This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft File: tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json) Hash identifier: 1LL7qqRx9bS0fmMBoKw1UvlKBILjGCT3SLdV2fzanE0= Subject key identifier: 4F:E9:CB:79:91:E1:67:98:B8:66:EB:9E:6E:D9:DC:52:01:C0:2C:D3 Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50 Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50 Certificate serial: 019B5ABFA39CCC5703A09368F99A01FBFB7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft Manifest number: 053B Signing time: Fri 26 Dec 2025 13:01:07 +0000 Manifest this update: Fri 26 Dec 2025 13:01:07 +0000 Manifest next update: Sat 27 Dec 2025 13:01:07 +0000 Files and hashes: 1: 3NvNrWEVmChu4DMSl71yUBOUL1E.roa (hash: GasLqu+d7ICCgXWrZURm0ppqSwFCpgX0/TSR8hCVtjo=) 2: 7PrThjlXTdWomtXWwr_eOJDlAFY.roa (hash: 2SgrElvVXtH7x+BnWs8QSmeq0QSew6wcOvgzJlh8YyA=) 3: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: Pfq1hz9VEysmGe1DpBPdwoWva6AYogTTZt04M07td/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:a3:9c:cc:57:03:a0:93:68:f9:9a:01:fb:fb:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50 Validity Not Before: Dec 26 13:01:07 2025 GMT Not After : Dec 27 13:01:07 2025 GMT Subject: CN=4fe9cb7991e16798b866eb9e6ed9dc5201c02cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7b:82:b0:d9:b2:75:6f:ae:71:be:d9:23:5d: b5:78:ce:f3:31:66:42:1b:31:65:7d:29:49:91:de: d3:26:f4:01:a4:f1:af:db:32:da:b8:a3:92:59:8a: 82:41:62:e9:1a:8d:3f:23:80:f4:3d:41:59:da:84: af:a0:7e:e9:27:8e:60:4c:77:84:be:21:e0:7f:6c: 94:9a:b9:30:0a:2f:4b:bb:42:33:00:6e:92:40:ca: 82:e7:6a:4d:4a:94:cc:e5:51:5e:12:d8:b0:1c:c7: dc:f5:a2:e7:09:50:a1:cb:d1:f2:2c:8f:da:0c:06: 2a:0f:2c:d0:67:bc:9d:09:7f:d6:e9:83:92:76:54: 2d:a7:9f:c3:b0:d4:5a:aa:a0:e2:19:b3:a9:54:91: 32:6d:c0:e6:7b:8f:9c:b1:07:1f:87:04:19:11:5d: 06:c4:38:5c:f5:e9:6d:3e:fd:44:c9:6f:ed:c3:84: a8:17:b1:ae:b9:6b:78:be:ab:66:ad:01:80:33:c3: 82:e2:10:ed:df:2b:4e:e7:b8:e0:6c:df:36:db:4f: ff:23:ec:29:58:cb:6a:e5:4e:0f:27:6b:29:c8:5e: 07:1f:1f:17:fc:0d:66:77:42:ea:c9:40:a8:d8:a7: 1f:38:6f:64:b0:52:f3:ad:b5:41:bb:59:f4:ba:79: d3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E9:CB:79:91:E1:67:98:B8:66:EB:9E:6E:D9:DC:52:01:C0:2C:D3 X509v3 Authority Key Identifier: keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:10:fe:0b:af:a7:ec:e9:49:03:db:3c:9c:69:61:d3:0a:c4: af:51:75:2e:7b:85:b1:c5:24:c7:95:19:86:d1:fd:6f:3c:40: 25:0c:18:4e:29:b9:37:11:f7:17:2b:81:25:18:ae:24:70:bf: d3:39:14:4b:e1:f2:d5:67:b5:f5:e1:78:e9:a1:c9:d7:24:8a: 1f:9e:97:57:4d:a8:7f:9a:86:a7:4a:05:80:0c:7d:58:c8:4d: 4e:6a:4b:fa:e7:d2:62:51:33:7e:bf:1b:4c:6f:68:39:5a:3a: 5b:fc:71:10:69:d7:68:8d:8b:a8:68:51:8f:01:c5:d6:b2:8d: cf:3b:9e:93:c9:c7:68:21:9d:34:8f:78:f3:d5:3a:32:b9:90: a9:59:cb:9b:bb:55:f3:11:c4:aa:d5:30:80:04:e1:9d:c3:0c: 44:a9:5e:61:11:2b:be:c6:b7:14:41:ce:5d:95:88:2b:bd:8b: 6d:40:e3:22:04:db:04:df:f8:22:a3:f1:c4:2a:d1:34:e9:4f: 06:3e:51:50:e1:f1:da:b4:95:01:ec:85:a5:71:33:c0:b4:12: 79:76:7e:95:38:76:29:e8:ce:72:6c:09:b0:0d:8e:3e:cb:d7: ff:46:9f:8c:84:06:92:91:60:33:5e:3a:fd:dc:46:08:2b:ad: 7c:8c:68:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav6OczFcDoJNo+ZoB+/t9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2M2EzMDk0NDM5Y2FjMGY1NTU3MDEyODZjZDU0MzczYmNl NmNiNTAwHhcNMjUxMjI2MTMwMTA3WhcNMjUxMjI3MTMwMTA3WjAzMTEwLwYDVQQD Eyg0ZmU5Y2I3OTkxZTE2Nzk4Yjg2NmViOWU2ZWQ5ZGM1MjAxYzAyY2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXuCsNmydW+ucb7ZI121eM7zMWZC GzFlfSlJkd7TJvQBpPGv2zLauKOSWYqCQWLpGo0/I4D0PUFZ2oSvoH7pJ45gTHeE viHgf2yUmrkwCi9Lu0IzAG6SQMqC52pNSpTM5VFeEtiwHMfc9aLnCVChy9HyLI/a DAYqDyzQZ7ydCX/W6YOSdlQtp5/DsNRaqqDiGbOpVJEybcDme4+csQcfhwQZEV0G xDhc9eltPv1EyW/tw4SoF7GuuWt4vqtmrQGAM8OC4hDt3ytO57jgbN8220//I+wp WMtq5U4PJ2spyF4HHx8X/A1md0LqyUCo2KcfOG9ksFLzrbVBu1n0unnT3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/py3mR4WeYuGbrnm7Z3FIBwCzTMB8GA1UdIwQY MBaAFLY6MJRDnKwPVVcBKGzVQ3O85stQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYt OWRkZGQ2ODAyMDg4LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYtOWRkZGQ2ODAyMDg4 LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhD+C6+n 7OlJA9s8nGlh0wrEr1F1LnuFscUkx5UZhtH9bzxAJQwYTim5NxH3FyuBJRiuJHC/ 0zkUS+Hy1We19eF46aHJ1ySKH56XV02of5qGp0oFgAx9WMhNTmpL+ufSYlEzfr8b TG9oOVo6W/xxEGnXaI2LqGhRjwHF1rKNzzuek8nHaCGdNI9489U6MrmQqVnLm7tV 8xHEqtUwgAThncMMRKleYRErvsa3FEHOXZWIK72LbUDjIgTbBN/4IqPxxCrRNOlP Bj5RUOHx2rSVAeyFpXEzwLQSeXZ+lTh2KejOcmwJsA2OPsvX/0afjIQGkpFgM146 /dxGCCutfIxohw== -----END CERTIFICATE-----Generated at Fri Dec 26 21:05:27 2025 by rpki-client