This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft File: TitqaUPTM40AdQNtlp7AHD3O_Kk.mft (raw, json) Hash identifier: tHaWT+ZI8x9sLQRVLt+drUlraK1bBJYbd+jZCSh8BGM= Subject key identifier: 83:D0:9F:BE:0B:2C:0A:27:D8:13:3E:7C:59:65:63:DC:1E:01:AF:75 Authority key identifier: 4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9 Certificate issuer: /CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9 Certificate serial: 019B3D90EFAFA25D9AB155CA6E8DAFD61C81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft Manifest number: 16CB Signing time: Sat 20 Dec 2025 21:01:07 +0000 Manifest this update: Sat 20 Dec 2025 21:01:07 +0000 Manifest next update: Sun 21 Dec 2025 21:01:07 +0000 Files and hashes: 1: 04QV-ve6N6q1z5keiSip22HWq-U.roa (hash: oA0QfyCg1GT0LK/v+pk71hC3hYPHoYN/Zjd1n/b4oLE=) 2: TitqaUPTM40AdQNtlp7AHD3O_Kk.crl (hash: 0KCfL+c1zxFKLfwkOmRovJs7lddoqI7tv9NcsopQmlA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:ef:af:a2:5d:9a:b1:55:ca:6e:8d:af:d6:1c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e2b6a6943d3338d0075036d969ec01c3dcefca9 Validity Not Before: Dec 20 21:01:07 2025 GMT Not After : Dec 21 21:01:07 2025 GMT Subject: CN=83d09fbe0b2c0a27d8133e7c596563dc1e01af75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a6:fa:9c:d0:e3:fd:e9:66:4f:f5:f6:88:e5: f8:88:39:6a:50:a8:8f:30:b5:46:08:3c:4a:48:57: b3:fa:6e:9e:60:6f:73:dd:0a:90:ae:8e:c2:07:91: 90:0f:d2:e0:2c:ae:10:2c:2b:4d:1e:85:fd:c8:f3: 3b:f2:10:41:95:1b:8d:1e:cb:22:39:0d:6c:f0:c0: d9:e1:e2:b4:aa:85:44:a0:c8:7b:78:12:62:73:17: b3:db:3e:17:80:4d:52:39:cb:1d:aa:de:b2:be:c0: 8b:f3:70:83:31:00:ba:e7:c0:15:ed:09:40:bd:03: a6:2d:92:4b:58:76:1a:83:8d:4e:a2:a1:5d:3e:57: de:3c:78:2f:e4:69:35:0d:ad:f3:a3:e2:d0:55:c9: 6f:91:9e:91:a9:fc:11:9c:12:47:1a:cc:34:43:69: 6a:12:82:6c:0b:ea:95:b5:4b:80:34:18:e6:87:ee: 3d:03:e6:a5:d5:f8:68:bd:fe:e8:b9:c9:9c:f6:68: 45:c1:bd:58:b1:60:10:27:75:ac:bf:0c:cb:f1:8b: d5:d4:79:18:b5:2c:3b:47:70:3f:4d:9e:43:16:b6: 68:56:6a:f4:71:0c:34:a3:75:18:0f:55:74:15:f6: bc:12:20:17:7a:4c:15:e8:ae:54:6b:a2:ac:66:12: 10:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D0:9F:BE:0B:2C:0A:27:D8:13:3E:7C:59:65:63:DC:1E:01:AF:75 X509v3 Authority Key Identifier: keyid:4E:2B:6A:69:43:D3:33:8D:00:75:03:6D:96:9E:C0:1C:3D:CE:FC:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TitqaUPTM40AdQNtlp7AHD3O_Kk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/889608-0f40-4a64-b526-1a26b9d8fede/1/TitqaUPTM40AdQNtlp7AHD3O_Kk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d2:b3:2f:e5:b4:47:2e:b8:7d:6d:88:f2:5e:a5:df:ab:f7: 44:1d:de:0a:3b:09:ef:3b:a4:c9:6d:87:ed:59:9a:f9:95:2b: c4:80:b7:4d:a1:95:81:86:8c:49:10:8b:e4:29:e7:ed:31:3b: 4f:b6:32:9a:6a:78:95:61:b1:89:dd:48:08:90:a8:27:56:2e: b2:5a:9c:e1:8e:ee:3b:59:d6:9f:2f:01:b0:64:2a:ad:bc:d0: a9:4f:9c:ab:11:48:38:b2:e2:75:56:d1:86:25:30:3f:e0:ab: 58:01:47:97:1b:8e:da:3c:bc:94:06:cc:eb:b2:89:dd:52:a9: 0c:83:7f:94:51:d3:76:69:3a:de:5a:e8:26:09:53:40:c2:7b: 7d:08:81:b1:0a:5e:d4:76:ce:95:f6:42:76:13:0a:9c:51:5f: f1:7b:0f:73:17:04:2a:14:b9:1f:21:a6:63:4d:42:42:60:ef: a0:02:bb:87:17:0c:9d:0c:74:9d:61:cf:79:2e:88:8f:8f:96: f8:73:70:29:b4:2b:1e:aa:dc:4e:1a:d8:52:1b:18:e1:bc:12: 8c:99:27:c6:a0:d3:1e:c7:1c:9b:12:e8:a7:1a:17:26:63:85: 77:22:b9:68:92:14:64:b7:8c:5c:49:5a:d8:90:ff:68:56:1f: 75:a3:37:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kO+vol2asVXKbo2v1hyBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMmI2YTY5NDNkMzMzOGQwMDc1MDM2ZDk2OWVjMDFjM2Rj ZWZjYTkwHhcNMjUxMjIwMjEwMTA3WhcNMjUxMjIxMjEwMTA3WjAzMTEwLwYDVQQD Eyg4M2QwOWZiZTBiMmMwYTI3ZDgxMzNlN2M1OTY1NjNkYzFlMDFhZjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqb6nNDj/elmT/X2iOX4iDlqUKiP MLVGCDxKSFez+m6eYG9z3QqQro7CB5GQD9LgLK4QLCtNHoX9yPM78hBBlRuNHssi OQ1s8MDZ4eK0qoVEoMh7eBJicxez2z4XgE1SOcsdqt6yvsCL83CDMQC658AV7QlA vQOmLZJLWHYag41OoqFdPlfePHgv5Gk1Da3zo+LQVclvkZ6RqfwRnBJHGsw0Q2lq EoJsC+qVtUuANBjmh+49A+al1fhovf7oucmc9mhFwb1YsWAQJ3WsvwzL8YvV1HkY tSw7R3A/TZ5DFrZoVmr0cQw0o3UYD1V0Ffa8EiAXekwV6K5Ua6KsZhIQBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPQn74LLAon2BM+fFllY9weAa91MB8GA1UdIwQY MBaAFE4ramlD0zONAHUDbZaewBw9zvypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84ODk2MDgtMGY0MC00YTY0LWI1MjYt MWEyNmI5ZDhmZWRlLzEvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy84ODk2MDgtMGY0MC00YTY0LWI1MjYtMWEyNmI5ZDhmZWRl LzEvVGl0cWFVUFRNNDBBZFFOdGxwN0FIRDNPX0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADtKzL+W0 Ry64fW2I8l6l36v3RB3eCjsJ7zukyW2H7Vma+ZUrxIC3TaGVgYaMSRCL5Cnn7TE7 T7Yymmp4lWGxid1ICJCoJ1Yuslqc4Y7uO1nWny8BsGQqrbzQqU+cqxFIOLLidVbR hiUwP+CrWAFHlxuO2jy8lAbM67KJ3VKpDIN/lFHTdmk63lroJglTQMJ7fQiBsQpe 1HbOlfZCdhMKnFFf8XsPcxcEKhS5HyGmY01CQmDvoAK7hxcMnQx0nWHPeS6Ij4+W +HNwKbQrHqrcThrYUhsY4bwSjJknxqDTHsccmxLopxoXJmOFdyK5aJIUZLeMXEla 2JD/aFYfdaM3BQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:35 2025 by rpki-client