This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft File: TitqaUPTM40AdQNtlp7AHD3O_Kk.mft (raw, json) Hash identifier: r6ME4xnPFVfC8xJ8DeT+Fd9hBINgPXxAjWYNFG8g4vw= Subject key identifier: 7E:12:05:22:47:DA:AA:F3:D6:71:72:F6:42:AE:83:49:97:8A:63:76 Authority key identifier: 4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9 Certificate issuer: /CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9 Certificate serial: 019B31FA7EC3437D069F685F51C7415F15F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft Manifest number: 16C5 Signing time: Thu 18 Dec 2025 15:00:58 +0000 Manifest this update: Thu 18 Dec 2025 15:00:58 +0000 Manifest next update: Fri 19 Dec 2025 15:00:58 +0000 Files and hashes: 1: 04QV-ve6N6q1z5keiSip22HWq-U.roa (hash: oA0QfyCg1GT0LK/v+pk71hC3hYPHoYN/Zjd1n/b4oLE=) 2: TitqaUPTM40AdQNtlp7AHD3O_Kk.crl (hash: ctzGQNVr9pUX8oDCAqtywEOHATe7NSVaevj53Uvm4sQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:7e:c3:43:7d:06:9f:68:5f:51:c7:41:5f:15:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9 Validity Not Before: Dec 18 15:00:58 2025 GMT Not After : Dec 19 15:00:58 2025 GMT Subject: CN=7e12052247daaaf3d67172f642ae8349978a6376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:81:cf:70:ef:52:93:1f:3d:ec:10:d5:aa:6e: 9f:ec:bc:a2:7c:99:fd:80:5d:69:ec:73:9a:ab:48: 49:40:a2:1e:1f:d3:ac:b1:93:a1:0a:bb:cf:1d:de: a6:6b:39:d0:cd:18:ec:0e:28:48:21:81:c0:aa:c2: 0b:eb:74:ce:79:05:a4:74:ad:2a:ac:81:d5:8f:3b: 80:9e:44:ff:3f:bf:2b:eb:57:9b:87:5d:92:dc:5d: 29:7b:ea:61:93:00:4b:e3:e9:c3:38:c0:01:1b:43: 8d:b1:62:88:47:05:6d:15:eb:c6:f2:75:8b:6d:4d: 98:3f:59:f6:61:b7:7a:03:8f:9e:9c:89:a6:10:8b: e7:76:9c:39:83:7e:f1:02:98:04:c8:d5:f0:c3:67: 71:24:0a:f9:6d:97:02:3f:5e:d7:8e:81:3f:63:c9: 92:6d:f1:e4:da:d2:35:71:2d:40:b7:ff:6f:70:01: af:1a:50:b6:43:de:ee:db:ba:10:d9:26:2c:28:ab: 8c:57:a7:ff:89:95:3f:72:36:40:42:5e:e9:86:87: 1d:e7:06:e0:9c:d1:59:62:79:8c:a3:1e:cf:b7:38: ef:54:00:51:36:96:7d:cf:68:12:55:2f:5d:eb:4d: 7a:9c:1f:5e:e5:fc:20:ea:de:9e:f5:67:8b:3f:fe: 9b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:12:05:22:47:DA:AA:F3:D6:71:72:F6:42:AE:83:49:97:8A:63:76 X509v3 Authority Key Identifier: keyid:4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:bd:84:f6:45:81:7c:44:6e:65:df:1b:7e:58:07:2d:6b:99: e0:56:c7:38:a3:04:06:88:73:b3:89:32:45:91:c0:3a:ad:93: b7:78:55:a0:20:2c:1e:f0:dc:7a:37:9b:2f:ab:11:b9:dc:52: 9c:c9:38:74:d1:b6:a1:d2:d6:b5:d5:27:a7:d5:3f:19:a2:71: 73:96:fa:76:64:2c:ba:6c:a0:b6:6a:5a:dd:b8:2d:33:b6:6e: 60:34:1e:32:d6:85:72:38:8b:71:63:85:a3:c9:81:6d:3e:84: 93:de:78:c4:d2:cc:51:5b:64:fa:56:e1:22:38:04:d2:a4:c7: d7:a6:de:e8:fc:06:f2:ff:f5:91:7f:67:22:6b:b6:5a:57:ef: bd:54:23:5b:c4:c7:0c:04:da:b0:79:80:e9:35:4c:6d:d0:d3: 29:8d:3b:1f:3b:e2:b1:c1:a5:5e:e7:96:54:b0:2d:f9:4d:0e: 24:b7:ae:5d:cc:93:17:73:6a:58:e1:5b:97:b0:49:94:a2:e8: a5:2e:67:50:00:3a:35:9b:6f:50:68:e2:37:50:76:ac:28:bc: aa:12:f0:be:c8:3b:f4:3f:72:b3:e7:f2:64:68:7b:a7:d7:9a: b8:a3:85:03:d3:34:71:50:16:92:53:24:ef:3d:53:5d:6f:0a: ae:95:91:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+n7DQ30Gn2hfUcdBXxX2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMmI2YTY5NDNkMzMzOGQwMDc1MDM2ZDk2OWVjMDFjM2Rj ZWZjYTkwHhcNMjUxMjE4MTUwMDU4WhcNMjUxMjE5MTUwMDU4WjAzMTEwLwYDVQQD Eyg3ZTEyMDUyMjQ3ZGFhYWYzZDY3MTcyZjY0MmFlODM0OTk3OGE2Mzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIHPcO9Skx897BDVqm6f7LyifJn9 gF1p7HOaq0hJQKIeH9OssZOhCrvPHd6maznQzRjsDihIIYHAqsIL63TOeQWkdK0q rIHVjzuAnkT/P78r61ebh12S3F0pe+phkwBL4+nDOMABG0ONsWKIRwVtFevG8nWL bU2YP1n2Ybd6A4+enImmEIvndpw5g37xApgEyNXww2dxJAr5bZcCP17XjoE/Y8mS bfHk2tI1cS1At/9vcAGvGlC2Q97u27oQ2SYsKKuMV6f/iZU/cjZAQl7phocd5wbg nNFZYnmMox7PtzjvVABRNpZ9z2gSVS9d6016nB9e5fwg6t6e9WeLP/6bRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4SBSJH2qrz1nFy9kKug0mXimN2MB8GA1UdIwQY MBaAFE4ramlD0zONAHUDbZaewBw9zvypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84ODk2MDgtMGY0MC00YTY0LWI1MjYt MWEyNmI5ZDhmZWRlLzEvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy84ODk2MDgtMGY0MC00YTY0LWI1MjYtMWEyNmI5ZDhmZWRl LzEvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk72E9kWB fERuZd8bflgHLWuZ4FbHOKMEBohzs4kyRZHAOq2Tt3hVoCAsHvDcejebL6sRudxS nMk4dNG2odLWtdUnp9U/GaJxc5b6dmQsumygtmpa3bgtM7ZuYDQeMtaFcjiLcWOF o8mBbT6Ek954xNLMUVtk+lbhIjgE0qTH16be6PwG8v/1kX9nImu2WlfvvVQjW8TH DATasHmA6TVMbdDTKY07HzviscGlXueWVLAt+U0OJLeuXcyTF3NqWOFbl7BJlKLo pS5nUAA6NZtvUGjiN1B2rCi8qhLwvsg79D9ys+fyZGh7p9eauKOFA9M0cVAWklMk 7z1TXW8KrpWRWA== -----END CERTIFICATE-----Generated at Thu Dec 18 23:04:16 2025 by rpki-client