This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json) Hash identifier: ZK+ausDh/c+YfMHV0UUVXtci6KwttyCp/qdkqA/KWGg= Subject key identifier: 97:0B:C9:38:A4:9D:DB:5B:6D:B4:C2:75:D2:27:EE:42:9B:FE:63:2C Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27 Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27 Certificate serial: 019B1013AF91F03FF2668AE38AF401231A6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft Manifest number: 0BCC Signing time: Fri 12 Dec 2025 01:01:24 +0000 Manifest this update: Fri 12 Dec 2025 01:01:24 +0000 Manifest next update: Sat 13 Dec 2025 01:01:24 +0000 Files and hashes: 1: 4J7Io1jEwgS2RhtnGjopliZ5_no.roa (hash: QO5aB2FmunA0lEdEAxyr6sEsO8466VD4EugW4s0Q6Rw=) 2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: bJkuKJVcaSPSnHZ57sddufCjxSqrKtWXspHTcxraHp4=) 3: ge3kV53d3-LqnCvvkoEAivLZ1y8.roa (hash: SauMWlDrg7IfvsdJxQ9Eu8dcWvkF6O4OvV9rmn3sxVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:13:af:91:f0:3f:f2:66:8a:e3:8a:f4:01:23:1a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27 Validity Not Before: Dec 12 01:01:24 2025 GMT Not After : Dec 13 01:01:24 2025 GMT Subject: CN=970bc938a49ddb5b6db4c275d227ee429bfe632c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6d:a1:db:52:19:6c:3c:e1:b7:94:4a:7b:23: 43:1d:25:30:81:08:5c:8c:81:d3:59:ff:df:b0:23: 1a:d3:68:88:39:72:1b:a9:2a:f1:99:92:50:a4:8e: 26:5f:47:2e:61:b0:52:6a:7e:d3:2c:d6:6a:60:9c: a4:bb:12:30:1b:38:01:86:f7:6f:d4:5b:66:02:d4: 86:d8:4c:7d:f0:c3:f5:f7:f0:e4:b2:dc:a4:b7:22: c4:bb:06:f1:46:3d:f3:45:15:a9:97:d9:ce:2b:6a: d5:69:4c:d7:ac:77:ba:19:31:40:1f:b3:cb:0f:e7: 69:1f:df:82:99:ca:40:a6:79:04:f3:01:cb:92:f6: 79:e5:f3:43:70:7d:72:01:84:85:aa:c3:34:7b:ee: 03:b8:b6:17:76:c0:70:3f:a6:b6:3d:c6:53:24:a5: b2:30:8e:7f:3d:a0:6f:ed:cb:2a:ca:c6:57:b9:73: a2:3b:05:81:59:9a:d2:f0:2d:0f:2b:71:c3:24:9b: e5:07:93:57:66:52:07:c0:3f:d2:b4:9f:44:b8:ff: d2:91:04:1f:de:59:52:41:25:bb:4a:23:f5:db:94: cd:14:02:3c:30:84:ce:2e:b7:22:d1:e1:8d:b9:fc: 95:ff:98:aa:c5:6d:ce:50:14:e2:82:f0:ba:4f:cf: a6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0B:C9:38:A4:9D:DB:5B:6D:B4:C2:75:D2:27:EE:42:9B:FE:63:2C X509v3 Authority Key Identifier: keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:72:ff:5d:c2:48:52:62:5a:65:5d:7d:0c:16:7b:0b:42:78: a3:c2:c5:cb:03:3e:13:72:35:cb:00:ac:5a:c0:b9:7d:fb:15: ee:bc:8e:10:81:6c:da:eb:4b:87:c5:ef:e8:16:40:80:c4:aa: b2:82:0e:00:53:d2:74:b5:6b:85:80:54:c7:88:b2:10:1b:62: 96:12:9f:1e:06:28:02:f3:a3:77:6e:73:c2:1f:42:3b:6b:7c: dd:6d:d2:22:49:ce:17:4a:e8:52:ca:ae:35:c7:8a:08:fa:65: 71:49:df:55:17:03:a7:47:6b:3f:06:c7:ca:dd:c3:a1:8b:9a: 14:bb:21:fe:02:41:69:c4:5b:0d:b2:bb:22:a2:69:17:55:5f: 66:5d:e3:92:56:25:4e:c8:8f:2a:98:25:07:9e:14:ef:42:37: 3b:35:21:72:31:c4:ff:0c:2b:d1:6a:53:92:80:a1:30:8b:4b: d2:a3:d5:e4:09:86:ac:fb:e4:3c:3e:5d:32:25:b5:28:fe:4d: 7e:61:0b:5d:95:36:22:8d:fd:c9:93:83:67:e4:4b:ab:e9:03: 29:b1:9a:69:ea:7d:7f:9c:5b:6f:02:81:93:ac:8d:87:2a:01: 18:f3:10:a1:41:2a:25:db:54:9e:7b:2b:71:cd:2e:6d:2e:81: 5e:a5:24:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQE6+R8D/yZorjivQBIxpsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODk3ZjFhMzQ5N2ViYmUyN2I5ZTJmMGQ2ZjNlYWUyYmJl NjhiMjcwHhcNMjUxMjEyMDEwMTI0WhcNMjUxMjEzMDEwMTI0WjAzMTEwLwYDVQQD Eyg5NzBiYzkzOGE0OWRkYjViNmRiNGMyNzVkMjI3ZWU0MjliZmU2MzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG2h21IZbDzht5RKeyNDHSUwgQhc jIHTWf/fsCMa02iIOXIbqSrxmZJQpI4mX0cuYbBSan7TLNZqYJykuxIwGzgBhvdv 1FtmAtSG2Ex98MP19/DkstyktyLEuwbxRj3zRRWpl9nOK2rVaUzXrHe6GTFAH7PL D+dpH9+CmcpApnkE8wHLkvZ55fNDcH1yAYSFqsM0e+4DuLYXdsBwP6a2PcZTJKWy MI5/PaBv7csqysZXuXOiOwWBWZrS8C0PK3HDJJvlB5NXZlIHwD/StJ9EuP/SkQQf 3llSQSW7SiP125TNFAI8MITOLrci0eGNufyV/5iqxW3OUBTigvC6T8+mHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcLyTikndtbbbTCddIn7kKb/mMsMB8GA1UdIwQY MBaAFEyJfxo0l+u+J7ni8Nbz6uK75osnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEt YTc5ZGExYTg1NTEzLzEvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEtYTc5ZGExYTg1NTEz LzEvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3L/XcJI UmJaZV19DBZ7C0J4o8LFywM+E3I1ywCsWsC5ffsV7ryOEIFs2utLh8Xv6BZAgMSq soIOAFPSdLVrhYBUx4iyEBtilhKfHgYoAvOjd25zwh9CO2t83W3SIknOF0roUsqu NceKCPplcUnfVRcDp0drPwbHyt3DoYuaFLsh/gJBacRbDbK7IqJpF1VfZl3jklYl TsiPKpglB54U70I3OzUhcjHE/wwr0WpTkoChMItL0qPV5AmGrPvkPD5dMiW1KP5N fmELXZU2Io39yZODZ+RLq+kDKbGaaep9f5xbbwKBk6yNhyoBGPMQoUEqJdtUnnsr cc0ubS6BXqUklw== -----END CERTIFICATE-----Generated at Fri Dec 12 06:39:50 2025 by rpki-client