This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json) Hash identifier: 9Vcl2DjeOiN20fsQf9NjbxuiaKoefV5YcSfYX0gmxgA= Subject key identifier: 1E:54:40:9C:64:9B:A5:74:D4:A1:B9:2F:C1:C1:75:AB:6A:00:8C:97 Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e Certificate serial: 019B3AFD6B9814E6672C234019832F3FFAB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 09:00:45 +0000 Manifest this update: Sat 20 Dec 2025 09:00:45 +0000 Manifest next update: Sun 21 Dec 2025 09:00:45 +0000 Files and hashes: 1: 2-8ODfbSISRCVrFLypE1beop4mI.roa (hash: CTu3Z/KQAufmJs+pAxP0V5GvviRUTQPwl9gEk4hUm6E=) 2: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: Ba1ywEVRo44ig9bDgvr20c4XSlet3RexzOrj7xDJkI4=) 3: xOYkGw3SqmDNjUBUXBvZW0U-4J4.roa (hash: CMrEVMiwQAaT7qSr6cVaZ45q/VR6zzPcJBOroZoc7n8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:6b:98:14:e6:67:2c:23:40:19:83:2f:3f:fa:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e Validity Not Before: Dec 20 09:00:45 2025 GMT Not After : Dec 21 09:00:45 2025 GMT Subject: CN=1e54409c649ba574d4a1b92fc1c175ab6a008c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:37:e2:2b:51:e0:e7:fe:dc:79:6a:47:23:65: c4:43:08:08:9a:a6:58:28:6a:6e:14:f4:2e:c3:4c: 51:96:9c:ca:9f:11:98:85:50:7c:59:b4:9c:8a:66: 19:7d:a9:af:3d:cf:68:8b:b0:45:22:cf:fb:d2:a7: 4c:24:2b:94:fd:35:c7:f7:95:b1:32:ca:39:a3:81: 36:1d:c4:38:c4:70:c7:ec:3a:21:4f:46:a9:1a:71: b7:aa:92:7d:4a:d5:36:5d:47:ac:c7:9b:f3:92:40: c8:76:82:a0:dd:59:9c:51:4e:b6:87:df:f5:9a:3a: db:aa:e7:15:54:bb:e8:e4:a6:d3:9c:26:43:65:83: 44:27:93:fd:35:10:f5:54:1d:6a:cb:25:14:4a:72: c4:2e:79:14:d0:4a:25:0b:c7:c8:7a:08:3d:06:89: ba:bc:7f:6b:3a:55:c1:05:07:d5:f6:bf:2f:30:db: f2:0d:03:b8:30:8f:68:19:bd:f1:03:55:01:b6:dd: a4:af:b3:bd:89:dc:ce:98:39:0f:03:06:fa:88:9a: c0:f4:a3:8f:f4:7a:b6:49:1b:a4:65:cc:30:56:a4: a0:c2:6e:ca:32:1c:e0:9e:cf:46:bb:d1:86:14:a6: 42:05:8f:b2:ed:f5:80:9f:91:d0:b3:2d:39:2d:38: 25:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:54:40:9C:64:9B:A5:74:D4:A1:B9:2F:C1:C1:75:AB:6A:00:8C:97 X509v3 Authority Key Identifier: keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:00:fc:48:f8:d3:ff:c9:08:bd:61:8d:1e:6e:8d:7b:d2:62: 66:48:e7:45:12:1b:b5:46:1e:12:38:d8:17:70:c2:6a:c7:2e: db:e7:f5:98:cd:12:ed:c7:df:18:d1:7e:99:0e:e0:68:ee:a1: ff:05:2a:92:22:45:a6:7e:23:65:9e:5f:c1:93:7f:ce:5b:e4: 12:aa:2b:92:cc:91:81:39:3c:52:52:aa:b2:76:fa:ff:d7:ad: 6b:c6:7b:91:0d:b2:7a:88:69:08:a1:5b:e1:c0:b8:32:0c:82: fc:ea:ec:5a:81:a5:c7:ac:bc:d5:7f:ca:a1:77:b8:60:b6:f5: 02:67:dd:96:3d:35:8e:f3:02:8e:df:36:f7:cc:1d:5a:70:a3: 64:a9:aa:68:67:65:74:75:c0:73:0c:60:e0:e7:ee:d3:a1:da: b5:b1:40:ca:0b:02:ae:53:4d:13:bc:4d:12:52:d7:13:d7:2c: e9:be:80:9f:72:bb:43:ca:92:5d:39:95:56:70:85:39:82:8f: a3:75:bb:98:2e:31:5f:b4:51:18:85:69:8e:22:4c:0e:8d:39: 32:dd:04:27:b9:67:d6:c8:67:db:32:a7:30:c2:5f:04:f2:07: 71:02:d7:23:1e:e5:5c:1d:94:72:97:17:ec:0c:e9:ff:f8:33: bc:fa:ca:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/WuYFOZnLCNAGYMvP/qzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkM2Y1NGYzMDRlNmI4NTE2MDhjMjkzOTc4YjE2YmE1MWFj MDM1MGUwHhcNMjUxMjIwMDkwMDQ1WhcNMjUxMjIxMDkwMDQ1WjAzMTEwLwYDVQQD EygxZTU0NDA5YzY0OWJhNTc0ZDRhMWI5MmZjMWMxNzVhYjZhMDA4Yzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzfiK1Hg5/7ceWpHI2XEQwgImqZY KGpuFPQuw0xRlpzKnxGYhVB8WbScimYZfamvPc9oi7BFIs/70qdMJCuU/TXH95Wx Mso5o4E2HcQ4xHDH7DohT0apGnG3qpJ9StU2XUesx5vzkkDIdoKg3VmcUU62h9/1 mjrbqucVVLvo5KbTnCZDZYNEJ5P9NRD1VB1qyyUUSnLELnkU0EolC8fIegg9Bom6 vH9rOlXBBQfV9r8vMNvyDQO4MI9oGb3xA1UBtt2kr7O9idzOmDkPAwb6iJrA9KOP 9Hq2SRukZcwwVqSgwm7KMhzgns9Gu9GGFKZCBY+y7fWAn5HQsy05LTgl/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5UQJxkm6V01KG5L8HBdatqAIyXMB8GA1UdIwQY MBaAFE0/VPME5rhRYIwpOXixa6UawDUOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODct NzExMDgyNThmMWI5LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9iNzM3ZjYtMzA0Yi00YzRmLWI4ODctNzExMDgyNThmMWI5 LzEvVFQ5VTh3VG11RkZnakNrNWVMRnJwUnJBTlE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwD8SPjT /8kIvWGNHm6Ne9JiZkjnRRIbtUYeEjjYF3DCascu2+f1mM0S7cffGNF+mQ7gaO6h /wUqkiJFpn4jZZ5fwZN/zlvkEqorksyRgTk8UlKqsnb6/9eta8Z7kQ2yeohpCKFb 4cC4MgyC/OrsWoGlx6y81X/KoXe4YLb1Amfdlj01jvMCjt8298wdWnCjZKmqaGdl dHXAcwxg4Ofu06HatbFAygsCrlNNE7xNElLXE9cs6b6An3K7Q8qSXTmVVnCFOYKP o3W7mC4xX7RRGIVpjiJMDo05Mt0EJ7ln1shn2zKnMMJfBPIHcQLXIx7lXB2UcpcX 7Azp//gzvPrKGg== -----END CERTIFICATE-----Generated at Sat Dec 20 18:01:13 2025 by rpki-client