This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft File: Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json) Hash identifier: saw+vSVt2bz7XB93U2BnxXXWnZXYQJs4cRf5eQEi8Ao= Subject key identifier: 70:A1:72:D0:01:FA:E5:9F:13:A9:4C:6F:E7:0D:0E:23:99:32:D1:E3 Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF Certificate issuer: /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf Certificate serial: 019AF3F7EDF064587C8E41B75B6208F104A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft Manifest number: 0615 Signing time: Sat 06 Dec 2025 14:01:43 +0000 Manifest this update: Sat 06 Dec 2025 14:01:43 +0000 Manifest next update: Sun 07 Dec 2025 14:01:43 +0000 Files and hashes: 1: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: kcw1OLUvtbmPxPbsOUq3FulRghyM8WueYgSLtPn2ARY=) 2: Zx7o0NJ7lPcPWusoEu-hir0u3sI.roa (hash: RaHzV4CwJ05D0LodvMcl63WAfLK7uU2RzT47rVSSlwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:ed:f0:64:58:7c:8e:41:b7:5b:62:08:f1:04:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf Validity Not Before: Dec 6 14:01:43 2025 GMT Not After : Dec 7 14:01:43 2025 GMT Subject: CN=70a172d001fae59f13a94c6fe70d0e239932d1e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:88:ea:3d:c0:3d:7f:f0:88:aa:3a:13:a0:3c: 19:ef:43:c8:a2:28:e8:2f:2f:e0:fa:c8:17:83:8f: 10:ac:8d:bf:67:d0:80:eb:05:ab:71:ca:c1:48:34: e7:00:69:7c:f8:ba:c8:19:7f:27:8d:4d:e4:d3:89: 16:58:5e:40:8e:7a:a8:12:e2:47:07:93:20:22:d0: c6:f3:d7:89:85:d0:55:e0:f3:46:1d:d5:6b:a1:7a: 5f:09:d3:58:a7:50:9b:f9:d2:90:5d:bc:10:27:2c: ce:c9:e4:02:cc:38:4b:b9:b1:01:17:d7:de:14:44: c0:84:0a:98:df:e1:cf:04:14:01:ae:f1:98:6d:65: d4:87:1a:39:d1:a0:0c:02:d5:3e:75:ce:6f:29:36: d1:55:86:4a:cb:e0:32:45:10:27:74:ce:4a:5c:01: 6b:74:83:a8:6d:ea:5b:c7:2a:d3:40:07:69:97:bd: 83:5f:14:04:cc:cd:56:9a:2c:85:e0:fa:c3:ce:3f: 8a:13:77:c9:93:63:e5:91:c6:90:14:33:09:bc:11: be:42:de:03:5b:5c:58:e3:11:16:40:b8:58:a7:4b: 9e:4d:4f:82:ef:4c:40:66:13:96:82:fa:f2:fd:c9: ec:11:15:38:45:d1:a8:a8:be:16:38:66:8a:37:81: dc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A1:72:D0:01:FA:E5:9F:13:A9:4C:6F:E7:0D:0E:23:99:32:D1:E3 X509v3 Authority Key Identifier: keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:0b:29:9d:a0:cb:1a:d6:62:03:c2:e9:67:bb:20:53:c9:30: 35:c7:ef:01:e5:91:3b:4c:89:92:d3:c8:06:55:bf:5a:cc:04: 8b:52:17:c0:f3:75:fd:11:e7:a2:cc:37:8c:5a:11:55:7c:0e: 56:72:65:1a:54:0a:14:81:b6:bb:f5:97:a8:f0:d2:65:cb:24: 8b:c2:0d:3c:ff:35:7c:66:9d:23:31:50:39:54:ac:aa:2d:b7: 3b:f1:8d:e3:c2:f1:66:1f:5d:fc:24:1e:0d:3e:c0:71:96:3e: 3f:67:5a:d5:a6:62:6b:01:f9:39:db:60:c5:55:76:81:e3:ef: a6:0e:c8:7a:8c:be:36:0b:46:69:c6:27:1a:ea:43:75:63:21: 53:13:3a:e4:4e:e1:33:79:ca:5c:3f:bb:19:4b:e8:3c:b7:5d: f8:28:9d:38:ac:4a:49:9e:1f:d3:9d:82:49:c1:df:30:e8:93: 89:0f:e9:b4:8a:d8:e2:0c:b0:ce:53:be:98:a0:58:26:f2:4b: 8c:a9:f3:fb:3b:45:67:80:59:06:9b:d2:62:69:c2:c9:10:c5: 98:3f:ac:d0:48:29:67:6c:a2:07:6b:eb:07:96:6b:c8:a0:6c: 7c:d1:0b:57:4d:4d:c4:41:f9:de:82:50:8b:16:53:6d:b6:74: 6e:54:af:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9+3wZFh8jkG3W2II8QSgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMmQyMGYyZGU0ZDU3ZTFiYzY0NWNiNjI4N2ZmODEwZDBm NWE0YmYwHhcNMjUxMjA2MTQwMTQzWhcNMjUxMjA3MTQwMTQzWjAzMTEwLwYDVQQD Eyg3MGExNzJkMDAxZmFlNTlmMTNhOTRjNmZlNzBkMGUyMzk5MzJkMWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxojqPcA9f/CIqjoToDwZ70PIoijo Ly/g+sgXg48QrI2/Z9CA6wWrccrBSDTnAGl8+LrIGX8njU3k04kWWF5AjnqoEuJH B5MgItDG89eJhdBV4PNGHdVroXpfCdNYp1Cb+dKQXbwQJyzOyeQCzDhLubEBF9fe FETAhAqY3+HPBBQBrvGYbWXUhxo50aAMAtU+dc5vKTbRVYZKy+AyRRAndM5KXAFr dIOobepbxyrTQAdpl72DXxQEzM1WmiyF4PrDzj+KE3fJk2PlkcaQFDMJvBG+Qt4D W1xY4xEWQLhYp0ueTU+C70xAZhOWgvry/cnsERU4RdGoqL4WOGaKN4Hc4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHChctAB+uWfE6lMb+cNDiOZMtHjMB8GA1UdIwQY MBaAFE4tIPLeTVfhvGRctih/+BDQ9aS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGkwZzh0NU5WLUc4WkZ5MktIXzRFTkQxcEw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jZTg3NmMtMmMwMi00Nzc1LTgwOTUt NzhkNGE2NGQyMmQ5LzEvVGkwZzh0NU5WLUc4WkZ5MktIXzRFTkQxcEw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9jZTg3NmMtMmMwMi00Nzc1LTgwOTUtNzhkNGE2NGQyMmQ5 LzEvVGkwZzh0NU5WLUc4WkZ5MktIXzRFTkQxcEw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkQspnaDL GtZiA8LpZ7sgU8kwNcfvAeWRO0yJktPIBlW/WswEi1IXwPN1/RHnosw3jFoRVXwO VnJlGlQKFIG2u/WXqPDSZcski8INPP81fGadIzFQOVSsqi23O/GN48LxZh9d/CQe DT7AcZY+P2da1aZiawH5OdtgxVV2gePvpg7Ieoy+NgtGacYnGupDdWMhUxM65E7h M3nKXD+7GUvoPLdd+CidOKxKSZ4f052CScHfMOiTiQ/ptIrY4gywzlO+mKBYJvJL jKnz+ztFZ4BZBpvSYmnCyRDFmD+s0EgpZ2yiB2vrB5ZryKBsfNELV01NxEH53oJQ ixZTbbZ0blSvhA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:56:40 2025 by rpki-client