This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft File: tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft (raw, json) Hash identifier: rwlxWup8X6SnckoMeUFCDLu/zCl3gzlN8dqq2pomhRs= Subject key identifier: 86:FF:54:38:A1:9B:93:00:CB:1D:8F:D1:70:EA:C7:0A:0C:F7:39:78 Authority key identifier: B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7 Certificate issuer: /CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7 Certificate serial: 019AF3F77E4DE0176A5A4287312FB43AAE62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft Manifest number: 064D Signing time: Sat 06 Dec 2025 14:01:14 +0000 Manifest this update: Sat 06 Dec 2025 14:01:14 +0000 Manifest next update: Sun 07 Dec 2025 14:01:14 +0000 Files and hashes: 1: Zw8tldKF4IamTYiqaUWTp-ORWaM.roa (hash: +YY2MSi0DHjKWNmQtrNLuY1Ni5g7MizVHlrZ12WPMsk=) 2: tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl (hash: PX2sXcVK3JI/JMdE442HCp/2DTE0AUCABSlLUwkgLcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:7e:4d:e0:17:6a:5a:42:87:31:2f:b4:3a:ae:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7 Validity Not Before: Dec 6 14:01:14 2025 GMT Not After : Dec 7 14:01:14 2025 GMT Subject: CN=86ff5438a19b9300cb1d8fd170eac70a0cf73978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6e:14:35:67:ac:3b:21:ef:49:d2:f2:e1:b8: 98:2a:87:e4:ae:b4:49:a6:f2:4b:b6:b9:ac:2b:ed: b8:52:b7:d9:9e:f0:57:55:29:7c:ed:cb:81:98:2f: 43:bf:7d:a8:a2:56:e8:01:f4:f7:04:c0:4e:81:c6: 59:8f:fe:67:a3:33:d1:bc:ba:b0:be:95:3f:70:5b: 6c:ee:69:f3:18:53:6e:f2:16:50:f9:41:3a:78:b8: a1:52:b0:89:b5:ff:93:69:6f:db:13:55:8f:ef:74: 11:c8:28:83:e2:4e:bd:ec:2e:05:93:d7:89:4c:46: 9d:e0:c5:04:b6:47:cd:f1:91:e4:08:ba:77:db:73: 68:5c:47:32:e6:1e:28:70:b8:79:02:3e:32:26:f8: a1:ec:e7:0a:c6:83:34:b0:ef:d1:98:6c:8f:ee:66: 43:2e:bd:e9:b6:57:6d:33:c6:0f:8d:c1:a2:bc:f2: d4:2d:7d:fa:72:a0:35:18:93:97:11:a1:3d:6d:13: 19:26:d8:c2:77:59:d2:7c:3b:cb:85:fb:32:6e:e7: e8:47:c6:db:86:c3:fb:d6:e4:e1:d6:52:e7:b6:ae: fb:5d:bb:4b:38:58:49:7c:c5:ac:b5:85:7b:f8:c5: 6e:11:b2:b2:ed:eb:bb:7c:e0:04:46:80:3e:e4:c3: 59:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FF:54:38:A1:9B:93:00:CB:1D:8F:D1:70:EA:C7:0A:0C:F7:39:78 X509v3 Authority Key Identifier: keyid:B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:2d:d5:e7:6c:0e:e0:bd:2d:29:d3:90:30:67:f0:39:4d:78: 7b:64:d8:6e:5c:88:ab:cb:8e:7e:0e:ac:d1:fa:b7:75:3f:20: 95:3c:21:0f:7d:cd:a3:db:a2:2b:cf:1a:c1:8b:29:6b:c1:d0: 46:2a:c7:95:6f:85:29:fc:4d:8b:23:38:c2:e0:38:5b:35:cc: 64:d9:6e:9a:53:1f:15:b5:02:2d:9d:11:b8:17:ea:f1:75:a3: c1:94:cf:c3:ab:7b:d8:04:5d:0e:35:47:d7:b5:30:12:9f:d8: c7:15:88:0d:7d:3b:e0:7a:d3:83:c2:99:82:8c:c3:94:e2:c8: 1b:cb:89:0e:2e:b8:a8:bf:fd:c1:f0:2a:fe:a6:32:53:fb:ed: b5:33:47:5b:75:9a:18:79:86:81:a1:e5:a9:57:c1:f0:f4:30: 64:7c:4b:27:f6:e0:f3:99:26:95:5c:08:dc:c4:7a:79:52:a4: a1:cf:6e:39:f8:5e:0a:dd:00:f9:ac:df:71:11:21:06:31:c7: 15:a5:bf:f9:28:2d:ad:61:7d:53:d5:ab:75:35:5a:e4:44:fc: 4f:f8:4a:ab:0d:19:cd:1f:24:8d:5f:32:ae:e6:db:6c:4d:54: f5:0a:f0:c4:79:c4:90:14:38:a2:54:ce:67:24:ac:09:e3:e0: 2c:b7:3a:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz935N4BdqWkKHMS+0Oq5iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2M2Y5NzY5ZGY5N2I4YjlhYTg4YmQyMmU5ZjQxY2MyN2Zj ZjE2YTcwHhcNMjUxMjA2MTQwMTE0WhcNMjUxMjA3MTQwMTE0WjAzMTEwLwYDVQQD Eyg4NmZmNTQzOGExOWI5MzAwY2IxZDhmZDE3MGVhYzcwYTBjZjczOTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG4UNWesOyHvSdLy4biYKofkrrRJ pvJLtrmsK+24UrfZnvBXVSl87cuBmC9Dv32oolboAfT3BMBOgcZZj/5nozPRvLqw vpU/cFts7mnzGFNu8hZQ+UE6eLihUrCJtf+TaW/bE1WP73QRyCiD4k697C4Fk9eJ TEad4MUEtkfN8ZHkCLp323NoXEcy5h4ocLh5Aj4yJvih7OcKxoM0sO/RmGyP7mZD Lr3ptldtM8YPjcGivPLULX36cqA1GJOXEaE9bRMZJtjCd1nSfDvLhfsybufoR8bb hsP71uTh1lLntq77XbtLOFhJfMWstYV7+MVuEbKy7eu7fOAERoA+5MNZbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIb/VDihm5MAyx2P0XDqxwoM9zl4MB8GA1UdIwQY MBaAFLY/l2nfl7i5qoi9Iun0HMJ/zxanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGotWGFkLVh1TG1xaUwwaTZmUWN3bl9QRnFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81OTRlMDgtMTY2NS00MzQ4LTgwYTQt M2JlOWE2Njk3MmU3LzEvdGotWGFkLVh1TG1xaUwwaTZmUWN3bl9QRnFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC81OTRlMDgtMTY2NS00MzQ4LTgwYTQtM2JlOWE2Njk3MmU3 LzEvdGotWGFkLVh1TG1xaUwwaTZmUWN3bl9QRnFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEi3V52wO 4L0tKdOQMGfwOU14e2TYblyIq8uOfg6s0fq3dT8glTwhD33No9uiK88awYspa8HQ RirHlW+FKfxNiyM4wuA4WzXMZNlumlMfFbUCLZ0RuBfq8XWjwZTPw6t72ARdDjVH 17UwEp/YxxWIDX074HrTg8KZgozDlOLIG8uJDi64qL/9wfAq/qYyU/vttTNHW3Wa GHmGgaHlqVfB8PQwZHxLJ/bg85kmlVwI3MR6eVKkoc9uOfheCt0A+azfcREhBjHH FaW/+SgtrWF9U9WrdTVa5ET8T/hKqw0ZzR8kjV8yrubbbE1U9QrwxHnEkBQ4olTO ZySsCePgLLc6tA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:50:45 2025 by rpki-client