This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft File: Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft (raw, json) Hash identifier: mUWpx8Bdfg8BYELm0cVh7UbJMLAOgimSvK9FnNdlWdo= Subject key identifier: A0:A2:C8:48:30:E7:07:B1:F1:8B:62:F6:09:5C:F4:BE:B0:4D:26:72 Authority key identifier: 4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28 Certificate issuer: /CN=4edc689bb22d09475574f41c0e5d97c045930928 Certificate serial: 019AF1646BF8416F6EA473183B5091E520DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 02:01:21 +0000 Manifest this update: Sat 06 Dec 2025 02:01:21 +0000 Manifest next update: Sun 07 Dec 2025 02:01:21 +0000 Files and hashes: 1: Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl (hash: NMRQenLEa4Po2IQRd5O44pBb5UubYjMfVrqAbUuuv0Q=) 2: zj8x9LPhXlzEHQ9u1uzhgnhO97g.roa (hash: e3RgXnvTwkUusOiV6XnE/u7ua1aPibK0pF3ch7NYWK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:6b:f8:41:6f:6e:a4:73:18:3b:50:91:e5:20:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4edc689bb22d09475574f41c0e5d97c045930928 Validity Not Before: Dec 6 02:01:21 2025 GMT Not After : Dec 7 02:01:21 2025 GMT Subject: CN=a0a2c84830e707b1f18b62f6095cf4beb04d2672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2a:f1:3b:35:73:08:47:6f:0f:ea:cc:1e:8e: 18:bb:52:1a:d6:2d:8a:44:e4:2d:60:8e:1f:55:91: 99:8d:ce:77:bc:6c:a9:1a:6c:2f:5f:16:02:5b:8a: 81:a8:ad:72:d1:f8:95:0d:31:d8:33:11:77:d1:a0: 1d:8b:f2:39:7e:78:48:66:e4:1e:9b:7b:26:93:82: 6b:8a:68:6b:04:71:28:e0:14:46:96:4e:c8:42:a6: 3a:86:4c:1a:e8:11:5c:a8:9a:a4:c6:2e:52:92:42: f6:e4:bc:89:28:9c:a7:77:3a:94:79:7e:d3:bc:53: b0:bc:2b:59:e7:d8:70:32:5b:4e:13:03:9e:c1:4b: a2:cd:c0:82:53:a8:d3:4c:54:a1:41:2f:0e:48:6a: dc:7e:61:cc:f2:05:e5:17:0c:54:59:5f:3e:ee:cb: df:39:b5:ce:2d:12:71:99:44:3b:18:05:3a:17:4d: 52:29:42:e8:47:da:5a:f3:3d:7b:35:59:00:1e:05: 08:86:e7:18:5d:df:68:1d:ab:99:d8:a7:05:1b:4e: f0:b3:e2:ed:4b:32:9a:fc:a2:8f:71:db:ff:78:bf: 1c:8e:59:97:52:03:94:f3:71:22:40:cc:a2:37:0a: 3d:ca:8b:c9:dd:75:2d:a1:c8:e0:de:c3:f6:8b:3d: b4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A2:C8:48:30:E7:07:B1:F1:8B:62:F6:09:5C:F4:BE:B0:4D:26:72 X509v3 Authority Key Identifier: keyid:4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:dd:a6:0d:8f:c3:6f:33:38:f4:e2:46:3b:dd:06:36:6e:e9: 09:94:25:17:4d:f3:7f:9d:2b:1b:28:dd:f4:c0:b2:e3:18:23: 93:a0:b4:f0:b3:3a:58:b9:93:02:29:7f:21:55:61:67:d3:51: 1c:84:ca:79:11:76:a9:d7:9e:1d:fe:0e:8d:07:c2:7b:1d:47: a4:82:08:81:6b:98:6a:61:6b:56:ac:e5:c7:8a:ba:9f:10:99: 11:0b:55:ac:8e:32:fd:92:79:50:57:c8:c6:e3:23:54:7b:9e: e1:6f:67:ed:ea:b0:54:e4:8c:38:ff:75:7f:65:c6:81:96:93: e8:85:69:9f:82:51:9a:c7:9b:b1:f0:ae:4e:d2:17:0e:3a:db: ce:5c:e9:02:bb:be:92:cf:8c:ef:ae:27:5a:5c:b7:1f:4f:e5: ca:59:8a:e4:c1:bc:a4:4f:70:55:26:5a:f0:6d:f7:27:7c:ec: 0e:a1:f7:2e:57:95:f3:11:13:6f:8c:51:4c:05:f1:de:2a:81: 07:a2:f5:9c:47:6e:12:d0:97:79:c2:54:08:27:61:78:3f:09: 93:83:5d:64:94:02:2a:5d:1c:95:c9:60:e1:ba:9c:39:0b:cb: c1:96:75:6b:71:04:4f:f1:dc:51:60:db:95:cf:43:5e:f8:c9: ca:15:dc:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZGv4QW9upHMYO1CR5SDfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZGM2ODliYjIyZDA5NDc1NTc0ZjQxYzBlNWQ5N2MwNDU5 MzA5MjgwHhcNMjUxMjA2MDIwMTIxWhcNMjUxMjA3MDIwMTIxWjAzMTEwLwYDVQQD EyhhMGEyYzg0ODMwZTcwN2IxZjE4YjYyZjYwOTVjZjRiZWIwNGQyNjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzirxOzVzCEdvD+rMHo4Yu1Ia1i2K ROQtYI4fVZGZjc53vGypGmwvXxYCW4qBqK1y0fiVDTHYMxF30aAdi/I5fnhIZuQe m3smk4JrimhrBHEo4BRGlk7IQqY6hkwa6BFcqJqkxi5SkkL25LyJKJyndzqUeX7T vFOwvCtZ59hwMltOEwOewUuizcCCU6jTTFShQS8OSGrcfmHM8gXlFwxUWV8+7svf ObXOLRJxmUQ7GAU6F01SKULoR9pa8z17NVkAHgUIhucYXd9oHauZ2KcFG07ws+Lt SzKa/KKPcdv/eL8cjlmXUgOU83EiQMyiNwo9yovJ3XUtocjg3sP2iz20oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCiyEgw5wex8Yti9glc9L6wTSZyMB8GA1UdIwQY MBaAFE7caJuyLQlHVXT0HA5dl8BFkwkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83YmJiOTEtYzViMC00ZDBiLTkyNWIt MDliZTU5ODlkMGFjLzEvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi83YmJiOTEtYzViMC00ZDBiLTkyNWItMDliZTU5ODlkMGFj LzEvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVt2mDY/D bzM49OJGO90GNm7pCZQlF03zf50rGyjd9MCy4xgjk6C08LM6WLmTAil/IVVhZ9NR HITKeRF2qdeeHf4OjQfCex1HpIIIgWuYamFrVqzlx4q6nxCZEQtVrI4y/ZJ5UFfI xuMjVHue4W9n7eqwVOSMOP91f2XGgZaT6IVpn4JRmsebsfCuTtIXDjrbzlzpAru+ ks+M764nWly3H0/lylmK5MG8pE9wVSZa8G33J3zsDqH3LleV8xETb4xRTAXx3iqB B6L1nEduEtCXecJUCCdheD8Jk4NdZJQCKl0clclg4bqcOQvLwZZ1a3EET/HcUWDb lc9DXvjJyhXcgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:09:42 2025 by rpki-client