This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft File: Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json) Hash identifier: 8sHFoscojbZcNMpP7VqzoV3AmG5qhBQEgMB3Scjwr7I= Subject key identifier: F1:4A:D5:6C:21:8C:BB:AB:3C:47:29:34:B9:51:19:48:C8:1B:84:C5 Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF Certificate issuer: /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf Certificate serial: 019B45138FF1109A3F5C2EAFFBB11F7F9F25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft Manifest number: 063F Signing time: Mon 22 Dec 2025 08:01:08 +0000 Manifest this update: Mon 22 Dec 2025 08:01:08 +0000 Manifest next update: Tue 23 Dec 2025 08:01:08 +0000 Files and hashes: 1: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: fSikMZ8WUb9pMaR+4dyS9h2QeORsma42HB5guq/lqgs=) 2: Zx7o0NJ7lPcPWusoEu-hir0u3sI.roa (hash: RaHzV4CwJ05D0LodvMcl63WAfLK7uU2RzT47rVSSlwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:13:8f:f1:10:9a:3f:5c:2e:af:fb:b1:1f:7f:9f:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf Validity Not Before: Dec 22 08:01:08 2025 GMT Not After : Dec 23 08:01:08 2025 GMT Subject: CN=f14ad56c218cbbab3c472934b9511948c81b84c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:46:7b:47:6c:06:f5:5d:70:9b:5f:14:5f:b8: 8e:9a:d2:a4:b9:ee:36:77:25:29:68:60:26:ce:ec: cc:9a:e5:92:03:8e:3a:47:14:4d:36:a4:62:52:a0: e4:30:14:02:7a:cd:63:f7:d0:fa:a6:c7:f1:76:6b: eb:f6:44:a8:02:6d:ee:60:ea:18:38:ec:20:42:9a: a8:30:52:dd:2b:68:b9:e0:28:2a:39:25:95:dc:da: 54:05:a1:3b:1b:03:0e:6e:7e:24:4c:9c:80:ff:42: 26:68:a6:54:62:53:00:62:1d:09:41:83:2c:7d:0c: ea:7b:d7:dc:be:c3:01:b9:3b:3a:e9:48:d0:d9:dc: e4:c2:5b:b1:49:b1:1d:64:db:66:a2:28:0d:86:6f: fd:01:b8:f6:1b:b3:8c:81:42:ca:87:c2:d7:2c:5e: f7:19:62:82:7c:4d:44:c7:9d:f0:2d:ec:7d:ef:73: ce:69:14:f0:94:46:bc:a4:9a:11:e7:b4:37:a4:fa: c7:3d:30:1a:c5:b4:90:ec:4c:fa:30:40:9d:f6:53: 01:fb:40:29:94:25:d7:17:92:9e:de:f2:1e:7e:33: 68:a2:d6:a4:49:c7:e9:35:e2:63:5b:c4:dd:b1:20: 66:69:9b:3b:4b:74:e0:67:ba:75:df:84:ce:82:4e: f0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4A:D5:6C:21:8C:BB:AB:3C:47:29:34:B9:51:19:48:C8:1B:84:C5 X509v3 Authority Key Identifier: keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:da:78:93:8b:54:cc:db:21:ec:38:da:16:53:01:04:c7:6b: 21:9f:e1:20:02:a6:e7:cf:cd:2f:d3:9f:7c:d6:08:7b:58:d1: 03:d4:a0:99:70:75:1a:b8:85:1c:57:a1:f4:f9:d6:5e:6d:d7: 61:ec:fb:92:44:71:bf:33:3a:29:cf:4a:74:e8:3a:68:85:7a: 05:f5:a6:62:8c:ad:1d:64:2b:1a:a0:2a:31:5a:9e:df:61:70: 94:e2:01:d7:b8:a3:2e:10:b3:94:9b:c6:e6:d1:dc:f2:c2:cc: 52:8f:bb:ac:94:03:4c:ff:9f:fd:a9:4c:a0:c6:3d:f8:d6:59: 56:a9:de:b6:de:d8:e5:7f:cf:65:ac:63:86:d8:b4:0f:ff:81: 82:94:74:bc:f4:d9:f8:f6:86:e3:30:ff:e7:d4:86:3d:69:b9: fe:c9:28:d7:bf:0d:00:53:8d:4c:80:6f:f8:7c:86:fb:8d:f7: 0c:f6:d7:a5:3e:fd:00:e0:53:6e:80:59:b6:a2:83:df:fc:a7: e1:b9:27:4c:87:4d:b6:02:32:90:f8:2a:d9:54:80:f8:57:85: d9:48:cc:e9:99:33:db:e4:46:5d:6e:dc:b8:3f:df:8b:74:9c: 6a:3c:3f:8d:31:c8:8b:be:af:fd:73:8b:b8:bf:a8:c8:d8:1a: 49:27:7e:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFE4/xEJo/XC6v+7Eff58lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMmQyMGYyZGU0ZDU3ZTFiYzY0NWNiNjI4N2ZmODEwZDBm NWE0YmYwHhcNMjUxMjIyMDgwMTA4WhcNMjUxMjIzMDgwMTA4WjAzMTEwLwYDVQQD EyhmMTRhZDU2YzIxOGNiYmFiM2M0NzI5MzRiOTUxMTk0OGM4MWI4NGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUZ7R2wG9V1wm18UX7iOmtKkue42 dyUpaGAmzuzMmuWSA446RxRNNqRiUqDkMBQCes1j99D6psfxdmvr9kSoAm3uYOoY OOwgQpqoMFLdK2i54CgqOSWV3NpUBaE7GwMObn4kTJyA/0ImaKZUYlMAYh0JQYMs fQzqe9fcvsMBuTs66UjQ2dzkwluxSbEdZNtmoigNhm/9Abj2G7OMgULKh8LXLF73 GWKCfE1Ex53wLex973POaRTwlEa8pJoR57Q3pPrHPTAaxbSQ7Ez6MECd9lMB+0Ap lCXXF5Ke3vIefjNootakScfpNeJjW8TdsSBmaZs7S3TgZ7p134TOgk7wrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFK1WwhjLurPEcpNLlRGUjIG4TFMB8GA1UdIwQY MBaAFE4tIPLeTVfhvGRctih/+BDQ9aS/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGkwZzh0NU5WLUc4WkZ5MktIXzRFTkQxcEw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9jZTg3NmMtMmMwMi00Nzc1LTgwOTUt NzhkNGE2NGQyMmQ5LzEvVGkwZzh0NU5WLUc4WkZ5MktIXzRFTkQxcEw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9jZTg3NmMtMmMwMi00Nzc1LTgwOTUtNzhkNGE2NGQyMmQ5 LzEvVGkwZzh0NU5WLUc4WkZ5MktIXzRFTkQxcEw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNp4k4tU zNsh7DjaFlMBBMdrIZ/hIAKm58/NL9OffNYIe1jRA9SgmXB1GriFHFeh9PnWXm3X Yez7kkRxvzM6Kc9KdOg6aIV6BfWmYoytHWQrGqAqMVqe32FwlOIB17ijLhCzlJvG 5tHc8sLMUo+7rJQDTP+f/alMoMY9+NZZVqnett7Y5X/PZaxjhti0D/+BgpR0vPTZ +PaG4zD/59SGPWm5/sko178NAFONTIBv+HyG+433DPbXpT79AOBTboBZtqKD3/yn 4bknTIdNtgIykPgq2VSA+FeF2UjM6Zkz2+RGXW7cuD/fi3Scajw/jTHIi76v/XOL uL+oyNgaSSd+Ew== -----END CERTIFICATE-----Generated at Mon Dec 22 09:43:22 2025 by rpki-client