This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft File: TtaClltaFeoMReqF7z20vnFnlpY.mft (raw, json) Hash identifier: JGl5i/RHRJ3hhnei/topJ4W7u43GEZyUqKZEOsQooII= Subject key identifier: AB:F4:85:54:B0:5D:53:D5:FA:8E:F9:08:C6:4B:6A:94:CF:65:CC:B0 Authority key identifier: 4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96 Certificate issuer: /CN=4ed682965b5a15ea0c45ea85ef3db4be71679696 Certificate serial: 019AF2764F4FAB1E5C3DF056052DE2B4B81B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft Manifest number: 0588 Signing time: Sat 06 Dec 2025 07:00:30 +0000 Manifest this update: Sat 06 Dec 2025 07:00:30 +0000 Manifest next update: Sun 07 Dec 2025 07:00:30 +0000 Files and hashes: 1: 3aqe87dN2fz6qQQtxNwtFo2__ps.roa (hash: Lt1Bd1g6jAvktpInXW5Oo10n3abY0buPeadfOybeVY0=) 2: TtaClltaFeoMReqF7z20vnFnlpY.crl (hash: 8V4Ev6VHivWh6pQXiWXNfdJSK/lhzhVkGaGum3Qv4GY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:4f:4f:ab:1e:5c:3d:f0:56:05:2d:e2:b4:b8:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ed682965b5a15ea0c45ea85ef3db4be71679696 Validity Not Before: Dec 6 07:00:30 2025 GMT Not After : Dec 7 07:00:30 2025 GMT Subject: CN=abf48554b05d53d5fa8ef908c64b6a94cf65ccb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:08:7e:2b:85:e8:6d:f0:66:01:1a:59:6a: 91:f5:9e:c2:f3:a0:53:be:e4:f3:c6:73:08:d8:e9: 4d:27:7a:48:ae:fd:3d:07:8e:5f:e3:18:95:4b:2e: 5d:df:0c:93:c1:03:fc:3a:04:a7:72:43:f8:d9:43: 56:5d:37:fd:5c:36:df:45:96:38:98:8e:b3:18:d1: 57:63:37:6a:bd:da:82:34:25:2b:33:98:57:19:a9: 0b:49:b3:9b:7b:f4:ca:4d:e4:f4:66:ee:05:93:ee: 1a:34:ab:bf:e5:ad:0b:57:36:bf:09:64:83:75:b3: 7f:99:29:d6:e0:c6:61:98:37:e6:4e:54:e9:ab:2c: 3b:e1:5c:ed:82:89:b5:5a:af:d3:d5:0f:44:cf:42: 40:0e:f1:cc:4c:8a:f9:01:95:65:25:ba:80:7d:77: 6e:06:bd:aa:ac:14:28:2f:96:0f:11:10:9c:63:01: 34:83:30:1d:9b:7e:c3:74:8a:95:e9:72:d6:c0:1a: d4:8c:f0:15:d3:f9:0c:5e:a4:51:57:56:89:d6:7b: 7a:2b:63:57:33:cc:23:af:1d:dc:4b:5b:6c:13:69: 83:5c:e8:d5:80:38:33:53:8f:3f:3f:c5:9f:69:4b: dc:e0:cb:7f:3a:97:50:ee:5f:fb:5b:8d:23:59:03: 03:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F4:85:54:B0:5D:53:D5:FA:8E:F9:08:C6:4B:6A:94:CF:65:CC:B0 X509v3 Authority Key Identifier: keyid:4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:a1:d3:a3:89:13:17:5b:60:65:38:fa:73:52:a5:fd:80:b8: ac:28:fd:a6:31:6a:73:4c:7d:a5:bb:d4:4b:66:c4:61:c5:b4: 52:65:76:4e:44:c6:a3:57:4d:4b:1f:62:31:97:65:9a:48:c4: 62:7f:d8:35:76:a6:5b:38:32:7d:fb:f9:07:e5:5b:c2:86:e7: 3c:16:65:0a:50:d4:6c:27:2f:ea:aa:6b:a1:ee:7d:9d:11:49: e4:ae:7c:1d:46:2f:c7:48:0c:c6:91:a7:70:67:18:c9:05:c1: 39:63:9b:e5:1c:a1:5d:36:dd:4f:0d:c5:e2:c2:a5:9d:c3:6b: de:d1:06:72:c9:a8:72:4c:d6:ef:60:1d:1e:b7:e8:5a:b5:4c: 39:8c:53:34:57:34:94:c5:a0:53:e6:54:6b:d9:0f:2f:db:58: 26:ef:31:88:c8:a9:5e:51:a3:29:af:42:84:2f:7b:91:1f:88: 43:2e:96:48:59:78:57:57:57:42:8f:f4:8c:e9:8b:fc:12:d1: cc:85:a6:be:a5:46:f7:d4:41:4c:b3:cd:a6:86:83:7b:b2:d4: de:e4:42:8e:ac:1c:a2:8e:62:ca:ae:14:8b:20:6c:b7:04:92: 24:7c:06:23:46:49:53:58:df:54:c9:2a:52:3e:01:69:e0:d8: 00:0f:8c:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydk9Pqx5cPfBWBS3itLgbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZDY4Mjk2NWI1YTE1ZWEwYzQ1ZWE4NWVmM2RiNGJlNzE2 Nzk2OTYwHhcNMjUxMjA2MDcwMDMwWhcNMjUxMjA3MDcwMDMwWjAzMTEwLwYDVQQD EyhhYmY0ODU1NGIwNWQ1M2Q1ZmE4ZWY5MDhjNjRiNmE5NGNmNjVjY2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQEIfiuF6G3wZgEaWWqR9Z7C86BT vuTzxnMI2OlNJ3pIrv09B45f4xiVSy5d3wyTwQP8OgSnckP42UNWXTf9XDbfRZY4 mI6zGNFXYzdqvdqCNCUrM5hXGakLSbObe/TKTeT0Zu4Fk+4aNKu/5a0LVza/CWSD dbN/mSnW4MZhmDfmTlTpqyw74Vztgom1Wq/T1Q9Ez0JADvHMTIr5AZVlJbqAfXdu Br2qrBQoL5YPERCcYwE0gzAdm37DdIqV6XLWwBrUjPAV0/kMXqRRV1aJ1nt6K2NX M8wjrx3cS1tsE2mDXOjVgDgzU48/P8WfaUvc4Mt/OpdQ7l/7W40jWQMDxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKv0hVSwXVPV+o75CMZLapTPZcywMB8GA1UdIwQY MBaAFE7WgpZbWhXqDEXqhe89tL5xZ5aWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHRhQ2xsdGFGZW9NUmVxRjd6MjB2bkZubHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zZTQwMWItNjRjMS00MWFhLTk4ZGYt MTMzZTdlNmY2MDY5LzEvVHRhQ2xsdGFGZW9NUmVxRjd6MjB2bkZubHBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zZTQwMWItNjRjMS00MWFhLTk4ZGYtMTMzZTdlNmY2MDY5 LzEvVHRhQ2xsdGFGZW9NUmVxRjd6MjB2bkZubHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqHTo4kT F1tgZTj6c1Kl/YC4rCj9pjFqc0x9pbvUS2bEYcW0UmV2TkTGo1dNSx9iMZdlmkjE Yn/YNXamWzgyffv5B+VbwobnPBZlClDUbCcv6qproe59nRFJ5K58HUYvx0gMxpGn cGcYyQXBOWOb5RyhXTbdTw3F4sKlncNr3tEGcsmockzW72AdHrfoWrVMOYxTNFc0 lMWgU+ZUa9kPL9tYJu8xiMipXlGjKa9ChC97kR+IQy6WSFl4V1dXQo/0jOmL/BLR zIWmvqVG99RBTLPNpoaDe7LU3uRCjqwcoo5iyq4UiyBstwSSJHwGI0ZJU1jfVMkq Uj4BaeDYAA+MOw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:49 2025 by rpki-client