This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft File: Tt5MZdc1r3knftFOtsTPVATHiNU.mft (raw, json) Hash identifier: eeN5eioWZNFbW/bNh9SZZH8Vhdr2m8k8zT702Y8RzhI= Subject key identifier: 99:7F:46:AB:B8:A1:4A:F5:9F:88:77:67:92:BC:8A:23:62:78:1E:CF Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5 Certificate issuer: /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5 Certificate serial: 019AF6534BD11B3BCAC8BB9533CEC0DC3604 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft Manifest number: 09A4 Signing time: Sun 07 Dec 2025 01:00:45 +0000 Manifest this update: Sun 07 Dec 2025 01:00:45 +0000 Manifest next update: Mon 08 Dec 2025 01:00:45 +0000 Files and hashes: 1: CNpxwuWXiobnr753WTcJ-SvZEQU.roa (hash: +W4soYxTO8aYTDMgF940blaVc3sdpMhU9iF5WZMoCzU=) 2: Tt5MZdc1r3knftFOtsTPVATHiNU.crl (hash: cBSL0YuFZznnfb1W/a6rDefGFhxznjXd1duabBjMv5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:4b:d1:1b:3b:ca:c8:bb:95:33:ce:c0:dc:36:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5 Validity Not Before: Dec 7 01:00:45 2025 GMT Not After : Dec 8 01:00:45 2025 GMT Subject: CN=997f46abb8a14af59f88776792bc8a2362781ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:20:98:4a:5e:0f:39:e1:36:9d:d7:a8:8c:67: 75:14:be:23:b6:22:2b:8b:20:d2:43:19:98:86:8f: 9e:20:f2:4a:70:7b:91:34:bb:43:42:b9:71:ba:92: f5:54:e6:a6:98:55:6f:92:70:34:e4:d6:9a:a4:54: 99:df:ed:5a:61:b6:f1:8a:bc:65:80:15:87:89:ed: db:43:50:2d:74:46:1b:90:6b:09:3a:a9:f1:3c:63: e0:e9:c6:40:24:81:33:36:d9:a0:55:3e:df:86:99: 55:9b:6d:9b:8f:0f:a7:9f:2b:da:8a:95:de:b7:ca: 14:33:1b:00:07:7c:ca:1c:59:2b:53:00:d7:5a:1e: 46:6e:fe:4e:07:cf:0f:0e:5c:6e:dc:dc:d5:77:4b: 9e:41:60:90:b7:3a:8f:5e:d4:80:dc:6d:ea:5e:de: 30:6d:7b:5e:40:35:55:67:84:ca:00:c1:54:3d:90: b3:7e:8e:d8:1a:e6:da:64:a6:d4:d1:9d:ff:4f:37: db:10:55:d7:d0:c7:e0:8e:84:4b:32:76:57:d1:b7: 78:a4:26:58:9a:54:58:e9:ea:a9:0c:46:c7:d5:30: c7:c1:e8:9c:cd:c8:60:dd:85:fe:41:58:21:88:6e: 88:a6:9a:b3:dd:c8:48:b5:13:c3:73:1c:cb:fb:ac: 2a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:7F:46:AB:B8:A1:4A:F5:9F:88:77:67:92:BC:8A:23:62:78:1E:CF X509v3 Authority Key Identifier: keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:9e:45:cb:e4:22:d7:29:d4:36:30:ba:d8:fe:09:59:5d:9f: e3:b7:f9:c5:eb:7d:e4:e2:d7:4c:60:4a:05:19:11:c6:6d:c1: f4:b1:74:59:78:e8:1c:7e:bc:73:78:ee:06:29:26:4e:a2:ac: 7f:1d:42:ce:a7:ca:c5:e7:b3:ff:90:7e:f5:8a:1f:ea:f6:1b: b3:12:05:f5:f2:3e:a4:61:b6:40:5b:2a:35:83:ca:e5:4a:74: de:ed:5e:0f:5b:78:a6:f7:59:20:90:70:18:5c:61:02:90:0b: c5:3f:c0:af:a5:71:d9:29:cc:9c:c0:71:26:b5:52:25:f9:5b: 4e:e5:70:21:7f:e3:e0:93:64:ac:a5:22:06:4f:7d:4a:19:2b: 12:84:1d:8f:cc:3b:c3:31:98:9a:e2:7e:2a:b3:b0:dd:07:43: d7:6d:0c:b8:84:ef:82:92:07:19:14:5b:e6:a1:51:05:f8:b8: 20:00:f8:c8:73:a1:8e:27:c6:86:f1:c3:e4:08:68:5f:e1:87: 7f:40:de:9f:7f:33:51:d5:70:77:13:d6:09:0c:0e:ae:7c:c7: 8b:83:18:11:61:ef:7a:b2:cc:5b:d7:d9:a1:74:79:bc:b4:69: 9b:57:ad:c0:e0:67:a6:39:a5:5f:ea:e5:4a:d7:78:2b:e4:71: 11:fe:63:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U0vRGzvKyLuVM87A3DYEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZGU0YzY1ZDczNWFmNzkyNzdlZDE0ZWI2YzRjZjU0MDRj Nzg4ZDUwHhcNMjUxMjA3MDEwMDQ1WhcNMjUxMjA4MDEwMDQ1WjAzMTEwLwYDVQQD Eyg5OTdmNDZhYmI4YTE0YWY1OWY4ODc3Njc5MmJjOGEyMzYyNzgxZWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiCYSl4POeE2ndeojGd1FL4jtiIr iyDSQxmYho+eIPJKcHuRNLtDQrlxupL1VOammFVvknA05NaapFSZ3+1aYbbxirxl gBWHie3bQ1AtdEYbkGsJOqnxPGPg6cZAJIEzNtmgVT7fhplVm22bjw+nnyvaipXe t8oUMxsAB3zKHFkrUwDXWh5Gbv5OB88PDlxu3NzVd0ueQWCQtzqPXtSA3G3qXt4w bXteQDVVZ4TKAMFUPZCzfo7YGubaZKbU0Z3/TzfbEFXX0MfgjoRLMnZX0bd4pCZY mlRY6eqpDEbH1TDHweiczchg3YX+QVghiG6Ippqz3chItRPDcxzL+6wqWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJl/Rqu4oUr1n4h3Z5K8iiNieB7PMB8GA1UdIwQY MBaAFE7eTGXXNa95J37RTrbEz1QEx4jVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHQ1TVpkYzFyM2tuZnRGT3RzVFBWQVRIaU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zNWJlZTktODQzZi00ZDM4LTkyODYt N2FhNDliZWNmNDY3LzEvVHQ1TVpkYzFyM2tuZnRGT3RzVFBWQVRIaU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8zNWJlZTktODQzZi00ZDM4LTkyODYtN2FhNDliZWNmNDY3 LzEvVHQ1TVpkYzFyM2tuZnRGT3RzVFBWQVRIaU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZ5Fy+Qi 1ynUNjC62P4JWV2f47f5xet95OLXTGBKBRkRxm3B9LF0WXjoHH68c3juBikmTqKs fx1CzqfKxeez/5B+9Yof6vYbsxIF9fI+pGG2QFsqNYPK5Up03u1eD1t4pvdZIJBw GFxhApALxT/Ar6Vx2SnMnMBxJrVSJflbTuVwIX/j4JNkrKUiBk99ShkrEoQdj8w7 wzGYmuJ+KrOw3QdD120MuITvgpIHGRRb5qFRBfi4IAD4yHOhjifGhvHD5AhoX+GH f0Den38zUdVwdxPWCQwOrnzHi4MYEWHverLMW9fZoXR5vLRpm1etwOBnpjmlX+rl Std4K+RxEf5jUw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:49:54 2025 by rpki-client