This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json) Hash identifier: Do7Rq9Kmu7EXvzRGynLo0CxxV58RUpi8TaW3SsJm0DY= Subject key identifier: 6A:12:23:C4:4B:4F:D1:02:65:3E:14:99:B9:CF:45:9A:9E:97:6C:9F Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf Certificate serial: 019B2551BAD75E642E2F8793A9DAC2CD565E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft Manifest number: 0575 Signing time: Tue 16 Dec 2025 04:01:11 +0000 Manifest this update: Tue 16 Dec 2025 04:01:11 +0000 Manifest next update: Wed 17 Dec 2025 04:01:11 +0000 Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: U5/1IwIMPrhCqH1srVrFyhA/bF+JkqGZBtiXSLK+zsI=) 2: koYxRoNx2Z_dDpVJFl-Snjkmcp8.roa (hash: 9wg6bBr0wjB+1nZSYhxJKyc0xntk+ar+Q7kYQKSKRUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:ba:d7:5e:64:2e:2f:87:93:a9:da:c2:cd:56:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf Validity Not Before: Dec 16 04:01:11 2025 GMT Not After : Dec 17 04:01:11 2025 GMT Subject: CN=6a1223c44b4fd102653e1499b9cf459a9e976c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:89:39:66:c3:f1:13:87:e1:07:fa:5c:cf:bb: 3f:09:f4:d7:cb:b2:43:0c:85:8d:44:12:d4:44:9d: da:40:d5:1d:b6:a1:5c:e9:dc:9c:f2:45:65:ee:bd: ae:4d:63:01:4c:36:f2:d5:ee:b5:50:1c:ec:17:7a: 74:1e:f6:c5:47:bf:47:92:a1:61:21:82:7d:e1:50: a6:74:d2:0a:d6:f8:09:6c:af:4a:4c:c3:24:d9:0a: 55:80:90:fe:cd:be:6d:d8:cc:c9:de:16:51:79:aa: 97:bb:d1:d3:a8:4d:da:0b:b9:88:3d:55:f0:69:84: 76:ea:bb:06:95:dc:a3:52:e1:60:04:92:c2:c7:3c: cb:15:b6:7b:5f:e8:10:42:af:87:14:ce:a4:bd:dc: 9f:8d:a7:4c:5f:8a:49:8c:c9:93:d5:27:c0:0f:c6: 12:8d:98:c6:33:74:9c:04:f2:73:73:e8:4d:1d:29: a8:9c:e4:9d:9b:a0:ff:8f:31:1b:88:7c:30:20:05: 7f:3f:d2:e2:48:90:81:2d:43:50:04:84:69:4e:44: 03:67:7c:e4:48:13:f2:aa:13:b2:60:88:39:39:a5: 89:fa:2d:e4:32:49:e9:71:4e:f1:7a:10:bb:35:33: 59:eb:70:eb:d1:78:1f:0a:d7:7b:fe:ca:c3:cb:6e: 77:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:12:23:C4:4B:4F:D1:02:65:3E:14:99:B9:CF:45:9A:9E:97:6C:9F X509v3 Authority Key Identifier: keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:41:b5:46:7b:54:4d:c5:89:d7:da:ef:eb:de:ec:06:71:cd: 48:ae:fd:c8:a3:7f:f9:9a:ac:a1:eb:e5:d8:ca:eb:09:af:23: 55:2d:97:7b:58:98:18:78:43:23:6d:51:fe:6e:42:ca:3b:d5: 6b:d2:c7:0f:a4:c8:8e:21:0f:18:43:7a:71:7e:ed:55:8e:da: 94:9f:3d:b8:d0:50:3f:17:7e:e4:d8:9a:79:73:51:85:00:70: eb:cf:cb:85:ee:38:bc:dc:0f:a7:f1:bb:5d:10:8c:04:93:dd: 62:c5:8e:fd:04:65:0e:de:52:55:70:e3:5e:1b:3e:3d:b1:c8: 94:8b:7f:47:6a:83:62:42:b1:d5:7a:29:90:6b:f6:92:c6:c5: 60:95:b1:d0:6f:e9:f2:10:a4:b5:1d:5e:03:28:18:f9:26:dc: 57:43:47:73:bd:a7:74:7b:34:2f:77:66:9f:39:93:36:24:f3: 79:f9:86:6c:c9:22:79:52:c8:52:6b:20:23:4b:bc:94:15:54: 19:30:ab:06:04:fe:7e:bd:fd:ca:70:cb:8b:bf:ff:b4:65:13: 0c:a0:37:a2:dd:17:96:65:d4:65:e6:8e:22:70:90:d5:3b:c0: 89:3f:d8:8b:c9:f6:53:00:64:0e:9f:ef:84:d1:53:be:67:64: 9d:b7:2b:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUbrXXmQuL4eTqdrCzVZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMmJhM2FjODcxMzlhZDExNjAyNzc3ZTRkMzVkODE1ODJh MTkxYmYwHhcNMjUxMjE2MDQwMTExWhcNMjUxMjE3MDQwMTExWjAzMTEwLwYDVQQD Eyg2YTEyMjNjNDRiNGZkMTAyNjUzZTE0OTliOWNmNDU5YTllOTc2YzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuok5ZsPxE4fhB/pcz7s/CfTXy7JD DIWNRBLURJ3aQNUdtqFc6dyc8kVl7r2uTWMBTDby1e61UBzsF3p0HvbFR79HkqFh IYJ94VCmdNIK1vgJbK9KTMMk2QpVgJD+zb5t2MzJ3hZReaqXu9HTqE3aC7mIPVXw aYR26rsGldyjUuFgBJLCxzzLFbZ7X+gQQq+HFM6kvdyfjadMX4pJjMmT1SfAD8YS jZjGM3ScBPJzc+hNHSmonOSdm6D/jzEbiHwwIAV/P9LiSJCBLUNQBIRpTkQDZ3zk SBPyqhOyYIg5OaWJ+i3kMknpcU7xehC7NTNZ63Dr0XgfCtd7/srDy253IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGoSI8RLT9ECZT4UmbnPRZqel2yfMB8GA1UdIwQY MBaAFE4ro6yHE5rRFgJ3fk012BWCoZG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lZDUwYjYtMmU1NS00Y2YyLWIzODAt ZGFlOTIyZTE2YmU4LzEvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9lZDUwYjYtMmU1NS00Y2YyLWIzODAtZGFlOTIyZTE2YmU4 LzEvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUG1RntU TcWJ19rv697sBnHNSK79yKN/+Zqsoevl2MrrCa8jVS2Xe1iYGHhDI21R/m5CyjvV a9LHD6TIjiEPGEN6cX7tVY7alJ89uNBQPxd+5NiaeXNRhQBw68/Lhe44vNwPp/G7 XRCMBJPdYsWO/QRlDt5SVXDjXhs+PbHIlIt/R2qDYkKx1XopkGv2ksbFYJWx0G/p 8hCktR1eAygY+SbcV0NHc72ndHs0L3dmnzmTNiTzefmGbMkieVLIUmsgI0u8lBVU GTCrBgT+fr39ynDLi7//tGUTDKA3ot0XlmXUZeaOInCQ1TvAiT/Yi8n2UwBkDp/v hNFTvmdknbcr8w== -----END CERTIFICATE-----Generated at Tue Dec 16 13:42:05 2025 by rpki-client