This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json) Hash identifier: pGkgw7b0+od64r3FmhFcuQ58QUyg5dJMGm3J4cRgHH8= Subject key identifier: 1B:51:44:45:A4:D8:9D:B3:E9:9A:2E:51:1B:85:51:C0:B9:FE:55:86 Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49 Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349 Certificate serial: 019B31FAC87B03CC0EF47400E76391EF879A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft Manifest number: 1787 Signing time: Thu 18 Dec 2025 15:01:17 +0000 Manifest this update: Thu 18 Dec 2025 15:01:17 +0000 Manifest next update: Fri 19 Dec 2025 15:01:17 +0000 Files and hashes: 1: OS7c8-e6_IPhh6UsfkxpmetgvVM.roa (hash: u4NSl9jjxeT5MDlBDBHxspeJOasrj/ytcidQr1I6tQs=) 2: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: snLN+9CNC++OUPtv/xXHM/gXEAmCH01RKvPcrk/PyVQ=) 3: ujFYCfp3NT3vzURuQfX3QSbCmrc.roa (hash: Mq+9HfcpF+4pzQa3kfg+LdSo4w+vmYd+Egj8pIwlOE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:c8:7b:03:cc:0e:f4:74:00:e7:63:91:ef:87:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349 Validity Not Before: Dec 18 15:01:17 2025 GMT Not After : Dec 19 15:01:17 2025 GMT Subject: CN=1b514445a4d89db3e99a2e511b8551c0b9fe5586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7c:71:ac:60:5f:6c:a3:47:f2:30:8b:aa:6c: 04:a2:57:dc:84:d1:03:e3:db:d4:37:de:64:b4:82: f2:5a:09:cf:5a:72:75:5f:7b:4b:4e:69:98:43:b2: ef:74:ee:58:9a:15:11:df:9c:74:f8:fe:86:a7:ea: 71:cd:37:b5:ac:2e:8c:0a:5b:1d:c3:4e:6f:fd:58: e6:68:4a:ba:53:df:47:7c:64:3c:9b:b1:01:5d:98: 28:50:97:ef:79:95:a5:1d:56:29:a1:f1:88:08:cb: ae:96:57:b7:82:de:e5:c0:c3:0a:c2:88:82:56:36: 7a:af:55:4e:55:df:f7:f5:b9:f0:6f:d8:49:ad:f1: 95:e1:2d:86:7f:ab:72:c3:c0:b6:ff:a1:73:ec:41: 1d:80:ed:7c:ed:2b:fe:48:15:ed:77:1e:1e:74:5b: d0:62:dc:5b:cb:42:68:f0:c7:ef:17:a0:0a:4e:c5: 68:f5:5a:3f:8b:66:4d:0e:21:ff:e1:25:b4:3d:03: bf:fb:65:7a:2c:c1:1d:c0:c4:74:06:ef:22:a0:70: 10:59:27:f4:cf:17:89:73:0f:bd:c6:ea:57:fe:92: 45:ed:d0:43:c9:a1:d7:37:e4:a9:6a:42:b4:01:ba: 87:89:b1:8b:90:cb:3b:f1:0e:4a:0d:4a:db:3e:d2: 09:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:51:44:45:A4:D8:9D:B3:E9:9A:2E:51:1B:85:51:C0:B9:FE:55:86 X509v3 Authority Key Identifier: keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e5:55:53:97:e8:6a:df:dc:82:3c:34:ac:08:f0:9f:8a:98: e6:74:71:96:5b:76:0c:89:02:b1:4f:35:49:6f:4f:95:c4:93: 89:8c:2e:61:4a:ea:bb:3e:02:e7:9c:57:53:13:57:84:f2:50: 6e:1a:15:a4:ac:79:07:4c:02:8e:e1:31:80:d4:2d:88:67:bf: 65:26:de:21:0b:29:b4:90:c2:6c:4e:21:26:11:f3:1c:77:f0: f3:dd:93:b9:cc:9d:34:15:1f:80:ec:98:d5:da:03:72:57:fc: 38:e3:ad:17:06:eb:9a:8b:02:67:98:00:f0:52:92:ad:45:a2: 7a:10:15:00:f4:bf:f1:cf:5f:50:33:6e:6f:9e:aa:3c:4a:22: 4a:3d:4b:cb:4b:98:e2:b6:4d:15:fa:fa:69:0c:34:48:2f:35: a2:68:49:73:73:e1:9e:f1:4e:e2:49:9d:53:81:78:55:a5:30: fb:c0:6d:2d:0d:4b:42:db:3e:d7:55:89:c9:45:cf:0c:f7:a4: 44:44:03:9e:89:8d:51:9c:75:b1:e7:0d:e2:5f:2a:95:5a:1f: 5a:a3:ab:35:29:a3:58:e4:40:19:16:48:34:70:3c:40:04:d4: 44:ce:6c:3d:c9:4c:41:34:8e:36:b4:22:8d:39:b5:e8:75:0d: f9:82:81:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+sh7A8wO9HQA52OR74eaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMzAyYTJkZDUxN2E2MWEzYjk1Mjc0NmYyZWU5ZmJlNDM2 ZDYzNDkwHhcNMjUxMjE4MTUwMTE3WhcNMjUxMjE5MTUwMTE3WjAzMTEwLwYDVQQD EygxYjUxNDQ0NWE0ZDg5ZGIzZTk5YTJlNTExYjg1NTFjMGI5ZmU1NTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHxxrGBfbKNH8jCLqmwEolfchNED 49vUN95ktILyWgnPWnJ1X3tLTmmYQ7LvdO5YmhUR35x0+P6Gp+pxzTe1rC6MClsd w05v/VjmaEq6U99HfGQ8m7EBXZgoUJfveZWlHVYpofGICMuulle3gt7lwMMKwoiC VjZ6r1VOVd/39bnwb9hJrfGV4S2Gf6tyw8C2/6Fz7EEdgO187Sv+SBXtdx4edFvQ Ytxby0Jo8MfvF6AKTsVo9Vo/i2ZNDiH/4SW0PQO/+2V6LMEdwMR0Bu8ioHAQWSf0 zxeJcw+9xupX/pJF7dBDyaHXN+SpakK0AbqHibGLkMs78Q5KDUrbPtIJGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtRREWk2J2z6ZouURuFUcC5/lWGMB8GA1UdIwQY MBaAFE0wKi3VF6YaO5UnRvLun75DbWNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDct MTY2ZmI5ZGI2ZGIzLzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDctMTY2ZmI5ZGI2ZGIz LzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOVVU5fo at/cgjw0rAjwn4qY5nRxllt2DIkCsU81SW9PlcSTiYwuYUrquz4C55xXUxNXhPJQ bhoVpKx5B0wCjuExgNQtiGe/ZSbeIQsptJDCbE4hJhHzHHfw892TucydNBUfgOyY 1doDclf8OOOtFwbrmosCZ5gA8FKSrUWiehAVAPS/8c9fUDNub56qPEoiSj1Ly0uY 4rZNFfr6aQw0SC81omhJc3PhnvFO4kmdU4F4VaUw+8BtLQ1LQts+11WJyUXPDPek REQDnomNUZx1secN4l8qlVofWqOrNSmjWORAGRZINHA8QATURM5sPclMQTSONrQi jTm16HUN+YKBAg== -----END CERTIFICATE-----Generated at Thu Dec 18 22:02:54 2025 by rpki-client