:02:90:ae:6b:ae:fb:2b:4f:41:3b: 2d:2c:68:5f:92:cb:22:a6:5c:06:59:4a:a2:8c:97: ba:ec:b8:16:90:68:1e:0b:73:7c:6d:ce:a7:dc:ad: a7:92:7e:8c:38:9c:bd:f0:cd:d8:e9:a3:9b:ff:d7: f6:37:87:d9:49:60:28:5e:90:c2:35:35:9f:57:c5: 8a:05:a8:8a:47:84:52:f6:a8:79:33:85:0d:61:4b: 53:c4:8b:ec:39:e3:22:50:78:03:ad:0d:17:4f:72: 19:9f:bd:82:09:5a:3e:d0:8f:0c:71:d9:01:0e:a0: 3c:d3:bb:94:b6:dd:5b:47:1c:f0:96:f3:84:de:5c: 96:b7:4d:ed:2e:cf:27:b5:d8:bc:db:9a:4d:f7:09: 89:a0:23:fb:0c:1b:46:45:01:70:56:5d:43:49:6a: d8:b8:e4:44:e5:c1:2a:14:00:51:a6:5c:1a:8f:ff: 6a:47:8a:d8:d7:07:85:91:ee:ac:9e:bd:c2:20:3e: 53:e9:4a:41:37:c8:45:e0:7c:b3:e1:46:ac:44:19: 26:e4:db:9e:33:8b:c7:4f:b6:94:3f:9f:28:1c:4c: ee:9a:98:1f:73:db:8d:01:61:d0:ee:ca:f7:34:0d: e6:50:f2:cb:d2:29:29:a3:23:b9:fe:d1:6f:5b:94: 21:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A7:6B:80:EC:62:C0:64:04:BC:E6:C1:64:C2:94:BB:99:0B:70:69 X509v3 Authority Key Identifier: keyid:4E:5E:CF:EC:9F:54:E4:EC:39:C2:00:5E:F4:E6:3E:70:B5:1F:AE:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ff2a1c-18af-4ba5-a49f-ecad3b714938/1/Tl7P7J9U5Ow5wgBe9OY-cLUfrtQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:92:14:a3:26:24:42:70:ef:65:e9:7d:6c:73:9c:55:24:4f: 5b:66:b4:b2:91:31:6a:cb:19:8f:de:51:69:9d:4b:c8:1e:4c: c0:22:f2:16:5f:c4:4d:81:66:c0:fb:60:7b:17:f1:6a:a7:68: dc:9d:2b:98:64:9f:1c:2c:fd:95:8c:9c:fa:c6:28:f8:00:eb: 70:68:24:f4:c7:fe:31:b0:e5:22:46:c1:8c:04:1d:7f:12:7b: 18:ed:31:2b:e2:44:fb:4f:d2:81:30:64:98:3d:91:51:49:2d: 82:75:b9:e6:81:6c:ee:57:1b:b2:48:99:16:45:d6:c5:37:b0: 27:ce:a5:10:5d:46:bd:d4:f9:66:43:76:2f:ac:c1:8d:a3:94: e6:61:c4:98:ba:41:a8:b6:4c:54:8b:fa:ec:fd:13:35:c8:23: 12:01:90:bc:07:ac:53:54:d5:22:3a:e3:98:d2:53:53:fa:06: 38:5d:c8:87:f4:37:ce:8c:bf:d1:52:6a:25:7a:95:c0:4d:c6: ac:2f:c9:2c:ce:94:21:89:79:df:7c:36:8a:3d:3a:1e:31:ff: c9:93:2f:5a:7b:41:4c:59:fb:a7:0c:44:33:68:5c:ce:ba:88: 1f:c7:a4:56:a0:38:df:48:be:5a:35:f0:fc:6d:41:eb:62:c3: c2:01:92:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf89nfsvu7mWsjOguWmuOaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlNWVjZmVjOWY1NGU0ZWMzOWMyMDA1ZWY0ZTYzZTcwYjUx ZmFlZDQwHhcNMjUxMjE1MDMwMDMzWhcNMjUxMjE2MDMwMDMzWjAzMTEwLwYDVQQD Eyg4MWE3NmI4MGVjNjJjMDY0MDRiY2U2YzE2NGMyOTRiYjk5MGI3MDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoQNIgKQrmuu+ytPQTstLGhfkssi plwGWUqijJe67LgWkGgeC3N8bc6n3K2nkn6MOJy98M3Y6aOb/9f2N4fZSWAoXpDC NTWfV8WKBaiKR4RS9qh5M4UNYUtTxIvsOeMiUHgDrQ0XT3IZn72CCVo+0I8McdkB DqA807uUtt1bRxzwlvOE3lyWt03tLs8ntdi825pN9wmJoCP7DBtGRQFwVl1DSWrY uORE5cEqFABRplwaj/9qR4rY1weFke6snr3CID5T6UpBN8hF4Hyz4UasRBkm5Nue M4vHT7aUP58oHEzumpgfc9uNAWHQ7sr3NA3mUPLL0ikpoyO5/tFvW5QhFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGna4DsYsBkBLzmwWTClLuZC3BpMB8GA1UdIwQY MBaAFE5ez+yfVOTsOcIAXvTmPnC1H67UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZjJhMWMtMThhZi00YmE1LWE0OWYt ZWNhZDNiNzE0OTM4LzEvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZjJhMWMtMThhZi00YmE1LWE0OWYtZWNhZDNiNzE0OTM4 LzEvVGw3UDdKOVU1T3c1d2dCZTlPWS1jTFVmcnRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJIUoyYk QnDvZel9bHOcVSRPW2a0spExassZj95RaZ1LyB5MwCLyFl/ETYFmwPtgexfxaqdo 3J0rmGSfHCz9lYyc+sYo+ADrcGgk9Mf+MbDlIkbBjAQdfxJ7GO0xK+JE+0/SgTBk mD2RUUktgnW55oFs7lcbskiZFkXWxTewJ86lEF1GvdT5ZkN2L6zBjaOU5mHEmLpB qLZMVIv67P0TNcgjEgGQvAesU1TVIjrjmNJTU/oGOF3Ih/Q3zoy/0VJqJXqVwE3G rC/JLM6UIYl533w2ij06HjH/yZMvWntBTFn7pwxEM2hczrqIH8ekVqA430i+WjXw /G1B62LDwgGSUQ== -----END CERTIFICATE-----Generated at Mon Dec 15 12:09:25 2025 by rpki-client