This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft File: tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json) Hash identifier: k38Kjk1TAIcRh4jm39zv54yyDiScPWXjMVlQgOGY0r0= Subject key identifier: C2:05:2E:98:66:34:9F:70:D6:84:11:89:F6:EF:C7:4A:86:F5:3C:E9 Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50 Certificate issuer: /CN=b63a3094439cac0f555701286cd54373bce6cb50 Certificate serial: 019B3FB5CF3A5742A04C8A1283664956837F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft Manifest number: 052D Signing time: Sun 21 Dec 2025 07:00:38 +0000 Manifest this update: Sun 21 Dec 2025 07:00:38 +0000 Manifest next update: Mon 22 Dec 2025 07:00:38 +0000 Files and hashes: 1: 3NvNrWEVmChu4DMSl71yUBOUL1E.roa (hash: GasLqu+d7ICCgXWrZURm0ppqSwFCpgX0/TSR8hCVtjo=) 2: 7PrThjlXTdWomtXWwr_eOJDlAFY.roa (hash: 2SgrElvVXtH7x+BnWs8QSmeq0QSew6wcOvgzJlh8YyA=) 3: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: PWdJTvAHAj0UeaQvACq7M9UKYXxp2nm2KvqE3o5dQWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:cf:3a:57:42:a0:4c:8a:12:83:66:49:56:83:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50 Validity Not Before: Dec 21 07:00:38 2025 GMT Not After : Dec 22 07:00:38 2025 GMT Subject: CN=c2052e9866349f70d6841189f6efc74a86f53ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:64:d3:86:44:c0:84:87:c8:c3:89:67:9d:97: 4a:90:03:92:80:4b:58:e3:9f:13:c5:79:44:71:d5: ad:28:0f:b1:10:4a:50:28:80:50:38:1d:80:47:d6: 3a:0b:c9:10:00:68:51:77:4c:0b:f1:70:2c:c0:81: 90:fb:50:4a:c5:10:99:76:1a:a8:94:19:dc:4e:6b: f8:b8:01:71:b7:6d:54:98:98:a6:02:26:c0:ae:f8: e2:36:f6:ba:ee:8b:9b:7b:f7:35:50:d3:80:13:50: 90:74:46:c2:1e:26:1b:8b:20:44:20:c2:0f:cc:f2: 46:f9:8b:14:7c:f8:ce:ba:2a:3c:04:96:8a:86:38: ef:0d:47:27:49:30:66:da:0b:55:27:7b:3e:32:3f: 4d:1a:91:bd:8f:c5:57:7a:f9:57:6c:c4:aa:61:ac: 60:a5:0d:fd:05:d9:83:1d:41:a0:23:a2:a5:63:09: d5:05:8a:85:df:21:28:36:ea:f6:52:bf:8f:c6:ac: 57:93:67:73:a3:fa:30:67:c0:07:07:f8:f3:f0:c2: af:df:98:3e:c8:e3:9e:7d:03:5f:16:d5:7f:1b:61: b4:f8:b8:28:1e:34:a8:8f:f3:ab:12:b7:8f:62:1f: 73:72:71:bd:a0:08:04:13:a2:3a:29:60:14:ff:2a: f8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:05:2E:98:66:34:9F:70:D6:84:11:89:F6:EF:C7:4A:86:F5:3C:E9 X509v3 Authority Key Identifier: keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:07:0f:dd:e6:61:7b:65:ec:00:ab:6d:cf:cf:74:24:73:35: 72:22:7c:10:ea:ce:1b:23:0a:1a:08:13:91:29:f6:6d:09:90: 02:c0:87:02:b9:d4:dd:c1:89:1c:6d:af:d0:d3:28:58:96:75: ae:81:e3:a0:75:c8:e7:b3:22:0e:6c:bb:b0:aa:91:43:b2:15: 65:ba:17:32:98:7e:c7:9f:cc:4f:1c:87:7c:dd:2f:23:bf:e6: cb:7c:ad:ca:59:6a:70:97:a9:d2:d9:8e:e2:f7:ff:1d:a5:a4: 9a:1b:81:8e:16:af:c7:2b:19:a2:bd:4f:eb:a4:c5:25:75:f6: 1e:96:8a:b9:fe:0e:d7:e0:9e:5f:3b:93:17:9c:12:28:00:cc: 5b:46:36:2c:52:ac:e0:7d:2a:bc:e5:75:7a:83:44:4a:9a:0c: 12:b8:d2:c0:8b:de:98:2a:bc:7d:ed:43:8b:1a:57:95:33:c0: 4f:c7:99:89:4a:b0:a0:a3:f7:41:53:66:76:9c:02:32:b3:17: 53:8a:bb:73:90:2b:54:c7:b2:d0:53:f0:6e:3f:59:79:78:cf: 33:29:bc:9c:2e:f8:8c:72:f1:0d:1e:65:45:a7:39:a9:a5:7f: 46:da:13:33:2e:75:25:12:87:3a:de:28:ec:86:7d:7b:34:2b: 2c:02:76:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tc86V0KgTIoSg2ZJVoN/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2M2EzMDk0NDM5Y2FjMGY1NTU3MDEyODZjZDU0MzczYmNl NmNiNTAwHhcNMjUxMjIxMDcwMDM4WhcNMjUxMjIyMDcwMDM4WjAzMTEwLwYDVQQD EyhjMjA1MmU5ODY2MzQ5ZjcwZDY4NDExODlmNmVmYzc0YTg2ZjUzY2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWTThkTAhIfIw4lnnZdKkAOSgEtY 458TxXlEcdWtKA+xEEpQKIBQOB2AR9Y6C8kQAGhRd0wL8XAswIGQ+1BKxRCZdhqo lBncTmv4uAFxt21UmJimAibArvjiNva67oube/c1UNOAE1CQdEbCHiYbiyBEIMIP zPJG+YsUfPjOuio8BJaKhjjvDUcnSTBm2gtVJ3s+Mj9NGpG9j8VXevlXbMSqYaxg pQ39BdmDHUGgI6KlYwnVBYqF3yEoNur2Ur+PxqxXk2dzo/owZ8AHB/jz8MKv35g+ yOOefQNfFtV/G2G0+LgoHjSoj/OrErePYh9zcnG9oAgEE6I6KWAU/yr48wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIFLphmNJ9w1oQRifbvx0qG9TzpMB8GA1UdIwQY MBaAFLY6MJRDnKwPVVcBKGzVQ3O85stQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYt OWRkZGQ2ODAyMDg4LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9lNGQyMGYtNmRjOC00OTdkLWE4ZDYtOWRkZGQ2ODAyMDg4 LzEvdGpvd2xFT2NyQTlWVndFb2JOVkRjN3pteTFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAcP3eZh e2XsAKttz890JHM1ciJ8EOrOGyMKGggTkSn2bQmQAsCHArnU3cGJHG2v0NMoWJZ1 roHjoHXI57MiDmy7sKqRQ7IVZboXMph+x5/MTxyHfN0vI7/my3ytyllqcJep0tmO 4vf/HaWkmhuBjhavxysZor1P66TFJXX2HpaKuf4O1+CeXzuTF5wSKADMW0Y2LFKs 4H0qvOV1eoNESpoMErjSwIvemCq8fe1DixpXlTPAT8eZiUqwoKP3QVNmdpwCMrMX U4q7c5ArVMey0FPwbj9ZeXjPMym8nC74jHLxDR5lRac5qaV/RtoTMy51JRKHOt4o 7IZ9ezQrLAJ2Dw== -----END CERTIFICATE-----Generated at Sun Dec 21 10:45:16 2025 by rpki-client