This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft File: RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft (raw, json) Hash identifier: BdZHrgDM3lsOcpGTs1GrpkrTpj6sH5WjpDCa0Lhdok8= Subject key identifier: 98:3C:B6:16:E7:92:80:72:EF:A5:46:CE:0A:97:72:B5:23:93:98:E1 Authority key identifier: 45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24 Certificate issuer: /CN=4534cab4450404862b201fe733f2c70a6bf52924 Certificate serial: 019AF1D237CB69E33501039CE27F1AEFF4A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:01:17 +0000 Manifest this update: Sat 06 Dec 2025 04:01:17 +0000 Manifest next update: Sun 07 Dec 2025 04:01:17 +0000 Files and hashes: 1: RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl (hash: 7BacqGysiTJ6kNVC82SOFSfbgBc+wzfFRKnSFzAu/0c=) 2: t9aRg7EBYi_eHqwtU6HeqBVRtO0.roa (hash: guaRd+4F8a2eF9Z9YS8nsI0hSSMT45GD3G3ESCtdqNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:37:cb:69:e3:35:01:03:9c:e2:7f:1a:ef:f4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4534cab4450404862b201fe733f2c70a6bf52924 Validity Not Before: Dec 6 04:01:17 2025 GMT Not After : Dec 7 04:01:17 2025 GMT Subject: CN=983cb616e7928072efa546ce0a9772b5239398e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ca:98:e7:cc:b4:49:20:be:ae:77:51:97:df: d1:77:42:c1:9e:2b:d5:d9:42:e7:2c:5b:22:15:2f: 42:d0:af:a6:be:41:c0:77:04:be:9b:e6:0a:5d:fc: 6d:a8:6d:12:ff:7f:0d:b0:c4:a5:e5:ca:f1:0e:e3: 0c:5c:02:1e:20:4c:87:e9:64:a1:8c:b1:e3:2e:5c: c2:fa:c2:c9:09:c6:79:27:ff:ea:74:25:33:6f:a9: 5a:cf:ef:f8:86:a5:4b:78:95:3f:0a:35:2b:8b:9b: 67:16:75:16:f9:6f:6b:54:bf:45:78:76:23:20:59: 99:aa:9b:f9:1c:ef:b8:54:1d:a0:a0:64:87:6b:b2: 44:41:3c:e7:df:86:e3:c9:4b:9d:dd:bb:8c:4f:e4: 4e:40:8d:2f:cd:2f:2c:3e:f0:ae:6e:15:8b:8a:b4: 7b:02:08:26:aa:b4:14:c4:75:fc:32:c1:7c:92:fc: 5d:83:4d:2b:97:69:a4:0f:30:3c:0e:9c:51:d7:f5: 16:96:62:88:73:a3:b3:f2:1f:02:7c:df:28:bd:b5: 74:00:84:a2:a7:a7:e6:48:5b:92:db:09:41:c2:12: 3f:21:24:c0:69:25:60:a7:91:19:b4:41:0c:2d:00: 70:12:3c:9a:49:f8:1e:ae:0c:c6:7a:0b:c9:98:ce: bc:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:3C:B6:16:E7:92:80:72:EF:A5:46:CE:0A:97:72:B5:23:93:98:E1 X509v3 Authority Key Identifier: keyid:45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:74:77:15:c1:ad:6d:c2:57:71:e8:c9:51:18:44:35:90:45: 88:7a:a8:65:b0:a4:53:a5:32:48:b8:df:50:31:cb:ed:32:cc: 02:a6:8b:5b:2f:5e:dc:5f:75:8a:e2:b3:73:61:a9:11:3f:05: c0:1e:d5:c7:a2:e1:d1:8c:26:7a:49:b3:19:a0:f0:53:1e:56: 4e:a2:f3:58:a0:54:86:56:a1:2d:ee:cf:c2:d7:2a:5a:e4:f6: 55:a8:62:24:20:c6:48:05:97:55:50:3c:9f:b2:e4:e8:04:26: c7:85:b0:ef:ee:9e:b1:71:bc:30:e1:4b:a0:a1:28:e6:03:ad: 2b:49:b4:bd:07:fd:e6:9d:e3:64:00:80:fa:31:cb:dc:93:37: 02:85:a8:92:66:9d:9c:a2:ba:42:80:39:8b:2e:18:39:54:7b: da:81:c6:4a:7d:a1:89:48:70:b3:cb:7c:07:38:12:0d:f7:fe: f4:4f:03:6b:fe:ed:e0:f1:4c:6f:2f:32:e7:7b:f3:9d:85:77: 4c:1f:25:34:6e:53:a5:de:fb:3b:7b:95:fa:dd:ce:75:d2:4a: c7:5d:2b:a2:f5:ba:de:d6:f3:f0:31:7c:11:4d:bb:65:22:6a: 40:46:a0:1d:d5:1d:64:86:ef:f4:b6:c0:98:cb:53:b7:21:86: 44:f0:ca:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jfLaeM1AQOc4n8a7/SpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MzRjYWI0NDUwNDA0ODYyYjIwMWZlNzMzZjJjNzBhNmJm NTI5MjQwHhcNMjUxMjA2MDQwMTE3WhcNMjUxMjA3MDQwMTE3WjAzMTEwLwYDVQQD Eyg5ODNjYjYxNmU3OTI4MDcyZWZhNTQ2Y2UwYTk3NzJiNTIzOTM5OGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsqY58y0SSC+rndRl9/Rd0LBnivV 2ULnLFsiFS9C0K+mvkHAdwS+m+YKXfxtqG0S/38NsMSl5crxDuMMXAIeIEyH6WSh jLHjLlzC+sLJCcZ5J//qdCUzb6laz+/4hqVLeJU/CjUri5tnFnUW+W9rVL9FeHYj IFmZqpv5HO+4VB2goGSHa7JEQTzn34bjyUud3buMT+ROQI0vzS8sPvCubhWLirR7 AggmqrQUxHX8MsF8kvxdg00rl2mkDzA8DpxR1/UWlmKIc6Oz8h8CfN8ovbV0AISi p6fmSFuS2wlBwhI/ISTAaSVgp5EZtEEMLQBwEjyaSfgergzGegvJmM68CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJg8thbnkoBy76VGzgqXcrUjk5jhMB8GA1UdIwQY MBaAFEU0yrRFBASGKyAf5zPyxwpr9SkkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlRUS3RFVUVCSVlySUJfbk1fTEhDbXYxS1NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81ZDQ2NzgtNDk3Yy00NzQwLTk0MGYt NmIwODRlYTk5OTNmLzEvUlRUS3RFVUVCSVlySUJfbk1fTEhDbXYxS1NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81ZDQ2NzgtNDk3Yy00NzQwLTk0MGYtNmIwODRlYTk5OTNm LzEvUlRUS3RFVUVCSVlySUJfbk1fTEhDbXYxS1NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAHR3FcGt bcJXcejJURhENZBFiHqoZbCkU6UySLjfUDHL7TLMAqaLWy9e3F91iuKzc2GpET8F wB7Vx6Lh0YwmekmzGaDwUx5WTqLzWKBUhlahLe7PwtcqWuT2VahiJCDGSAWXVVA8 n7Lk6AQmx4Ww7+6esXG8MOFLoKEo5gOtK0m0vQf95p3jZACA+jHL3JM3AoWokmad nKK6QoA5iy4YOVR72oHGSn2hiUhws8t8BzgSDff+9E8Da/7t4PFMby8y53vznYV3 TB8lNG5Tpd77O3uV+t3OddJKx10rovW63tbz8DF8EU27ZSJqQEagHdUdZIbv9LbA mMtTtyGGRPDKzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:23:26 2025 by rpki-client