This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft File: TtMkzMCQuDGCmReur3ODTwg0Ss4.mft (raw, json) Hash identifier: 9yrzsV8p3LI4nmnk54qOUgvtekX19jzNq7+o40/AeiQ= Subject key identifier: FF:12:53:0C:5A:81:B1:60:BC:93:E3:33:32:F9:7E:1D:7B:CE:3C:88 Authority key identifier: 4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE Certificate issuer: /CN=4ed324ccc090b831829917aeaf73834f08344ace Certificate serial: 019B6D69F520C70C4079F7300362696935BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft Manifest number: 02B1 Signing time: Tue 30 Dec 2025 04:00:18 +0000 Manifest this update: Tue 30 Dec 2025 04:00:18 +0000 Manifest next update: Wed 31 Dec 2025 04:00:18 +0000 Files and hashes: 1: LpPDa_hMKwPOheYcHrNv5BDTWog.roa (hash: 2CoZfLFeobkKqc9qZWTYrYW94wPP5u5Zmz2xUC1WQvs=) 2: TtMkzMCQuDGCmReur3ODTwg0Ss4.crl (hash: bbNdU1ZCmIWa9IHpqqRtq5ZnbWeauGjhLPx2kp3sXmo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:69:f5:20:c7:0c:40:79:f7:30:03:62:69:69:35:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ed324ccc090b831829917aeaf73834f08344ace Validity Not Before: Dec 30 04:00:18 2025 GMT Not After : Dec 31 04:00:18 2025 GMT Subject: CN=ff12530c5a81b160bc93e33332f97e1d7bce3c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ed:e3:f2:a0:49:1d:09:d4:fa:0a:b6:3f:51: 68:09:34:02:e2:91:f3:18:ad:1c:de:79:d0:32:5c: ac:7d:eb:b0:d3:61:0e:5b:9f:bc:c4:7c:46:8c:8f: 6d:a0:80:58:39:1d:62:58:dc:c6:4d:ae:1a:d7:3a: b2:ae:d0:8c:3c:bc:93:d7:c4:1b:31:c7:86:e7:8d: d1:00:d3:60:98:26:ef:0a:0a:ca:0c:10:5b:70:46: be:59:38:9a:8c:b0:d0:12:68:6a:9e:0f:ca:66:ab: e6:e4:73:9c:7c:e0:24:ac:84:2e:7e:f1:03:16:e8: 26:ff:79:8c:30:95:39:99:b8:1e:4f:ab:73:8c:89: 1a:be:6e:9a:c6:50:69:9c:27:f8:8e:2b:13:f5:57: 62:bf:bf:97:61:fe:3c:90:17:7c:cd:33:1a:40:74: b6:d1:24:a5:b1:18:3a:21:2d:55:a1:72:2e:55:c8: c4:21:0f:c1:e4:5f:e3:8b:19:06:aa:c7:47:c4:2c: 30:7c:18:e2:41:bd:ab:f1:b4:ce:a3:b3:b9:81:af: 02:32:7e:e4:b1:a9:fb:27:7c:73:e5:61:79:4e:de: d5:77:f1:91:01:9e:6d:39:f4:d0:35:18:a4:73:c6: b1:6e:96:62:bd:5d:b7:1c:a0:e6:b2:b0:d8:4b:c2: d9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:12:53:0C:5A:81:B1:60:BC:93:E3:33:32:F9:7E:1D:7B:CE:3C:88 X509v3 Authority Key Identifier: keyid:4E:D3:24:CC:C0:90:B8:31:82:99:17:AE:AF:73:83:4F:08:34:4A:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtMkzMCQuDGCmReur3ODTwg0Ss4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/017c37-61b6-4d40-881a-53a084390527/1/TtMkzMCQuDGCmReur3ODTwg0Ss4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:d1:86:68:40:ea:c1:94:07:75:be:f6:dc:f6:61:3b:c3:ac: ce:a8:a2:fc:07:a7:2d:66:65:f3:b5:f2:42:29:ed:6d:5d:13: 4d:a3:07:d0:a9:c6:03:98:ab:1b:0d:0e:f4:b6:70:51:4c:6b: af:6c:92:15:e1:a3:de:5f:f2:14:a1:fb:46:fe:52:89:91:58: a0:75:88:95:8b:13:4b:9b:01:fd:d0:7b:5e:6a:9f:da:02:37: 9e:b3:6e:d2:c9:cd:af:b9:da:df:da:79:4a:25:db:08:17:10: 8a:e2:8f:1e:48:2e:da:87:b6:a5:3b:e5:e3:bb:76:9f:8a:fe: 35:11:4a:d4:27:70:d9:ab:21:03:c5:ac:db:2e:8e:a2:d9:0d: 16:bc:9f:da:28:37:7f:30:b8:e3:42:01:71:b3:17:f9:8f:0f: 34:54:69:dc:b1:dd:e5:cb:e9:80:ff:9b:5e:15:b3:d3:c4:e5: a1:5a:ec:5f:00:25:a1:a2:0b:1a:02:0e:13:54:0f:19:aa:0b: e1:38:38:4e:3b:cf:02:a4:ab:3f:49:bc:84:f4:5b:22:4a:10: 56:18:db:37:66:9e:2f:c5:f8:fb:32:7b:70:3f:59:7c:19:eb: 8a:30:a9:4e:f4:68:45:65:06:b4:88:c4:77:0d:4d:8b:76:09: b3:72:bc:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttafUgxwxAefcwA2JpaTW6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZDMyNGNjYzA5MGI4MzE4Mjk5MTdhZWFmNzM4MzRmMDgz NDRhY2UwHhcNMjUxMjMwMDQwMDE4WhcNMjUxMjMxMDQwMDE4WjAzMTEwLwYDVQQD EyhmZjEyNTMwYzVhODFiMTYwYmM5M2UzMzMzMmY5N2UxZDdiY2UzYzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+3j8qBJHQnU+gq2P1FoCTQC4pHz GK0c3nnQMlysfeuw02EOW5+8xHxGjI9toIBYOR1iWNzGTa4a1zqyrtCMPLyT18Qb MceG543RANNgmCbvCgrKDBBbcEa+WTiajLDQEmhqng/KZqvm5HOcfOAkrIQufvED Fugm/3mMMJU5mbgeT6tzjIkavm6axlBpnCf4jisT9Vdiv7+XYf48kBd8zTMaQHS2 0SSlsRg6IS1VoXIuVcjEIQ/B5F/jixkGqsdHxCwwfBjiQb2r8bTOo7O5ga8CMn7k san7J3xz5WF5Tt7Vd/GRAZ5tOfTQNRikc8axbpZivV23HKDmsrDYS8LZkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8SUwxagbFgvJPjMzL5fh17zjyIMB8GA1UdIwQY MBaAFE7TJMzAkLgxgpkXrq9zg08INErOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8wMTdjMzctNjFiNi00ZDQwLTg4MWEt NTNhMDg0MzkwNTI3LzEvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8wMTdjMzctNjFiNi00ZDQwLTg4MWEtNTNhMDg0MzkwNTI3 LzEvVHRNa3pNQ1F1REdDbVJldXIzT0RUd2cwU3M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQdGGaEDq wZQHdb723PZhO8Oszqii/AenLWZl87XyQintbV0TTaMH0KnGA5irGw0O9LZwUUxr r2ySFeGj3l/yFKH7Rv5SiZFYoHWIlYsTS5sB/dB7Xmqf2gI3nrNu0snNr7na39p5 SiXbCBcQiuKPHkgu2oe2pTvl47t2n4r+NRFK1Cdw2ashA8Ws2y6OotkNFryf2ig3 fzC440IBcbMX+Y8PNFRp3LHd5cvpgP+bXhWz08TloVrsXwAloaILGgIOE1QPGaoL 4Tg4TjvPAqSrP0m8hPRbIkoQVhjbN2aeL8X4+zJ7cD9ZfBnrijCpTvRoRWUGtIjE dw1Ni3YJs3K8xA== -----END CERTIFICATE-----Generated at Tue Dec 30 10:32:19 2025 by rpki-client