This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json) Hash identifier: hH/Gv1rIbxKTFcUr5f1ABMAy2H3KtsBnrgzYx8YgOcg= Subject key identifier: 59:F4:A8:F5:4E:8F:97:9B:D7:73:30:5F:BE:77:E1:35:58:D1:D8:63 Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d Certificate serial: 019AF3F7F53A9144549C3FC4D49086A1F88F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft Manifest number: 10E0 Signing time: Sat 06 Dec 2025 14:01:44 +0000 Manifest this update: Sat 06 Dec 2025 14:01:44 +0000 Manifest next update: Sun 07 Dec 2025 14:01:44 +0000 Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: e3SG5bTYxuBL9AM1NL87ZnvuwaP7ngxfmyvDOqqv3bs=) 2: eOJpQF5FNoppqB79NhjuknNPvas.roa (hash: 0TneR6h3XAtyeO7uLkVkGQTYXZHCJ04//nJtpw2jBn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:f5:3a:91:44:54:9c:3f:c4:d4:90:86:a1:f8:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d Validity Not Before: Dec 6 14:01:44 2025 GMT Not After : Dec 7 14:01:44 2025 GMT Subject: CN=59f4a8f54e8f979bd773305fbe77e13558d1d863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8a:01:08:74:6f:36:de:62:d5:d5:d2:70:d5: 5b:dd:65:b9:d1:f2:e6:8e:aa:ad:d3:6f:cf:85:a1: 57:2a:a5:0f:4c:cd:fc:64:53:11:46:9d:9c:2c:c1: 3f:2a:dc:72:d2:59:73:72:a1:f5:3d:42:19:9d:35: 1e:02:a2:85:18:cc:9f:8a:ee:f0:a8:a4:79:d1:7f: 4b:2a:7c:0e:aa:68:55:d2:b8:51:be:3b:48:9c:f1: d9:cd:f2:a2:df:d6:10:f0:e7:0e:3e:67:be:44:c5: 58:34:5b:56:f2:eb:e9:ab:e5:1c:b0:02:6e:0d:f9: fb:24:ae:96:b3:f9:58:74:e9:9b:cb:fa:05:45:f2: 5e:f8:8f:31:a8:07:47:82:77:be:ac:c7:34:a8:1f: 88:bd:9a:04:33:6c:9a:01:c0:15:42:ae:3f:cd:ad: eb:55:20:7a:31:b4:ca:f3:a8:3b:e7:53:06:c2:48: 49:ba:27:a4:b8:ab:22:43:3b:cc:d5:10:91:d9:e0: 9b:23:57:41:42:7c:d4:c3:75:55:43:59:7e:f2:84: 2f:f7:be:7b:37:c3:73:38:b5:6d:a5:ca:39:d8:ca: 25:7b:0d:4d:b8:94:e0:6e:97:21:b1:92:6b:cf:c8: b5:e1:48:75:86:4d:62:bc:73:46:81:ab:91:e4:0e: 79:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F4:A8:F5:4E:8F:97:9B:D7:73:30:5F:BE:77:E1:35:58:D1:D8:63 X509v3 Authority Key Identifier: keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:13:a7:54:98:36:e1:b3:ea:2b:c1:81:5f:c9:72:fc:11:90: 2e:c5:4c:0a:37:cc:32:82:43:ec:28:13:d8:37:23:49:61:c7: 99:6b:7c:5e:c1:84:4e:d6:b8:18:cc:ad:0e:92:95:af:65:e8: 7b:1c:5e:2b:dc:4d:93:2d:9b:bc:0a:5c:99:aa:39:02:7a:b1: 91:9c:d0:00:a4:f9:c5:46:27:7d:42:12:d6:44:44:e9:4c:7a: 01:d4:91:36:9a:68:7e:53:81:ea:1a:8b:81:70:7f:15:ce:bd: ab:e6:bf:82:54:6f:c7:af:c3:6b:f2:fd:22:af:fe:3e:15:70: da:82:68:76:8e:2f:ab:39:89:14:0d:28:66:42:ab:91:a7:9d: db:9a:be:46:49:73:46:c1:2d:13:a6:d2:a5:d9:12:f7:de:c8: 36:01:ba:bd:ea:30:da:b3:54:36:df:41:9c:32:4f:9a:68:52: ba:0c:3c:14:3c:ad:16:bf:d8:2d:e0:70:6a:52:96:16:74:95: 98:b4:c8:5e:4f:97:d6:34:30:54:39:f9:f1:29:c6:ae:64:6d: 64:4e:f0:23:10:1c:73:75:40:79:36:f8:4b:04:c1:bc:14:5c: 56:89:60:20:2a:df:d0:b8:ed:69:e3:ec:0c:8f:c9:27:6e:d0: 40:d0:39:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9/U6kURUnD/E1JCGofiPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZDAzN2Q0ZWUzZTVkMjcwNjVhZDgwMzU2NTgyYTJmZGMy YjQ4OGQwHhcNMjUxMjA2MTQwMTQ0WhcNMjUxMjA3MTQwMTQ0WjAzMTEwLwYDVQQD Eyg1OWY0YThmNTRlOGY5NzliZDc3MzMwNWZiZTc3ZTEzNTU4ZDFkODYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4oBCHRvNt5i1dXScNVb3WW50fLm jqqt02/PhaFXKqUPTM38ZFMRRp2cLME/Ktxy0llzcqH1PUIZnTUeAqKFGMyfiu7w qKR50X9LKnwOqmhV0rhRvjtInPHZzfKi39YQ8OcOPme+RMVYNFtW8uvpq+UcsAJu Dfn7JK6Ws/lYdOmby/oFRfJe+I8xqAdHgne+rMc0qB+IvZoEM2yaAcAVQq4/za3r VSB6MbTK86g751MGwkhJuiekuKsiQzvM1RCR2eCbI1dBQnzUw3VVQ1l+8oQv9757 N8NzOLVtpco52Molew1NuJTgbpchsZJrz8i14Uh1hk1ivHNGgauR5A55dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFn0qPVOj5eb13MwX7534TVY0dhjMB8GA1UdIwQY MBaAFE7QN9TuPl0nBlrYA1ZYKi/cK0iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83NGI5OTYtODBlZS00YzM5LThlNzQt MzUwZTY4MWI5OWQxLzEvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83NGI5OTYtODBlZS00YzM5LThlNzQtMzUwZTY4MWI5OWQx LzEvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxOnVJg2 4bPqK8GBX8ly/BGQLsVMCjfMMoJD7CgT2DcjSWHHmWt8XsGETta4GMytDpKVr2Xo exxeK9xNky2bvApcmao5AnqxkZzQAKT5xUYnfUIS1kRE6Ux6AdSRNppoflOB6hqL gXB/Fc69q+a/glRvx6/Da/L9Iq/+PhVw2oJodo4vqzmJFA0oZkKrkaed25q+Rklz RsEtE6bSpdkS997INgG6veow2rNUNt9BnDJPmmhSugw8FDytFr/YLeBwalKWFnSV mLTIXk+X1jQwVDn58SnGrmRtZE7wIxAcc3VAeTb4SwTBvBRcVolgICrf0LjtaePs DI/JJ27QQNA5yQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:29:03 2025 by rpki-client