This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft File: tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json) Hash identifier: xOMXg4q7C3pvfv/6MDL11zxOUQ7nIUURfbGKDKRMnrU= Subject key identifier: 87:F3:B8:E4:3F:F8:F1:03:B4:37:26:66:BC:D3:20:9B:0A:D0:69:59 Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50 Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50 Certificate serial: 019AF08886D8237BF79E6169C6ECC3905474 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft Manifest number: 0504 Signing time: Fri 05 Dec 2025 22:01:10 +0000 Manifest this update: Fri 05 Dec 2025 22:01:10 +0000 Manifest next update: Sat 06 Dec 2025 22:01:10 +0000 Files and hashes: 1: 3NvNrWEVmChu4DMSl71yUBOUL1E.roa (hash: GasLqu+d7ICCgXWrZURm0ppqSwFCpgX0/TSR8hCVtjo=) 2: 7PrThjlXTdWomtXWwr_eOJDlAFY.roa (hash: 2SgrElvVXtH7x+BnWs8QSmeq0QSew6wcOvgzJlh8YyA=) 3: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: m6441F1OwoZJO1ESZiRsdpsWUmAo/sxLevZ5ym7sEV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:86:d8:23:7b:f7:9e:61:69:c6:ec:c3:90:54:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50 Validity Not Before: Dec 5 22:01:10 2025 GMT Not After : Dec 6 22:01:10 2025 GMT Subject: CN=87f3b8e43ff8f103b4372666bcd3209b0ad06959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6d:d3:5e:00:24:37:8a:e5:e0:1f:fa:9e:a3: 72:7d:ec:b7:88:48:bc:5a:f2:f6:22:9e:6c:e4:eb: a6:ac:a4:48:19:86:98:f2:e2:de:57:ba:63:67:df: cd:35:12:60:17:6e:59:eb:28:f4:65:35:46:eb:e5: 71:96:19:b4:bc:ed:f1:7a:53:eb:2d:2e:cb:ce:9a: ab:f8:a6:6c:b5:d2:d4:32:b6:86:87:8d:3b:1f:63: fb:60:e7:e1:f1:71:46:41:c4:97:3b:87:d5:28:40: 6a:49:56:1a:06:59:53:86:8f:24:9c:e3:91:d0:d5: 4c:85:e8:4b:c8:9b:3a:e5:c3:11:98:d6:91:6f:5d: 0a:40:15:04:b5:cc:f6:c8:5a:9e:d6:0a:c3:62:2a: dd:d8:a0:05:8d:1b:78:08:2b:fd:a8:5c:9c:92:9d: 6b:00:14:06:f7:ed:18:d1:c0:39:04:f2:98:f5:2d: 55:d0:68:88:6f:56:b4:c4:b0:ff:91:a5:8e:8b:07: 87:d7:02:5a:53:96:df:1c:58:9e:32:c6:95:f7:f6: fc:97:75:28:7c:b0:34:07:8b:79:68:cd:34:c5:31: cf:1e:de:c6:25:52:5e:9a:d8:c2:c2:1f:2e:fa:e9: f5:b5:e2:96:46:98:5e:b6:e9:d9:80:2a:b8:e8:05: 67:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F3:B8:E4:3F:F8:F1:03:B4:37:26:66:BC:D3:20:9B:0A:D0:69:59 X509v3 Authority Key Identifier: keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:f0:f9:98:d3:8d:4f:85:4a:07:ec:d7:59:fa:bd:2f:1b:97: 26:08:20:83:9d:0b:aa:1b:bd:7f:c4:c6:40:51:08:3a:c2:57: ae:21:9c:69:21:96:37:be:5f:37:13:99:99:21:8c:44:2e:b7: 9e:e9:0a:29:68:bd:ca:38:f0:f4:9b:3a:f5:86:aa:ed:5f:50: e3:ba:08:70:57:38:12:a7:03:b5:e8:4e:bf:7e:db:c0:12:6c: a6:50:6b:7c:43:f3:06:a5:fe:e1:48:54:68:67:fc:8a:41:23: 63:6a:6a:7e:16:16:3c:b4:7f:9e:45:8d:89:57:64:07:97:98: b0:c4:28:b0:f8:b6:3f:83:a0:cd:1b:00:6c:f9:16:06:18:5a: 2f:af:6d:e1:1d:f4:82:dd:17:87:98:c5:0c:b6:d0:a5:d1:a6: 0f:f3:63:5c:36:2a:2c:c2:6b:f6:44:ef:0c:b0:d2:ea:a0:15: 04:23:d0:a7:73:80:b6:be:f4:6f:d1:a8:3f:c5:f4:e8:92:91: 0d:80:2e:b3:cd:04:07:27:48:c3:56:75:0a:c9:73:2d:d8:b2: 46:a9:bc:e8:c2:24:42:5c:c0:6b:10:29:00:be:49:40:dc:8c: 8e:66:e5:64:1c:07:ce:16:10:f6:ab:38:be:ab:ae:36:87:ed: 8d:dd:72:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiIbYI3v3nmFpxuzDkFR0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2M2EzMDk0NDM5Y2FjMGY1NTU3MDEyODZjZDU0MzczYmNl NmNiNTAwHhcNMjUxMjA1MjIwMTEwWhcNMjUxMjA2MjIwMTEwWjAzMTEwLwYDVQQD Eyg4N2YzYjhlNDNmZjhmMTAzYjQzNzI2NjZiY2QzMjA5YjBhZDA2OTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW3TXgAkN4rl4B/6nqNyfey3iEi8 WvL2Ip5s5OumrKRIGYaY8uLeV7pjZ9/NNRJgF25Z6yj0ZTVG6+Vxlhm0vO3xelPr LS7Lzpqr+KZstdLUMraGh407H2P7YOfh8XFGQcSXO4fVKEBqSVYaBllTho8knOOR 0NVMhehLyJs65cMRmNaRb10KQBUEtcz2yFqe1grDYird2KAFjRt4CCv9qFyckp1r ABQG9+0Y0cA5BPKY9S1V0GiIb1a0xLD/kaWOiweH1wJaU5bfHFieMsaV9/b8l3Uo fLA0B4t5aM00xTHPHt7GJVJemtjCwh8u+un1teKWRphetunZgCq46AVnewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfzuOQ/+PEDtDcmZrzTIJsK0GlZMB8GA1UdIwQY MBaAFLY6MJRDnKwPVVcBKGzVQ3O85stQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYt OWRkZGQ2ODAyMDg4LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYtOWRkZGQ2ODAyMDg4 LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvD5mNON T4VKB+zXWfq9LxuXJgggg50Lqhu9f8TGQFEIOsJXriGcaSGWN75fNxOZmSGMRC63 nukKKWi9yjjw9Js69Yaq7V9Q47oIcFc4EqcDtehOv37bwBJsplBrfEPzBqX+4UhU aGf8ikEjY2pqfhYWPLR/nkWNiVdkB5eYsMQosPi2P4OgzRsAbPkWBhhaL69t4R30 gt0Xh5jFDLbQpdGmD/NjXDYqLMJr9kTvDLDS6qAVBCPQp3OAtr70b9GoP8X06JKR DYAus80EBydIw1Z1CslzLdiyRqm86MIkQlzAaxApAL5JQNyMjmblZBwHzhYQ9qs4 vquuNoftjd1y6w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:01:26 2025 by rpki-client