This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft File: ttaENqdjOfZxRBz71QrUAdPAD_8.mft (raw, json) Hash identifier: c8zUw3TDj0mc6MPKIaOvlDGjJdfhDLX88p3OhtTIXGg= Subject key identifier: 47:D4:07:6A:FE:FD:E9:01:BF:A2:6E:3F:DF:B1:5A:AD:E8:14:68:64 Authority key identifier: B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF Certificate issuer: /CN=b6d68436a76339f671441cfbd50ad401d3c00fff Certificate serial: 019AF209AA288A822AFFB00F8BD82E9A819E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft Manifest number: 14CC Signing time: Sat 06 Dec 2025 05:01:50 +0000 Manifest this update: Sat 06 Dec 2025 05:01:50 +0000 Manifest next update: Sun 07 Dec 2025 05:01:50 +0000 Files and hashes: 1: HROKUTUR5gMY3n6zglHSVCbZS_I.roa (hash: w0BOZ7icboJC4/TfINzPR6MRHeR0gZCuXliuxuy25YQ=) 2: ttaENqdjOfZxRBz71QrUAdPAD_8.crl (hash: NowoMOIp9JU71zbvJLdQfVAB4o46zb3iBrMZOn2Q0+4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:aa:28:8a:82:2a:ff:b0:0f:8b:d8:2e:9a:81:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6d68436a76339f671441cfbd50ad401d3c00fff Validity Not Before: Dec 6 05:01:50 2025 GMT Not After : Dec 7 05:01:50 2025 GMT Subject: CN=47d4076afefde901bfa26e3fdfb15aade8146864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5f:58:c1:01:9c:d5:e9:e6:ea:be:2e:30:e7: 2d:16:8a:17:73:32:2d:22:c6:15:09:ad:3a:6e:c7: 0e:54:96:5b:7f:00:27:82:d9:dc:e7:39:ea:ad:46: 96:86:e1:e7:a3:ae:15:c8:f3:f9:91:53:19:52:70: 8d:4b:4f:6b:7d:bd:e0:e2:47:84:68:b5:c1:52:ab: bc:b4:ea:11:8e:e0:27:05:a3:c5:1f:57:dd:49:6f: d5:c8:77:76:92:99:72:cd:57:45:00:f8:9e:fa:65: c2:b2:2a:02:59:47:c5:67:c7:33:7f:a7:6a:3f:90: 84:1f:96:4d:7b:08:8b:fe:d5:f3:e5:09:e3:85:51: 12:24:db:1e:87:de:09:a1:01:3b:5b:e3:45:b3:4b: 4a:0c:22:8b:6d:90:48:7e:e9:81:34:e2:ed:e6:e5: 04:d4:cd:24:cd:65:97:1a:b0:e5:70:cb:d5:22:f4: e2:69:8e:0d:8c:a5:89:5c:5a:b6:f8:82:ed:27:c8: 39:40:e3:14:0a:8b:b6:1a:0c:ee:4a:51:3a:6e:64: fe:05:37:98:7b:20:18:8b:3b:bc:f8:9b:b8:1d:59: 92:e1:63:83:27:95:af:5f:15:b7:6c:15:bf:52:fc: 6e:60:d5:d2:07:ce:af:dc:55:6b:d9:f4:69:26:c9: d6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D4:07:6A:FE:FD:E9:01:BF:A2:6E:3F:DF:B1:5A:AD:E8:14:68:64 X509v3 Authority Key Identifier: keyid:B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c2:4b:32:c1:aa:d2:cf:2b:67:ce:98:c2:aa:1a:b6:b1:b9: f3:a0:ef:e9:77:8e:ee:35:29:d3:9e:3a:83:ee:fb:e0:47:f2: 35:86:d0:5e:95:58:80:e0:3f:14:3f:18:4d:09:c2:72:00:7a: 52:b6:e6:4d:cc:4d:17:57:fe:db:3b:63:2d:5b:e6:52:68:f6: 87:13:41:2c:47:a8:6c:78:86:20:ac:57:dc:82:83:aa:6f:d5: 92:bc:42:13:98:08:86:88:3d:8c:88:57:58:89:a8:a5:d6:c0: c6:ee:de:8d:c6:ca:7f:ce:76:d9:47:9f:eb:4e:c6:0c:12:fb: 48:73:35:a7:93:4b:29:64:a0:f9:c0:a9:59:78:21:8d:65:9f: c1:f2:f7:73:f0:e7:72:73:df:bb:7e:51:5b:9b:00:e5:c0:f2: e1:98:31:72:59:5f:98:e1:b2:ce:d1:23:57:75:35:62:1c:ce: cc:f8:7c:0c:62:b3:4d:5c:4c:c1:28:f5:01:2a:4d:ef:b1:50: 01:39:d1:1f:37:63:33:de:f6:65:6e:54:bf:cf:28:50:ff:a9: 50:fc:8b:8e:c4:b2:51:37:a2:39:f2:30:6e:1b:8e:78:b5:96: 0f:ed:37:fc:8e:28:e9:d0:e7:31:49:a3:47:c3:0a:f5:90:5c: 3d:19:38:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCaooioIq/7APi9gumoGeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZDY4NDM2YTc2MzM5ZjY3MTQ0MWNmYmQ1MGFkNDAxZDNj MDBmZmYwHhcNMjUxMjA2MDUwMTUwWhcNMjUxMjA3MDUwMTUwWjAzMTEwLwYDVQQD Eyg0N2Q0MDc2YWZlZmRlOTAxYmZhMjZlM2ZkZmIxNWFhZGU4MTQ2ODY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV9YwQGc1enm6r4uMOctFooXczIt IsYVCa06bscOVJZbfwAngtnc5znqrUaWhuHno64VyPP5kVMZUnCNS09rfb3g4keE aLXBUqu8tOoRjuAnBaPFH1fdSW/VyHd2kplyzVdFAPie+mXCsioCWUfFZ8czf6dq P5CEH5ZNewiL/tXz5QnjhVESJNseh94JoQE7W+NFs0tKDCKLbZBIfumBNOLt5uUE 1M0kzWWXGrDlcMvVIvTiaY4NjKWJXFq2+ILtJ8g5QOMUCou2GgzuSlE6bmT+BTeY eyAYizu8+Ju4HVmS4WODJ5WvXxW3bBW/UvxuYNXSB86v3FVr2fRpJsnW+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEfUB2r+/ekBv6JuP9+xWq3oFGhkMB8GA1UdIwQY MBaAFLbWhDanYzn2cUQc+9UK1AHTwA//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHRhRU5xZGpPZlp4UkJ6NzFRclVBZFBBRF84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84NGE1ZGQtNWNmMi00ODU3LWJkOTMt M2M3MTFhMTVmYTVjLzEvdHRhRU5xZGpPZlp4UkJ6NzFRclVBZFBBRF84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84NGE1ZGQtNWNmMi00ODU3LWJkOTMtM2M3MTFhMTVmYTVj LzEvdHRhRU5xZGpPZlp4UkJ6NzFRclVBZFBBRF84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8JLMsGq 0s8rZ86YwqoatrG586Dv6XeO7jUp0546g+774EfyNYbQXpVYgOA/FD8YTQnCcgB6 UrbmTcxNF1f+2ztjLVvmUmj2hxNBLEeobHiGIKxX3IKDqm/VkrxCE5gIhog9jIhX WImopdbAxu7ejcbKf8522Uef607GDBL7SHM1p5NLKWSg+cCpWXghjWWfwfL3c/Dn cnPfu35RW5sA5cDy4ZgxcllfmOGyztEjV3U1YhzOzPh8DGKzTVxMwSj1ASpN77FQ ATnRHzdjM972ZW5Uv88oUP+pUPyLjsSyUTeiOfIwbhuOeLWWD+03/I4o6dDnMUmj R8MK9ZBcPRk4VQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:03:34 2025 by rpki-client