This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft File: ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft (raw, json) Hash identifier: 0hEykCeqB8uCEA99SAGlKqdM2sm0j+F4OiKfUOmURx4= Subject key identifier: A9:4F:CA:51:B7:B6:F0:BC:C5:BD:03:62:F2:1F:94:ED:39:44:42:58 Authority key identifier: B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78 Certificate issuer: /CN=b62dd60548b67cc41e67b6a616a12ec53bf42978 Certificate serial: 019B3EA350A8007B933DB2CD506C8DD34979 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 02:00:48 +0000 Manifest this update: Sun 21 Dec 2025 02:00:48 +0000 Manifest next update: Mon 22 Dec 2025 02:00:48 +0000 Files and hashes: 1: 1-qjOvMD_gOLy6H4ikM5iY4VGQ8.roa (hash: x56Lu5EMx6deCo6ci/ec7JVHm+rQMFgfSVpjOag6Bkc=) 2: ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl (hash: 7WIFOJxbby37tasdS3AxE20kCG/7StUU9Ndpj7zNnlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:50:a8:00:7b:93:3d:b2:cd:50:6c:8d:d3:49:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b62dd60548b67cc41e67b6a616a12ec53bf42978 Validity Not Before: Dec 21 02:00:48 2025 GMT Not After : Dec 22 02:00:48 2025 GMT Subject: CN=a94fca51b7b6f0bcc5bd0362f21f94ed39444258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f5:b7:35:b6:fe:93:88:2c:59:40:ec:02:d6: 54:e6:e7:ca:33:e5:3c:91:eb:34:a6:58:91:3d:60: 6c:5e:48:a9:86:eb:0b:b6:71:15:4c:04:2d:e5:a8: f7:d0:74:6a:d1:98:24:03:15:4d:8d:d0:55:15:67: 1d:02:0e:4d:19:5d:60:ac:f7:e5:cd:fd:55:af:46: ca:8e:a5:d0:29:af:18:ae:92:93:fc:b8:e0:a3:fe: 9c:41:e6:6b:c7:fe:22:cb:02:8b:bf:57:12:0e:ff: 90:9d:6e:cb:1a:80:67:af:b7:3d:8e:a6:a2:61:3d: bc:df:3e:92:78:a4:a2:f5:11:e4:30:2d:83:20:44: 2d:82:05:62:65:90:70:30:b9:ad:0b:b6:77:4a:04: 6e:16:40:63:ca:ee:9a:cd:3e:fa:a3:eb:73:ab:09: ab:a7:b7:58:5a:03:f8:7f:4b:c9:cc:b0:d8:a3:a2: 96:42:ad:ed:5f:21:fe:d8:35:88:0c:04:a1:49:90: 05:5b:10:b2:1d:44:3b:83:f2:f5:95:58:0f:84:0e: 60:1b:70:00:a0:90:a9:eb:84:80:2b:03:81:0d:ba: e5:c9:98:47:be:dd:ba:7e:c6:1f:41:25:ed:28:70: 46:07:0f:84:94:30:c1:c1:6b:f4:c6:b1:f4:ac:6c: bf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4F:CA:51:B7:B6:F0:BC:C5:BD:03:62:F2:1F:94:ED:39:44:42:58 X509v3 Authority Key Identifier: keyid:B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:19:0c:4b:5b:06:50:78:07:71:56:d1:c9:b9:75:97:89:2a: 11:45:f8:43:fc:88:9d:8c:2c:e7:27:85:3b:ed:6a:fc:ad:3b: 5e:bf:da:95:52:e1:02:d5:b5:f8:c1:e8:d5:81:c6:da:cc:b2: fc:ea:45:d6:86:76:f6:b8:94:c5:ed:ef:76:c1:7b:4b:73:37: d1:03:cc:a3:cd:ca:07:fe:64:0a:32:47:f5:d6:8c:5f:e9:85: 63:16:bd:7a:65:38:0f:18:b5:4b:dd:9e:4e:49:0d:08:34:16: ca:3d:e9:a3:8b:7f:cc:61:5d:66:e8:13:53:45:cc:ec:0e:d8: 50:db:72:ea:1a:d4:ec:4b:3a:86:6b:85:85:b3:74:84:52:f2: a3:18:0f:36:65:3a:1c:e7:b8:3f:07:39:1e:d1:7a:05:83:e7: 34:89:18:97:a7:0c:ec:13:cc:1b:d3:d3:02:c8:3b:a5:1e:7b: eb:d8:4c:8b:4d:0c:0d:aa:55:c3:d6:c2:bc:d8:86:11:10:6f: 2e:1a:00:fc:35:e3:59:3f:4e:44:a9:d4:47:85:a0:a4:e6:f7: 1e:bf:10:8b:b1:cf:96:e4:a4:fd:7d:3e:de:fd:d0:90:37:89: dc:9d:6b:b8:0e:67:2b:8d:05:7d:3d:b0:4b:0a:f9:00:66:1a: 06:b8:97:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o1CoAHuTPbLNUGyN00l5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MmRkNjA1NDhiNjdjYzQxZTY3YjZhNjE2YTEyZWM1M2Jm NDI5NzgwHhcNMjUxMjIxMDIwMDQ4WhcNMjUxMjIyMDIwMDQ4WjAzMTEwLwYDVQQD EyhhOTRmY2E1MWI3YjZmMGJjYzViZDAzNjJmMjFmOTRlZDM5NDQ0MjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PW3Nbb+k4gsWUDsAtZU5ufKM+U8 kes0pliRPWBsXkiphusLtnEVTAQt5aj30HRq0ZgkAxVNjdBVFWcdAg5NGV1grPfl zf1Vr0bKjqXQKa8YrpKT/Ljgo/6cQeZrx/4iywKLv1cSDv+QnW7LGoBnr7c9jqai YT283z6SeKSi9RHkMC2DIEQtggViZZBwMLmtC7Z3SgRuFkBjyu6azT76o+tzqwmr p7dYWgP4f0vJzLDYo6KWQq3tXyH+2DWIDAShSZAFWxCyHUQ7g/L1lVgPhA5gG3AA oJCp64SAKwOBDbrlyZhHvt26fsYfQSXtKHBGBw+ElDDBwWv0xrH0rGy/5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlPylG3tvC8xb0DYvIflO05REJYMB8GA1UdIwQY MBaAFLYt1gVItnzEHme2phahLsU79Cl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGkzV0JVaTJmTVFlWjdhbUZxRXV4VHYwS1hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80OTBlMTItMWE0NS00YjAwLWE0NmMt YWYxZTZkMDc3ZTBjLzEvdGkzV0JVaTJmTVFlWjdhbUZxRXV4VHYwS1hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC80OTBlMTItMWE0NS00YjAwLWE0NmMtYWYxZTZkMDc3ZTBj LzEvdGkzV0JVaTJmTVFlWjdhbUZxRXV4VHYwS1hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxkMS1sG UHgHcVbRybl1l4kqEUX4Q/yInYws5yeFO+1q/K07Xr/alVLhAtW1+MHo1YHG2syy /OpF1oZ29riUxe3vdsF7S3M30QPMo83KB/5kCjJH9daMX+mFYxa9emU4Dxi1S92e TkkNCDQWyj3po4t/zGFdZugTU0XM7A7YUNty6hrU7Es6hmuFhbN0hFLyoxgPNmU6 HOe4Pwc5HtF6BYPnNIkYl6cM7BPMG9PTAsg7pR5769hMi00MDapVw9bCvNiGERBv LhoA/DXjWT9ORKnUR4WgpOb3Hr8Qi7HPluSk/X0+3v3QkDeJ3J1ruA5nK40FfT2w Swr5AGYaBriXsg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:43:52 2025 by rpki-client