This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft File: Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json) Hash identifier: 8M1PRlnbaBV7Y0dFg5fj3E1v/n2m3J4Q7i3wfWpx54k= Subject key identifier: 2E:32:D9:58:71:F1:A9:BD:A7:11:AD:E8:BC:97:5F:7D:94:D8:56:12 Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF Certificate issuer: /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf Certificate serial: 019B4EBB5FF4D73202CEF7D848B6B6075534 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft Manifest number: 0644 Signing time: Wed 24 Dec 2025 05:01:01 +0000 Manifest this update: Wed 24 Dec 2025 05:01:01 +0000 Manifest next update: Thu 25 Dec 2025 05:01:01 +0000 Files and hashes: 1: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: mNFCwTlwR4xPmEBeOO+sI7jiejUdG/1V8yEaqasgue4=) 2: Zx7o0NJ7lPcPWusoEu-hir0u3sI.roa (hash: RaHzV4CwJ05D0LodvMcl63WAfLK7uU2RzT47rVSSlwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:bb:5f:f4:d7:32:02:ce:f7:d8:48:b6:b6:07:55:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf Validity Not Before: Dec 24 05:01:01 2025 GMT Not After : Dec 25 05:01:01 2025 GMT Subject: CN=2e32d95871f1a9bda711ade8bc975f7d94d85612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:e2:de:46:45:37:57:b2:85:6c:28:e0:ad: bf:22:44:38:09:86:a0:c7:ab:76:79:23:f0:b2:f1: 0b:6d:77:8a:1c:e0:89:06:40:80:5c:3c:60:1d:00: cb:fa:dc:9d:36:54:c0:cd:cc:7c:e1:47:2d:82:a7: 7a:b3:ef:9e:b5:c6:49:8c:1a:22:9f:22:44:ff:80: bb:18:87:19:ac:70:14:25:68:c5:83:5c:b4:72:20: 53:a1:41:b3:4d:90:98:76:a8:3d:d5:b7:f2:45:e4: ee:5d:9b:bb:7a:87:b9:9c:52:f8:0f:57:33:03:28: 6b:a5:93:d1:80:cd:68:96:76:9c:a8:a5:f6:e0:67: 2b:fc:04:e3:0f:72:d3:ac:e0:44:50:e5:ee:f8:4e: 33:40:8b:d3:01:a7:35:3a:61:f8:36:fe:62:9d:0b: 69:15:c7:83:dd:c8:e7:d8:86:37:24:45:f1:52:7c: ec:87:5d:1f:80:49:b1:eb:8d:7d:52:e8:05:be:4a: 65:e8:b9:60:cf:8c:ad:de:92:43:e2:27:00:02:91: 9b:49:3b:15:49:93:95:2f:6d:7b:3c:71:dd:3f:6b: 69:91:ce:92:b1:d4:aa:30:6a:f1:2e:50:c1:04:29: df:92:02:03:74:54:51:bf:3e:6d:20:f6:98:19:c4: 51:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:32:D9:58:71:F1:A9:BD:A7:11:AD:E8:BC:97:5F:7D:94:D8:56:12 X509v3 Authority Key Identifier: keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:60:23:22:3c:12:47:8d:10:67:52:a8:27:ca:3f:7c:bf:b6: b2:22:7b:6d:89:1e:55:af:29:17:04:99:ee:41:97:77:34:60: b9:c9:89:9d:c0:41:f1:ec:19:50:23:e8:4b:34:39:eb:b2:4e: 56:b4:0a:03:5a:42:d4:83:11:dc:90:61:5d:d1:a4:23:d5:cd: 4e:4a:70:d5:2e:21:62:f0:bb:54:6b:d6:1b:92:aa:dd:ee:cf: 4c:d3:a0:82:ee:be:ea:71:60:93:5f:8f:91:dd:c7:17:3b:c3: c3:ba:c0:d8:49:d9:9a:66:df:a9:4f:93:dc:77:c4:eb:fb:9e: 44:13:92:d3:1a:49:0b:76:04:80:32:de:f1:ae:ea:bd:db:41: 18:fb:49:26:01:74:9c:a0:df:bd:93:75:f6:94:d9:8e:3e:57: 1d:6f:ff:d6:3d:f7:85:b8:f5:e0:f4:3c:0e:aa:cd:1d:6e:67: f1:44:d6:67:a4:bb:a3:a2:29:6b:b5:f1:17:78:dd:6e:e2:9d: 41:64:54:14:e4:a1:4c:ea:9a:79:99:ef:3c:28:e7:97:30:8d: b4:c5:4d:8b:b9:25:c2:3a:5b:b7:b3:67:82:5c:75:6c:94:05: 31:f2:f3:47:bb:f7:0d:df:c1:4b:d6:fc:ef:e2:af:8c:aa:26: 52:fc:dc:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOu1/01zICzvfYSLa2B1U0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMmQyMGYyZGU0ZDU3ZTFiYzY0NWNiNjI4N2ZmODEwZDBm NWE0YmYwHhcNMjUxMjI0MDUwMTAxWhcNMjUxMjI1MDUwMTAxWjAzMTEwLwYDVQQD EygyZTMyZDk1ODcxZjFhOWJkYTcxMWFkZThiYzk3NWY3ZDk0ZDg1NjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX/i3kZFN1eyhWwo4K2/IkQ4CYag x6t2eSPwsvELbXeKHOCJBkCAXDxgHQDL+tydNlTAzcx84Uctgqd6s++etcZJjBoi nyJE/4C7GIcZrHAUJWjFg1y0ciBToUGzTZCYdqg91bfyReTuXZu7eoe5nFL4D1cz AyhrpZPRgM1olnacqKX24Gcr/ATjD3LTrOBEUOXu+E4zQIvTAac1OmH4Nv5inQtp FceD3cjn2IY3JEXxUnzsh10fgEmx6419UugFvkpl6Llgz4yt3pJD4icAApGbSTsV SZOVL217PHHdP2tpkc6SsdSqMGrxLlDBBCnfkgIDdFRRvz5tIPaYGcRR/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4y2Vhx8am9pxGt6LyXX32U2FYSMB8GA1UdIwQY MBaAFE4tIPLeTVfhvGRctih/+BDQ9aS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGkwZzh0NU5WLUc4WkZ5MktIXzRFTkQxcEw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jZTg3NmMtMmMwMi00Nzc1LTgwOTUt NzhkNGE2NGQyMmQ5LzEvVGkwZzh0NU5WLUc4WkZ5MktIXzRFTkQxcEw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9jZTg3NmMtMmMwMi00Nzc1LTgwOTUtNzhkNGE2NGQyMmQ5 LzEvVGkwZzh0NU5WLUc4WkZ5MktIXzRFTkQxcEw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWAjIjwS R40QZ1KoJ8o/fL+2siJ7bYkeVa8pFwSZ7kGXdzRgucmJncBB8ewZUCPoSzQ567JO VrQKA1pC1IMR3JBhXdGkI9XNTkpw1S4hYvC7VGvWG5Kq3e7PTNOggu6+6nFgk1+P kd3HFzvDw7rA2EnZmmbfqU+T3HfE6/ueRBOS0xpJC3YEgDLe8a7qvdtBGPtJJgF0 nKDfvZN19pTZjj5XHW//1j33hbj14PQ8DqrNHW5n8UTWZ6S7o6Ipa7XxF3jdbuKd QWRUFOShTOqaeZnvPCjnlzCNtMVNi7klwjpbt7Nnglx1bJQFMfLzR7v3Dd/BS9b8 7+KvjKomUvzcjw== -----END CERTIFICATE-----Generated at Wed Dec 24 13:27:29 2025 by rpki-client