This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft File: TTuCKQwugJCSSp79nFF8oUpcNwQ.mft (raw, json) Hash identifier: BPYQxj+GeF8lG9WwkLurKqi0LoUHbP4klAZPS34ikxM= Subject key identifier: 3E:A8:B0:F6:F0:6C:F1:35:10:9F:DD:FF:18:FA:0B:6B:AC:F3:F5:C9 Authority key identifier: 4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04 Certificate issuer: /CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704 Certificate serial: 019B68E9F6F963286B86DA22F65A2DC3373D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft Manifest number: 17A0 Signing time: Mon 29 Dec 2025 07:02:02 +0000 Manifest this update: Mon 29 Dec 2025 07:02:02 +0000 Manifest next update: Tue 30 Dec 2025 07:02:02 +0000 Files and hashes: 1: TTuCKQwugJCSSp79nFF8oUpcNwQ.crl (hash: 4Cbzr+Ej9nPN1vwdAFZHj/8upBHIauhPiLUfeVE3MVI=) 2: pdjC9ITQ24acWwqpMZ438xSZhiA.roa (hash: J1OLMcnc+nGL4fyVYlLU268vrwR6/zxGbhF2T7OJ2uY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:e9:f6:f9:63:28:6b:86:da:22:f6:5a:2d:c3:37:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704 Validity Not Before: Dec 29 07:02:02 2025 GMT Not After : Dec 30 07:02:02 2025 GMT Subject: CN=3ea8b0f6f06cf135109fddff18fa0b6bacf3f5c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2b:dd:c4:e5:06:71:c7:0e:9c:f2:29:92:ab: cd:af:3b:08:58:34:f0:5c:47:c2:3e:68:5d:6f:ff: 62:6d:30:ef:19:dd:67:2f:8f:57:01:90:29:98:89: 8d:97:f5:d4:75:ab:8d:d9:70:e0:f8:58:85:fa:16: 94:fc:71:b4:5b:82:78:90:33:62:02:07:32:8b:5a: 32:b3:f0:5b:61:d1:f8:c7:19:77:5c:9b:85:37:e8: 42:b8:b9:b8:6a:2c:4c:5f:14:98:73:a0:19:d2:ab: ac:3b:d8:ef:9f:5e:ef:ac:ad:b6:d0:b1:d0:25:2e: de:7f:a9:62:4a:ec:e9:be:86:94:95:c0:9d:24:d3: 5c:ee:a3:d5:ee:26:a2:42:4f:d3:56:a0:6e:8f:37: c6:87:d1:42:be:cc:86:01:74:7c:d8:97:27:78:d2: 29:62:f3:3f:be:4f:d8:f7:97:97:83:0c:18:a1:46: e2:4a:ae:01:00:59:c4:9a:89:fe:d3:3f:32:6a:8d: fc:98:7a:3a:cf:3a:18:bc:61:d1:e7:c5:8b:a2:37: e7:c9:08:a9:5b:6e:67:69:00:0c:15:94:90:aa:a3: ae:02:e6:2c:8e:e1:5b:ea:b9:40:76:01:da:bd:fc: 8f:64:3c:27:ed:9f:e9:08:97:6c:dc:c2:53:e1:df: 03:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:A8:B0:F6:F0:6C:F1:35:10:9F:DD:FF:18:FA:0B:6B:AC:F3:F5:C9 X509v3 Authority Key Identifier: keyid:4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:5a:d8:7d:67:72:59:72:bd:ec:02:d0:31:77:b2:d7:34:89: 50:38:e6:93:f8:2b:c7:6b:31:8a:57:fa:e0:da:e3:e4:39:77: 6a:53:55:2b:94:40:c0:3d:f7:65:c3:51:92:0d:d5:c6:b7:3a: 7d:49:be:ea:f6:f6:70:2a:be:40:be:b0:7b:06:2f:30:e8:ee: 0b:0e:58:0c:20:a0:d4:a8:77:7e:95:45:60:17:6e:8a:69:27: 8f:73:24:ad:0b:5c:61:97:e7:d7:6a:87:d2:ee:21:3b:03:29: d7:00:fa:0a:72:ac:3f:83:09:ca:bb:b2:cc:2b:ec:95:cc:db: 1d:ad:22:36:11:d8:08:46:f4:58:b4:e0:08:53:bd:25:39:35: bb:d1:56:de:35:85:57:ca:4f:d5:0d:75:41:d3:25:58:f0:ae: 4c:49:e6:e3:cd:24:92:6f:20:6b:66:ce:c4:2a:93:bd:7b:59: a9:4c:9c:db:4b:b7:f0:87:e7:26:8c:e0:73:19:44:99:e6:20: d6:51:d4:a6:9f:f8:a5:b2:e6:6e:6b:d9:d8:ed:3f:1d:cc:f0: 2e:0a:ca:b8:e8:e4:27:31:bb:8b:1f:a7:31:e6:5c:41:64:52: 00:72:08:d0:ac:dc:ec:44:1b:17:f8:76:29:6a:26:e8:ba:54: c4:43:e8:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZto6fb5Yyhrhtoi9lotwzc9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkM2I4MjI5MGMyZTgwOTA5MjRhOWVmZDljNTE3Y2ExNGE1 YzM3MDQwHhcNMjUxMjI5MDcwMjAyWhcNMjUxMjMwMDcwMjAyWjAzMTEwLwYDVQQD EygzZWE4YjBmNmYwNmNmMTM1MTA5ZmRkZmYxOGZhMGI2YmFjZjNmNWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxivdxOUGcccOnPIpkqvNrzsIWDTw XEfCPmhdb/9ibTDvGd1nL49XAZApmImNl/XUdauN2XDg+FiF+haU/HG0W4J4kDNi Agcyi1oys/BbYdH4xxl3XJuFN+hCuLm4aixMXxSYc6AZ0qusO9jvn17vrK220LHQ JS7ef6liSuzpvoaUlcCdJNNc7qPV7iaiQk/TVqBujzfGh9FCvsyGAXR82JcneNIp YvM/vk/Y95eXgwwYoUbiSq4BAFnEmon+0z8yao38mHo6zzoYvGHR58WLojfnyQip W25naQAMFZSQqqOuAuYsjuFb6rlAdgHavfyPZDwn7Z/pCJds3MJT4d8D1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6osPbwbPE1EJ/d/xj6C2us8/XJMB8GA1UdIwQY MBaAFE07gikMLoCQkkqe/ZxRfKFKXDcEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFR1Q0tRd3VnSkNTU3A3OW5GRjhvVXBjTndRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jNWNjZDgtOGYwZC00ODYyLTg2YWEt ZDk3OWVjZTkzMjg1LzEvVFR1Q0tRd3VnSkNTU3A3OW5GRjhvVXBjTndRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9jNWNjZDgtOGYwZC00ODYyLTg2YWEtZDk3OWVjZTkzMjg1 LzEvVFR1Q0tRd3VnSkNTU3A3OW5GRjhvVXBjTndRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1rYfWdy WXK97ALQMXey1zSJUDjmk/grx2sxilf64Nrj5Dl3alNVK5RAwD33ZcNRkg3Vxrc6 fUm+6vb2cCq+QL6wewYvMOjuCw5YDCCg1Kh3fpVFYBduimknj3MkrQtcYZfn12qH 0u4hOwMp1wD6CnKsP4MJyruyzCvslczbHa0iNhHYCEb0WLTgCFO9JTk1u9FW3jWF V8pP1Q11QdMlWPCuTEnm480kkm8ga2bOxCqTvXtZqUyc20u38IfnJozgcxlEmeYg 1lHUpp/4pbLmbmvZ2O0/HczwLgrKuOjkJzG7ix+nMeZcQWRSAHII0Kzc7EQbF/h2 KWom6LpUxEPomA== -----END CERTIFICATE-----Generated at Mon Dec 29 10:01:21 2025 by rpki-client