This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft File: ti1M7HgzBZI-NJftiE8cRFtOePs.mft (raw, json) Hash identifier: mk/0z2dMytaYB84EDv2boN0gd0HxM6S8nxuzefz+cFU= Subject key identifier: C2:FC:A5:DE:29:C6:81:DC:DB:8C:4E:0F:0F:D1:69:60:5F:31:8B:B9 Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb Certificate serial: 019B127014DE6AD9D34E2F8B77402276D75B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft Manifest number: 0812 Signing time: Fri 12 Dec 2025 12:01:33 +0000 Manifest this update: Fri 12 Dec 2025 12:01:33 +0000 Manifest next update: Sat 13 Dec 2025 12:01:33 +0000 Files and hashes: 1: 1ZLLlpQFZQkTqIBAHCc5d1VfoKs.roa (hash: y420UM0xhYvhHVANW5cNvzv2FZY2TvVXtMQ3bLwlcAQ=) 2: Lu657SoGRO5i41akpdqVykwmDPo.roa (hash: L0TXwFUTYgd55jn30MVoW0Y/jyiw8Ro0oBxR271bBjw=) 3: mWU4uI3AED3kVRIGqsNYpuYsgY4.roa (hash: Fq84oAvE6fP7h+/uIBzyy7ivRhelDe2jm1K3Ltmpeog=) 4: ormFqBbSNZ9STHM9altDZ_d23vQ.roa (hash: J6zKFE4hCTyzQ+z5ZObdUSvjFEcPbgT7zIhL9WAYj1Y=) 5: ti1M7HgzBZI-NJftiE8cRFtOePs.crl (hash: 2XUqXhooSUb30lypBP7NkcJZ/5g6RPtmf2FnM5bpwOU=) 6: uvReHNZu0Zx8p75NQaqJP-qKUVY.roa (hash: KwvRsYUs0tG71ha16eVgbI+g8wMn509oBtGucdJdGuU=) 7: vrn7liTWiOV54a6bn1xF4EHebFc.roa (hash: mJIlU8Z+TC1dGYbjGa/ajMktQWJNT60JPY6KVtsPkZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:70:14:de:6a:d9:d3:4e:2f:8b:77:40:22:76:d7:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb Validity Not Before: Dec 12 12:01:33 2025 GMT Not After : Dec 13 12:01:33 2025 GMT Subject: CN=c2fca5de29c681dcdb8c4e0f0fd169605f318bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:82:a7:f8:d4:4b:31:17:2c:8d:2b:3b:0d:01: 99:05:c0:70:ef:cf:a2:aa:bb:cf:5a:d0:47:d9:a2: c0:a0:d3:b5:02:dc:c4:aa:69:08:70:d4:a9:82:86: 04:82:f9:f7:8f:37:00:0f:3d:c6:f1:a0:cd:da:e5: 9a:5b:f1:ab:59:db:77:cc:9a:15:8b:51:fe:2c:f0: 08:c7:ea:26:ba:22:8b:57:42:50:6f:68:0e:4a:d1: e0:0e:98:c0:41:c0:b0:8f:d3:4b:08:dc:2b:45:c1: 25:0a:96:f0:f4:08:b8:57:d6:a5:05:ff:be:c6:02: 67:a8:62:c7:fc:ae:b7:0c:7c:38:74:f1:c8:57:da: fb:5b:07:20:2a:9e:d5:ae:f0:a9:7f:46:da:b6:55: dd:57:b0:89:3b:fb:af:12:e8:f2:e6:35:86:60:b2: 3b:87:42:33:ba:62:5a:ad:08:1e:63:26:4d:b2:c7: df:a4:7c:e9:8d:85:ff:84:ee:3a:f9:b6:bc:fb:0e: 3c:2b:23:74:d6:a9:ac:5d:40:c2:2c:0f:e3:9e:80: 72:2c:ef:50:d7:b4:82:1b:0b:33:0c:ea:03:0d:4d: cb:bd:f2:14:6f:d0:15:c7:b1:9a:3a:0a:7a:3b:2d: b2:6d:3b:e2:0a:7a:96:6d:5f:43:80:4a:6a:06:aa: c0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FC:A5:DE:29:C6:81:DC:DB:8C:4E:0F:0F:D1:69:60:5F:31:8B:B9 X509v3 Authority Key Identifier: keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:19:a8:94:aa:c3:4c:d3:f4:13:72:98:d0:0a:3f:21:74:a5: 78:3d:f2:6e:95:66:4a:82:d9:a7:17:a5:d2:b0:09:d2:28:4d: 34:96:36:10:a0:c0:bd:35:7c:e2:f1:2c:44:5c:bf:4b:be:b7: 43:24:ed:a6:bd:94:7c:20:38:13:f3:83:b7:a7:df:c6:13:5b: 2c:f8:7f:20:f2:07:d6:c7:dc:a9:62:70:36:2c:99:89:71:9d: dc:53:9b:ab:a4:36:c8:3c:a2:53:77:4a:f2:c6:01:24:a3:72: 05:bd:cd:38:cb:62:c0:db:73:50:6b:e1:12:b7:35:f7:a0:cc: e0:bf:9a:75:18:82:80:cd:66:88:92:0c:04:4d:9e:ec:b3:e9: 79:0c:d1:4b:15:e0:73:c3:e5:90:75:5e:99:7f:85:8d:9e:0b: 1c:d0:06:12:43:bf:0c:d6:c1:5d:1c:25:57:05:49:ba:c4:26: e3:e0:4c:e4:3b:05:89:4b:d3:7e:ed:a8:ef:b3:15:b3:c7:9d: 7b:88:c2:9f:8d:12:18:ce:58:d5:21:bc:4b:fa:35:55:b0:d1: a3:84:34:ee:51:75:d9:4a:00:cb:85:ff:4b:79:90:04:a5:19: b4:fd:74:0e:1f:5c:72:94:e8:ce:0f:2d:c0:08:2d:40:9c:4d: 10:43:f7:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsScBTeatnTTi+Ld0AidtdbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MmQ0Y2VjNzgzMzA1OTIzZTM0OTdlZDg4NGYxYzQ0NWI0 ZTc4ZmIwHhcNMjUxMjEyMTIwMTMzWhcNMjUxMjEzMTIwMTMzWjAzMTEwLwYDVQQD EyhjMmZjYTVkZTI5YzY4MWRjZGI4YzRlMGYwZmQxNjk2MDVmMzE4YmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoKn+NRLMRcsjSs7DQGZBcBw78+i qrvPWtBH2aLAoNO1AtzEqmkIcNSpgoYEgvn3jzcADz3G8aDN2uWaW/GrWdt3zJoV i1H+LPAIx+omuiKLV0JQb2gOStHgDpjAQcCwj9NLCNwrRcElCpbw9Ai4V9alBf++ xgJnqGLH/K63DHw4dPHIV9r7WwcgKp7VrvCpf0batlXdV7CJO/uvEujy5jWGYLI7 h0IzumJarQgeYyZNssffpHzpjYX/hO46+ba8+w48KyN01qmsXUDCLA/jnoByLO9Q 17SCGwszDOoDDU3LvfIUb9AVx7GaOgp6Oy2ybTviCnqWbV9DgEpqBqrA/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFML8pd4pxoHc24xODw/RaWBfMYu5MB8GA1UdIwQY MBaAFLYtTOx4MwWSPjSX7YhPHERbTnj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTIt ZDMyZTI3ZmI3ZTU5LzEvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTItZDMyZTI3ZmI3ZTU5 LzEvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhmolKrD TNP0E3KY0Ao/IXSleD3ybpVmSoLZpxel0rAJ0ihNNJY2EKDAvTV84vEsRFy/S763 QyTtpr2UfCA4E/ODt6ffxhNbLPh/IPIH1sfcqWJwNiyZiXGd3FObq6Q2yDyiU3dK 8sYBJKNyBb3NOMtiwNtzUGvhErc196DM4L+adRiCgM1miJIMBE2e7LPpeQzRSxXg c8PlkHVemX+FjZ4LHNAGEkO/DNbBXRwlVwVJusQm4+BM5DsFiUvTfu2o77MVs8ed e4jCn40SGM5Y1SG8S/o1VbDRo4Q07lF12UoAy4X/S3mQBKUZtP10Dh9ccpTozg8t wAgtQJxNEEP3aQ== -----END CERTIFICATE-----Generated at Fri Dec 12 14:21:39 2025 by rpki-client