This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft File: Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft (raw, json) Hash identifier: DoLbthk7i7nL8zGp+v1sTtnUMKLdgxxeqSctuS40DyE= Subject key identifier: 15:3F:C5:6D:D9:99:4E:07:16:B6:C5:A6:ED:9E:FE:AC:4A:25:E0:79 Authority key identifier: 4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28 Certificate issuer: /CN=4edc689bb22d09475574f41c0e5d97c045930928 Certificate serial: 019B2F3023DCD2356EEA9AE024ED678ABAD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 02:00:42 +0000 Manifest this update: Thu 18 Dec 2025 02:00:42 +0000 Manifest next update: Fri 19 Dec 2025 02:00:42 +0000 Files and hashes: 1: Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl (hash: Uk0EN7O78k6PVqzOaU/wP7+WSp0z1plVMlMypCeCTKI=) 2: zj8x9LPhXlzEHQ9u1uzhgnhO97g.roa (hash: e3RgXnvTwkUusOiV6XnE/u7ua1aPibK0pF3ch7NYWK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:30:23:dc:d2:35:6e:ea:9a:e0:24:ed:67:8a:ba:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4edc689bb22d09475574f41c0e5d97c045930928 Validity Not Before: Dec 18 02:00:42 2025 GMT Not After : Dec 19 02:00:42 2025 GMT Subject: CN=153fc56dd9994e0716b6c5a6ed9efeac4a25e079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f7:6c:6b:a2:2f:48:b8:2a:a7:9c:f0:f6:7c: d5:1a:27:13:89:69:f3:99:ec:6e:72:95:7e:56:4a: 0e:8f:65:33:85:6a:5c:f6:4d:46:35:96:aa:52:5c: 1b:a9:a0:bb:8c:b0:4f:a0:7d:33:0e:34:5f:33:bd: 96:16:e3:ae:b1:05:5e:fb:12:18:23:aa:aa:76:a1: 55:cf:e1:d5:d2:05:54:8f:cc:a9:a6:ff:a4:00:90: e2:44:be:f5:0b:9b:7d:31:0a:d7:a8:f3:63:13:fe: 35:6f:c3:99:61:10:86:8f:3a:96:f9:c4:dc:35:80: 3b:71:66:87:1b:b8:de:e8:8c:dd:49:4f:c5:14:4c: b2:92:65:52:da:ae:70:af:c5:00:06:95:64:b6:73: e8:b5:10:f2:43:b4:df:c2:19:81:c3:85:78:e9:51: 0d:3b:c9:69:ba:db:37:ab:3c:69:99:ad:fe:81:2f: 70:44:19:0f:ac:2b:93:cc:ac:79:db:01:b9:4b:28: 97:c9:71:50:dd:a9:18:d3:bc:22:3c:cf:11:56:b5: 8a:eb:d7:a7:a4:47:89:d9:d9:90:ce:37:1f:94:9e: 1f:24:7a:d4:c4:39:b6:90:ee:b3:b1:69:31:93:f9: b4:d6:96:9a:4a:fa:83:f9:a1:9c:d6:4d:35:b8:cb: 44:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3F:C5:6D:D9:99:4E:07:16:B6:C5:A6:ED:9E:FE:AC:4A:25:E0:79 X509v3 Authority Key Identifier: keyid:4E:DC:68:9B:B2:2D:09:47:55:74:F4:1C:0E:5D:97:C0:45:93:09:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ttxom7ItCUdVdPQcDl2XwEWTCSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/7bbb91-c5b0-4d0b-925b-09be5989d0ac/1/Ttxom7ItCUdVdPQcDl2XwEWTCSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:99:95:21:b0:2e:e6:36:2a:f3:05:95:3d:ae:8d:60:9d:0b: d7:14:8d:20:35:f7:e3:26:22:66:80:8b:8b:58:94:ed:a7:66: ed:76:21:b6:e4:81:01:11:f6:71:c8:90:05:a4:c7:73:0b:68: 56:34:af:09:e0:31:08:87:3f:7f:ad:32:fa:21:00:24:16:b4: 4e:d0:32:91:62:a0:d5:28:4b:38:af:99:91:df:a7:19:13:bb: e9:f1:15:7f:96:49:a1:0b:6e:9a:46:d4:b9:7d:92:24:1f:06: af:52:c4:c5:d1:b6:f5:15:04:1b:ff:a7:37:45:60:19:ac:42: 73:97:5a:7c:62:50:ab:2d:5b:d4:68:65:db:d3:b2:e7:f5:a7: a5:17:5f:a0:dd:b2:89:3f:21:3c:16:d7:ac:6b:0e:4b:b2:be: 7e:12:57:5d:d9:af:02:40:87:62:4d:81:a9:fd:7a:21:5b:b2: a2:c9:23:e5:d2:e9:89:1d:37:d2:8b:eb:f3:7e:49:1b:be:a7: f2:b2:ff:5f:b3:0b:7c:ac:54:ca:21:5b:bc:ae:08:5e:1d:16: cd:62:34:52:f3:c9:ae:06:e8:39:59:37:14:3f:1c:2f:d7:9e: e1:18:5d:a6:ba:00:f9:38:8f:92:e0:59:7a:8f:0c:d9:a4:10: 15:22:42:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvMCPc0jVu6prgJO1nirrXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZGM2ODliYjIyZDA5NDc1NTc0ZjQxYzBlNWQ5N2MwNDU5 MzA5MjgwHhcNMjUxMjE4MDIwMDQyWhcNMjUxMjE5MDIwMDQyWjAzMTEwLwYDVQQD EygxNTNmYzU2ZGQ5OTk0ZTA3MTZiNmM1YTZlZDllZmVhYzRhMjVlMDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfdsa6IvSLgqp5zw9nzVGicTiWnz mexucpV+VkoOj2UzhWpc9k1GNZaqUlwbqaC7jLBPoH0zDjRfM72WFuOusQVe+xIY I6qqdqFVz+HV0gVUj8yppv+kAJDiRL71C5t9MQrXqPNjE/41b8OZYRCGjzqW+cTc NYA7cWaHG7je6IzdSU/FFEyykmVS2q5wr8UABpVktnPotRDyQ7TfwhmBw4V46VEN O8lputs3qzxpma3+gS9wRBkPrCuTzKx52wG5SyiXyXFQ3akY07wiPM8RVrWK69en pEeJ2dmQzjcflJ4fJHrUxDm2kO6zsWkxk/m01paaSvqD+aGc1k01uMtEVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBU/xW3ZmU4HFrbFpu2e/qxKJeB5MB8GA1UdIwQY MBaAFE7caJuyLQlHVXT0HA5dl8BFkwkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi83YmJiOTEtYzViMC00ZDBiLTkyNWIt MDliZTU5ODlkMGFjLzEvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi83YmJiOTEtYzViMC00ZDBiLTkyNWItMDliZTU5ODlkMGFj LzEvVHR4b203SXRDVWRWZFBRY0RsMlh3RVdUQ1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACpmVIbAu 5jYq8wWVPa6NYJ0L1xSNIDX34yYiZoCLi1iU7adm7XYhtuSBARH2cciQBaTHcwto VjSvCeAxCIc/f60y+iEAJBa0TtAykWKg1ShLOK+Zkd+nGRO76fEVf5ZJoQtumkbU uX2SJB8Gr1LExdG29RUEG/+nN0VgGaxCc5dafGJQqy1b1Ghl29Oy5/WnpRdfoN2y iT8hPBbXrGsOS7K+fhJXXdmvAkCHYk2Bqf16IVuyoskj5dLpiR030ovr835JG76n 8rL/X7MLfKxUyiFbvK4IXh0WzWI0UvPJrgboOVk3FD8cL9ee4RhdproA+TiPkuBZ eo8M2aQQFSJCag== -----END CERTIFICATE-----Generated at Thu Dec 18 11:55:26 2025 by rpki-client