This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft File: TtTTbmM3JKGxeUm8QiR2lk518GU.mft (raw, json) Hash identifier: 76yePfxfcvqSnPG0qW9TrECnokVIfhXR2LIhgxCSLFA= Subject key identifier: 12:EC:EA:B8:F9:ED:1C:E4:83:98:CF:03:92:97:61:FA:1F:C3:26:51 Authority key identifier: 4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65 Certificate issuer: /CN=4ed4d36e633724a1b17949bc422476964e75f065 Certificate serial: 019AF2ADF707C769DE6D1ED4BB45725A972C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 08:01:18 +0000 Manifest this update: Sat 06 Dec 2025 08:01:18 +0000 Manifest next update: Sun 07 Dec 2025 08:01:18 +0000 Files and hashes: 1: CnryW-h9KBqAbLH3yoElsj6kkME.roa (hash: LGWkYgge1+9ItWTLHb68eWMOdZQGepA7ESiUA3d7dLI=) 2: TtTTbmM3JKGxeUm8QiR2lk518GU.crl (hash: RAT5ifZ87Tx9deTXzOSy/4AIK5Hv2/kKHJfQZ+yy2u4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:f7:07:c7:69:de:6d:1e:d4:bb:45:72:5a:97:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ed4d36e633724a1b17949bc422476964e75f065 Validity Not Before: Dec 6 08:01:18 2025 GMT Not After : Dec 7 08:01:18 2025 GMT Subject: CN=12eceab8f9ed1ce48398cf03929761fa1fc32651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:58:1c:cb:0b:0f:f0:b2:64:19:5e:dc:ad:27: 92:66:7b:e9:f0:91:87:1b:46:16:97:1b:61:90:8c: 38:ff:fb:37:d1:d4:8b:25:15:bf:ef:42:32:41:8a: 7c:73:b7:ec:38:6e:40:94:1a:17:ac:e4:78:8c:04: 8d:5d:7e:ee:69:5f:2c:23:c7:99:52:64:86:24:cb: 2c:f5:9f:f4:1c:41:8c:21:1c:bd:41:5c:bb:89:11: 01:8b:7e:ba:ca:19:6b:be:16:f7:dd:d7:96:3c:33: 93:a7:97:a8:24:34:44:41:4d:1e:69:f7:f0:bd:92: 13:a6:88:ac:a9:98:55:08:fc:f8:b5:39:86:ea:bd: c2:80:ac:0a:30:52:6a:4e:1c:c8:2e:99:c6:20:8c: 69:b1:54:d4:70:9e:5f:ef:91:3d:49:23:6d:3b:b2: db:58:c2:bb:63:48:9f:8a:12:b1:58:d6:02:40:48: 9a:3d:f0:32:1d:b8:d7:a2:4b:77:74:87:39:1f:83: 9e:e6:03:c2:5b:d9:12:e7:55:2e:8f:ea:57:f8:22: 96:e6:47:bd:cf:95:0b:07:af:49:4a:69:a4:94:51: 01:3c:aa:30:e2:ac:b3:3d:6b:81:7a:43:96:cb:50: 3a:37:2b:44:97:67:73:d8:ad:c7:50:d4:4c:24:05: a7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EC:EA:B8:F9:ED:1C:E4:83:98:CF:03:92:97:61:FA:1F:C3:26:51 X509v3 Authority Key Identifier: keyid:4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d7:d2:bb:93:94:5f:ed:53:c9:7b:c8:51:26:41:33:2a:4e: 70:95:d8:d8:20:36:c7:4a:69:3f:1b:25:93:86:d3:89:e6:c1: 30:36:2b:f6:7a:b8:f1:d7:21:0d:ce:d9:a1:d0:74:43:83:a1: 7a:40:7c:23:a2:ca:e2:62:f8:51:a4:4f:60:d4:82:7b:6f:5a: ca:ae:b7:6f:bd:73:b0:30:52:2f:d8:6b:57:b2:21:e1:2a:a3: 55:b1:13:89:75:01:ca:0d:e4:31:0c:a4:f5:09:eb:27:fa:7e: 2a:17:7c:58:5a:51:96:f0:01:fc:a2:14:34:3f:29:65:37:d9: 96:09:e6:f0:16:1f:a3:30:11:5e:f2:af:43:64:a3:d5:61:45: 92:f5:45:cd:48:21:40:af:56:fb:e1:e8:64:4a:86:b3:5e:65: 99:fc:53:4e:a8:e2:b6:32:e9:fb:00:a0:92:94:2f:8a:76:b8: fe:29:cf:0b:5c:a3:e0:94:1c:08:04:02:8c:76:23:35:96:12: c9:42:c3:44:74:75:6a:76:e5:4b:27:66:31:24:a5:f4:46:88: ed:e5:54:05:9a:e1:f2:c4:52:12:5e:e2:5b:90:9d:3f:59:e7: 70:1d:6b:7f:ef:6f:29:be:f5:be:24:5d:32:c1:f3:1c:f7:cf: 5c:bc:64:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrfcHx2nebR7Uu0VyWpcsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZDRkMzZlNjMzNzI0YTFiMTc5NDliYzQyMjQ3Njk2NGU3 NWYwNjUwHhcNMjUxMjA2MDgwMTE4WhcNMjUxMjA3MDgwMTE4WjAzMTEwLwYDVQQD EygxMmVjZWFiOGY5ZWQxY2U0ODM5OGNmMDM5Mjk3NjFmYTFmYzMyNjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVgcywsP8LJkGV7crSeSZnvp8JGH G0YWlxthkIw4//s30dSLJRW/70IyQYp8c7fsOG5AlBoXrOR4jASNXX7uaV8sI8eZ UmSGJMss9Z/0HEGMIRy9QVy7iREBi366yhlrvhb33deWPDOTp5eoJDREQU0eaffw vZITpoisqZhVCPz4tTmG6r3CgKwKMFJqThzILpnGIIxpsVTUcJ5f75E9SSNtO7Lb WMK7Y0ifihKxWNYCQEiaPfAyHbjXokt3dIc5H4Oe5gPCW9kS51Uuj+pX+CKW5ke9 z5ULB69JSmmklFEBPKow4qyzPWuBekOWy1A6NytEl2dz2K3HUNRMJAWnpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLs6rj57Rzkg5jPA5KXYfofwyZRMB8GA1UdIwQY MBaAFE7U025jNyShsXlJvEIkdpZOdfBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHRUVGJtTTNKS0d4ZVVtOFFpUjJsazUxOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82ODZkNGItZjE1Yi00NTMwLWI5MWIt ZTBjNDA2YjY0NjcyLzEvVHRUVGJtTTNKS0d4ZVVtOFFpUjJsazUxOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy82ODZkNGItZjE1Yi00NTMwLWI5MWItZTBjNDA2YjY0Njcy LzEvVHRUVGJtTTNKS0d4ZVVtOFFpUjJsazUxOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNfSu5OU X+1TyXvIUSZBMypOcJXY2CA2x0ppPxslk4bTiebBMDYr9nq48dchDc7ZodB0Q4Oh ekB8I6LK4mL4UaRPYNSCe29ayq63b71zsDBSL9hrV7Ih4SqjVbETiXUByg3kMQyk 9QnrJ/p+Khd8WFpRlvAB/KIUND8pZTfZlgnm8BYfozARXvKvQ2Sj1WFFkvVFzUgh QK9W++HoZEqGs15lmfxTTqjitjLp+wCgkpQvina4/inPC1yj4JQcCAQCjHYjNZYS yULDRHR1anblSydmMSSl9EaI7eVUBZrh8sRSEl7iW5CdP1nncB1rf+9vKb71viRd MsHzHPfPXLxkAA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:27 2025 by rpki-client