This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft File: TTR1C-IXPLmwhqd8bepUtKhGmvM.mft (raw, json) Hash identifier: WvvJQoTjTtPxlzdblH2oBS9sKobA/h5CQtqSgPmiVBQ= Subject key identifier: 68:E3:58:A4:A5:69:3B:9D:BF:D6:4F:40:9C:A9:E6:23:B6:00:5A:4D Authority key identifier: 4D:34:75:0B:E2:17:3C:B9:B0:86:A7:7C:6D:EA:54:B4:A8:46:9A:F3 Certificate issuer: /CN=4d34750be2173cb9b086a77c6dea54b4a8469af3 Certificate serial: 019AF540B16077E2BB94066B2E344B0D8BD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft Manifest number: 0AD7 Signing time: Sat 06 Dec 2025 20:00:48 +0000 Manifest this update: Sat 06 Dec 2025 20:00:48 +0000 Manifest next update: Sun 07 Dec 2025 20:00:48 +0000 Files and hashes: 1: TTR1C-IXPLmwhqd8bepUtKhGmvM.crl (hash: /9fNEx7jeynzx3x42l7qmyqtQUFU1V1TLZQR6rJN3B4=) 2: WYXlKPxfFrF5-delsIPB_r6FESQ.roa (hash: cI2mCSSEwOLi9AIJI3IVWlSF6M3b+jAGtzx5i3z7sFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:b1:60:77:e2:bb:94:06:6b:2e:34:4b:0d:8b:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d34750be2173cb9b086a77c6dea54b4a8469af3 Validity Not Before: Dec 6 20:00:48 2025 GMT Not After : Dec 7 20:00:48 2025 GMT Subject: CN=68e358a4a5693b9dbfd64f409ca9e623b6005a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5a:97:bc:8d:c1:1f:8a:5e:76:34:56:a4:a9: 29:f1:38:30:20:37:bd:5d:a6:0e:cf:5c:5d:12:e1: 56:5e:4e:1e:02:89:28:71:67:93:fd:54:4f:72:df: 56:34:96:98:d4:bd:d6:0b:82:be:30:86:74:73:ed: 31:39:90:03:8e:95:d1:6f:90:2a:00:5f:c1:43:93: 00:9e:4e:53:75:6d:ba:2d:7a:f2:7a:09:50:98:6e: a2:9e:38:09:a6:77:65:e9:80:0a:4b:7d:59:19:b4: 99:c5:ba:30:e7:d6:e9:32:2f:75:ff:35:cb:c0:be: 7a:60:52:d1:86:42:84:82:96:73:35:f6:77:36:ab: 76:9e:6d:e3:8c:94:b9:f4:63:2a:96:d7:88:96:10: 21:af:10:35:46:1b:e5:d8:f7:7e:1c:fc:7e:3b:72: c5:41:b5:46:ca:fc:73:c9:88:a8:09:71:6d:4f:ed: a8:26:86:2e:93:1e:b1:54:e0:ce:ea:7b:bc:86:70: 03:eb:b4:19:ac:e7:c3:81:fd:73:3f:7d:fc:cb:d5: d4:b8:d6:95:ba:a4:32:e6:fc:2c:ef:90:d1:ac:ae: ad:77:a6:ae:98:35:3a:d1:a0:c5:54:53:32:8f:f7: f9:5f:f6:a5:b0:3a:c4:c6:a5:03:d9:2c:5d:9f:13: 66:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E3:58:A4:A5:69:3B:9D:BF:D6:4F:40:9C:A9:E6:23:B6:00:5A:4D X509v3 Authority Key Identifier: keyid:4D:34:75:0B:E2:17:3C:B9:B0:86:A7:7C:6D:EA:54:B4:A8:46:9A:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:52:a6:20:86:3c:bf:bc:3f:ad:36:ef:21:2c:e5:c0:3b:5b: b2:47:91:ca:81:d9:5a:53:dd:1a:7c:89:c0:fd:50:1f:fc:20: 68:51:95:51:07:84:1a:b2:87:09:e3:1d:67:5a:36:ea:e5:7b: 6c:7b:35:12:40:19:e4:66:4e:37:9c:96:64:21:33:43:48:f5: 0e:74:23:a4:11:a0:47:22:e6:aa:05:90:b2:1a:9a:98:29:c7: eb:71:1b:7f:fb:59:44:66:b9:c9:66:29:f7:43:48:f0:05:b5: a0:de:c7:a7:1b:56:16:13:92:03:3c:fb:4a:bb:9f:38:14:1b: e1:b6:e1:5a:b0:12:5e:68:50:96:cc:28:3a:6a:d7:e4:12:9a: 37:b8:24:5e:24:50:68:b3:ba:e4:4e:ed:f1:16:50:7c:50:7a: 61:e5:3b:83:b3:9a:c6:32:45:62:cb:39:06:4f:44:d3:eb:6e: a3:62:76:44:98:fa:a4:d2:dd:34:ce:1e:d9:27:76:7c:bd:7c: 8b:31:a3:c4:46:21:91:f9:5d:6a:5a:c4:ad:5d:fd:05:c0:2e: f5:c6:cf:99:80:10:f3:c2:6c:e3:4c:d3:76:63:ee:cb:97:d8: 84:c8:53:35:d0:a3:19:79:86:af:43:42:92:10:51:84:77:fb: da:3d:4d:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QLFgd+K7lAZrLjRLDYvWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMzQ3NTBiZTIxNzNjYjliMDg2YTc3YzZkZWE1NGI0YTg0 NjlhZjMwHhcNMjUxMjA2MjAwMDQ4WhcNMjUxMjA3MjAwMDQ4WjAzMTEwLwYDVQQD Eyg2OGUzNThhNGE1NjkzYjlkYmZkNjRmNDA5Y2E5ZTYyM2I2MDA1YTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlqXvI3BH4pedjRWpKkp8TgwIDe9 XaYOz1xdEuFWXk4eAokocWeT/VRPct9WNJaY1L3WC4K+MIZ0c+0xOZADjpXRb5Aq AF/BQ5MAnk5TdW26LXryeglQmG6injgJpndl6YAKS31ZGbSZxbow59bpMi91/zXL wL56YFLRhkKEgpZzNfZ3Nqt2nm3jjJS59GMqlteIlhAhrxA1Rhvl2Pd+HPx+O3LF QbVGyvxzyYioCXFtT+2oJoYukx6xVODO6nu8hnAD67QZrOfDgf1zP338y9XUuNaV uqQy5vws75DRrK6td6aumDU60aDFVFMyj/f5X/alsDrExqUD2SxdnxNmvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjjWKSlaTudv9ZPQJyp5iO2AFpNMB8GA1UdIwQY MBaAFE00dQviFzy5sIanfG3qVLSoRprzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFRSMUMtSVhQTG13aHFkOGJlcFV0S2hHbXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83Njc3OGUtNWY1Ni00OGVlLWE5ZGUt ZThiMDExZWE4ODk3LzEvVFRSMUMtSVhQTG13aHFkOGJlcFV0S2hHbXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83Njc3OGUtNWY1Ni00OGVlLWE5ZGUtZThiMDExZWE4ODk3 LzEvVFRSMUMtSVhQTG13aHFkOGJlcFV0S2hHbXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFKmIIY8 v7w/rTbvISzlwDtbskeRyoHZWlPdGnyJwP1QH/wgaFGVUQeEGrKHCeMdZ1o26uV7 bHs1EkAZ5GZON5yWZCEzQ0j1DnQjpBGgRyLmqgWQshqamCnH63Ebf/tZRGa5yWYp 90NI8AW1oN7HpxtWFhOSAzz7SrufOBQb4bbhWrASXmhQlswoOmrX5BKaN7gkXiRQ aLO65E7t8RZQfFB6YeU7g7OaxjJFYss5Bk9E0+tuo2J2RJj6pNLdNM4e2Sd2fL18 izGjxEYhkfldalrErV39BcAu9cbPmYAQ88Js40zTdmPuy5fYhMhTNdCjGXmGr0NC khBRhHf72j1NEw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:12:24 2025 by rpki-client