This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft File: ti1M7HgzBZI-NJftiE8cRFtOePs.mft (raw, json) Hash identifier: Qv9HBgorvVYQxERcgMe5RND6zKYQ6H9fWI3Dh8vy/as= Subject key identifier: A3:60:C5:50:66:7A:36:DB:F6:8E:84:D0:79:68:C6:74:04:06:16:6C Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb Certificate serial: 019B3AFD4E6980F1EDFD153F317573F6E604 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft Manifest number: 0827 Signing time: Sat 20 Dec 2025 09:00:37 +0000 Manifest this update: Sat 20 Dec 2025 09:00:37 +0000 Manifest next update: Sun 21 Dec 2025 09:00:37 +0000 Files and hashes: 1: 1ZLLlpQFZQkTqIBAHCc5d1VfoKs.roa (hash: y420UM0xhYvhHVANW5cNvzv2FZY2TvVXtMQ3bLwlcAQ=) 2: Lu657SoGRO5i41akpdqVykwmDPo.roa (hash: L0TXwFUTYgd55jn30MVoW0Y/jyiw8Ro0oBxR271bBjw=) 3: mWU4uI3AED3kVRIGqsNYpuYsgY4.roa (hash: Fq84oAvE6fP7h+/uIBzyy7ivRhelDe2jm1K3Ltmpeog=) 4: ormFqBbSNZ9STHM9altDZ_d23vQ.roa (hash: J6zKFE4hCTyzQ+z5ZObdUSvjFEcPbgT7zIhL9WAYj1Y=) 5: ti1M7HgzBZI-NJftiE8cRFtOePs.crl (hash: w0nlO8z6u32K3UL9/VFmHEoPtnWiNm2g41HcbnQwSME=) 6: uvReHNZu0Zx8p75NQaqJP-qKUVY.roa (hash: KwvRsYUs0tG71ha16eVgbI+g8wMn509oBtGucdJdGuU=) 7: vrn7liTWiOV54a6bn1xF4EHebFc.roa (hash: mJIlU8Z+TC1dGYbjGa/ajMktQWJNT60JPY6KVtsPkZI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:4e:69:80:f1:ed:fd:15:3f:31:75:73:f6:e6:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb Validity Not Before: Dec 20 09:00:37 2025 GMT Not After : Dec 21 09:00:37 2025 GMT Subject: CN=a360c550667a36dbf68e84d07968c6740406166c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0a:f1:f4:1a:1d:1a:6a:5c:03:03:eb:13:19: aa:a9:03:ef:f3:54:4d:de:cc:c7:24:cf:cd:58:0b: 04:2c:2e:47:51:91:76:b3:bf:a9:cd:99:49:68:b8: 28:05:f4:e7:b3:5e:41:7c:1a:bb:9c:71:90:2a:3f: cc:5f:20:61:28:4c:86:dd:8a:cd:4d:f3:82:3f:ff: 3c:11:99:f4:e7:eb:9d:1c:39:23:8e:3f:dc:57:f7: aa:46:44:66:bc:da:7c:2b:9a:a2:97:3d:91:88:de: 9f:4f:a6:4f:5a:c6:e3:7c:78:61:60:6d:85:49:02: 56:bf:96:0b:a3:82:bf:f8:79:df:b9:5c:f7:5d:47: cf:9a:54:0d:31:6c:50:ac:1e:4b:9d:48:de:4d:eb: bf:6a:64:ec:44:48:08:09:60:17:02:66:d6:d2:7f: 6a:39:76:20:9d:55:59:b9:d2:4f:70:b0:9a:80:23: f5:ce:40:b5:ad:64:2d:39:46:da:de:9b:d3:8a:6f: a3:b6:5c:1f:1b:42:ba:6e:2d:f4:4f:3d:a1:f0:87: 44:17:0b:38:fc:4d:3e:1d:c0:75:fa:97:85:2d:69: f9:0a:b3:3e:f9:71:f6:b2:84:2e:15:6e:83:02:58: e8:fe:4f:c4:da:c0:4e:27:69:39:e2:d2:48:a9:3d: cc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:60:C5:50:66:7A:36:DB:F6:8E:84:D0:79:68:C6:74:04:06:16:6C X509v3 Authority Key Identifier: keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:70:12:ac:13:5e:a3:e2:c1:2b:a3:44:98:8e:e6:fd:23:8e: 16:da:95:6e:71:38:15:19:c0:14:f8:ea:d9:3e:96:cf:5f:e3: 13:53:ba:84:f4:49:12:da:47:b1:10:ff:c0:fb:14:bf:b5:4c: b8:cd:e4:3e:3f:5a:71:81:25:b6:48:b0:45:da:81:b8:93:6a: f3:39:bb:6e:04:41:23:7c:a6:a5:e5:04:e3:db:86:b8:7d:7e: 35:42:db:2e:3b:89:78:71:9f:4a:86:1f:62:55:6a:14:fb:e6: 14:21:51:26:ef:d8:9d:a9:30:12:a5:0f:96:77:aa:51:9d:53: 02:f6:3a:8d:12:53:45:55:65:e6:a4:1b:b2:4f:48:cd:66:6a: ed:99:e8:d6:f1:7b:03:56:0f:c9:92:2d:72:38:36:44:b3:1d: b5:70:dc:a8:05:26:6b:96:a2:11:be:9e:25:9a:1e:10:d3:59: 78:7b:7e:8a:53:4d:6c:7d:f7:93:9c:61:69:76:e4:0d:a6:01: fa:c7:1c:a0:11:ed:1e:20:3c:ac:0e:0b:ff:f2:67:ed:48:b0: 0d:2c:37:81:72:cd:b8:95:0f:9f:70:c2:56:bb:85:75:ff:23: ed:8c:08:8c:fd:9f:95:0e:90:df:96:cb:60:7b:5b:eb:24:e5: 54:20:44:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/U5pgPHt/RU/MXVz9uYEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MmQ0Y2VjNzgzMzA1OTIzZTM0OTdlZDg4NGYxYzQ0NWI0 ZTc4ZmIwHhcNMjUxMjIwMDkwMDM3WhcNMjUxMjIxMDkwMDM3WjAzMTEwLwYDVQQD EyhhMzYwYzU1MDY2N2EzNmRiZjY4ZTg0ZDA3OTY4YzY3NDA0MDYxNjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgrx9BodGmpcAwPrExmqqQPv81RN 3szHJM/NWAsELC5HUZF2s7+pzZlJaLgoBfTns15BfBq7nHGQKj/MXyBhKEyG3YrN TfOCP/88EZn05+udHDkjjj/cV/eqRkRmvNp8K5qilz2RiN6fT6ZPWsbjfHhhYG2F SQJWv5YLo4K/+HnfuVz3XUfPmlQNMWxQrB5LnUjeTeu/amTsREgICWAXAmbW0n9q OXYgnVVZudJPcLCagCP1zkC1rWQtOUba3pvTim+jtlwfG0K6bi30Tz2h8IdEFws4 /E0+HcB1+peFLWn5CrM++XH2soQuFW6DAljo/k/E2sBOJ2k54tJIqT3MrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNgxVBmejbb9o6E0HloxnQEBhZsMB8GA1UdIwQY MBaAFLYtTOx4MwWSPjSX7YhPHERbTnj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTIt ZDMyZTI3ZmI3ZTU5LzEvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTItZDMyZTI3ZmI3ZTU5 LzEvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXASrBNe o+LBK6NEmI7m/SOOFtqVbnE4FRnAFPjq2T6Wz1/jE1O6hPRJEtpHsRD/wPsUv7VM uM3kPj9acYEltkiwRdqBuJNq8zm7bgRBI3ympeUE49uGuH1+NULbLjuJeHGfSoYf YlVqFPvmFCFRJu/YnakwEqUPlneqUZ1TAvY6jRJTRVVl5qQbsk9IzWZq7Zno1vF7 A1YPyZItcjg2RLMdtXDcqAUma5aiEb6eJZoeENNZeHt+ilNNbH33k5xhaXbkDaYB +sccoBHtHiA8rA4L//Jn7UiwDSw3gXLNuJUPn3DCVruFdf8j7YwIjP2flQ6Q35bL YHtb6yTlVCBEwQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:09:35 2025 by rpki-client