This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft File: TjbM4hQsoYtQWJcVjSblg50rQX8.mft (raw, json) Hash identifier: cJiv8EBcQ7BVsqgu0oog0IYqM/zwxzvJCdLWPYL1d9s= Subject key identifier: E2:93:CA:22:68:88:98:56:A0:36:B2:09:5E:1B:DD:6D:30:02:DC:95 Authority key identifier: 4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F Certificate issuer: /CN=4e36cce2142ca18b505897158d26e5839d2b417f Certificate serial: 019B4249E666D4BC5E2829B421722A138365 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 19:01:37 +0000 Manifest this update: Sun 21 Dec 2025 19:01:37 +0000 Manifest next update: Mon 22 Dec 2025 19:01:37 +0000 Files and hashes: 1: TjbM4hQsoYtQWJcVjSblg50rQX8.crl (hash: 9mQLfeS+0rbLWiYSsXNhyIKv3tdv3nXw6PLbcsZ8HK8=) 2: XbP44H3vmNpq_6C_0jvpv9umOf0.roa (hash: DcrY51YDFwazT333yz0LqnUGv8gSeHfRdQ2uMNMEV+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:e6:66:d4:bc:5e:28:29:b4:21:72:2a:13:83:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e36cce2142ca18b505897158d26e5839d2b417f Validity Not Before: Dec 21 19:01:37 2025 GMT Not After : Dec 22 19:01:37 2025 GMT Subject: CN=e293ca2268889856a036b2095e1bdd6d3002dc95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b4:ea:e6:0b:cc:70:cd:46:b2:f5:bd:0d:1d: cc:d5:b0:e1:4d:4a:b1:75:32:2e:9c:5e:00:67:56: ba:e6:38:e1:4f:78:ec:6b:10:09:c2:72:10:98:15: ca:8d:5c:e0:2d:73:7b:69:8e:34:5a:db:64:06:d1: 54:92:c3:fa:cc:27:5f:59:ea:b8:66:e7:16:c1:6b: 7a:23:cd:33:3d:5b:72:cf:e4:19:b2:31:7b:59:1c: 6e:ca:b4:9c:10:9c:14:f1:92:af:ce:3f:78:53:b8: c7:a0:a5:6b:88:4b:2b:69:96:c8:b7:b7:7c:e7:e7: dd:be:98:a6:18:a5:59:c4:07:96:e1:1e:0c:c4:b4: 36:08:25:96:54:15:f5:6b:d0:14:33:50:f4:61:f6: e0:3a:0f:94:37:0a:f2:99:79:35:da:10:ec:eb:f9: 49:94:9c:ed:33:d3:db:3c:ae:2e:c1:ca:8b:65:25: 6b:34:4d:8c:f6:c6:e0:06:d3:d9:0b:c4:ca:92:a7: 34:2d:f0:98:8c:fe:fa:f2:a4:c6:b0:ce:a8:6a:b1: 26:5b:0a:18:03:11:f3:71:bd:e0:2a:7c:45:fc:6d: 25:5a:a2:c9:9c:03:df:8f:be:e7:68:9e:5d:b5:07: 85:20:ee:6f:90:8d:44:be:ef:41:ca:58:ce:8d:47: 72:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:93:CA:22:68:88:98:56:A0:36:B2:09:5E:1B:DD:6D:30:02:DC:95 X509v3 Authority Key Identifier: keyid:4E:36:CC:E2:14:2C:A1:8B:50:58:97:15:8D:26:E5:83:9D:2B:41:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjbM4hQsoYtQWJcVjSblg50rQX8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/220b38-77ca-4de4-8b86-9f845c546470/1/TjbM4hQsoYtQWJcVjSblg50rQX8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:52:6d:bf:5c:71:5d:38:4e:4a:9f:0c:2d:15:71:86:45:81: 35:29:04:e9:a7:7f:66:74:d0:48:c4:e8:19:a0:9a:58:91:be: df:a2:1c:03:4f:67:cc:78:b7:6f:8a:b6:b1:ab:3f:f9:c1:a3: b5:e7:32:b9:0e:0d:60:a0:49:42:f7:d7:41:fe:e1:37:d0:bf: 53:c3:70:44:f4:a3:88:16:8f:85:2f:07:3c:58:6f:16:e1:67: ff:69:66:1f:67:a0:e2:81:b6:57:44:ba:10:49:c4:6d:88:86: c0:03:5a:2b:61:2d:bd:c6:35:3b:0b:da:14:43:62:79:88:f3: c7:c7:ad:80:86:5c:db:20:d2:f3:b8:b8:fc:dd:b6:29:ed:14: 11:71:14:04:1d:e1:c0:4e:2a:92:45:79:13:d9:66:a7:8a:bd: 88:67:bd:ca:68:e8:b1:42:f5:46:00:e6:5d:ed:c4:c0:9e:8c: 3e:76:8b:32:55:ed:89:af:70:b0:a3:32:1a:6c:21:aa:46:b7: 9a:f2:70:95:30:b4:00:e2:48:30:42:4e:ba:ec:80:1a:4f:54: 3e:2a:dc:25:fb:7e:46:61:53:c3:0c:6c:71:85:96:8d:3d:38: a7:10:13:2e:fd:58:8e:a0:ff:a2:64:39:0d:d1:63:e2:10:8d: 56:7c:ba:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSeZm1LxeKCm0IXIqE4NlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMzZjY2UyMTQyY2ExOGI1MDU4OTcxNThkMjZlNTgzOWQy YjQxN2YwHhcNMjUxMjIxMTkwMTM3WhcNMjUxMjIyMTkwMTM3WjAzMTEwLwYDVQQD EyhlMjkzY2EyMjY4ODg5ODU2YTAzNmIyMDk1ZTFiZGQ2ZDMwMDJkYzk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurTq5gvMcM1GsvW9DR3M1bDhTUqx dTIunF4AZ1a65jjhT3jsaxAJwnIQmBXKjVzgLXN7aY40WttkBtFUksP6zCdfWeq4 ZucWwWt6I80zPVtyz+QZsjF7WRxuyrScEJwU8ZKvzj94U7jHoKVriEsraZbIt7d8 5+fdvpimGKVZxAeW4R4MxLQ2CCWWVBX1a9AUM1D0YfbgOg+UNwrymXk12hDs6/lJ lJztM9PbPK4uwcqLZSVrNE2M9sbgBtPZC8TKkqc0LfCYjP768qTGsM6oarEmWwoY AxHzcb3gKnxF/G0lWqLJnAPfj77naJ5dtQeFIO5vkI1Evu9ByljOjUdyZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKTyiJoiJhWoDayCV4b3W0wAtyVMB8GA1UdIwQY MBaAFE42zOIULKGLUFiXFY0m5YOdK0F/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGpiTTRoUXNvWXRRV0pjVmpTYmxnNTByUVg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8yMjBiMzgtNzdjYS00ZGU0LThiODYt OWY4NDVjNTQ2NDcwLzEvVGpiTTRoUXNvWXRRV0pjVmpTYmxnNTByUVg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC8yMjBiMzgtNzdjYS00ZGU0LThiODYtOWY4NDVjNTQ2NDcw LzEvVGpiTTRoUXNvWXRRV0pjVmpTYmxnNTByUVg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElJtv1xx XThOSp8MLRVxhkWBNSkE6ad/ZnTQSMToGaCaWJG+36IcA09nzHi3b4q2sas/+cGj tecyuQ4NYKBJQvfXQf7hN9C/U8NwRPSjiBaPhS8HPFhvFuFn/2lmH2eg4oG2V0S6 EEnEbYiGwANaK2EtvcY1OwvaFENieYjzx8etgIZc2yDS87i4/N22Ke0UEXEUBB3h wE4qkkV5E9lmp4q9iGe9ymjosUL1RgDmXe3EwJ6MPnaLMlXtia9wsKMyGmwhqka3 mvJwlTC0AOJIMEJOuuyAGk9UPircJft+RmFTwwxscYWWjT04pxATLv1YjqD/omQ5 DdFj4hCNVny62Q== -----END CERTIFICATE-----Generated at Sun Dec 21 23:01:12 2025 by rpki-client