This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft File: TitqaUPTM40AdQNtlp7AHD3O_Kk.mft (raw, json) Hash identifier: QwCHto7wqa6RbA/eqYYGTESwH4g4jVwkqL3x0OXqwig= Subject key identifier: 96:59:E2:36:2F:4C:BB:F4:DE:34:4D:4A:21:09:B4:80:1F:41:3A:77 Authority key identifier: 4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9 Certificate issuer: /CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9 Certificate serial: 019B24763751831B4BB58011D933F67470BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft Manifest number: 16BE Signing time: Tue 16 Dec 2025 00:01:25 +0000 Manifest this update: Tue 16 Dec 2025 00:01:25 +0000 Manifest next update: Wed 17 Dec 2025 00:01:25 +0000 Files and hashes: 1: 04QV-ve6N6q1z5keiSip22HWq-U.roa (hash: oA0QfyCg1GT0LK/v+pk71hC3hYPHoYN/Zjd1n/b4oLE=) 2: TitqaUPTM40AdQNtlp7AHD3O_Kk.crl (hash: Vnp5UBuMlzcg/etBOCfdh5VqX2m0QrxAyXtkqcXkXd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:76:37:51:83:1b:4b:b5:80:11:d9:33:f6:74:70:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9 Validity Not Before: Dec 16 00:01:25 2025 GMT Not After : Dec 17 00:01:25 2025 GMT Subject: CN=9659e2362f4cbbf4de344d4a2109b4801f413a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0b:6a:3a:ed:8e:8f:1b:37:38:d9:67:0c:2a: 3f:ac:a0:18:19:16:c7:14:f4:55:84:71:76:36:3d: d8:c0:84:95:86:c1:ee:3b:01:bc:b6:2f:7a:90:21: d3:ca:f6:64:b0:c7:48:7f:ad:86:53:6c:ff:4e:52: 6f:cd:7e:c9:6b:3d:2d:1c:9d:6d:d8:c9:b8:b6:1a: 38:82:1f:f1:ff:99:34:48:71:47:8a:ac:f0:75:74: 3d:8f:6d:5c:55:0e:93:33:7e:4e:aa:72:d9:d2:47: ad:6f:0a:13:94:7a:28:b7:f8:19:1a:5e:18:47:6e: 2d:19:41:a3:3d:b1:57:1b:84:e6:38:2a:97:b6:51: e9:5d:cb:73:5a:5e:a9:7a:31:34:bf:13:e3:b3:44: 03:f9:9f:54:a4:a8:fe:d6:b8:ae:6b:68:43:d3:16: 92:94:6d:3c:c5:86:20:37:3e:99:ef:c2:a9:f2:dc: 4e:89:64:cb:15:c0:5e:0b:d0:5a:61:2e:93:a4:0f: 37:5a:4c:ab:50:7b:8a:cd:17:74:9a:30:2a:b7:b0: d6:5f:9b:14:86:85:47:d7:86:7c:38:1d:d9:57:f1: 83:e8:ed:cd:1a:e0:76:c3:0b:3a:5f:90:6c:0c:4d: dd:f8:ce:ac:e6:b0:92:a8:04:12:c0:02:15:88:b8: 9a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:59:E2:36:2F:4C:BB:F4:DE:34:4D:4A:21:09:B4:80:1F:41:3A:77 X509v3 Authority Key Identifier: keyid:4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:c1:a0:36:1e:b8:a0:e1:e7:a3:e5:20:df:d1:bc:1d:ae:d1: 2c:7e:77:83:0f:09:6f:c3:80:fc:2f:17:6c:ff:eb:24:e7:48: 7f:51:8c:c2:9d:c1:fa:27:10:be:84:5c:06:f5:35:13:b6:a6: 3d:90:35:8b:8d:97:d9:81:b6:0b:c7:22:31:4c:d1:6f:b5:21: e0:23:a3:72:1b:b6:15:c6:af:81:b0:8b:a0:86:bc:f4:96:31: d7:d4:d4:31:a5:5a:5c:50:09:ad:12:1a:67:b7:b2:10:53:b7: 29:92:ba:7a:f2:b8:bf:82:bd:67:72:86:30:92:ad:15:a0:4f: 6c:dc:ab:7c:ed:6c:3d:d9:b6:cf:83:fc:e0:5d:39:29:bc:87: db:3d:94:73:34:d2:d5:ff:89:93:1a:ea:0d:99:7f:bf:a8:ba: 4a:7b:d3:25:d3:ba:e8:68:e7:54:77:15:31:b7:eb:b5:1f:24: 63:cc:0d:06:d1:e5:58:4a:29:f1:e0:8f:d2:a3:4f:f9:5f:b0: 00:7a:1a:36:53:b6:4b:fa:03:f7:bb:12:1c:40:ec:51:a5:1f: 13:1b:a5:41:22:33:4d:37:74:fa:7e:ca:b4:55:57:20:98:af: c8:a2:6f:5d:ad:e8:e0:73:d7:26:ed:07:1a:74:9a:d2:c2:48: cc:50:ee:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskdjdRgxtLtYAR2TP2dHC9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMmI2YTY5NDNkMzMzOGQwMDc1MDM2ZDk2OWVjMDFjM2Rj ZWZjYTkwHhcNMjUxMjE2MDAwMTI1WhcNMjUxMjE3MDAwMTI1WjAzMTEwLwYDVQQD Eyg5NjU5ZTIzNjJmNGNiYmY0ZGUzNDRkNGEyMTA5YjQ4MDFmNDEzYTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigtqOu2Ojxs3ONlnDCo/rKAYGRbH FPRVhHF2Nj3YwISVhsHuOwG8ti96kCHTyvZksMdIf62GU2z/TlJvzX7Jaz0tHJ1t 2Mm4tho4gh/x/5k0SHFHiqzwdXQ9j21cVQ6TM35OqnLZ0ketbwoTlHoot/gZGl4Y R24tGUGjPbFXG4TmOCqXtlHpXctzWl6pejE0vxPjs0QD+Z9UpKj+1riua2hD0xaS lG08xYYgNz6Z78Kp8txOiWTLFcBeC9BaYS6TpA83WkyrUHuKzRd0mjAqt7DWX5sU hoVH14Z8OB3ZV/GD6O3NGuB2wws6X5BsDE3d+M6s5rCSqAQSwAIViLia+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZZ4jYvTLv03jRNSiEJtIAfQTp3MB8GA1UdIwQY MBaAFE4ramlD0zONAHUDbZaewBw9zvypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84ODk2MDgtMGY0MC00YTY0LWI1MjYt MWEyNmI5ZDhmZWRlLzEvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy84ODk2MDgtMGY0MC00YTY0LWI1MjYtMWEyNmI5ZDhmZWRl LzEvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8GgNh64 oOHno+Ug39G8Ha7RLH53gw8Jb8OA/C8XbP/rJOdIf1GMwp3B+icQvoRcBvU1E7am PZA1i42X2YG2C8ciMUzRb7Uh4COjchu2FcavgbCLoIa89JYx19TUMaVaXFAJrRIa Z7eyEFO3KZK6evK4v4K9Z3KGMJKtFaBPbNyrfO1sPdm2z4P84F05KbyH2z2UczTS 1f+JkxrqDZl/v6i6SnvTJdO66GjnVHcVMbfrtR8kY8wNBtHlWEop8eCP0qNP+V+w AHoaNlO2S/oD97sSHEDsUaUfExulQSIzTTd0+n7KtFVXIJivyKJvXa3o4HPXJu0H GnSa0sJIzFDuyg== -----END CERTIFICATE-----Generated at Tue Dec 16 04:39:52 2025 by rpki-client