This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft File: tTZGbQNoUuL3N2reE4BGFDuZTMM.mft (raw, json) Hash identifier: Io+QsGMTLQnWIdi5jCR7yFh6Z/ahb+k7/LskABv3yaY= Subject key identifier: F0:38:DA:1E:41:BC:13:1B:F1:A9:0B:C2:1E:27:86:9D:8C:05:0D:EA Authority key identifier: B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3 Certificate issuer: /CN=b536466d036852e2f7376ade138046143b994cc3 Certificate serial: 019B71B529D92302BAFB145784570A71E02B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft Manifest number: 17A4 Signing time: Wed 31 Dec 2025 00:00:56 +0000 Manifest this update: Wed 31 Dec 2025 00:00:56 +0000 Manifest next update: Thu 01 Jan 2026 00:00:56 +0000 Files and hashes: 1: 4dgJmFIjsrGv5rSLSqks3SszRsQ.roa (hash: Sg9Vz95hfxUFPzxyRHpzX8FvIho0lOoY/A6mHLZCWkE=) 2: tTZGbQNoUuL3N2reE4BGFDuZTMM.crl (hash: jB8tEdiuNkPoxn2sfNCMMLQXhgPDmFZh3Ip8vYGvqz8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:b5:29:d9:23:02:ba:fb:14:57:84:57:0a:71:e0:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b536466d036852e2f7376ade138046143b994cc3 Validity Not Before: Dec 31 00:00:56 2025 GMT Not After : Jan 1 00:00:56 2026 GMT Subject: CN=f038da1e41bc131bf1a90bc21e27869d8c050dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:03:38:87:2e:63:ac:cb:4b:e7:6d:ae:3d:ef: d0:3a:76:c3:47:72:00:4d:b6:cd:ee:49:96:f5:51: 94:99:6f:75:36:6c:50:28:fd:e7:e0:61:83:dc:8c: 97:46:3c:77:39:46:a2:f7:a7:48:dc:1e:ed:17:34: 34:43:56:5b:79:ee:3f:cd:9d:79:98:91:85:92:5b: 65:1b:cc:f3:6a:f6:ad:c0:a1:70:b0:0f:1b:0f:07: 99:f2:a6:0f:b3:7e:b6:72:78:6f:96:a8:b5:15:33: 99:4e:03:1f:69:72:bc:ad:55:40:f4:c7:be:f9:42: d6:fc:a5:88:40:14:8c:5b:aa:57:81:8b:37:53:d8: d5:65:60:b0:22:8f:de:40:24:d4:14:41:bf:0a:23: e5:66:a5:59:5f:ab:4b:d3:29:ee:4e:91:a8:0f:7d: ec:85:93:b3:dc:1a:91:57:38:a7:e9:27:05:03:aa: 26:98:81:f1:0a:b3:24:1f:ea:88:d1:77:62:2b:79: 20:83:fa:89:dc:bb:b2:35:a9:a0:0d:f4:d3:27:ad: 17:90:cb:cb:db:c4:28:75:1a:4f:aa:a3:1a:97:c1: 8d:00:07:fc:72:c5:f6:1c:98:fc:3a:d8:f2:bd:6e: 4f:0e:44:f4:58:ea:b5:19:bc:23:18:87:39:df:1d: 89:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:38:DA:1E:41:BC:13:1B:F1:A9:0B:C2:1E:27:86:9D:8C:05:0D:EA X509v3 Authority Key Identifier: keyid:B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:07:c6:e5:ac:9c:c3:21:25:07:d3:c0:17:16:d1:b7:46:2e: fc:2c:90:5a:f8:f2:a9:e6:8b:74:7c:a2:99:e5:45:cb:49:6e: 51:69:a1:bf:71:1c:0a:c1:d9:a0:e3:91:6b:ec:31:d3:7d:b4: 11:16:e8:70:7c:0b:12:28:ac:ed:9d:ec:97:9a:27:5a:fa:f2: 7a:dc:70:da:cc:eb:0e:f5:77:c9:10:64:85:4a:c1:a2:fe:6e: 4f:02:cc:36:93:45:2d:7d:4e:49:4b:20:3a:1a:b1:e7:67:60: f9:5c:3d:56:44:66:c0:4f:a3:d7:e6:5c:8f:b5:df:bf:2e:f9: 1f:ae:cf:28:cd:6f:c6:56:05:14:f3:97:05:fd:76:e0:f6:e7: 7a:54:60:c7:54:44:7a:8f:e1:5d:e4:f9:7a:50:08:4f:6e:0e: 08:88:3b:59:a0:cd:07:b7:01:09:6a:c0:35:51:d2:12:e8:cb: d6:08:37:cf:a5:1e:6c:fd:7a:fa:fc:dc:f8:6b:9a:be:db:13: e6:4b:01:72:f2:4e:59:ba:0e:69:b1:99:e9:5e:45:f8:5d:8c: 26:bb:b1:ef:09:76:cc:8f:42:1d:0b:95:70:37:57:f0:96:46: c5:79:24:19:05:33:55:32:55:2c:82:f0:9a:9f:8e:b7:3a:84: 8d:a0:13:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxtSnZIwK6+xRXhFcKceArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1MzY0NjZkMDM2ODUyZTJmNzM3NmFkZTEzODA0NjE0M2I5 OTRjYzMwHhcNMjUxMjMxMDAwMDU2WhcNMjYwMTAxMDAwMDU2WjAzMTEwLwYDVQQD EyhmMDM4ZGExZTQxYmMxMzFiZjFhOTBiYzIxZTI3ODY5ZDhjMDUwZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QM4hy5jrMtL522uPe/QOnbDR3IA TbbN7kmW9VGUmW91NmxQKP3n4GGD3IyXRjx3OUai96dI3B7tFzQ0Q1Zbee4/zZ15 mJGFkltlG8zzavatwKFwsA8bDweZ8qYPs362cnhvlqi1FTOZTgMfaXK8rVVA9Me+ +ULW/KWIQBSMW6pXgYs3U9jVZWCwIo/eQCTUFEG/CiPlZqVZX6tL0ynuTpGoD33s hZOz3BqRVzin6ScFA6ommIHxCrMkH+qI0XdiK3kgg/qJ3LuyNamgDfTTJ60XkMvL 28QodRpPqqMal8GNAAf8csX2HJj8OtjyvW5PDkT0WOq1GbwjGIc53x2J8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPA42h5BvBMb8akLwh4nhp2MBQ3qMB8GA1UdIwQY MBaAFLU2Rm0DaFLi9zdq3hOARhQ7mUzDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFRaR2JRTm9VdUwzTjJyZUU0QkdGRHVaVE1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lMWI0MjItMTYyYS00OThhLTkyZDgt YjEwMmZlMzI4M2EzLzEvdFRaR2JRTm9VdUwzTjJyZUU0QkdGRHVaVE1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lMWI0MjItMTYyYS00OThhLTkyZDgtYjEwMmZlMzI4M2Ez LzEvdFRaR2JRTm9VdUwzTjJyZUU0QkdGRHVaVE1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAfG5ayc wyElB9PAFxbRt0Yu/CyQWvjyqeaLdHyimeVFy0luUWmhv3EcCsHZoOORa+wx0320 ERbocHwLEiis7Z3sl5onWvryetxw2szrDvV3yRBkhUrBov5uTwLMNpNFLX1OSUsg Ohqx52dg+Vw9VkRmwE+j1+Zcj7Xfvy75H67PKM1vxlYFFPOXBf124PbnelRgx1RE eo/hXeT5elAIT24OCIg7WaDNB7cBCWrANVHSEujL1gg3z6UebP16+vzc+GuavtsT 5ksBcvJOWboOabGZ6V5F+F2MJrux7wl2zI9CHQuVcDdX8JZGxXkkGQUzVTJVLILw mp+OtzqEjaATyw== -----END CERTIFICATE-----Generated at Wed Dec 31 06:29:29 2025 by rpki-client