This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft File: TitWhe45Z_zPVK8VDpg_D4AlWpI.mft (raw, json) Hash identifier: scSeAqw2+tDmAt+Iwb+cGllMoBF8OCtFZjfSLyMIOIc= Subject key identifier: 78:D3:9A:67:ED:1D:14:BA:2E:53:34:89:E2:DD:FB:B5:A9:9B:F8:A1 Authority key identifier: 4E:2B:56:85:EE:39:67:FC:CF:54:AF:15:0E:98:3F:0F:80:25:5A:92 Certificate issuer: /CN=4e2b5685ee3967fccf54af150e983f0f80255a92 Certificate serial: 019B4815A7AB5076CDFC7BD08AA2B2F78794 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TitWhe45Z_zPVK8VDpg_D4AlWpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft Manifest number: 0B82 Signing time: Mon 22 Dec 2025 22:02:17 +0000 Manifest this update: Mon 22 Dec 2025 22:02:17 +0000 Manifest next update: Tue 23 Dec 2025 22:02:17 +0000 Files and hashes: 1: TitWhe45Z_zPVK8VDpg_D4AlWpI.crl (hash: Hj90jYeeHCm2AmWBhvgQ1/XG17SbMeomZ40jMWnSf6c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft rsync://rpki.ripe.net/repository/DEFAULT/TitWhe45Z_zPVK8VDpg_D4AlWpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:15:a7:ab:50:76:cd:fc:7b:d0:8a:a2:b2:f7:87:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2b5685ee3967fccf54af150e983f0f80255a92 Validity Not Before: Dec 22 22:02:17 2025 GMT Not After : Dec 23 22:02:17 2025 GMT Subject: CN=78d39a67ed1d14ba2e533489e2ddfbb5a99bf8a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:04:88:40:12:f1:1a:ed:17:4a:70:65:76:57: 05:fe:08:98:0c:61:e4:36:f9:e9:f6:63:f9:91:af: 3f:4b:21:da:22:ff:e4:84:f7:aa:0b:5f:8a:10:13: 47:f2:33:91:89:24:1d:66:85:b8:3f:d7:01:17:6e: 2a:8b:b9:24:db:cb:a1:f2:69:60:7f:f9:88:2b:c5: d5:7f:ca:1c:89:05:c4:ea:a3:6e:e0:8a:fa:c2:1d: 93:82:24:ef:ab:73:b9:3e:bd:4b:bd:ff:8e:7f:9b: f6:b9:f5:fa:fb:8d:9c:23:29:d0:5f:b5:9e:ad:2d: c0:d9:93:59:8e:5a:6f:95:0a:fd:b4:2d:7f:0d:df: 9b:bf:6a:7c:d3:27:6a:b9:13:0e:9d:b3:99:07:1c: 11:4f:0c:38:cf:67:6f:c5:78:86:52:cd:c4:10:58: 5a:a9:f7:f9:6c:19:2e:d8:6f:2a:58:20:5c:b6:2d: 00:40:b2:2d:4e:8d:66:80:a3:cd:17:7b:77:aa:05: 0f:c2:7c:6e:4c:2a:df:cb:d4:11:26:db:84:22:1e: ec:c5:c4:18:2b:69:3b:be:77:f0:32:a5:8b:bb:96: d3:79:1d:44:5c:6b:7a:1f:ac:b2:bf:6b:7b:d0:c8: d8:c8:73:b1:90:b9:ee:a1:ed:6c:61:c1:93:7c:23: 30:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D3:9A:67:ED:1D:14:BA:2E:53:34:89:E2:DD:FB:B5:A9:9B:F8:A1 X509v3 Authority Key Identifier: keyid:4E:2B:56:85:EE:39:67:FC:CF:54:AF:15:0E:98:3F:0F:80:25:5A:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitWhe45Z_zPVK8VDpg_D4AlWpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/92062e-fd7d-4204-b56e-6a0ce52c7abd/1/TitWhe45Z_zPVK8VDpg_D4AlWpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:a4:10:3c:22:87:80:81:a6:43:db:6b:71:24:e2:31:5b:cf: 9a:c4:7a:b6:6f:d2:2e:3a:31:80:91:f2:07:9b:8b:ba:43:e9: dc:75:a3:7c:1c:34:c9:84:b5:d3:c5:ac:e7:0a:9d:a3:a7:23: 71:ea:e1:ab:fb:7e:6c:3d:0e:a3:6b:af:c1:e3:5c:9f:37:83: 6c:8b:42:8e:12:c4:2a:a9:bd:e6:da:6a:25:33:08:7e:39:ce: de:6c:ad:6b:3b:b0:c5:9e:f8:bc:5e:fd:13:8b:85:aa:1a:e2: b7:69:2a:29:97:85:08:cc:8d:f7:c4:18:79:32:e3:17:61:c0: d1:84:49:f8:19:2e:95:e2:79:5c:33:7d:dc:b4:0a:c4:4d:56: b4:68:7d:56:46:8f:ca:77:8d:bf:95:ec:b8:fb:45:d1:70:a2: 0f:84:08:be:43:db:4d:24:98:f4:ec:f2:f7:1d:d0:70:e1:c5: 2e:a4:ed:89:ab:fc:62:fe:29:bd:0f:77:cf:e4:d5:00:d3:33: 5b:d3:7b:4e:a0:b2:40:ef:8d:5b:3b:b7:c2:cf:43:ad:d3:f6: c2:a5:12:a8:81:d6:f2:c4:d0:94:24:7a:cd:ca:d0:15:23:24: 76:6d:cc:dc:c0:19:09:1e:16:85:1e:e0:b7:42:81:8b:05:2d: 8b:5a:66:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIFaerUHbN/HvQiqKy94eUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMmI1Njg1ZWUzOTY3ZmNjZjU0YWYxNTBlOTgzZjBmODAy NTVhOTIwHhcNMjUxMjIyMjIwMjE3WhcNMjUxMjIzMjIwMjE3WjAzMTEwLwYDVQQD Eyg3OGQzOWE2N2VkMWQxNGJhMmU1MzM0ODllMmRkZmJiNWE5OWJmOGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wSIQBLxGu0XSnBldlcF/giYDGHk Nvnp9mP5ka8/SyHaIv/khPeqC1+KEBNH8jORiSQdZoW4P9cBF24qi7kk28uh8mlg f/mIK8XVf8ociQXE6qNu4Ir6wh2TgiTvq3O5Pr1Lvf+Of5v2ufX6+42cIynQX7We rS3A2ZNZjlpvlQr9tC1/Dd+bv2p80ydquRMOnbOZBxwRTww4z2dvxXiGUs3EEFha qff5bBku2G8qWCBcti0AQLItTo1mgKPNF3t3qgUPwnxuTCrfy9QRJtuEIh7sxcQY K2k7vnfwMqWLu5bTeR1EXGt6H6yyv2t70MjYyHOxkLnuoe1sYcGTfCMwEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjTmmftHRS6LlM0ieLd+7Wpm/ihMB8GA1UdIwQY MBaAFE4rVoXuOWf8z1SvFQ6YPw+AJVqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGl0V2hlNDVaX3pQVks4VkRwZ19ENEFsV3BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi85MjA2MmUtZmQ3ZC00MjA0LWI1NmUt NmEwY2U1MmM3YWJkLzEvVGl0V2hlNDVaX3pQVks4VkRwZ19ENEFsV3BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi85MjA2MmUtZmQ3ZC00MjA0LWI1NmUtNmEwY2U1MmM3YWJk LzEvVGl0V2hlNDVaX3pQVks4VkRwZ19ENEFsV3BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArqQQPCKH gIGmQ9trcSTiMVvPmsR6tm/SLjoxgJHyB5uLukPp3HWjfBw0yYS108Ws5wqdo6cj cerhq/t+bD0Oo2uvweNcnzeDbItCjhLEKqm95tpqJTMIfjnO3mytazuwxZ74vF79 E4uFqhrit2kqKZeFCMyN98QYeTLjF2HA0YRJ+BkuleJ5XDN93LQKxE1WtGh9VkaP yneNv5XsuPtF0XCiD4QIvkPbTSSY9Ozy9x3QcOHFLqTtiav8Yv4pvQ93z+TVANMz W9N7TqCyQO+NWzu3ws9DrdP2wqUSqIHW8sTQlCR6zcrQFSMkdm3M3MAZCR4WhR7g t0KBiwUti1pmGw== -----END CERTIFICATE-----Generated at Tue Dec 23 00:49:29 2025 by rpki-client