This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json) Hash identifier: i/2uuFO8aKehjIjBHT9bmp8n4OjHPJiFY4s24gbk+SE= Subject key identifier: FD:D5:12:E6:38:C4:06:30:AE:36:1E:D8:EC:9A:EB:EF:17:68:6A:0E Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49 Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349 Certificate serial: 019AF23FAA1DCF216BCB4542632B72D939C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 06:00:49 +0000 Manifest this update: Sat 06 Dec 2025 06:00:49 +0000 Manifest next update: Sun 07 Dec 2025 06:00:49 +0000 Files and hashes: 1: OS7c8-e6_IPhh6UsfkxpmetgvVM.roa (hash: u4NSl9jjxeT5MDlBDBHxspeJOasrj/ytcidQr1I6tQs=) 2: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: cDIQzoqfBwPo8DjOYyQAgyXk9CzsyLLgVuONYnG0UXs=) 3: ujFYCfp3NT3vzURuQfX3QSbCmrc.roa (hash: Mq+9HfcpF+4pzQa3kfg+LdSo4w+vmYd+Egj8pIwlOE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:aa:1d:cf:21:6b:cb:45:42:63:2b:72:d9:39:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349 Validity Not Before: Dec 6 06:00:49 2025 GMT Not After : Dec 7 06:00:49 2025 GMT Subject: CN=fdd512e638c40630ae361ed8ec9aebef17686a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:69:21:a7:61:36:b7:b4:97:3f:75:70:7d:6c: d1:db:3b:b8:e7:fb:66:9a:de:83:78:48:24:25:17: 73:af:2c:ad:d8:c9:e8:45:55:06:0b:a8:3f:2b:36: 4d:0f:c8:95:af:8b:5f:f4:62:92:41:3c:e6:78:6d: e4:23:2e:16:46:4c:c6:50:d6:7f:c5:d5:93:d3:a7: b2:85:58:23:15:85:3d:f7:e0:15:69:13:ea:44:60: cf:d0:ff:b4:b8:9f:74:1e:11:38:d4:e0:de:09:9f: e2:fb:48:08:88:e8:cb:bb:e6:a5:6e:15:2d:fd:ab: 71:62:3d:0c:37:7f:8c:93:31:5c:11:8f:f8:ee:9b: b9:98:52:3f:32:0e:58:44:8e:04:3a:af:8a:5c:19: d9:af:d5:c6:1f:f8:48:80:b8:47:ee:ec:60:d3:e2: 55:6f:c0:d3:94:78:1a:03:1d:11:8f:50:94:0d:1b: ad:fe:4d:0a:51:67:30:8c:24:c7:f1:5a:7c:8f:8a: e9:d6:e9:e1:30:99:15:87:f1:6a:8c:b4:46:76:c0: e7:60:3f:24:e1:37:a8:73:cb:af:5f:2a:2e:e4:60: 4d:ea:2d:15:ba:9a:84:b9:db:b9:0d:a7:05:9f:bd: d5:f6:5b:3b:ed:53:73:1b:c2:7b:fe:78:17:83:19: 1b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D5:12:E6:38:C4:06:30:AE:36:1E:D8:EC:9A:EB:EF:17:68:6A:0E X509v3 Authority Key Identifier: keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:46:1b:8f:47:96:29:ca:fe:11:3c:e9:a0:65:cd:34:48:42: f0:09:88:a5:d0:cd:58:5a:98:6c:cb:7b:54:95:93:4e:a2:7b: 49:a1:26:f9:93:15:25:fb:ca:0c:a1:f1:06:96:33:46:d4:3c: 7b:8d:ff:9f:37:02:25:28:25:5c:9c:02:9b:a1:c0:c8:61:72: b3:95:6b:1d:17:a0:18:77:cd:ac:78:e5:32:d8:95:8d:e6:f0: 8b:cb:24:62:7b:ee:04:46:cb:4a:47:62:72:24:46:14:2c:0d: 16:ae:47:07:eb:57:5a:af:6a:e6:21:b2:a9:43:18:72:7e:89: 5f:f6:c4:51:f1:28:88:9c:bb:46:3a:e7:82:a9:17:a0:63:89: 54:d0:5c:27:78:f1:47:94:dc:ba:ba:b5:a6:d8:77:d9:4d:66: 4e:a9:1e:29:af:9a:f2:92:3d:16:99:34:e2:f6:55:1c:d2:b4: fd:56:76:4c:a0:05:7f:ec:1b:9b:7b:a4:74:27:7a:b9:63:d3: 1d:04:62:9e:70:49:35:02:82:df:28:0c:81:9a:10:fc:07:1f: ef:79:6c:ca:4b:94:2a:e5:9e:2a:7e:04:22:63:52:4d:96:f3: 6f:1e:0b:31:e4:11:9c:36:6c:22:8b:b8:77:59:56:c8:f2:06: d5:bf:c1:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6odzyFry0VCYyty2TnBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMzAyYTJkZDUxN2E2MWEzYjk1Mjc0NmYyZWU5ZmJlNDM2 ZDYzNDkwHhcNMjUxMjA2MDYwMDQ5WhcNMjUxMjA3MDYwMDQ5WjAzMTEwLwYDVQQD EyhmZGQ1MTJlNjM4YzQwNjMwYWUzNjFlZDhlYzlhZWJlZjE3Njg2YTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWkhp2E2t7SXP3VwfWzR2zu45/tm mt6DeEgkJRdzryyt2MnoRVUGC6g/KzZND8iVr4tf9GKSQTzmeG3kIy4WRkzGUNZ/ xdWT06eyhVgjFYU99+AVaRPqRGDP0P+0uJ90HhE41ODeCZ/i+0gIiOjLu+albhUt /atxYj0MN3+MkzFcEY/47pu5mFI/Mg5YRI4EOq+KXBnZr9XGH/hIgLhH7uxg0+JV b8DTlHgaAx0Rj1CUDRut/k0KUWcwjCTH8Vp8j4rp1unhMJkVh/FqjLRGdsDnYD8k 4Teoc8uvXyou5GBN6i0VupqEudu5DacFn73V9ls77VNzG8J7/ngXgxkbHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3VEuY4xAYwrjYe2Oya6+8XaGoOMB8GA1UdIwQY MBaAFE0wKi3VF6YaO5UnRvLun75DbWNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDct MTY2ZmI5ZGI2ZGIzLzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDctMTY2ZmI5ZGI2ZGIz LzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnEYbj0eW Kcr+ETzpoGXNNEhC8AmIpdDNWFqYbMt7VJWTTqJ7SaEm+ZMVJfvKDKHxBpYzRtQ8 e43/nzcCJSglXJwCm6HAyGFys5VrHRegGHfNrHjlMtiVjebwi8skYnvuBEbLSkdi ciRGFCwNFq5HB+tXWq9q5iGyqUMYcn6JX/bEUfEoiJy7RjrngqkXoGOJVNBcJ3jx R5Tcurq1pth32U1mTqkeKa+a8pI9Fpk04vZVHNK0/VZ2TKAFf+wbm3ukdCd6uWPT HQRinnBJNQKC3ygMgZoQ/Acf73lsykuUKuWeKn4EImNSTZbzbx4LMeQRnDZsIou4 d1lWyPIG1b/BoA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:06:10 2025 by rpki-client