This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft File: TtaClltaFeoMReqF7z20vnFnlpY.mft (raw, json) Hash identifier: mxfN0eCeLPUTJ8lKUfZWwfeA/odNbp3uxEGaidYQE6k= Subject key identifier: C1:55:B9:4E:8A:4C:A9:AB:E8:D0:6E:D4:43:D7:65:2E:A5:14:6C:32 Authority key identifier: 4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96 Certificate issuer: /CN=4ed682965b5a15ea0c45ea85ef3db4be71679696 Certificate serial: 019B3FB5C86C20D2224BF08980D672483FB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft Manifest number: 05B0 Signing time: Sun 21 Dec 2025 07:00:36 +0000 Manifest this update: Sun 21 Dec 2025 07:00:36 +0000 Manifest next update: Mon 22 Dec 2025 07:00:36 +0000 Files and hashes: 1: 3aqe87dN2fz6qQQtxNwtFo2__ps.roa (hash: Lt1Bd1g6jAvktpInXW5Oo10n3abY0buPeadfOybeVY0=) 2: TtaClltaFeoMReqF7z20vnFnlpY.crl (hash: I1xqZ/MR/nehxBJ+kd6JI0hs60dL9e1Ypamk5u8E1Lw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:c8:6c:20:d2:22:4b:f0:89:80:d6:72:48:3f:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ed682965b5a15ea0c45ea85ef3db4be71679696 Validity Not Before: Dec 21 07:00:36 2025 GMT Not After : Dec 22 07:00:36 2025 GMT Subject: CN=c155b94e8a4ca9abe8d06ed443d7652ea5146c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c8:ce:a3:d6:0c:39:b4:24:67:5d:35:24:87: 9e:4d:67:10:8e:82:b6:86:11:f3:7f:d6:e9:6f:bb: 7e:53:ae:cb:2d:e1:6c:d2:8e:1d:bb:ce:c4:78:b9: d3:f1:70:c3:05:eb:36:47:3f:d6:fe:72:5c:a5:86: e8:cc:dc:68:4d:4c:66:59:32:c0:fc:cc:a7:52:8e: 68:e6:6b:ca:97:af:a5:b3:4b:17:01:08:ef:81:41: 73:04:aa:92:44:4d:5b:23:3c:25:78:bf:c4:70:13: 02:41:6d:6e:9d:8b:10:81:d3:66:f0:f2:74:1b:e4: 9a:64:a8:bc:50:e8:f4:6d:24:a2:20:ba:7c:50:1f: a7:07:15:e8:da:bb:e8:57:59:37:88:63:26:48:1e: f9:af:7d:fa:2e:61:a0:d1:c9:17:c8:98:f7:0f:cb: aa:9b:4f:b2:82:9a:7a:db:c9:6c:b2:5b:27:d9:bb: 93:b5:be:87:24:19:3c:7e:db:98:6b:e3:a5:f8:23: df:e6:2d:3f:08:5e:a2:f7:74:1d:88:dc:d7:14:7a: ba:f5:2a:e8:97:10:7d:7c:d6:2e:e8:26:be:42:08: 42:aa:9b:fc:e9:a6:39:11:48:04:14:94:62:9d:41: 7e:49:78:bd:97:a0:2b:08:8a:17:fd:65:f9:b0:e7: ae:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:55:B9:4E:8A:4C:A9:AB:E8:D0:6E:D4:43:D7:65:2E:A5:14:6C:32 X509v3 Authority Key Identifier: keyid:4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:c1:1f:dd:ab:40:ae:51:ed:f0:e8:5e:3f:82:aa:d1:a7:22: 0c:54:f9:4b:e6:f4:3b:e8:f9:bc:bf:33:57:ca:00:67:d1:97: f6:24:b1:f9:79:b9:93:86:0e:c8:db:71:53:fb:90:a4:54:46: e7:36:16:ee:88:b0:0c:5c:b5:05:9f:cb:49:b7:95:d7:84:ca: a4:76:d6:df:39:3f:06:bb:c1:a3:5b:2c:30:d0:ab:5d:26:b0: aa:c6:c3:73:c2:86:10:f2:17:9f:ad:1f:85:1a:fc:6e:ad:f7: 19:b8:d1:ed:78:3b:92:6f:91:0a:e5:7a:8f:bc:f6:c2:73:3f: b3:1b:01:d8:0a:33:61:6c:24:23:9c:ba:97:46:48:5e:e2:da: 3c:81:b9:c3:36:d3:ea:0c:71:13:e1:af:94:48:41:8b:7e:5f: 17:ad:34:83:c1:6b:36:97:82:b3:d3:1a:63:5a:89:d2:ae:f5: 32:55:b3:85:b0:8e:91:cd:15:cb:2c:c7:0e:74:7a:eb:87:64: 00:68:a0:b8:44:eb:3a:58:bf:bc:75:f0:ff:66:e0:88:80:e2: d5:40:bf:f3:52:04:e0:64:a2:bf:94:ac:21:d0:1b:12:3f:f7: ca:aa:2e:e0:f4:88:e6:ac:f8:13:ab:b8:6f:59:45:eb:68:49: 1f:c7:23:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tchsINIiS/CJgNZySD+4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZDY4Mjk2NWI1YTE1ZWEwYzQ1ZWE4NWVmM2RiNGJlNzE2 Nzk2OTYwHhcNMjUxMjIxMDcwMDM2WhcNMjUxMjIyMDcwMDM2WjAzMTEwLwYDVQQD EyhjMTU1Yjk0ZThhNGNhOWFiZThkMDZlZDQ0M2Q3NjUyZWE1MTQ2YzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMjOo9YMObQkZ101JIeeTWcQjoK2 hhHzf9bpb7t+U67LLeFs0o4du87EeLnT8XDDBes2Rz/W/nJcpYbozNxoTUxmWTLA /MynUo5o5mvKl6+ls0sXAQjvgUFzBKqSRE1bIzwleL/EcBMCQW1unYsQgdNm8PJ0 G+SaZKi8UOj0bSSiILp8UB+nBxXo2rvoV1k3iGMmSB75r336LmGg0ckXyJj3D8uq m0+ygpp628lsslsn2buTtb6HJBk8ftuYa+Ol+CPf5i0/CF6i93QdiNzXFHq69Sro lxB9fNYu6Ca+QghCqpv86aY5EUgEFJRinUF+SXi9l6ArCIoX/WX5sOeu5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMFVuU6KTKmr6NBu1EPXZS6lFGwyMB8GA1UdIwQY MBaAFE7WgpZbWhXqDEXqhe89tL5xZ5aWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHRhQ2xsdGFGZW9NUmVxRjd6MjB2bkZubHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zZTQwMWItNjRjMS00MWFhLTk4ZGYt MTMzZTdlNmY2MDY5LzEvVHRhQ2xsdGFGZW9NUmVxRjd6MjB2bkZubHBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zZTQwMWItNjRjMS00MWFhLTk4ZGYtMTMzZTdlNmY2MDY5 LzEvVHRhQ2xsdGFGZW9NUmVxRjd6MjB2bkZubHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8Ef3atA rlHt8OheP4Kq0aciDFT5S+b0O+j5vL8zV8oAZ9GX9iSx+Xm5k4YOyNtxU/uQpFRG 5zYW7oiwDFy1BZ/LSbeV14TKpHbW3zk/BrvBo1ssMNCrXSawqsbDc8KGEPIXn60f hRr8bq33GbjR7Xg7km+RCuV6j7z2wnM/sxsB2AozYWwkI5y6l0ZIXuLaPIG5wzbT 6gxxE+GvlEhBi35fF600g8FrNpeCs9MaY1qJ0q71MlWzhbCOkc0VyyzHDnR664dk AGiguETrOli/vHXw/2bgiIDi1UC/81IE4GSiv5SsIdAbEj/3yqou4PSI5qz4E6u4 b1lF62hJH8cjzA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:17:01 2025 by rpki-client