This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft File: TTuCKQwugJCSSp79nFF8oUpcNwQ.mft (raw, json) Hash identifier: 6uhV/YXm7YPeO4bljc8f/ckIblXBH1rOd4Ffy07Gqag= Subject key identifier: 9D:36:F3:7B:4A:6A:8C:45:8F:A4:20:05:AA:6C:94:76:0F:C8:F6:04 Authority key identifier: 4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04 Certificate issuer: /CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704 Certificate serial: 019AF12D78D8248FC8B4D1D479A81A52DC8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 01:01:20 +0000 Manifest this update: Sat 06 Dec 2025 01:01:20 +0000 Manifest next update: Sun 07 Dec 2025 01:01:20 +0000 Files and hashes: 1: TTuCKQwugJCSSp79nFF8oUpcNwQ.crl (hash: 2cLhb2aewzUo9cUIDJpaRrf+Ue4HqDJXqJpaE+RJbUY=) 2: pdjC9ITQ24acWwqpMZ438xSZhiA.roa (hash: J1OLMcnc+nGL4fyVYlLU268vrwR6/zxGbhF2T7OJ2uY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:78:d8:24:8f:c8:b4:d1:d4:79:a8:1a:52:dc:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704 Validity Not Before: Dec 6 01:01:20 2025 GMT Not After : Dec 7 01:01:20 2025 GMT Subject: CN=9d36f37b4a6a8c458fa42005aa6c94760fc8f604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a8:1f:61:81:8d:93:4a:bf:5d:5e:71:0d:bf: d1:a2:6c:61:8b:3e:75:27:55:14:22:14:64:90:38: 40:e5:9e:57:f1:80:c7:fb:63:75:e3:4d:71:dd:0d: 8f:e8:b3:4c:79:96:4b:c2:f9:7d:df:fb:94:db:f0: 39:67:57:70:5b:f4:90:e8:56:a6:bb:d1:0c:f0:a4: af:5d:3f:59:83:ae:1a:f7:9d:68:8d:4b:5b:e5:bf: 2d:ba:f8:5d:63:a2:f3:1e:3b:47:e5:9f:28:6f:79: 50:da:cf:38:4c:3b:47:d7:3c:31:5a:bd:0b:60:bf: b2:19:38:32:4a:f9:9d:dd:82:f3:8c:d3:62:0a:84: c7:91:92:78:7c:03:e0:14:84:de:64:14:5e:2c:4e: 05:c7:d4:0a:9d:92:f1:18:6b:57:a1:79:fd:fd:64: 6d:0b:a6:18:a6:27:fb:93:e2:af:e3:4f:1c:c7:ba: 4f:ef:a9:5a:d0:c6:8a:a0:38:6b:d3:bd:b0:47:3b: 5b:0f:0f:5f:42:57:27:a1:21:84:78:5d:84:d3:be: c6:ff:12:ae:49:7e:72:30:e8:0c:95:eb:1a:e8:79: ee:49:a6:d3:11:be:d8:71:c5:e7:da:9d:7f:cd:5a: 57:ed:05:26:8a:6c:af:31:01:45:85:f5:63:21:ef: b1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:36:F3:7B:4A:6A:8C:45:8F:A4:20:05:AA:6C:94:76:0F:C8:F6:04 X509v3 Authority Key Identifier: keyid:4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:16:fc:36:2a:4b:26:84:e6:bb:89:b0:9b:86:f1:af:1b:5a: d4:04:b8:ea:cf:3a:87:00:5f:f6:60:f3:79:f0:50:0c:10:33: 4c:2a:da:50:3f:89:4b:e9:d1:e1:90:b8:e1:d2:4d:20:27:ae: cc:6f:56:05:80:65:b4:f1:ad:1b:7d:ee:0f:e5:05:2c:4d:0e: da:78:7d:a4:a9:ae:6f:0e:2a:86:cd:1e:2b:c4:da:24:e2:14: 17:1b:c6:a3:ab:91:63:6b:25:fa:02:1f:eb:5a:f0:7d:a0:0d: db:9d:f1:27:02:01:7e:96:e2:a7:c4:ad:e6:c0:19:3a:43:c3: b0:b5:22:82:d7:87:68:0b:02:33:2c:79:23:10:88:94:7f:44: 60:84:aa:9e:ee:b9:70:cd:c6:08:58:ba:62:25:c7:0a:3a:f9: 88:34:34:ce:d9:3d:17:73:1b:af:d9:27:ce:2e:46:1b:15:fc: 48:fb:f7:63:9d:49:98:a1:b0:ba:e4:7e:ad:c4:1f:c9:0b:21: 6e:51:0f:9e:e2:28:89:ac:65:9d:4f:e4:f0:11:1c:98:09:d8: 4c:78:92:81:24:6f:bd:4d:12:bb:7e:b8:25:6a:fb:ca:d1:76: 29:90:05:89:96:81:60:84:78:aa:e5:23:a6:de:b1:22:5b:ea: 65:41:60:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXjYJI/ItNHUeagaUtyLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkM2I4MjI5MGMyZTgwOTA5MjRhOWVmZDljNTE3Y2ExNGE1 YzM3MDQwHhcNMjUxMjA2MDEwMTIwWhcNMjUxMjA3MDEwMTIwWjAzMTEwLwYDVQQD Eyg5ZDM2ZjM3YjRhNmE4YzQ1OGZhNDIwMDVhYTZjOTQ3NjBmYzhmNjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqagfYYGNk0q/XV5xDb/Romxhiz51 J1UUIhRkkDhA5Z5X8YDH+2N1401x3Q2P6LNMeZZLwvl93/uU2/A5Z1dwW/SQ6Fam u9EM8KSvXT9Zg64a951ojUtb5b8tuvhdY6LzHjtH5Z8ob3lQ2s84TDtH1zwxWr0L YL+yGTgySvmd3YLzjNNiCoTHkZJ4fAPgFITeZBReLE4Fx9QKnZLxGGtXoXn9/WRt C6YYpif7k+Kv408cx7pP76la0MaKoDhr072wRztbDw9fQlcnoSGEeF2E077G/xKu SX5yMOgMlesa6HnuSabTEb7YccXn2p1/zVpX7QUmimyvMQFFhfVjIe+x9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0283tKaoxFj6QgBapslHYPyPYEMB8GA1UdIwQY MBaAFE07gikMLoCQkkqe/ZxRfKFKXDcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFR1Q0tRd3VnSkNTU3A3OW5GRjhvVXBjTndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jNWNjZDgtOGYwZC00ODYyLTg2YWEt ZDk3OWVjZTkzMjg1LzEvVFR1Q0tRd3VnSkNTU3A3OW5GRjhvVXBjTndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9jNWNjZDgtOGYwZC00ODYyLTg2YWEtZDk3OWVjZTkzMjg1 LzEvVFR1Q0tRd3VnSkNTU3A3OW5GRjhvVXBjTndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRb8NipL JoTmu4mwm4bxrxta1AS46s86hwBf9mDzefBQDBAzTCraUD+JS+nR4ZC44dJNICeu zG9WBYBltPGtG33uD+UFLE0O2nh9pKmubw4qhs0eK8TaJOIUFxvGo6uRY2sl+gIf 61rwfaAN253xJwIBfpbip8St5sAZOkPDsLUigteHaAsCMyx5IxCIlH9EYISqnu65 cM3GCFi6YiXHCjr5iDQ0ztk9F3Mbr9knzi5GGxX8SPv3Y51JmKGwuuR+rcQfyQsh blEPnuIoiaxlnU/k8BEcmAnYTHiSgSRvvU0Su364JWr7ytF2KZAFiZaBYIR4quUj pt6xIlvqZUFgBw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:42 2025 by rpki-client