This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft File: TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json) Hash identifier: VXyvLfheHcoouLVZpIteoKtgx3eQEJJBy3vMLnwv9t4= Subject key identifier: 2B:32:A6:A6:4F:8F:53:41:8E:D6:ED:4D:D0:2F:DF:48:4A:98:8D:43 Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A Certificate issuer: /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a Certificate serial: 019AF1D2176E849C3A5E0FD2486265B5436F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:01:08 +0000 Manifest this update: Sat 06 Dec 2025 04:01:08 +0000 Manifest next update: Sun 07 Dec 2025 04:01:08 +0000 Files and hashes: 1: NYiqXRmP7nBBaBEa9iT79WYJ0gs.roa (hash: UqGys13kNv1mtJhLUKGkAEs9pExc7CtEz6E2KnEqZvM=) 2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: 9XURYtNVYawlkpEomn6yHNNa/1lsYoi8I2g1SCT209k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:17:6e:84:9c:3a:5e:0f:d2:48:62:65:b5:43:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a Validity Not Before: Dec 6 04:01:08 2025 GMT Not After : Dec 7 04:01:08 2025 GMT Subject: CN=2b32a6a64f8f53418ed6ed4dd02fdf484a988d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:33:25:af:c6:a2:e8:4f:50:f2:9b:fe:64:81: b1:23:21:9d:b2:60:a2:32:3f:65:65:eb:fa:ab:27: c7:31:85:f7:01:80:16:e7:81:18:49:c6:5d:3c:ba: 0e:56:ef:1c:7a:0e:da:67:e7:74:ac:d1:c4:f5:3a: 87:02:64:71:11:76:4b:ed:1c:cf:56:34:a2:b6:69: 58:f5:8f:c5:ec:0a:93:95:86:29:16:bb:dd:49:9f: 67:5d:20:70:e5:f7:4b:35:00:e9:cf:13:6f:01:ef: 62:47:b7:cc:f0:40:ca:0b:fb:32:39:11:28:cd:f8: a9:68:14:45:61:aa:a9:be:4b:a0:92:c9:ff:75:6d: e0:c5:7f:08:79:ad:07:65:d1:dc:4e:c5:20:ce:a1: ca:a9:22:31:8a:26:da:9e:2e:53:bf:57:67:71:f8: 14:b9:d8:5a:52:a7:21:54:ba:5d:25:3c:a6:38:65: 86:ca:b9:53:a8:29:e8:64:c8:0e:9c:ba:d9:50:27: ef:aa:43:42:be:fc:ff:44:18:e4:c3:51:b4:1a:19: 1f:f8:66:5a:a8:ae:2d:66:7e:22:a2:1c:9d:0c:8b: 62:cc:e9:e1:16:5c:02:71:7b:39:37:66:6d:88:1b: 60:22:d3:c8:c9:c5:68:86:70:10:89:79:7a:ab:2c: 96:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:32:A6:A6:4F:8F:53:41:8E:D6:ED:4D:D0:2F:DF:48:4A:98:8D:43 X509v3 Authority Key Identifier: keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a2:bb:c8:58:30:d7:15:d7:5e:4f:05:a7:9e:36:6d:6c:51: 4f:97:ad:f4:1e:72:3a:98:ed:d9:54:21:dd:81:d7:b5:a9:c8: ca:11:87:b3:0e:0f:76:7c:10:cd:01:33:3a:64:bf:c3:92:88: 35:8c:d8:37:cf:d7:87:bb:16:e1:13:96:23:10:ae:cc:dc:d8: a9:14:90:fe:0c:d8:dc:aa:7e:87:bb:06:28:ab:9b:b7:b8:5c: de:f8:89:94:47:77:d0:4f:83:74:28:54:bf:43:3a:39:78:60: 55:f9:91:bd:44:c5:90:c8:3b:eb:dc:38:f2:5b:c7:32:e9:c9: 55:71:6c:21:c3:7b:56:b7:20:f0:f1:4b:bf:97:02:a8:69:0d: 65:60:91:8a:a1:33:77:46:35:91:18:9a:e6:20:96:43:33:b7: 04:32:a1:79:5c:de:82:e9:50:6c:b4:a3:f3:82:87:bf:34:12: 1c:0d:b4:22:44:9b:b3:df:29:60:3c:0c:40:f7:0c:44:59:81: 76:20:68:a1:42:a8:d3:a2:84:33:8c:3e:5e:dd:87:85:8d:9a: d0:2f:77:51:dc:3d:80:5f:0c:01:ed:4b:94:55:0e:92:d3:4d: e0:ad:ed:58:2d:d4:f0:91:fa:ef:50:7f:95:4b:da:e7:42:d5: 70:50:46:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hduhJw6Xg/SSGJltUNvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlM2MwMWJhMGM1Y2JmMjBhZTNlOTNjYTNkMzc5ZTYyZGY1 Yzk1OWEwHhcNMjUxMjA2MDQwMTA4WhcNMjUxMjA3MDQwMTA4WjAzMTEwLwYDVQQD EygyYjMyYTZhNjRmOGY1MzQxOGVkNmVkNGRkMDJmZGY0ODRhOTg4ZDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjMlr8ai6E9Q8pv+ZIGxIyGdsmCi Mj9lZev6qyfHMYX3AYAW54EYScZdPLoOVu8ceg7aZ+d0rNHE9TqHAmRxEXZL7RzP VjSitmlY9Y/F7AqTlYYpFrvdSZ9nXSBw5fdLNQDpzxNvAe9iR7fM8EDKC/syOREo zfipaBRFYaqpvkugksn/dW3gxX8Iea0HZdHcTsUgzqHKqSIxiibani5Tv1dncfgU udhaUqchVLpdJTymOGWGyrlTqCnoZMgOnLrZUCfvqkNCvvz/RBjkw1G0Ghkf+GZa qK4tZn4iohydDItizOnhFlwCcXs5N2ZtiBtgItPIycVohnAQiXl6qyyWpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCsypqZPj1NBjtbtTdAv30hKmI1DMB8GA1UdIwQY MBaAFE48AboMXL8grj6Tyj03nmLfXJWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGp3QnVneGN2eUN1UHBQS1BUZWVZdDljbFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOGU3NzMtNGU3MS00ZDA5LWI3NGEt YjI3ZjU1MjY3MmUwLzEvVGp3QnVneGN2eUN1UHBQS1BUZWVZdDljbFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iOGU3NzMtNGU3MS00ZDA5LWI3NGEtYjI3ZjU1MjY3MmUw LzEvVGp3QnVneGN2eUN1UHBQS1BUZWVZdDljbFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALKK7yFgw 1xXXXk8Fp542bWxRT5et9B5yOpjt2VQh3YHXtanIyhGHsw4PdnwQzQEzOmS/w5KI NYzYN8/Xh7sW4ROWIxCuzNzYqRSQ/gzY3Kp+h7sGKKubt7hc3viJlEd30E+DdChU v0M6OXhgVfmRvUTFkMg769w48lvHMunJVXFsIcN7Vrcg8PFLv5cCqGkNZWCRiqEz d0Y1kRia5iCWQzO3BDKheVzegulQbLSj84KHvzQSHA20IkSbs98pYDwMQPcMRFmB diBooUKo06KEM4w+Xt2HhY2a0C93Udw9gF8MAe1LlFUOktNN4K3tWC3U8JH671B/ lUva50LVcFBG+w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:35 2025 by rpki-client