This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft File: TtTTbmM3JKGxeUm8QiR2lk518GU.mft (raw, json) Hash identifier: /3kyt4kU/G7/QwF7IoxXywGja5IRTms6UVRfsH5XDVM= Subject key identifier: 19:AA:8A:84:38:EE:10:6C:F3:62:FF:B1:EB:C9:79:DC:89:80:34:22 Authority key identifier: 4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65 Certificate issuer: /CN=4ed4d36e633724a1b17949bc422476964e75f065 Certificate serial: 019B6E45BC45DE23B2DACBF7F6D3ACFFE10F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 08:00:22 +0000 Manifest this update: Tue 30 Dec 2025 08:00:22 +0000 Manifest next update: Wed 31 Dec 2025 08:00:22 +0000 Files and hashes: 1: CnryW-h9KBqAbLH3yoElsj6kkME.roa (hash: LGWkYgge1+9ItWTLHb68eWMOdZQGepA7ESiUA3d7dLI=) 2: TtTTbmM3JKGxeUm8QiR2lk518GU.crl (hash: K+CWV4qs36CEbeaS3c0arzteGHjHPH6t/eLhGvUGCJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 08:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:45:bc:45:de:23:b2:da:cb:f7:f6:d3:ac:ff:e1:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ed4d36e633724a1b17949bc422476964e75f065 Validity Not Before: Dec 30 08:00:22 2025 GMT Not After : Dec 31 08:00:22 2025 GMT Subject: CN=19aa8a8438ee106cf362ffb1ebc979dc89803422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:34:d7:9c:8a:00:95:d9:41:d8:86:11:40:34: 52:22:bf:ef:61:66:d7:a2:73:bc:93:3c:15:ec:0f: 74:89:0c:56:7e:4a:cd:94:fb:17:6f:dd:df:36:e9: ac:23:00:fc:e8:f2:9b:80:ec:6f:e8:0e:08:5e:c8: 46:af:c3:14:0d:ac:ca:3d:77:93:e3:14:be:30:91: e3:d3:d2:c6:af:1b:c7:77:84:08:b6:b1:f1:88:c3: c3:8b:ad:a7:07:74:65:d0:25:be:4d:a6:3f:6d:53: 56:73:ab:56:70:15:56:9d:b0:53:98:e7:75:96:dc: ad:1b:cb:fd:83:b9:33:7a:62:ff:a8:72:17:cf:4f: 13:ea:03:22:63:c0:04:33:83:24:64:c3:ec:36:b8: 03:42:d6:9a:ac:1f:6d:1f:cf:99:58:7f:ab:69:f2: 71:f8:8f:26:43:98:e8:8c:65:01:15:9b:4d:e4:bd: e8:2c:5f:8c:2a:eb:ca:12:1e:6c:c1:8a:cb:37:78: dd:d0:b1:d4:ac:af:38:8b:fc:12:d4:47:ed:15:02: cf:2e:e2:f5:33:6d:a7:06:36:7f:db:c0:6b:a1:36: 21:de:e7:3b:71:ad:1f:56:91:4a:9e:f2:36:00:31: b6:9b:2d:d5:e3:5a:04:a0:e8:5a:f1:39:e4:a1:ee: 15:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AA:8A:84:38:EE:10:6C:F3:62:FF:B1:EB:C9:79:DC:89:80:34:22 X509v3 Authority Key Identifier: keyid:4E:D4:D3:6E:63:37:24:A1:B1:79:49:BC:42:24:76:96:4E:75:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtTTbmM3JKGxeUm8QiR2lk518GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/686d4b-f15b-4530-b91b-e0c406b64672/1/TtTTbmM3JKGxeUm8QiR2lk518GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d3:eb:e9:2c:77:79:2e:04:01:92:3e:ec:45:24:c6:31:6c: d3:1f:2e:f6:8b:4c:22:ce:78:e3:76:92:cf:bf:06:c7:51:4d: 28:b2:97:92:85:40:ea:41:5d:16:15:86:7b:53:b6:4f:b1:3d: 1d:4d:49:d5:8b:73:3c:9f:aa:eb:22:ef:13:12:97:93:c0:e7: 1b:bd:c0:1a:f6:db:ed:35:ad:95:e8:f7:93:7a:9f:eb:cb:d7: bd:1c:67:27:f2:1a:3c:dd:b4:52:df:29:e5:c7:17:0c:a1:5c: 38:f7:de:6b:1e:20:44:9f:5d:8d:38:17:33:32:ad:bf:22:73: 80:34:52:43:01:ab:fa:c3:41:6e:71:24:71:de:af:59:3c:4b: 51:ae:14:8b:0b:fe:fb:d8:c8:2c:06:36:fe:d5:9e:ad:1d:73: 95:4a:ee:9a:e0:26:55:c7:3c:35:ae:a8:e9:36:4d:ef:ff:81: 6f:cb:1e:4b:33:71:ea:0f:a7:3d:35:f3:53:b8:fd:30:ad:09: 68:7b:24:90:d4:95:03:d7:b5:2a:1f:7a:a2:20:73:6c:ac:93: 61:cf:20:0d:fb:4a:d9:43:d1:94:3f:d1:87:21:8c:90:d7:ba: ca:d3:68:8c:fb:53:07:c1:f8:3a:a6:02:1d:3d:3e:95:7b:66: 96:e1:d1:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtuRbxF3iOy2sv39tOs/+EPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZDRkMzZlNjMzNzI0YTFiMTc5NDliYzQyMjQ3Njk2NGU3 NWYwNjUwHhcNMjUxMjMwMDgwMDIyWhcNMjUxMjMxMDgwMDIyWjAzMTEwLwYDVQQD EygxOWFhOGE4NDM4ZWUxMDZjZjM2MmZmYjFlYmM5NzlkYzg5ODAzNDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjTXnIoAldlB2IYRQDRSIr/vYWbX onO8kzwV7A90iQxWfkrNlPsXb93fNumsIwD86PKbgOxv6A4IXshGr8MUDazKPXeT 4xS+MJHj09LGrxvHd4QItrHxiMPDi62nB3Rl0CW+TaY/bVNWc6tWcBVWnbBTmOd1 ltytG8v9g7kzemL/qHIXz08T6gMiY8AEM4MkZMPsNrgDQtaarB9tH8+ZWH+rafJx +I8mQ5jojGUBFZtN5L3oLF+MKuvKEh5swYrLN3jd0LHUrK84i/wS1EftFQLPLuL1 M22nBjZ/28BroTYh3uc7ca0fVpFKnvI2ADG2my3V41oEoOha8Tnkoe4VIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBmqioQ47hBs82L/sevJedyJgDQiMB8GA1UdIwQY MBaAFE7U025jNyShsXlJvEIkdpZOdfBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHRUVGJtTTNKS0d4ZVVtOFFpUjJsazUxOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82ODZkNGItZjE1Yi00NTMwLWI5MWIt ZTBjNDA2YjY0NjcyLzEvVHRUVGJtTTNKS0d4ZVVtOFFpUjJsazUxOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy82ODZkNGItZjE1Yi00NTMwLWI5MWItZTBjNDA2YjY0Njcy LzEvVHRUVGJtTTNKS0d4ZVVtOFFpUjJsazUxOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNPr6Sx3 eS4EAZI+7EUkxjFs0x8u9otMIs5443aSz78Gx1FNKLKXkoVA6kFdFhWGe1O2T7E9 HU1J1YtzPJ+q6yLvExKXk8DnG73AGvbb7TWtlej3k3qf68vXvRxnJ/IaPN20Ut8p 5ccXDKFcOPfeax4gRJ9djTgXMzKtvyJzgDRSQwGr+sNBbnEkcd6vWTxLUa4Uiwv+ +9jILAY2/tWerR1zlUrumuAmVcc8Na6o6TZN7/+Bb8seSzNx6g+nPTXzU7j9MK0J aHskkNSVA9e1Kh96oiBzbKyTYc8gDftK2UPRlD/RhyGMkNe6ytNojPtTB8H4OqYC HT0+lXtmluHRWw== -----END CERTIFICATE-----Generated at Tue Dec 30 14:59:38 2025 by rpki-client