This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json) Hash identifier: Ifu80iWk/GTDO8GTbQdCalaTfMyIyFx/I5Y/NnO4iko= Subject key identifier: 6F:D5:38:D8:2F:24:82:C2:DD:1F:E2:15:C2:29:24:35:BB:64:6E:60 Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf Certificate serial: 019AF31CE9C1CE07F8E65E79022D5A7C37DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft Manifest number: 055B Signing time: Sat 06 Dec 2025 10:02:29 +0000 Manifest this update: Sat 06 Dec 2025 10:02:29 +0000 Manifest next update: Sun 07 Dec 2025 10:02:29 +0000 Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: j6lq4DpfSd5mdQ6fuaXhGeYl1knJIwSG2ugwDxA5u4U=) 2: koYxRoNx2Z_dDpVJFl-Snjkmcp8.roa (hash: 9wg6bBr0wjB+1nZSYhxJKyc0xntk+ar+Q7kYQKSKRUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:e9:c1:ce:07:f8:e6:5e:79:02:2d:5a:7c:37:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf Validity Not Before: Dec 6 10:02:29 2025 GMT Not After : Dec 7 10:02:29 2025 GMT Subject: CN=6fd538d82f2482c2dd1fe215c2292435bb646e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1a:e0:e1:d9:ec:4e:5e:e7:ee:a4:d6:b7:b9: d6:52:3d:fb:81:83:cc:2f:93:69:41:c2:90:fc:7c: d1:6a:0b:51:eb:82:ea:89:9a:24:1f:a2:c7:1b:74: 2b:41:50:95:f8:d9:98:58:cd:2b:2b:98:02:36:fc: b9:b2:ec:5b:d0:81:ac:c4:70:48:49:49:e9:a4:5f: 99:2a:84:68:88:93:a5:56:13:60:35:b8:7c:c7:2a: e2:db:6a:90:f2:c7:63:bc:38:1f:c2:2f:01:3f:c1: ad:40:47:5c:ab:f2:00:6e:42:03:c3:fa:22:b5:16: 83:4b:e4:c7:d0:0a:49:77:ba:a4:14:29:a8:63:6c: b1:75:11:92:ea:74:0b:94:59:d1:0b:06:a8:3b:10: 46:10:0c:94:cf:7a:ad:cf:52:9f:e1:13:f5:74:95: e1:90:45:52:40:02:42:3c:1e:43:dc:3e:0d:31:5d: 5f:31:ac:01:c4:9e:fb:43:29:dd:6d:ba:07:eb:ff: 9c:54:f5:00:dd:c9:4f:6a:3b:ff:c0:4e:38:74:c0: d7:1c:4f:c9:63:77:ec:63:69:a4:5e:52:ac:95:5b: c7:c5:b2:b0:62:1c:be:69:23:c7:b8:c4:78:3e:c8: f8:66:8f:d3:48:7d:fd:a3:18:d5:b1:f1:00:ee:10: a3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D5:38:D8:2F:24:82:C2:DD:1F:E2:15:C2:29:24:35:BB:64:6E:60 X509v3 Authority Key Identifier: keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d8:ac:61:13:2a:ef:33:dd:e5:d4:38:0a:95:e2:fe:d1:7a: 86:95:f3:78:df:7d:af:b0:b2:b5:a9:37:26:e7:86:c0:81:26: 85:ac:33:67:e0:6e:48:98:e2:39:13:78:aa:29:db:54:3a:65: 34:3c:28:16:a8:98:2e:a8:50:0f:a2:8d:26:ce:ca:3e:c3:ac: df:39:de:41:65:4c:ab:8e:11:f1:0b:c6:14:58:60:a5:e7:72: b2:eb:bc:83:d1:c5:08:79:40:7d:ac:b6:88:16:87:32:a8:a4: 1b:ba:12:ed:1f:c0:e6:dc:eb:55:a4:63:40:19:a1:38:59:b5: fd:d9:2f:24:16:21:de:b1:45:f5:0f:f0:02:bf:f3:17:aa:07: 9d:a2:c0:1d:fb:38:9b:7e:35:9b:a5:40:31:5b:ae:91:87:3a: 8f:31:6d:82:1c:f2:03:76:4a:3f:fb:cc:19:28:ab:88:ee:6e: b5:b6:04:25:8f:1f:fd:8b:fb:57:30:5a:ac:7c:cd:ce:d9:70: f2:0c:93:95:ff:13:52:56:cb:a8:6b:7b:1f:19:2f:fa:a9:65: 33:8b:5c:59:99:31:7c:5e:dc:64:38:34:5d:90:08:ff:d6:4a: 86:93:77:20:73:fc:80:5b:99:8c:76:e0:c7:8a:b0:2c:e5:56: 56:42:6f:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOnBzgf45l55Ai1afDfcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMmJhM2FjODcxMzlhZDExNjAyNzc3ZTRkMzVkODE1ODJh MTkxYmYwHhcNMjUxMjA2MTAwMjI5WhcNMjUxMjA3MTAwMjI5WjAzMTEwLwYDVQQD Eyg2ZmQ1MzhkODJmMjQ4MmMyZGQxZmUyMTVjMjI5MjQzNWJiNjQ2ZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBrg4dnsTl7n7qTWt7nWUj37gYPM L5NpQcKQ/HzRagtR64LqiZokH6LHG3QrQVCV+NmYWM0rK5gCNvy5suxb0IGsxHBI SUnppF+ZKoRoiJOlVhNgNbh8xyri22qQ8sdjvDgfwi8BP8GtQEdcq/IAbkIDw/oi tRaDS+TH0ApJd7qkFCmoY2yxdRGS6nQLlFnRCwaoOxBGEAyUz3qtz1Kf4RP1dJXh kEVSQAJCPB5D3D4NMV1fMawBxJ77QyndbboH6/+cVPUA3clPajv/wE44dMDXHE/J Y3fsY2mkXlKslVvHxbKwYhy+aSPHuMR4Psj4Zo/TSH39oxjVsfEA7hCjvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/VONgvJILC3R/iFcIpJDW7ZG5gMB8GA1UdIwQY MBaAFE4ro6yHE5rRFgJ3fk012BWCoZG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lZDUwYjYtMmU1NS00Y2YyLWIzODAt ZGFlOTIyZTE2YmU4LzEvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9lZDUwYjYtMmU1NS00Y2YyLWIzODAtZGFlOTIyZTE2YmU4 LzEvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdisYRMq 7zPd5dQ4CpXi/tF6hpXzeN99r7Cytak3JueGwIEmhawzZ+BuSJjiORN4qinbVDpl NDwoFqiYLqhQD6KNJs7KPsOs3zneQWVMq44R8QvGFFhgpedysuu8g9HFCHlAfay2 iBaHMqikG7oS7R/A5tzrVaRjQBmhOFm1/dkvJBYh3rFF9Q/wAr/zF6oHnaLAHfs4 m341m6VAMVuukYc6jzFtghzyA3ZKP/vMGSiriO5utbYEJY8f/Yv7VzBarHzNztlw 8gyTlf8TUlbLqGt7Hxkv+qllM4tcWZkxfF7cZDg0XZAI/9ZKhpN3IHP8gFuZjHbg x4qwLOVWVkJvqg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:16:27 2025 by rpki-client