This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft File: TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json) Hash identifier: Z4S8rQdquDLFMa6FiM5a44yWoud69fZl+9EGowTfOL8= Subject key identifier: F5:CE:BF:A0:47:94:46:B7:A6:53:44:71:72:2D:D4:E8:DF:9B:73:8E Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace Certificate serial: 019AF1D1E9AE8B3A82A6126FC6B4B49434BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft Manifest number: 0271 Signing time: Sat 06 Dec 2025 04:00:57 +0000 Manifest this update: Sat 06 Dec 2025 04:00:57 +0000 Manifest next update: Sun 07 Dec 2025 04:00:57 +0000 Files and hashes: 1: LpPDa_hMKwPOheYcHrNv5BDTWog.roa (hash: 2CoZfLFeobkKqc9qZWTYrYW94wPP5u5Zmz2xUC1WQvs=) 2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: cAoD3Xo0sTzw4M2cf1vCgRBLAd7Ru+/LuXFYUCtES0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e9:ae:8b:3a:82:a6:12:6f:c6:b4:b4:94:34:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace Validity Not Before: Dec 6 04:00:57 2025 GMT Not After : Dec 7 04:00:57 2025 GMT Subject: CN=f5cebfa0479446b7a6534471722dd4e8df9b738e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:35:a0:da:d8:57:cd:df:25:75:14:e6:b7:fb: 14:66:25:c2:58:00:c5:10:73:9b:b5:d4:0e:58:70: 1e:b2:b2:b9:de:b1:f3:2d:c9:88:57:94:87:55:6e: 1c:5c:24:fc:bc:28:19:60:a0:82:94:2a:22:72:53: 39:45:cd:66:f5:ac:11:2b:80:d8:ff:5c:da:53:d3: fc:c1:47:fc:06:5e:6a:b9:bd:ac:28:2e:10:c9:25: cf:c0:69:d5:d2:6e:70:cc:6a:de:c7:89:9f:fd:0a: 66:04:34:94:0e:d9:31:29:fa:c9:10:18:7f:32:ec: 67:7d:25:c7:cd:bf:c9:4b:03:cc:d5:a7:89:ef:ec: e1:dd:b3:15:21:ea:af:e6:05:98:f3:d0:2f:9a:d2: 7e:ac:b2:28:fa:85:cf:42:47:a3:11:ef:4e:eb:0f: 96:ad:7d:e2:5e:24:07:b8:61:6f:5e:ac:08:29:07: 35:0e:74:7b:13:3f:df:2b:6e:a7:6a:4d:32:f2:26: cf:2a:5d:6f:9c:f2:33:9d:59:38:09:ac:7a:d4:09: 71:3e:09:e4:a7:7f:55:fe:7c:cb:03:8d:b1:85:5f: 37:f8:7b:36:21:dd:43:b8:13:e0:6f:8a:88:82:68: 8b:16:c4:e4:64:87:50:09:5b:1d:cb:91:f1:2f:7c: ce:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:CE:BF:A0:47:94:46:B7:A6:53:44:71:72:2D:D4:E8:DF:9B:73:8E X509v3 Authority Key Identifier: keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:03:85:ad:86:31:22:97:d3:b5:88:28:13:22:77:d9:0d:97: ba:ca:23:60:9c:0a:af:ce:58:5f:16:79:82:66:44:cf:38:7a: 11:23:a7:ef:94:91:ce:2c:19:fc:01:a5:d1:7e:24:20:11:16: dc:dc:bc:41:e9:86:2f:7d:ed:96:b3:20:f3:a8:36:2c:0a:5b: ad:ef:a3:64:98:dc:6d:39:dc:eb:5a:0f:1c:fe:a7:ba:fa:cb: 2a:e4:23:b7:49:4e:31:23:df:1f:c0:2b:42:e9:a9:85:d9:ac: 70:86:49:c3:06:48:1a:31:f5:64:16:68:8a:78:00:a3:f8:3e: 68:4d:68:19:ce:b4:f7:b0:ff:3e:65:92:b4:c9:e9:70:fe:fa: 2b:ff:05:64:bc:38:5a:2e:20:22:8c:f0:c2:ec:c5:af:49:6a: 39:e6:3d:df:79:9a:ce:34:dc:3e:bd:42:de:6c:1c:ab:97:42: d9:67:57:2b:72:ec:29:8a:53:59:69:55:a9:14:51:63:3e:a7: 13:cc:5c:0f:b9:a2:ef:28:a9:32:8a:ef:35:3c:89:fd:67:08: f1:a1:88:68:26:17:c4:53:8c:bd:39:90:72:65:76:30:c0:cc: fd:f3:a2:fc:e4:eb:ec:a3:ff:d7:8a:29:ac:51:2d:00:99:74: ee:81:3a:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0emuizqCphJvxrS0lDS+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZDMyNGNjYzA5MGI4MzE4Mjk5MTdhZWFmNzM4MzRmMDgz NDRhY2UwHhcNMjUxMjA2MDQwMDU3WhcNMjUxMjA3MDQwMDU3WjAzMTEwLwYDVQQD EyhmNWNlYmZhMDQ3OTQ0NmI3YTY1MzQ0NzE3MjJkZDRlOGRmOWI3MzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTWg2thXzd8ldRTmt/sUZiXCWADF EHObtdQOWHAesrK53rHzLcmIV5SHVW4cXCT8vCgZYKCClCoiclM5Rc1m9awRK4DY /1zaU9P8wUf8Bl5qub2sKC4QySXPwGnV0m5wzGrex4mf/QpmBDSUDtkxKfrJEBh/ MuxnfSXHzb/JSwPM1aeJ7+zh3bMVIeqv5gWY89AvmtJ+rLIo+oXPQkejEe9O6w+W rX3iXiQHuGFvXqwIKQc1DnR7Ez/fK26nak0y8ibPKl1vnPIznVk4Cax61AlxPgnk p39V/nzLA42xhV83+Hs2Id1DuBPgb4qIgmiLFsTkZIdQCVsdy5HxL3zO5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXOv6BHlEa3plNEcXIt1Ojfm3OOMB8GA1UdIwQY MBaAFE7TJMzAkLgxgpkXrq9zg08INErOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMTdjMzctNjFiNi00ZDQwLTg4MWEt NTNhMDg0MzkwNTI3LzEvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8wMTdjMzctNjFiNi00ZDQwLTg4MWEtNTNhMDg0MzkwNTI3 LzEvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngOFrYYx IpfTtYgoEyJ32Q2XusojYJwKr85YXxZ5gmZEzzh6ESOn75SRziwZ/AGl0X4kIBEW 3Ny8QemGL33tlrMg86g2LApbre+jZJjcbTnc61oPHP6nuvrLKuQjt0lOMSPfH8Ar QumphdmscIZJwwZIGjH1ZBZoingAo/g+aE1oGc6097D/PmWStMnpcP76K/8FZLw4 Wi4gIozwwuzFr0lqOeY933mazjTcPr1C3mwcq5dC2WdXK3LsKYpTWWlVqRRRYz6n E8xcD7mi7yipMorvNTyJ/WcI8aGIaCYXxFOMvTmQcmV2MMDM/fOi/OTr7KP/14op rFEtAJl07oE65A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:33 2025 by rpki-client