This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft File: TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json) Hash identifier: uJw5A4MXvmVzJKyY181TRK0aq3ACOHLjWzSpK6mdxUU= Subject key identifier: E8:C1:45:3C:9F:AC:B5:A6:3D:02:1E:0D:13:5F:A6:60:00:0D:21:66 Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A Certificate issuer: /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a Certificate serial: 019B3F11EF03B8923233A89A4CB3D77C7DB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 04:01:38 +0000 Manifest this update: Sun 21 Dec 2025 04:01:38 +0000 Manifest next update: Mon 22 Dec 2025 04:01:38 +0000 Files and hashes: 1: NYiqXRmP7nBBaBEa9iT79WYJ0gs.roa (hash: UqGys13kNv1mtJhLUKGkAEs9pExc7CtEz6E2KnEqZvM=) 2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: pBv3gqXbSI0BIBfYAw8fZVPyRlcN4dmW+f6lOzzyidE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:ef:03:b8:92:32:33:a8:9a:4c:b3:d7:7c:7d:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a Validity Not Before: Dec 21 04:01:38 2025 GMT Not After : Dec 22 04:01:38 2025 GMT Subject: CN=e8c1453c9facb5a63d021e0d135fa660000d2166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:97:a3:9a:69:f0:01:75:4d:40:2f:3e:e4: cc:31:0d:df:62:d8:e9:de:f8:f5:30:aa:af:5d:2d: 7b:c9:da:14:59:12:04:4c:30:ff:7b:1f:b8:2c:8f: ed:a8:ba:ce:14:0d:5f:26:b8:65:15:21:ea:75:d4: 1d:ce:26:67:12:c8:a9:79:90:2c:6c:b9:17:78:b0: 33:b9:d6:75:ad:4c:ec:7e:d0:09:cd:87:5b:d7:c2: 81:15:61:7b:75:db:29:df:30:be:68:fc:c0:f8:3d: 7f:c3:10:42:53:9c:3e:04:21:ee:7d:a6:3d:62:d1: 17:63:e8:c6:85:4f:b6:b7:37:ba:68:10:17:b7:45: c6:c9:bd:bf:6b:79:4a:b5:a4:8c:13:a6:b6:8a:07: 1d:58:dd:f1:f6:23:eb:6c:fd:01:22:d2:a0:da:51: 5c:8a:bc:67:46:6d:d5:1a:01:33:a9:ce:67:85:05: aa:17:b3:0d:f1:9c:f5:6b:be:c0:a3:ec:d6:d7:26: 3e:a4:b4:4d:bb:6b:38:41:02:51:7f:8f:31:3d:7a: 2c:2e:1b:ce:20:35:5a:71:6d:e6:48:bc:7b:c1:e1: 15:90:53:b5:86:ee:82:77:dd:ce:09:36:4a:bc:14: 03:ee:ec:c2:f8:0c:a0:58:84:40:8a:af:db:90:ec: 39:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C1:45:3C:9F:AC:B5:A6:3D:02:1E:0D:13:5F:A6:60:00:0D:21:66 X509v3 Authority Key Identifier: keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:ec:77:0a:89:93:ad:d2:d1:a3:9d:3b:d6:15:c8:36:aa:b4: fa:c6:24:dc:30:cb:58:b9:7f:ab:ed:ac:88:b8:fe:01:f1:92: 19:ed:62:6a:e6:ed:2b:b3:4e:c8:14:e4:8d:38:19:59:ce:05: 16:8d:d0:62:29:47:74:78:c6:42:d1:c5:e9:b2:ea:9a:3b:05: 5b:51:7c:3c:5f:4b:7e:ee:de:82:e9:d3:5d:f7:bd:ef:bf:b6: 51:13:07:2b:ce:a3:23:5b:90:25:99:bd:a5:ca:a6:80:85:07: a0:d3:b3:ce:80:6d:c4:eb:31:02:c7:a1:0d:40:de:ba:51:2f: 1d:f7:82:e5:ae:8f:41:36:71:8b:c8:a3:43:4b:ef:f0:4c:b3: c2:67:33:7a:f7:d8:74:f3:c5:8d:ac:03:27:0e:28:d4:6e:29: 2a:a0:5a:59:24:f1:41:d6:71:2f:d7:3b:22:db:e4:ad:cd:58: 48:96:58:15:09:14:69:ad:f9:af:e9:56:10:4d:9b:5e:d2:06: 92:92:5f:12:60:40:59:c1:89:de:b8:a4:38:4c:14:e2:25:e7: 7c:4e:15:62:8e:2b:24:fe:d9:0f:89:a1:87:39:31:d8:ad:7b: 0b:6f:c5:af:16:66:00:e5:c3:51:2b:45:99:39:0d:f1:cb:4b: 77:11:7b:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/Ee8DuJIyM6iaTLPXfH24MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlM2MwMWJhMGM1Y2JmMjBhZTNlOTNjYTNkMzc5ZTYyZGY1 Yzk1OWEwHhcNMjUxMjIxMDQwMTM4WhcNMjUxMjIyMDQwMTM4WjAzMTEwLwYDVQQD EyhlOGMxNDUzYzlmYWNiNWE2M2QwMjFlMGQxMzVmYTY2MDAwMGQyMTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXWXo5pp8AF1TUAvPuTMMQ3fYtjp 3vj1MKqvXS17ydoUWRIETDD/ex+4LI/tqLrOFA1fJrhlFSHqddQdziZnEsipeZAs bLkXeLAzudZ1rUzsftAJzYdb18KBFWF7ddsp3zC+aPzA+D1/wxBCU5w+BCHufaY9 YtEXY+jGhU+2tze6aBAXt0XGyb2/a3lKtaSME6a2igcdWN3x9iPrbP0BItKg2lFc irxnRm3VGgEzqc5nhQWqF7MN8Zz1a77Ao+zW1yY+pLRNu2s4QQJRf48xPXosLhvO IDVacW3mSLx7weEVkFO1hu6Cd93OCTZKvBQD7uzC+AygWIRAiq/bkOw50QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjBRTyfrLWmPQIeDRNfpmAADSFmMB8GA1UdIwQY MBaAFE48AboMXL8grj6Tyj03nmLfXJWaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGp3QnVneGN2eUN1UHBQS1BUZWVZdDljbFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOGU3NzMtNGU3MS00ZDA5LWI3NGEt YjI3ZjU1MjY3MmUwLzEvVGp3QnVneGN2eUN1UHBQS1BUZWVZdDljbFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iOGU3NzMtNGU3MS00ZDA5LWI3NGEtYjI3ZjU1MjY3MmUw LzEvVGp3QnVneGN2eUN1UHBQS1BUZWVZdDljbFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPux3ComT rdLRo5071hXINqq0+sYk3DDLWLl/q+2siLj+AfGSGe1iaubtK7NOyBTkjTgZWc4F Fo3QYilHdHjGQtHF6bLqmjsFW1F8PF9Lfu7egunTXfe977+2URMHK86jI1uQJZm9 pcqmgIUHoNOzzoBtxOsxAsehDUDeulEvHfeC5a6PQTZxi8ijQ0vv8EyzwmczevfY dPPFjawDJw4o1G4pKqBaWSTxQdZxL9c7Itvkrc1YSJZYFQkUaa35r+lWEE2bXtIG kpJfEmBAWcGJ3rikOEwU4iXnfE4VYo4rJP7ZD4mhhzkx2K17C2/FrxZmAOXDUStF mTkN8ctLdxF7sQ== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:12 2025 by rpki-client