This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft File: ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft (raw, json) Hash identifier: vw7cfgwo3tofOMF6H4FhQxkEqSwlBdsI+cuOkFe+YZQ= Subject key identifier: D4:36:6C:4E:BE:10:66:09:F2:8B:D9:06:E8:06:B5:44:33:03:81:41 Authority key identifier: B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78 Certificate issuer: /CN=b62dd60548b67cc41e67b6a616a12ec53bf42978 Certificate serial: 019B59ACE73DB906F54BE1F250470188301E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft Manifest number: 1795 Signing time: Fri 26 Dec 2025 08:01:02 +0000 Manifest this update: Fri 26 Dec 2025 08:01:02 +0000 Manifest next update: Sat 27 Dec 2025 08:01:02 +0000 Files and hashes: 1: 1-qjOvMD_gOLy6H4ikM5iY4VGQ8.roa (hash: x56Lu5EMx6deCo6ci/ec7JVHm+rQMFgfSVpjOag6Bkc=) 2: ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl (hash: Fr7aU5fw1Jd4pc7zTpzyRxay205SrC3GF1aVHf3Xnmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 08:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:e7:3d:b9:06:f5:4b:e1:f2:50:47:01:88:30:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b62dd60548b67cc41e67b6a616a12ec53bf42978 Validity Not Before: Dec 26 08:01:02 2025 GMT Not After : Dec 27 08:01:02 2025 GMT Subject: CN=d4366c4ebe106609f28bd906e806b54433038141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ce:1f:11:e1:ef:41:5b:17:74:8c:a2:0b:4f: 96:b4:19:46:7c:a5:e6:18:82:23:d7:a5:e9:28:ca: 91:ed:54:b0:c0:4f:8c:a0:46:70:1f:64:44:da:44: 6f:d4:e2:e1:a3:98:b8:42:64:63:f9:d3:24:a2:c3: 3d:a2:38:b2:c2:62:fb:67:b1:45:d6:15:6a:ac:26: 3a:61:5b:87:d0:76:ea:5a:b1:00:ad:7b:21:21:55: 46:87:a5:75:6e:eb:40:6b:5e:1a:22:7b:95:ff:17: cf:bd:11:30:58:ae:8d:fb:59:75:b8:6b:ad:e8:ce: 6d:c9:99:8c:8b:1c:e7:14:d7:6f:17:38:c8:36:86: 06:4c:93:84:4d:48:19:79:90:7a:64:8f:51:e6:ae: 5d:94:69:79:41:61:72:95:2a:55:e4:6c:e0:46:98: 48:69:a4:22:e1:b4:4f:af:8f:3f:0d:e5:2e:87:bc: 01:2b:b7:d8:be:af:fd:d4:c1:63:4c:ed:5b:eb:a6: b2:1d:c3:ab:ff:40:cb:53:97:c0:0d:d6:86:3e:92: c2:83:83:22:6a:aa:2f:fe:ff:af:a8:65:8a:21:f1: 97:1a:68:18:72:40:c6:9e:6f:cb:b3:67:d5:9e:0a: 5a:20:a0:ec:43:89:b1:ba:42:51:0c:d5:f1:9e:ff: 04:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:36:6C:4E:BE:10:66:09:F2:8B:D9:06:E8:06:B5:44:33:03:81:41 X509v3 Authority Key Identifier: keyid:B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:73:35:79:fd:7b:ab:a5:3b:a3:28:a6:92:fd:b7:ac:00:ce: 21:65:a0:82:23:c1:19:43:15:3b:a0:76:5e:fa:28:d9:18:4c: 55:65:3d:f8:aa:95:c2:93:85:ca:d3:06:9d:e9:b0:e8:11:f7: 44:52:0e:34:b5:f4:f8:a9:7a:f8:b3:3d:85:fa:1d:cb:05:e6: 07:d1:a9:79:64:ee:cc:08:b6:29:60:c0:cc:14:bf:1e:e6:78: c8:41:9a:83:77:77:de:a2:e5:9d:8e:d7:38:23:82:30:f8:64: ba:ba:3a:4b:58:dd:4d:9e:3a:8d:b0:42:78:f5:98:37:88:4f: 37:41:6a:da:82:8f:d9:de:41:87:a4:8d:4f:b9:96:ec:5c:be: 4b:94:7b:8b:79:cf:36:c9:b2:ba:33:b8:00:c1:e0:2a:58:83: f7:3d:42:62:8b:fc:6c:72:40:42:ae:71:1b:23:6f:6d:52:33: 69:2d:fa:ad:1e:b8:84:1b:0f:92:7b:2d:07:83:65:3d:cd:5a: b0:22:fa:1e:e2:d3:00:e3:a4:a5:ff:5d:02:68:08:75:2e:a3: 6f:4f:25:ee:ad:f2:0b:46:ed:40:f2:f4:29:26:42:a7:3f:4b: bb:3e:0c:46:c0:31:76:ea:86:bc:63:c5:2d:1a:87:49:47:a3: 07:c8:b3:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrOc9uQb1S+HyUEcBiDAeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MmRkNjA1NDhiNjdjYzQxZTY3YjZhNjE2YTEyZWM1M2Jm NDI5NzgwHhcNMjUxMjI2MDgwMTAyWhcNMjUxMjI3MDgwMTAyWjAzMTEwLwYDVQQD EyhkNDM2NmM0ZWJlMTA2NjA5ZjI4YmQ5MDZlODA2YjU0NDMzMDM4MTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl84fEeHvQVsXdIyiC0+WtBlGfKXm GIIj16XpKMqR7VSwwE+MoEZwH2RE2kRv1OLho5i4QmRj+dMkosM9ojiywmL7Z7FF 1hVqrCY6YVuH0HbqWrEArXshIVVGh6V1butAa14aInuV/xfPvREwWK6N+1l1uGut 6M5tyZmMixznFNdvFzjINoYGTJOETUgZeZB6ZI9R5q5dlGl5QWFylSpV5GzgRphI aaQi4bRPr48/DeUuh7wBK7fYvq/91MFjTO1b66ayHcOr/0DLU5fADdaGPpLCg4Mi aqov/v+vqGWKIfGXGmgYckDGnm/Ls2fVngpaIKDsQ4mxukJRDNXxnv8E4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQ2bE6+EGYJ8ovZBugGtUQzA4FBMB8GA1UdIwQY MBaAFLYt1gVItnzEHme2phahLsU79Cl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGkzV0JVaTJmTVFlWjdhbUZxRXV4VHYwS1hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80OTBlMTItMWE0NS00YjAwLWE0NmMt YWYxZTZkMDc3ZTBjLzEvdGkzV0JVaTJmTVFlWjdhbUZxRXV4VHYwS1hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC80OTBlMTItMWE0NS00YjAwLWE0NmMtYWYxZTZkMDc3ZTBj LzEvdGkzV0JVaTJmTVFlWjdhbUZxRXV4VHYwS1hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnM1ef17 q6U7oyimkv23rADOIWWggiPBGUMVO6B2Xvoo2RhMVWU9+KqVwpOFytMGnemw6BH3 RFIONLX0+Kl6+LM9hfodywXmB9GpeWTuzAi2KWDAzBS/HuZ4yEGag3d33qLlnY7X OCOCMPhkuro6S1jdTZ46jbBCePWYN4hPN0Fq2oKP2d5Bh6SNT7mW7Fy+S5R7i3nP NsmyujO4AMHgKliD9z1CYov8bHJAQq5xGyNvbVIzaS36rR64hBsPknstB4NlPc1a sCL6HuLTAOOkpf9dAmgIdS6jb08l7q3yC0btQPL0KSZCpz9Luz4MRsAxduqGvGPF LRqHSUejB8izEQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:25 2025 by rpki-client