This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft File: ti_M2im-Zm3u-Oxi1rwebNBnw18.mft (raw, json) Hash identifier: M1lbVBc17YC13S0ZP49HxtES6+8SNq/V5PlB/ivRhIc= Subject key identifier: B9:AF:D6:6A:82:87:2B:F4:37:61:4B:A8:B0:B1:00:2E:AF:9A:22:05 Authority key identifier: B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F Certificate issuer: /CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f Certificate serial: 019B49271FD84FDF0B403E30C6B93D314DAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft Manifest number: 11B0 Signing time: Tue 23 Dec 2025 03:00:59 +0000 Manifest this update: Tue 23 Dec 2025 03:00:59 +0000 Manifest next update: Wed 24 Dec 2025 03:00:59 +0000 Files and hashes: 1: Fwkn-erxqVJGCICr5bQF1GUB_bA.roa (hash: ePgJDihP1/Ez/90nsTWFdItvP2OyGIqDLFpAtXpE1Pg=) 2: ti_M2im-Zm3u-Oxi1rwebNBnw18.crl (hash: BQy7jB4Ay+96dmjUTfHyfozADcKBpzn1bJojCG1nfO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.crl rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 03:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:27:1f:d8:4f:df:0b:40:3e:30:c6:b9:3d:31:4d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f Validity Not Before: Dec 23 03:00:59 2025 GMT Not After : Dec 24 03:00:59 2025 GMT Subject: CN=b9afd66a82872bf437614ba8b0b1002eaf9a2205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:58:b1:8b:d9:09:22:ad:3a:76:ea:f4:c0:82: 6c:da:7d:b4:bf:cd:39:6a:48:87:13:2d:6d:c1:fc: ad:7b:a4:13:e9:e2:9b:10:d8:33:2a:c9:18:47:69: 88:83:da:73:74:e4:6d:9b:3d:e3:cd:35:8d:75:ce: f9:5c:19:b3:17:79:80:af:5d:ac:3c:d3:11:a4:ae: ab:fb:90:ee:06:a3:a1:0e:d7:6c:be:a9:86:57:b1: 3c:50:40:91:a0:b8:50:07:17:33:19:1d:27:cf:bb: 0c:0c:a0:d1:ff:dc:4c:29:98:06:9d:a1:7c:0d:ec: df:60:98:db:de:76:70:32:c7:36:d4:69:2a:b7:0c: 5d:27:f9:54:5a:cd:45:38:07:cd:34:2e:e5:4b:7f: d2:d5:9f:8d:3f:a7:00:9d:f7:14:60:1c:c5:c5:19: 74:d2:cc:50:87:6d:fc:36:aa:1c:a7:25:1c:da:6e: 70:4d:67:45:ed:0b:db:7b:ea:98:e0:2d:c8:dc:cf: 0c:79:56:fe:d9:3f:a3:ab:9f:1f:0b:4b:73:d5:06: 7f:63:ab:5b:ed:e9:63:96:83:2b:1c:eb:70:0f:b3: 85:4b:2c:b8:43:3b:24:92:13:40:b7:7f:a7:f5:9b: b0:09:d4:40:e6:13:de:96:bb:af:84:63:f6:48:1b: fb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:AF:D6:6A:82:87:2B:F4:37:61:4B:A8:B0:B1:00:2E:AF:9A:22:05 X509v3 Authority Key Identifier: keyid:B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a9:87:59:a7:bb:c1:fa:58:a5:65:9e:54:26:bf:d8:f6:de: a3:71:37:bd:8d:71:92:9c:8a:c6:c2:fe:c6:be:be:26:9c:18: 94:fd:9b:03:d1:be:98:55:08:35:68:2b:10:bf:30:c7:e4:62: 82:59:eb:83:e2:dd:16:e3:05:78:40:65:87:9c:78:d0:b2:eb: 5e:3d:af:20:24:41:0b:5e:4c:ce:88:f0:ea:c6:6d:21:45:16: 6f:1c:f5:49:8d:76:15:ff:33:45:f9:fb:e3:a4:50:52:c5:ab: 40:a1:be:7c:8e:29:21:52:09:e7:18:77:87:30:3b:77:b2:ad: 63:33:c7:c8:9b:46:dc:01:5f:5a:04:72:91:79:9e:40:59:15: b9:5e:83:92:62:50:b1:5e:13:76:a7:23:ce:67:15:b7:21:c9: bb:0b:c1:d6:1f:f6:ff:94:27:9a:b3:f6:80:1d:90:e6:ee:33: 37:2f:ba:67:40:83:ab:d4:c3:c1:fe:90:17:1b:3a:83:d5:f3: 3c:bc:b5:ec:fc:4a:38:74:7b:7d:fc:97:3a:0d:f9:83:e9:85: ba:12:5b:3e:a1:ec:c7:bb:07:0f:54:f5:c6:1b:8b:74:b9:7c: 94:24:78:8a:49:60:c3:60:5d:60:16:58:53:c0:57:42:13:ee: c5:d1:c8:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJx/YT98LQD4wxrk9MU2sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MmZjY2RhMjliZTY2NmRlZWY4ZWM2MmQ2YmMxZTZjZDA2 N2MzNWYwHhcNMjUxMjIzMDMwMDU5WhcNMjUxMjI0MDMwMDU5WjAzMTEwLwYDVQQD EyhiOWFmZDY2YTgyODcyYmY0Mzc2MTRiYThiMGIxMDAyZWFmOWEyMjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41ixi9kJIq06dur0wIJs2n20v805 akiHEy1twfyte6QT6eKbENgzKskYR2mIg9pzdORtmz3jzTWNdc75XBmzF3mAr12s PNMRpK6r+5DuBqOhDtdsvqmGV7E8UECRoLhQBxczGR0nz7sMDKDR/9xMKZgGnaF8 DezfYJjb3nZwMsc21GkqtwxdJ/lUWs1FOAfNNC7lS3/S1Z+NP6cAnfcUYBzFxRl0 0sxQh238NqocpyUc2m5wTWdF7Qvbe+qY4C3I3M8MeVb+2T+jq58fC0tz1QZ/Y6tb 7eljloMrHOtwD7OFSyy4QzskkhNAt3+n9ZuwCdRA5hPelruvhGP2SBv7zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmv1mqChyv0N2FLqLCxAC6vmiIFMB8GA1UdIwQY MBaAFLYvzNopvmZt7vjsYta8HmzQZ8NfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGlfTTJpbS1abTN1LU94aTFyd2ViTkJudzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85ZmY2NDUtZTBmMS00YjE4LTk4MGYt ZWRhNTliYzljYTJjLzEvdGlfTTJpbS1abTN1LU94aTFyd2ViTkJudzE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85ZmY2NDUtZTBmMS00YjE4LTk4MGYtZWRhNTliYzljYTJj LzEvdGlfTTJpbS1abTN1LU94aTFyd2ViTkJudzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXamHWae7 wfpYpWWeVCa/2Pbeo3E3vY1xkpyKxsL+xr6+JpwYlP2bA9G+mFUINWgrEL8wx+Ri glnrg+LdFuMFeEBlh5x40LLrXj2vICRBC15Mzojw6sZtIUUWbxz1SY12Ff8zRfn7 46RQUsWrQKG+fI4pIVIJ5xh3hzA7d7KtYzPHyJtG3AFfWgRykXmeQFkVuV6DkmJQ sV4TdqcjzmcVtyHJuwvB1h/2/5QnmrP2gB2Q5u4zNy+6Z0CDq9TDwf6QFxs6g9Xz PLy17PxKOHR7ffyXOg35g+mFuhJbPqHsx7sHD1T1xhuLdLl8lCR4iklgw2BdYBZY U8BXQhPuxdHIJQ== -----END CERTIFICATE-----Generated at Tue Dec 23 12:38:55 2025 by rpki-client