This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft File: TTz66pjQdmF8HqrOk0fi1Kc81E8.mft (raw, json) Hash identifier: K8RCn+MTwgvTF2Zjgn88s6umCJVBMAYXtEtF4Bi+FYU= Subject key identifier: 68:11:D9:82:01:6D:F9:7F:21:04:77:0C:C6:50:44:DA:3D:6A:27:96 Authority key identifier: 4D:3C:FA:EA:98:D0:76:61:7C:1E:AA:CE:93:47:E2:D4:A7:3C:D4:4F Certificate issuer: /CN=4d3cfaea98d076617c1eaace9347e2d4a73cd44f Certificate serial: 019B785B9A20C454CD7E5BB81F74A71700D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTz66pjQdmF8HqrOk0fi1Kc81E8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft Manifest number: 02E0 Signing time: Thu 01 Jan 2026 07:00:27 +0000 Manifest this update: Thu 01 Jan 2026 07:00:27 +0000 Manifest next update: Fri 02 Jan 2026 07:00:27 +0000 Files and hashes: 1: TTz66pjQdmF8HqrOk0fi1Kc81E8.crl (hash: XEY5ciJETHarsGxxkg+QpUTkE7m2Ku/3cp/TpberNnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.crl rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft rsync://rpki.ripe.net/repository/DEFAULT/TTz66pjQdmF8HqrOk0fi1Kc81E8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 07:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:5b:9a:20:c4:54:cd:7e:5b:b8:1f:74:a7:17:00:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d3cfaea98d076617c1eaace9347e2d4a73cd44f Validity Not Before: Jan 1 07:00:27 2026 GMT Not After : Jan 2 07:00:27 2026 GMT Subject: CN=6811d982016df97f2104770cc65044da3d6a2796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2b:3d:44:b2:45:b3:64:63:0c:75:93:0e:e9: f8:78:fe:43:7d:32:c8:c1:9b:06:26:42:4e:9e:5b: fa:3e:6a:7c:98:1a:a5:f1:d0:e1:8e:bc:ad:08:45: b8:eb:2e:b6:b0:a3:98:c4:3c:8a:a7:38:28:97:32: ba:11:1c:ca:ec:53:9b:58:1d:97:ba:2d:85:92:28: 42:98:a3:67:97:9b:b9:74:ea:d8:28:e4:d0:dd:83: 5e:4d:14:15:c8:2b:7e:0f:52:e9:ab:22:94:a6:60: 41:28:44:6b:a0:30:d5:00:da:94:62:b3:39:e3:b2: 80:f0:24:5d:6e:1f:8d:fb:82:3d:c4:8e:6d:5e:c8: 3f:39:dc:17:2c:92:63:c4:09:f7:86:7b:ac:0e:dc: a1:7f:0d:5e:6f:b1:9c:1a:01:7f:17:79:19:4b:98: e5:6d:89:b6:c3:2c:8e:26:ba:46:c4:b4:29:2b:f2: 56:aa:f7:01:f4:ae:3f:41:6c:b4:4b:aa:a5:b3:98: 2e:dd:9f:9c:aa:fe:f9:c8:ee:5b:ec:fc:73:71:01: 49:3a:79:ac:51:04:97:c2:bb:bd:a5:c4:a2:41:ed: 56:4e:30:86:2c:49:9f:70:b5:f0:38:e9:01:c7:e9: 31:a9:68:92:2b:cc:04:9d:fc:75:0e:c6:0c:bc:09: 0f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:11:D9:82:01:6D:F9:7F:21:04:77:0C:C6:50:44:DA:3D:6A:27:96 X509v3 Authority Key Identifier: keyid:4D:3C:FA:EA:98:D0:76:61:7C:1E:AA:CE:93:47:E2:D4:A7:3C:D4:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTz66pjQdmF8HqrOk0fi1Kc81E8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/33bc07-9c3d-4606-b7f5-d3812e616485/1/TTz66pjQdmF8HqrOk0fi1Kc81E8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d4:ff:c2:f8:ba:a8:10:f0:89:53:6d:bc:3b:9d:d7:f8:5c: 22:e5:9e:f5:f8:c2:3a:c0:85:88:ba:ba:dd:a2:ce:60:c3:94: f6:9e:2d:33:0a:35:90:8d:17:33:c9:68:09:13:66:0d:95:f3: 18:6b:64:c4:e2:28:15:88:52:d7:71:63:60:6c:70:07:bf:8d: cd:cc:6a:bc:76:0a:97:9d:c2:ab:b2:73:b1:b3:9b:5a:68:1b: ce:17:04:6f:50:6e:a3:8c:b4:37:5c:b3:74:a7:d5:a0:4a:41: bf:d5:1f:2c:e9:03:2f:09:64:3d:82:13:d8:bf:4e:a5:be:e5: 6a:76:f2:02:1f:99:88:14:6d:ec:08:15:0e:19:9b:ad:97:d5: 7c:ab:4b:9b:57:7e:5d:55:b2:9e:4e:9a:61:3e:68:1d:b5:74: 24:d1:a1:4b:3e:7f:8c:3a:bd:ff:89:29:fc:db:ed:ba:80:a8: 89:2a:60:9b:de:f8:ee:30:6b:7b:a6:13:d6:13:ab:30:63:4b: 94:e0:b3:ec:d5:a4:14:d8:09:4f:14:fe:c7:e7:68:f4:96:a1: 7c:b3:d1:5f:b9:1c:4c:19:83:a7:7a:4f:42:2e:d6:c7:c8:66: 6a:21:79:5a:6a:8f:99:23:2a:91:60:5b:4f:fc:3b:b5:04:39: 92:bd:ed:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4W5ogxFTNflu4H3SnFwDQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkM2NmYWVhOThkMDc2NjE3YzFlYWFjZTkzNDdlMmQ0YTcz Y2Q0NGYwHhcNMjYwMTAxMDcwMDI3WhcNMjYwMTAyMDcwMDI3WjAzMTEwLwYDVQQD Eyg2ODExZDk4MjAxNmRmOTdmMjEwNDc3MGNjNjUwNDRkYTNkNmEyNzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ss9RLJFs2RjDHWTDun4eP5DfTLI wZsGJkJOnlv6Pmp8mBql8dDhjrytCEW46y62sKOYxDyKpzgolzK6ERzK7FObWB2X ui2FkihCmKNnl5u5dOrYKOTQ3YNeTRQVyCt+D1LpqyKUpmBBKERroDDVANqUYrM5 47KA8CRdbh+N+4I9xI5tXsg/OdwXLJJjxAn3hnusDtyhfw1eb7GcGgF/F3kZS5jl bYm2wyyOJrpGxLQpK/JWqvcB9K4/QWy0S6qls5gu3Z+cqv75yO5b7PxzcQFJOnms UQSXwru9pcSiQe1WTjCGLEmfcLXwOOkBx+kxqWiSK8wEnfx1DsYMvAkPZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgR2YIBbfl/IQR3DMZQRNo9aieWMB8GA1UdIwQY MBaAFE08+uqY0HZhfB6qzpNH4tSnPNRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFR6NjZwalFkbUY4SHFyT2swZmkxS2M4MUU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8zM2JjMDctOWMzZC00NjA2LWI3ZjUt ZDM4MTJlNjE2NDg1LzEvVFR6NjZwalFkbUY4SHFyT2swZmkxS2M4MUU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny8zM2JjMDctOWMzZC00NjA2LWI3ZjUtZDM4MTJlNjE2NDg1 LzEvVFR6NjZwalFkbUY4SHFyT2swZmkxS2M4MUU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNT/wvi6 qBDwiVNtvDud1/hcIuWe9fjCOsCFiLq63aLOYMOU9p4tMwo1kI0XM8loCRNmDZXz GGtkxOIoFYhS13FjYGxwB7+NzcxqvHYKl53Cq7JzsbObWmgbzhcEb1Buo4y0N1yz dKfVoEpBv9UfLOkDLwlkPYIT2L9Opb7lanbyAh+ZiBRt7AgVDhmbrZfVfKtLm1d+ XVWynk6aYT5oHbV0JNGhSz5/jDq9/4kp/NvtuoCoiSpgm9747jBre6YT1hOrMGNL lOCz7NWkFNgJTxT+x+do9JahfLPRX7kcTBmDp3pPQi7Wx8hmaiF5WmqPmSMqkWBb T/w7tQQ5kr3tCg== -----END CERTIFICATE-----Generated at Thu Jan 1 12:33:15 2026 by rpki-client