This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft File: TiujrIcTmtEWAnd-TTXYFYKhkb8.mft (raw, json) Hash identifier: IaoBsuchaMvuQosye7jWNw1KD/lROvAe/FFAgYIiVKM= Subject key identifier: A5:55:63:F4:C2:C8:AC:3A:55:7E:40:07:87:8F:5A:8B:B8:AD:D7:DD Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf Certificate serial: 019B3E6CCC8C808886791DF1286D16E833AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft Manifest number: 0582 Signing time: Sun 21 Dec 2025 01:01:16 +0000 Manifest this update: Sun 21 Dec 2025 01:01:16 +0000 Manifest next update: Mon 22 Dec 2025 01:01:16 +0000 Files and hashes: 1: TiujrIcTmtEWAnd-TTXYFYKhkb8.crl (hash: v1jqnVMgmEnk38godBTu+js+rXjK2x/hQgruJes8bQY=) 2: koYxRoNx2Z_dDpVJFl-Snjkmcp8.roa (hash: 9wg6bBr0wjB+1nZSYhxJKyc0xntk+ar+Q7kYQKSKRUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:cc:8c:80:88:86:79:1d:f1:28:6d:16:e8:33:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf Validity Not Before: Dec 21 01:01:16 2025 GMT Not After : Dec 22 01:01:16 2025 GMT Subject: CN=a55563f4c2c8ac3a557e4007878f5a8bb8add7dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e4:b8:97:bc:df:ac:c0:47:6d:c1:cb:b5:e8: 8e:af:dd:2c:f4:f4:6c:ca:fe:75:d5:83:c4:e5:97: 06:74:fa:94:4d:82:f7:73:76:c9:58:cc:d9:e8:1b: 27:7e:13:57:79:33:d2:b0:62:e9:e6:02:2a:16:ef: 86:df:d9:55:51:78:c2:02:75:6d:41:d6:31:78:5c: b7:b8:d0:c3:bb:6f:e6:01:46:94:9d:a0:ce:f8:73: 81:35:56:74:f9:68:0d:60:19:68:84:0f:f3:62:93: 92:b0:82:41:d5:6b:0e:1b:67:f2:69:55:fb:3e:23: 1a:91:7e:b6:d3:1c:d8:22:62:bf:bf:55:1f:d8:01: 17:ed:b3:bb:a6:cd:9d:06:8f:7c:50:73:48:17:a6: 32:81:2d:38:3e:e7:46:45:8d:0c:0f:25:fb:86:2e: 6b:d4:39:7d:66:60:9a:3f:c8:23:b9:17:df:6c:2e: b9:6c:9d:ff:14:00:85:92:b2:ed:ae:f2:ec:8b:12: 92:4e:a8:a3:76:2c:a8:9e:a5:97:92:f0:b9:20:e3: d7:46:c8:5c:95:10:61:7d:2d:9e:be:33:6f:fe:ed: 42:f6:b0:f9:c0:98:5e:57:4f:e4:62:b9:a0:7c:ba: 2b:2e:1e:1d:ec:d1:48:28:30:3a:21:88:5f:f6:5d: 38:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:55:63:F4:C2:C8:AC:3A:55:7E:40:07:87:8F:5A:8B:B8:AD:D7:DD X509v3 Authority Key Identifier: keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:24:07:00:60:0d:d0:5d:b1:f1:df:d5:7f:86:5a:67:bf:9a: d9:97:a4:c6:71:bd:70:09:30:cc:c4:55:f5:e1:e0:74:b6:f3: 8a:d3:e1:a2:0b:ea:ee:e2:fb:a4:40:11:63:91:35:f3:19:ba: e0:c1:f6:3d:66:c4:66:d4:d5:58:e0:b2:1d:04:ce:42:98:78: 64:d1:62:07:90:1a:0f:10:32:fb:d5:60:37:1b:2e:b4:a2:0c: f0:a2:4c:8c:41:33:e4:16:61:c7:98:3b:b2:8d:c6:90:22:29: d8:2f:39:78:21:9b:59:fd:fa:ae:fb:56:fc:a2:74:23:61:18: 3a:9c:6e:de:3f:5e:c9:d6:19:47:e2:1d:59:24:be:a2:14:51: 26:6d:25:39:75:2f:6c:26:22:bf:f6:82:22:77:f2:8a:ff:ae: 1e:4c:c0:a7:98:02:28:39:ed:3e:e3:e8:20:b4:9a:6d:4b:a9: 10:65:ac:b3:d8:ca:32:7f:76:fb:ad:a5:37:39:f4:7c:7b:87: d3:07:ae:ba:fb:56:b5:47:80:a3:35:39:8a:68:8c:93:19:2a: d7:f8:4b:20:3c:7a:3d:56:21:52:22:32:01:ff:1a:e3:d5:d4: 4c:1c:18:16:bc:09:58:47:be:97:1c:36:20:16:17:84:e2:9a: e4:18:7d:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bMyMgIiGeR3xKG0W6DOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMmJhM2FjODcxMzlhZDExNjAyNzc3ZTRkMzVkODE1ODJh MTkxYmYwHhcNMjUxMjIxMDEwMTE2WhcNMjUxMjIyMDEwMTE2WjAzMTEwLwYDVQQD EyhhNTU1NjNmNGMyYzhhYzNhNTU3ZTQwMDc4NzhmNWE4YmI4YWRkN2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveS4l7zfrMBHbcHLteiOr90s9PRs yv511YPE5ZcGdPqUTYL3c3bJWMzZ6BsnfhNXeTPSsGLp5gIqFu+G39lVUXjCAnVt QdYxeFy3uNDDu2/mAUaUnaDO+HOBNVZ0+WgNYBlohA/zYpOSsIJB1WsOG2fyaVX7 PiMakX620xzYImK/v1Uf2AEX7bO7ps2dBo98UHNIF6YygS04PudGRY0MDyX7hi5r 1Dl9ZmCaP8gjuRffbC65bJ3/FACFkrLtrvLsixKSTqijdiyonqWXkvC5IOPXRshc lRBhfS2evjNv/u1C9rD5wJheV0/kYrmgfLorLh4d7NFIKDA6IYhf9l04tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVVY/TCyKw6VX5AB4ePWou4rdfdMB8GA1UdIwQY MBaAFE4ro6yHE5rRFgJ3fk012BWCoZG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lZDUwYjYtMmU1NS00Y2YyLWIzODAt ZGFlOTIyZTE2YmU4LzEvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9lZDUwYjYtMmU1NS00Y2YyLWIzODAtZGFlOTIyZTE2YmU4 LzEvVGl1anJJY1RtdEVXQW5kLVRUWFlGWUtoa2I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSQHAGAN 0F2x8d/Vf4ZaZ7+a2ZekxnG9cAkwzMRV9eHgdLbzitPhogvq7uL7pEARY5E18xm6 4MH2PWbEZtTVWOCyHQTOQph4ZNFiB5AaDxAy+9VgNxsutKIM8KJMjEEz5BZhx5g7 so3GkCIp2C85eCGbWf36rvtW/KJ0I2EYOpxu3j9eydYZR+IdWSS+ohRRJm0lOXUv bCYiv/aCInfyiv+uHkzAp5gCKDntPuPoILSabUupEGWss9jKMn92+62lNzn0fHuH 0weuuvtWtUeAozU5imiMkxkq1/hLIDx6PVYhUiIyAf8a49XUTBwYFrwJWEe+lxw2 IBYXhOKa5Bh9aw== -----END CERTIFICATE-----Generated at Sun Dec 21 05:50:40 2025 by rpki-client