This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft File: TtHX3yWkqdXnJ8QvVenjGD02qTo.mft (raw, json) Hash identifier: 7wlmjzN7iZKqr5fFrPr4JkWyTeyR/5aJcagA952Bs4k= Subject key identifier: C5:CC:9C:B1:09:12:F1:84:3C:EA:31:EE:7A:89:F2:87:CE:AA:A7:48 Authority key identifier: 4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A Certificate issuer: /CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a Certificate serial: 019AF540BC1B9CFEC4D4A330894E79C9BD66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft Manifest number: 10EE Signing time: Sat 06 Dec 2025 20:00:51 +0000 Manifest this update: Sat 06 Dec 2025 20:00:51 +0000 Manifest next update: Sun 07 Dec 2025 20:00:51 +0000 Files and hashes: 1: GjqXm9JUjjlZZ0PJdXVG1lJFjCg.roa (hash: N8pnAe9jWWy/GU0t4cg3SHXORnEo2+UUYssAVJRTLSs=) 2: TtHX3yWkqdXnJ8QvVenjGD02qTo.crl (hash: NJRhd/EeHI02gllSxi3LmLKaksFZAb90CbjL0vgsW9Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:bc:1b:9c:fe:c4:d4:a3:30:89:4e:79:c9:bd:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ed1d7df25a4a9d5e727c42f55e9e3183d36a93a Validity Not Before: Dec 6 20:00:51 2025 GMT Not After : Dec 7 20:00:51 2025 GMT Subject: CN=c5cc9cb10912f1843cea31ee7a89f287ceaaa748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:22:6a:de:e9:67:96:51:e4:30:ac:7c:fe:ff: cb:5a:ff:1d:0b:26:f1:c0:1a:94:4f:a9:9b:6d:a6: e9:8e:18:c7:71:f5:f2:75:1a:f7:ad:18:0d:b0:e8: e0:ce:bd:f8:74:51:9d:a6:ab:da:9f:84:52:be:08: 3d:eb:86:74:6e:ae:d3:d0:7c:6a:83:c1:4b:17:db: f0:07:48:9c:e5:22:18:6a:28:5a:36:c4:a2:ae:1d: 3c:ea:7c:60:cf:d5:b9:b3:c8:57:dc:80:98:5c:b4: fb:d9:99:15:d0:71:88:55:1d:db:8c:0b:68:32:d2: d1:7c:ea:9e:62:fe:05:70:0c:da:8b:62:04:d1:32: ab:0e:c7:cf:bb:9f:5a:e6:1e:fa:09:a5:a9:e7:dc: 3e:ae:2f:e4:61:ae:55:7a:ee:d5:22:07:f3:20:33: ba:b2:b3:63:90:b0:5b:17:b0:38:e6:9e:ff:fb:25: 7f:48:e3:0a:17:01:78:1e:82:03:96:10:c5:30:5e: 0d:9e:45:92:de:bb:43:1d:1d:29:a2:3e:33:fa:ad: 7c:4f:12:12:d4:7f:b5:af:27:65:d0:6b:29:04:4d: 71:32:61:08:5d:f1:48:44:98:9e:08:68:69:ad:60: 7a:5a:78:7d:ea:ce:24:3a:2e:32:fd:dd:df:80:01: 0e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:CC:9C:B1:09:12:F1:84:3C:EA:31:EE:7A:89:F2:87:CE:AA:A7:48 X509v3 Authority Key Identifier: keyid:4E:D1:D7:DF:25:A4:A9:D5:E7:27:C4:2F:55:E9:E3:18:3D:36:A9:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtHX3yWkqdXnJ8QvVenjGD02qTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/459e63-40b8-4536-84b4-aa81b9603857/1/TtHX3yWkqdXnJ8QvVenjGD02qTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d3:4c:48:52:1b:7a:aa:ab:28:73:db:08:84:14:9a:6d:be: e6:86:3f:cf:9f:a6:90:2f:0f:7d:a4:35:2c:d5:e8:88:c9:8a: e5:da:69:bf:c3:72:ab:16:70:8a:6a:c6:84:92:02:3e:45:eb: a8:3b:8c:0d:16:d9:ce:d2:63:58:0b:ce:bb:9b:a4:fd:14:05: 8a:a8:98:c5:81:aa:c3:84:da:5a:bb:72:cd:ff:f5:6e:f1:31: 25:f2:bd:ff:76:a4:a6:e8:6c:06:cf:b6:d2:ce:7a:d0:8d:97: 13:c4:da:e9:4e:40:39:f4:a1:6f:a9:0f:fd:32:06:5d:23:6c: 84:e1:0f:56:1e:c4:19:19:c6:44:fa:64:7a:03:b3:45:52:35: 9e:4c:d6:44:d8:40:23:65:e7:58:87:cf:74:63:50:3e:66:09: 1c:18:20:92:14:cf:c4:33:05:54:72:bb:95:9f:82:05:a4:20: 02:b8:65:93:56:54:4b:ed:c0:65:9a:f2:52:11:17:59:86:92: a5:91:8c:82:ce:ac:d1:2f:c7:03:70:bd:16:c2:47:bc:ba:ba: ca:06:d1:25:4b:9a:34:dd:13:c9:35:ac:d1:d8:d5:2a:52:1f: 74:56:7b:1c:3c:86:20:3a:5a:d1:1f:56:fb:30:6e:ae:85:20: 41:8d:dc:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QLwbnP7E1KMwiU55yb1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZDFkN2RmMjVhNGE5ZDVlNzI3YzQyZjU1ZTllMzE4M2Qz NmE5M2EwHhcNMjUxMjA2MjAwMDUxWhcNMjUxMjA3MjAwMDUxWjAzMTEwLwYDVQQD EyhjNWNjOWNiMTA5MTJmMTg0M2NlYTMxZWU3YTg5ZjI4N2NlYWFhNzQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SJq3ulnllHkMKx8/v/LWv8dCybx wBqUT6mbbabpjhjHcfXydRr3rRgNsOjgzr34dFGdpqvan4RSvgg964Z0bq7T0Hxq g8FLF9vwB0ic5SIYaihaNsSirh086nxgz9W5s8hX3ICYXLT72ZkV0HGIVR3bjAto MtLRfOqeYv4FcAzai2IE0TKrDsfPu59a5h76CaWp59w+ri/kYa5Veu7VIgfzIDO6 srNjkLBbF7A45p7/+yV/SOMKFwF4HoIDlhDFMF4NnkWS3rtDHR0poj4z+q18TxIS 1H+1rydl0GspBE1xMmEIXfFIRJieCGhprWB6Wnh96s4kOi4y/d3fgAEONwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXMnLEJEvGEPOox7nqJ8ofOqqdIMB8GA1UdIwQY MBaAFE7R198lpKnV5yfEL1Xp4xg9Nqk6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHRIWDN5V2txZFhuSjhRdlZlbmpHRDAycVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80NTllNjMtNDBiOC00NTM2LTg0YjQt YWE4MWI5NjAzODU3LzEvVHRIWDN5V2txZFhuSjhRdlZlbmpHRDAycVRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi80NTllNjMtNDBiOC00NTM2LTg0YjQtYWE4MWI5NjAzODU3 LzEvVHRIWDN5V2txZFhuSjhRdlZlbmpHRDAycVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtNMSFIb eqqrKHPbCIQUmm2+5oY/z5+mkC8PfaQ1LNXoiMmK5dppv8NyqxZwimrGhJICPkXr qDuMDRbZztJjWAvOu5uk/RQFiqiYxYGqw4TaWrtyzf/1bvExJfK9/3akpuhsBs+2 0s560I2XE8Ta6U5AOfShb6kP/TIGXSNshOEPVh7EGRnGRPpkegOzRVI1nkzWRNhA I2XnWIfPdGNQPmYJHBggkhTPxDMFVHK7lZ+CBaQgArhlk1ZUS+3AZZryUhEXWYaS pZGMgs6s0S/HA3C9FsJHvLq6ygbRJUuaNN0TyTWs0djVKlIfdFZ7HDyGIDpa0R9W +zBuroUgQY3c7A== -----END CERTIFICATE-----Generated at Sat Dec 6 22:19:21 2025 by rpki-client