This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json) Hash identifier: +Hs0+d5EmNFosnFFM/VCwFAAhcpK2QRKLJu/i0UvntU= Subject key identifier: EE:7C:4C:3F:01:3F:76:51:F9:22:DB:AF:14:6B:54:36:27:CA:FF:56 Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49 Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349 Certificate serial: 019B3D90ABE8D63E4988B8ABD98EA5E5187A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 21:00:49 +0000 Manifest this update: Sat 20 Dec 2025 21:00:49 +0000 Manifest next update: Sun 21 Dec 2025 21:00:49 +0000 Files and hashes: 1: OS7c8-e6_IPhh6UsfkxpmetgvVM.roa (hash: u4NSl9jjxeT5MDlBDBHxspeJOasrj/ytcidQr1I6tQs=) 2: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: 8aOFJtjxn4f7Gn1wzxyAzvBDwRL/4+kValTtVOeuuUs=) 3: ujFYCfp3NT3vzURuQfX3QSbCmrc.roa (hash: Mq+9HfcpF+4pzQa3kfg+LdSo4w+vmYd+Egj8pIwlOE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:ab:e8:d6:3e:49:88:b8:ab:d9:8e:a5:e5:18:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349 Validity Not Before: Dec 20 21:00:49 2025 GMT Not After : Dec 21 21:00:49 2025 GMT Subject: CN=ee7c4c3f013f7651f922dbaf146b543627caff56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:23:27:e7:ca:09:4b:a4:a9:2b:6a:5d:e6:67: 82:ce:87:87:0b:e2:9f:f7:f7:8d:72:ed:1d:ad:e8: 12:94:15:88:50:19:6b:a1:27:6d:53:e3:b9:35:1c: 66:61:e4:bd:44:63:eb:94:48:a4:89:d8:d6:10:2c: b7:90:3b:0d:64:9f:7c:43:2e:ed:ba:a5:b1:c5:1b: 09:14:ce:14:d1:32:8c:a6:1e:ed:db:0c:3e:2e:71: 32:43:ac:ba:77:11:44:30:54:e7:90:08:54:1e:6d: e4:e8:2b:8f:1c:00:04:8c:7d:28:f8:68:47:b1:1d: 26:1d:dd:18:78:0d:86:97:84:6a:52:19:e1:d6:60: f9:2d:67:83:d4:4d:33:27:b8:b0:20:20:fb:b9:0b: d2:31:d6:a0:62:8f:b0:af:52:50:5a:10:ba:bf:d5: 68:ff:32:70:a5:13:33:d9:d7:a5:12:2e:90:ad:67: b2:7b:f9:c0:d3:96:16:20:a7:a5:98:83:1e:4b:60: 60:81:6a:4c:ee:78:e6:c2:dd:38:8c:ef:8d:b2:21: f9:c4:ed:d1:fe:67:77:73:9c:a2:e5:26:5a:d3:a7: f4:8a:8a:3d:fb:1a:6b:ed:79:1a:bb:44:b5:ae:d8: 95:19:72:1d:9e:de:99:97:1d:5a:89:46:14:c0:f6: 78:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:7C:4C:3F:01:3F:76:51:F9:22:DB:AF:14:6B:54:36:27:CA:FF:56 X509v3 Authority Key Identifier: keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:52:a8:05:68:86:cd:95:78:43:8a:71:b9:08:09:a8:a2:d0: 06:93:a1:76:ad:a6:0b:a3:26:8c:fd:dd:e0:2d:d4:68:7f:89: 75:0e:08:25:7a:b8:d1:fe:6f:12:18:c4:34:d3:1c:e1:61:d6: ed:eb:17:d0:de:41:6c:b7:f1:db:22:c1:3e:72:85:88:16:a4: 49:67:8f:86:93:bd:ab:73:b6:81:e3:50:8a:ba:09:8a:54:8d: bb:1d:d7:f2:33:24:34:14:71:e4:6d:37:a8:9f:af:19:75:e5: 66:50:11:aa:38:4b:cc:be:cc:78:7e:11:04:78:4f:b2:cd:6a: 1f:6b:9b:6a:1d:f3:2d:2c:4b:1d:b7:40:4b:9b:42:14:d7:a1: f3:d9:72:74:dd:23:fa:61:1c:57:86:75:52:44:31:4f:aa:75: 32:34:73:46:05:9e:6a:51:75:3a:6d:ca:42:a4:89:56:6c:bd: f4:1a:7e:b9:fa:2e:b9:09:b8:4e:d1:04:aa:6e:98:4b:f5:46: 64:7b:44:93:3a:fd:bd:e9:b1:4d:0d:66:0a:00:3f:ae:1d:0a: 6e:04:91:40:42:13:8a:bd:ea:be:93:ab:72:74:21:5d:c3:3f: 6b:15:cc:46:88:e2:47:34:ef:30:d9:18:3e:8c:6f:49:e6:6e: 3d:56:29:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kKvo1j5JiLir2Y6l5Rh6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMzAyYTJkZDUxN2E2MWEzYjk1Mjc0NmYyZWU5ZmJlNDM2 ZDYzNDkwHhcNMjUxMjIwMjEwMDQ5WhcNMjUxMjIxMjEwMDQ5WjAzMTEwLwYDVQQD EyhlZTdjNGMzZjAxM2Y3NjUxZjkyMmRiYWYxNDZiNTQzNjI3Y2FmZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriMn58oJS6SpK2pd5meCzoeHC+Kf 9/eNcu0dregSlBWIUBlroSdtU+O5NRxmYeS9RGPrlEikidjWECy3kDsNZJ98Qy7t uqWxxRsJFM4U0TKMph7t2ww+LnEyQ6y6dxFEMFTnkAhUHm3k6CuPHAAEjH0o+GhH sR0mHd0YeA2Gl4RqUhnh1mD5LWeD1E0zJ7iwICD7uQvSMdagYo+wr1JQWhC6v9Vo /zJwpRMz2delEi6QrWeye/nA05YWIKelmIMeS2BggWpM7njmwt04jO+NsiH5xO3R /md3c5yi5SZa06f0ioo9+xpr7Xkau0S1rtiVGXIdnt6Zlx1aiUYUwPZ4JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO58TD8BP3ZR+SLbrxRrVDYnyv9WMB8GA1UdIwQY MBaAFE0wKi3VF6YaO5UnRvLun75DbWNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDct MTY2ZmI5ZGI2ZGIzLzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDctMTY2ZmI5ZGI2ZGIz LzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcFKoBWiG zZV4Q4pxuQgJqKLQBpOhdq2mC6MmjP3d4C3UaH+JdQ4IJXq40f5vEhjENNMc4WHW 7esX0N5BbLfx2yLBPnKFiBakSWePhpO9q3O2geNQiroJilSNux3X8jMkNBRx5G03 qJ+vGXXlZlARqjhLzL7MeH4RBHhPss1qH2ubah3zLSxLHbdAS5tCFNeh89lydN0j +mEcV4Z1UkQxT6p1MjRzRgWealF1Om3KQqSJVmy99Bp+ufouuQm4TtEEqm6YS/VG ZHtEkzr9vemxTQ1mCgA/rh0KbgSRQEITir3qvpOrcnQhXcM/axXMRojiRzTvMNkY PoxvSeZuPVYpAA== -----END CERTIFICATE-----Generated at Sat Dec 20 23:05:18 2025 by rpki-client