This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json) Hash identifier: nnUnch7wJba0uJkBlwvMgLXBSHMq/6ozwK/d9qZ554M= Subject key identifier: 7E:64:87:0A:09:29:77:12:65:CD:4D:CB:75:76:81:7D:C6:02:CF:57 Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d Certificate serial: 019B5486564845377EF9FEBAC2ED7F41BDE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft Manifest number: 1112 Signing time: Thu 25 Dec 2025 08:00:48 +0000 Manifest this update: Thu 25 Dec 2025 08:00:48 +0000 Manifest next update: Fri 26 Dec 2025 08:00:48 +0000 Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: B4Ak7lejyVVZsuO//EXu+X+mBDBDsFKge3+nWcfHYYk=) 2: eOJpQF5FNoppqB79NhjuknNPvas.roa (hash: 0TneR6h3XAtyeO7uLkVkGQTYXZHCJ04//nJtpw2jBn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 08:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:56:48:45:37:7e:f9:fe:ba:c2:ed:7f:41:bd:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d Validity Not Before: Dec 25 08:00:48 2025 GMT Not After : Dec 26 08:00:48 2025 GMT Subject: CN=7e64870a0929771265cd4dcb7576817dc602cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:17:c5:1b:70:a4:73:e9:e6:55:77:f9:47: 67:a9:61:64:5a:07:b7:39:0f:01:18:94:b4:0c:7a: 7a:83:63:05:3b:6b:55:d9:f1:60:be:fc:a3:64:e1: a3:23:5c:4f:ed:1a:fe:8b:ac:11:b8:71:88:c3:14: ea:cf:d0:b0:7f:c7:35:31:e5:90:a6:bd:05:77:a1: fb:65:36:9a:31:1c:a5:98:61:89:79:d1:8d:a3:c7: 4a:d3:6e:8e:63:2b:88:a6:4c:8d:44:a7:65:fa:96: 71:9f:77:c7:8f:eb:f6:54:08:53:62:43:e2:07:3d: 57:b4:70:2a:70:c6:fd:1f:bf:d2:76:df:b0:19:be: a5:c3:4e:ff:f7:70:49:78:a8:2b:10:3b:c4:b1:ee: 25:8b:18:61:1d:1b:18:11:b2:0f:d7:6f:e0:74:29: e0:2a:16:c3:b5:4a:2f:81:1f:18:81:96:d6:f1:54: a5:d6:52:47:dd:e2:18:dc:cb:68:63:2a:05:3d:83: e3:d8:cb:e1:94:a9:d6:cc:d8:d4:d6:5f:3c:65:6a: 33:1a:ec:b0:a2:38:3f:93:2c:aa:17:e3:fa:7f:5c: 00:ea:50:b1:82:a0:67:6a:ca:4d:1b:df:50:f8:8a: 25:2e:16:aa:90:1c:66:03:cf:a4:1b:9b:31:14:77: 35:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:64:87:0A:09:29:77:12:65:CD:4D:CB:75:76:81:7D:C6:02:CF:57 X509v3 Authority Key Identifier: keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a2:e4:52:01:11:2f:1d:a9:69:a3:00:f8:ad:a0:ae:e0:0a: 19:91:41:83:3e:d8:0b:dc:cc:eb:20:d3:c2:4f:a1:9c:62:39: 31:aa:0d:fb:75:c3:3d:6a:3f:00:f1:08:68:59:71:88:0d:03: 18:7f:b2:01:b8:d9:15:8a:95:0c:b2:39:e5:56:2b:75:96:f4: 9d:be:cc:af:91:64:a0:6b:fc:07:83:89:8b:08:e8:6e:e9:78: 08:57:1f:41:1e:80:cf:7e:9a:4f:71:3f:a4:97:c5:26:44:35: c4:b8:85:5d:d3:a0:e4:fd:2a:a7:67:e2:fe:0d:10:43:bc:69: be:6c:06:7c:02:ce:df:4f:3f:c3:e9:7e:0e:83:f4:b1:87:c2: 55:e7:b9:e3:fd:0a:2c:a5:04:2a:2e:8a:73:9b:bc:29:d9:16: ec:ee:1b:e1:72:df:45:e1:cd:76:f1:37:a3:df:08:49:c1:d7: 57:6e:37:5c:b1:ab:ee:eb:0c:84:12:6e:3d:90:04:13:ad:7d: 45:4f:36:84:da:36:10:c4:07:86:ac:87:67:f2:d8:47:c4:16: 25:e9:34:2d:f8:2d:b6:86:8d:6d:dc:fe:85:98:ec:1c:14:a8: 45:83:ff:64:34:e4:3e:f9:7c:77:5e:34:0e:c2:5e:75:4f:08: a7:a6:77:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhlZIRTd++f66wu1/Qb3pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZDAzN2Q0ZWUzZTVkMjcwNjVhZDgwMzU2NTgyYTJmZGMy YjQ4OGQwHhcNMjUxMjI1MDgwMDQ4WhcNMjUxMjI2MDgwMDQ4WjAzMTEwLwYDVQQD Eyg3ZTY0ODcwYTA5Mjk3NzEyNjVjZDRkY2I3NTc2ODE3ZGM2MDJjZjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucIXxRtwpHPp5lV3+UdnqWFkWge3 OQ8BGJS0DHp6g2MFO2tV2fFgvvyjZOGjI1xP7Rr+i6wRuHGIwxTqz9Cwf8c1MeWQ pr0Fd6H7ZTaaMRylmGGJedGNo8dK026OYyuIpkyNRKdl+pZxn3fHj+v2VAhTYkPi Bz1XtHAqcMb9H7/Sdt+wGb6lw07/93BJeKgrEDvEse4lixhhHRsYEbIP12/gdCng KhbDtUovgR8YgZbW8VSl1lJH3eIY3MtoYyoFPYPj2MvhlKnWzNjU1l88ZWozGuyw ojg/kyyqF+P6f1wA6lCxgqBnaspNG99Q+IolLhaqkBxmA8+kG5sxFHc1JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5khwoJKXcSZc1Ny3V2gX3GAs9XMB8GA1UdIwQY MBaAFE7QN9TuPl0nBlrYA1ZYKi/cK0iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83NGI5OTYtODBlZS00YzM5LThlNzQt MzUwZTY4MWI5OWQxLzEvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83NGI5OTYtODBlZS00YzM5LThlNzQtMzUwZTY4MWI5OWQx LzEvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKLkUgER Lx2paaMA+K2gruAKGZFBgz7YC9zM6yDTwk+hnGI5MaoN+3XDPWo/APEIaFlxiA0D GH+yAbjZFYqVDLI55VYrdZb0nb7Mr5FkoGv8B4OJiwjobul4CFcfQR6Az36aT3E/ pJfFJkQ1xLiFXdOg5P0qp2fi/g0QQ7xpvmwGfALO308/w+l+DoP0sYfCVee54/0K LKUEKi6Kc5u8KdkW7O4b4XLfReHNdvE3o98IScHXV243XLGr7usMhBJuPZAEE619 RU82hNo2EMQHhqyHZ/LYR8QWJek0LfgttoaNbdz+hZjsHBSoRYP/ZDTkPvl8d140 DsJedU8Ip6Z3fA== -----END CERTIFICATE-----Generated at Thu Dec 25 14:34:51 2025 by rpki-client