This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft File: TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json) Hash identifier: 0eXuDjTO6HGdhCKpK4s2ryGcmxPSdx9fODgOdBsG6vY= Subject key identifier: 2B:AB:33:09:4B:BA:31:BF:45:8B:76:92:46:E4:C3:E7:79:FA:4A:92 Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A Certificate issuer: /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a Certificate serial: 019B3757F44ED30EA78FA86DA7C3BDA1946A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 16:01:09 +0000 Manifest this update: Fri 19 Dec 2025 16:01:09 +0000 Manifest next update: Sat 20 Dec 2025 16:01:09 +0000 Files and hashes: 1: NYiqXRmP7nBBaBEa9iT79WYJ0gs.roa (hash: UqGys13kNv1mtJhLUKGkAEs9pExc7CtEz6E2KnEqZvM=) 2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: K39Pz4/3m1Jbfgy/qycFcoPgf5Ew3qjZdAQFFTnMlKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:57:f4:4e:d3:0e:a7:8f:a8:6d:a7:c3:bd:a1:94:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a Validity Not Before: Dec 19 16:01:09 2025 GMT Not After : Dec 20 16:01:09 2025 GMT Subject: CN=2bab33094bba31bf458b769246e4c3e779fa4a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d2:f8:c3:78:85:af:fb:74:fa:a3:9b:62:b7: d2:ce:b5:4c:37:da:bc:90:94:bc:88:1d:53:40:00: a2:d3:a0:b3:62:3f:97:99:a6:02:94:4f:c3:65:fd: 81:74:d8:de:67:9c:87:53:90:0b:bb:95:29:31:79: 35:e4:eb:47:18:a4:54:27:1f:13:fa:a8:d4:09:85: fc:97:c3:7e:0b:c4:b5:35:cb:8c:e5:e2:5c:2e:88: d1:69:95:5f:44:b2:51:d4:c6:a9:c9:5b:4b:37:9c: 90:27:82:e5:82:c7:a5:f7:fb:7f:2f:a9:c4:a6:1d: c8:f1:7b:d8:46:48:89:2a:8e:3a:ea:bd:1c:8e:b1: 73:61:a3:7e:75:2b:dc:75:86:e8:41:8f:14:a5:ee: d9:97:b5:3f:d3:52:4a:4c:67:01:76:45:74:c8:b8: ac:ee:34:de:37:6f:92:58:58:c8:61:83:f4:28:97: a5:cd:eb:22:6a:95:9a:8a:5b:af:34:7d:1a:07:2a: 69:eb:97:6c:b8:8a:19:f7:b2:2f:3e:72:5f:a2:f4: e7:3f:a9:6d:8b:24:7f:90:ed:cf:ca:9d:ca:9b:3a: 1b:06:d4:e9:74:f4:9e:45:78:66:31:12:a0:78:df: 56:c0:e1:99:77:ae:82:80:54:9b:73:52:1a:0e:34: c9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AB:33:09:4B:BA:31:BF:45:8B:76:92:46:E4:C3:E7:79:FA:4A:92 X509v3 Authority Key Identifier: keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:f6:8e:39:dc:26:80:f0:b0:1d:cb:9e:06:e1:73:28:6a:91: 18:15:02:b8:e7:55:71:d2:e2:41:8d:83:01:34:5a:34:d1:6b: cc:76:df:53:bb:a5:e4:f0:37:54:a8:9f:40:97:ad:7f:ff:ce: 85:1d:70:3c:59:eb:2f:b5:f1:84:c8:65:50:9c:5c:c7:59:ae: 47:1b:2d:91:17:3d:e1:7d:71:02:c2:e1:a0:af:bb:32:c6:c0: 30:fa:fd:f1:7a:6f:c6:8a:e9:d7:a8:e5:5b:f8:b6:12:e3:13: 97:bd:38:da:bb:56:f8:d3:52:ff:98:44:0a:4a:97:ee:72:f9: b8:4f:51:22:61:12:6d:fa:cd:f9:d7:df:e3:cb:3b:f5:d8:4a: 0e:fb:dd:82:b6:fd:f2:dd:d3:5a:32:28:c5:bb:07:0f:8d:15: 75:56:51:b6:04:db:09:04:b0:50:84:70:5d:6b:6f:16:dc:73: c4:8b:95:2e:33:ff:7c:12:d0:36:5e:4d:ea:16:7a:0b:3c:79: 4a:89:e6:60:0e:7f:0e:92:69:f7:ec:9b:dc:5d:af:4b:ec:62: 90:03:4e:16:15:11:0b:9d:ab:12:0e:41:c2:d4:bc:3f:99:25: ed:50:4e:11:a4:a5:a5:4e:20:1c:73:1f:c4:20:27:95:40:5a: b3:1b:0f:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3V/RO0w6nj6htp8O9oZRqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlM2MwMWJhMGM1Y2JmMjBhZTNlOTNjYTNkMzc5ZTYyZGY1 Yzk1OWEwHhcNMjUxMjE5MTYwMTA5WhcNMjUxMjIwMTYwMTA5WjAzMTEwLwYDVQQD EygyYmFiMzMwOTRiYmEzMWJmNDU4Yjc2OTI0NmU0YzNlNzc5ZmE0YTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tL4w3iFr/t0+qObYrfSzrVMN9q8 kJS8iB1TQACi06CzYj+XmaYClE/DZf2BdNjeZ5yHU5ALu5UpMXk15OtHGKRUJx8T +qjUCYX8l8N+C8S1NcuM5eJcLojRaZVfRLJR1MapyVtLN5yQJ4Llgsel9/t/L6nE ph3I8XvYRkiJKo466r0cjrFzYaN+dSvcdYboQY8Upe7Zl7U/01JKTGcBdkV0yLis 7jTeN2+SWFjIYYP0KJelzesiapWailuvNH0aBypp65dsuIoZ97IvPnJfovTnP6lt iyR/kO3Pyp3KmzobBtTpdPSeRXhmMRKgeN9WwOGZd66CgFSbc1IaDjTJ6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCurMwlLujG/RYt2kkbkw+d5+kqSMB8GA1UdIwQY MBaAFE48AboMXL8grj6Tyj03nmLfXJWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGp3QnVneGN2eUN1UHBQS1BUZWVZdDljbFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOGU3NzMtNGU3MS00ZDA5LWI3NGEt YjI3ZjU1MjY3MmUwLzEvVGp3QnVneGN2eUN1UHBQS1BUZWVZdDljbFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iOGU3NzMtNGU3MS00ZDA5LWI3NGEtYjI3ZjU1MjY3MmUw LzEvVGp3QnVneGN2eUN1UHBQS1BUZWVZdDljbFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvaOOdwm gPCwHcueBuFzKGqRGBUCuOdVcdLiQY2DATRaNNFrzHbfU7ul5PA3VKifQJetf//O hR1wPFnrL7XxhMhlUJxcx1muRxstkRc94X1xAsLhoK+7MsbAMPr98Xpvxorp16jl W/i2EuMTl7042rtW+NNS/5hECkqX7nL5uE9RImESbfrN+dff48s79dhKDvvdgrb9 8t3TWjIoxbsHD40VdVZRtgTbCQSwUIRwXWtvFtxzxIuVLjP/fBLQNl5N6hZ6Czx5 SonmYA5/DpJp9+yb3F2vS+xikANOFhURC52rEg5BwtS8P5kl7VBOEaSlpU4gHHMf xCAnlUBasxsPvw== -----END CERTIFICATE-----Generated at Fri Dec 19 21:16:11 2025 by rpki-client