This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft File: ttFBGNvSJymNqoDHrKsR7qbWPiE.mft (raw, json) Hash identifier: bYGq6BpmZhRRhr7rrmBYbj+1Xwk4ltGTnfzOPTRrOFo= Subject key identifier: 92:3A:97:1E:09:FD:4A:64:47:AF:93:A5:07:69:88:50:0F:CD:34:7C Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21 Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21 Certificate serial: 019B3CB505ED63C9FB2FE0A1ED00BD155FB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft Manifest number: 17A1 Signing time: Sat 20 Dec 2025 17:00:54 +0000 Manifest this update: Sat 20 Dec 2025 17:00:54 +0000 Manifest next update: Sun 21 Dec 2025 17:00:54 +0000 Files and hashes: 1: 2G_wfY-wtHrrh5fIlt2oTgfjyRk.roa (hash: Z3ThrbWDvPG2omkuECARA3Z0eG/8QMV8+rwPhMcjF+s=) 2: EnEl3j-w99KIdI5ENTznDqsZ0QU.roa (hash: 0+nihLinw/HlHretYAxdAaVQ3wWi8vaKXQiqmIpaJxw=) 3: XcxcS9ldQu6VQrsTPyt-_lfXPao.roa (hash: 2Sl1d/YMvIvosyAajy76CYNHHCqrobuGrcDX5gv9Jos=) 4: ttFBGNvSJymNqoDHrKsR7qbWPiE.crl (hash: MDqtt6MnvFGS5Qq0+Z3W3j3wlWSuAy5FfQpWNB4SVSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:05:ed:63:c9:fb:2f:e0:a1:ed:00:bd:15:5f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21 Validity Not Before: Dec 20 17:00:54 2025 GMT Not After : Dec 21 17:00:54 2025 GMT Subject: CN=923a971e09fd4a6447af93a5076988500fcd347c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:64:ee:5a:08:18:79:7a:6e:1d:16:f2:cd:f9: 52:8b:4d:2f:d3:c0:eb:9a:2d:6d:7a:02:a1:65:a4: 5a:18:c1:44:f4:ed:7e:59:18:73:03:d4:c7:02:e3: 2c:bc:c1:9a:b4:cf:2e:25:05:ce:61:3a:dd:6a:3d: e5:2e:7d:a2:28:9b:43:9d:ef:1a:f3:3a:f7:11:e5: 2e:cf:86:28:dd:28:98:8b:7e:e1:65:80:14:dc:a2: da:b4:53:c4:d0:6e:81:1c:94:da:30:27:32:16:20: 36:fe:98:d0:1e:73:e3:e8:92:a8:9e:f6:cc:86:fd: 95:75:3c:9e:0f:aa:24:af:24:82:7c:0b:aa:33:66: 41:65:b1:cb:06:5f:ac:ca:63:af:8f:25:bc:29:ad: 85:58:19:55:64:35:65:70:5d:35:78:8d:f8:74:0d: eb:0a:e5:68:af:79:ca:35:29:fb:f3:59:7a:ef:f3: fd:34:ef:04:8d:e5:f3:ca:83:7e:69:87:d0:be:60: 93:61:eb:49:8d:98:ba:3d:27:0c:35:cb:79:44:fb: 97:9a:9e:08:9b:f4:9d:8a:a7:01:10:9e:7d:ff:6c: 36:ea:50:c8:36:50:3b:0f:ce:f2:9d:77:2a:c3:6e: 32:93:82:fb:50:6b:21:9a:55:6e:a7:ea:ac:11:fb: 99:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3A:97:1E:09:FD:4A:64:47:AF:93:A5:07:69:88:50:0F:CD:34:7C X509v3 Authority Key Identifier: keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ba:35:46:cb:4d:39:43:1e:b2:1f:50:ff:1f:49:4e:17:1e: 8b:98:54:29:0b:d1:ae:ff:8a:65:12:6e:99:ed:db:56:b4:f4: c4:1c:95:bd:42:81:eb:26:01:6c:3e:c2:c7:85:d1:9c:c0:70: d7:79:48:2b:09:0f:26:54:90:e9:c1:48:05:7a:5f:32:83:ff: 7c:b5:9c:ed:9e:e6:cb:c7:03:31:c5:a6:c0:c5:fe:79:20:8b: 67:0e:84:f1:00:ac:1e:bb:ea:29:f1:0f:ac:3e:03:8c:09:f7: 3d:48:46:b9:94:26:33:58:d5:1d:a9:75:ce:58:12:fe:b5:5a: c0:b9:3c:bc:d0:c5:ff:34:1f:16:fc:09:27:f2:b4:ad:50:16: f3:05:22:43:87:35:ae:36:05:ca:59:6f:9b:55:2e:95:53:bc: 10:2a:dc:f2:21:f6:7a:74:95:23:2d:7b:39:80:1e:b2:73:d4: bf:30:dc:9c:aa:89:0d:11:9b:02:c5:5e:2e:27:6f:c7:82:85: 2b:cf:6d:62:e6:83:59:e3:26:44:70:96:93:e0:de:f2:3d:95: 45:61:19:c6:0a:45:0f:31:06:cb:26:d6:6c:4b:72:4c:11:fe: 70:de:ea:38:43:3e:91:6b:54:34:ac:25:f7:be:cb:a8:b8:cc: 89:16:42:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tQXtY8n7L+Ch7QC9FV+4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZDE0MTE4ZGJkMjI3Mjk4ZGFhODBjN2FjYWIxMWVlYTZk NjNlMjEwHhcNMjUxMjIwMTcwMDU0WhcNMjUxMjIxMTcwMDU0WjAzMTEwLwYDVQQD Eyg5MjNhOTcxZTA5ZmQ0YTY0NDdhZjkzYTUwNzY5ODg1MDBmY2QzNDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2TuWggYeXpuHRbyzflSi00v08Dr mi1tegKhZaRaGMFE9O1+WRhzA9THAuMsvMGatM8uJQXOYTrdaj3lLn2iKJtDne8a 8zr3EeUuz4Yo3SiYi37hZYAU3KLatFPE0G6BHJTaMCcyFiA2/pjQHnPj6JKonvbM hv2VdTyeD6okrySCfAuqM2ZBZbHLBl+symOvjyW8Ka2FWBlVZDVlcF01eI34dA3r CuVor3nKNSn781l67/P9NO8EjeXzyoN+aYfQvmCTYetJjZi6PScMNct5RPuXmp4I m/SdiqcBEJ59/2w26lDINlA7D87ynXcqw24yk4L7UGshmlVup+qsEfuZvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJI6lx4J/UpkR6+TpQdpiFAPzTR8MB8GA1UdIwQY MBaAFLbRQRjb0icpjaqAx6yrEe6m1j4hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHRGQkdOdlNKeW1OcW9ESHJLc1I3cWJXUGlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZDUxZDctNjRmZC00YzczLTllOGMt MGUzN2UxMWQwZWMzLzEvdHRGQkdOdlNKeW1OcW9ESHJLc1I3cWJXUGlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZDUxZDctNjRmZC00YzczLTllOGMtMGUzN2UxMWQwZWMz LzEvdHRGQkdOdlNKeW1OcW9ESHJLc1I3cWJXUGlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfro1RstN OUMesh9Q/x9JThcei5hUKQvRrv+KZRJume3bVrT0xByVvUKB6yYBbD7Cx4XRnMBw 13lIKwkPJlSQ6cFIBXpfMoP/fLWc7Z7my8cDMcWmwMX+eSCLZw6E8QCsHrvqKfEP rD4DjAn3PUhGuZQmM1jVHal1zlgS/rVawLk8vNDF/zQfFvwJJ/K0rVAW8wUiQ4c1 rjYFyllvm1UulVO8ECrc8iH2enSVIy17OYAesnPUvzDcnKqJDRGbAsVeLidvx4KF K89tYuaDWeMmRHCWk+De8j2VRWEZxgpFDzEGyybWbEtyTBH+cN7qOEM+kWtUNKwl 977LqLjMiRZCxg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:55:01 2025 by rpki-client