This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft File: TitqaUPTM40AdQNtlp7AHD3O_Kk.mft (raw, json) Hash identifier: mewe7087M3GaC2XI1Pqr8atyVQCrLvXaroKbSv8bkFw= Subject key identifier: 28:C4:61:17:6E:FE:AC:C7:46:79:A8:B2:FE:B1:4F:4C:0A:A7:4D:66 Authority key identifier: 4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9 Certificate issuer: /CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9 Certificate serial: 019AF23FCBADDC21EB19A23E4D139B66A954 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft Manifest number: 16A4 Signing time: Sat 06 Dec 2025 06:00:58 +0000 Manifest this update: Sat 06 Dec 2025 06:00:58 +0000 Manifest next update: Sun 07 Dec 2025 06:00:58 +0000 Files and hashes: 1: 04QV-ve6N6q1z5keiSip22HWq-U.roa (hash: oA0QfyCg1GT0LK/v+pk71hC3hYPHoYN/Zjd1n/b4oLE=) 2: TitqaUPTM40AdQNtlp7AHD3O_Kk.crl (hash: q8taRNG2vTz3kRchddkt5921Yn1XWBsA8fOz6MDvvx8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:cb:ad:dc:21:eb:19:a2:3e:4d:13:9b:66:a9:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9 Validity Not Before: Dec 6 06:00:58 2025 GMT Not After : Dec 7 06:00:58 2025 GMT Subject: CN=28c461176efeacc74679a8b2feb14f4c0aa74d66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:30:a9:b3:ba:fe:86:7d:94:40:70:36:6d:02: 26:4a:6d:28:d1:7b:bd:6f:4b:94:3a:71:a9:94:38: 4b:87:22:6d:e0:7c:0e:93:56:91:be:b9:45:34:21: 6e:fc:85:19:43:9d:cf:36:9b:91:ed:94:77:0e:48: 9e:e7:ca:fd:18:55:af:f5:88:80:31:68:ab:87:62: 62:cf:17:e2:af:4a:16:2b:1a:c5:ca:d6:b6:6d:e7: dd:f4:8c:1f:53:b0:55:ea:06:a0:c2:7b:84:50:2a: cb:f1:b2:cc:39:23:d5:4e:7f:99:92:28:9b:c5:6e: 4c:da:b3:b2:03:01:d5:07:5d:71:e5:9e:9b:00:73: ae:fd:52:19:68:36:81:92:99:10:66:70:85:1a:db: d9:3b:6f:a3:cb:79:40:be:9a:61:34:5c:fe:a8:52: f4:a1:e9:9e:98:a6:a3:9d:09:e7:86:3a:39:6c:f2: 56:c8:70:9c:19:0d:d9:83:c8:23:fe:ff:7c:bc:95: 36:17:a2:91:91:3e:a6:0d:3d:41:51:33:e6:fa:1a: 26:4c:ed:95:1f:4a:8f:fa:0f:f8:ad:c8:63:ff:96: 7f:ad:29:bf:e4:17:69:31:88:d9:51:43:78:6e:2d: d4:9c:1a:82:2c:5d:74:b9:48:22:56:47:c2:13:34: 26:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C4:61:17:6E:FE:AC:C7:46:79:A8:B2:FE:B1:4F:4C:0A:A7:4D:66 X509v3 Authority Key Identifier: keyid:4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:38:af:a9:b8:8d:c5:58:33:b8:77:3b:58:fd:24:f1:84:25: 15:b4:50:2d:04:4e:84:91:41:37:b8:2b:57:e9:7d:de:6e:a6: 48:38:af:f4:00:a3:c8:cf:26:18:c0:82:bc:7a:f4:c9:1b:3a: 02:7c:87:18:38:1b:aa:8f:bf:13:1b:5d:23:fd:9b:64:46:c7: bc:e6:9e:d8:cb:9c:5b:0d:77:80:39:9c:93:7c:91:e1:43:0d: bc:e1:5a:89:bf:1a:88:70:48:ef:c5:ac:79:24:11:bd:e2:49: 65:42:4e:b7:7f:ff:df:35:d4:95:57:f6:3c:13:0b:64:b2:b1: 3c:e8:53:fc:17:e3:91:50:be:7e:e3:49:94:a3:31:2d:62:5c: 2d:9e:fb:f2:a8:bf:8d:8d:37:8a:c3:46:26:58:dd:16:b2:d8: f1:c8:3b:80:14:01:57:fd:4d:89:29:88:0b:c6:bd:1a:79:7c: bb:ad:d8:a6:58:d3:2a:57:50:a4:a1:30:cd:dc:c4:49:2e:bf: 33:3f:8e:c2:46:53:a4:0b:bd:93:d0:b2:3b:6a:27:11:b4:a3: 8c:3c:bf:c4:59:9f:6c:27:2d:bd:29:5b:f1:5f:74:cb:36:80: 32:3f:33:97:f7:62:c0:93:4b:75:74:a9:15:b9:19:c0:4a:8b: 3f:c4:88:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8ut3CHrGaI+TRObZqlUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMmI2YTY5NDNkMzMzOGQwMDc1MDM2ZDk2OWVjMDFjM2Rj ZWZjYTkwHhcNMjUxMjA2MDYwMDU4WhcNMjUxMjA3MDYwMDU4WjAzMTEwLwYDVQQD EygyOGM0NjExNzZlZmVhY2M3NDY3OWE4YjJmZWIxNGY0YzBhYTc0ZDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDCps7r+hn2UQHA2bQImSm0o0Xu9 b0uUOnGplDhLhyJt4HwOk1aRvrlFNCFu/IUZQ53PNpuR7ZR3Dkie58r9GFWv9YiA MWirh2Jizxfir0oWKxrFyta2befd9IwfU7BV6gagwnuEUCrL8bLMOSPVTn+Zkiib xW5M2rOyAwHVB11x5Z6bAHOu/VIZaDaBkpkQZnCFGtvZO2+jy3lAvpphNFz+qFL0 oememKajnQnnhjo5bPJWyHCcGQ3Zg8gj/v98vJU2F6KRkT6mDT1BUTPm+homTO2V H0qP+g/4rchj/5Z/rSm/5BdpMYjZUUN4bi3UnBqCLF10uUgiVkfCEzQmTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjEYRdu/qzHRnmosv6xT0wKp01mMB8GA1UdIwQY MBaAFE4ramlD0zONAHUDbZaewBw9zvypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84ODk2MDgtMGY0MC00YTY0LWI1MjYt MWEyNmI5ZDhmZWRlLzEvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy84ODk2MDgtMGY0MC00YTY0LWI1MjYtMWEyNmI5ZDhmZWRl LzEvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAazivqbiN xVgzuHc7WP0k8YQlFbRQLQROhJFBN7grV+l93m6mSDiv9ACjyM8mGMCCvHr0yRs6 AnyHGDgbqo+/ExtdI/2bZEbHvOae2MucWw13gDmck3yR4UMNvOFaib8aiHBI78Ws eSQRveJJZUJOt3//3zXUlVf2PBMLZLKxPOhT/BfjkVC+fuNJlKMxLWJcLZ778qi/ jY03isNGJljdFrLY8cg7gBQBV/1NiSmIC8a9Gnl8u63YpljTKldQpKEwzdzESS6/ Mz+OwkZTpAu9k9CyO2onEbSjjDy/xFmfbCctvSlb8V90yzaAMj8zl/diwJNLdXSp FbkZwEqLP8SIyw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:39 2025 by rpki-client