This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft File: TTAqLdUXpho7lSdG8u6fvkNtY0k.mft (raw, json) Hash identifier: lV6m3IjY9rgnPQsOVzuIGKjJfWdOAKWBmeqpgjZS6xY= Subject key identifier: E7:FC:AC:04:3A:50:45:94:49:B7:BB:90:DF:7B:8E:1E:F5:44:88:BD Authority key identifier: 4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49 Certificate issuer: /CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349 Certificate serial: 019B4B15A265CAB8B2BF2D9C9B265064D433 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft Manifest number: 1794 Signing time: Tue 23 Dec 2025 12:01:07 +0000 Manifest this update: Tue 23 Dec 2025 12:01:07 +0000 Manifest next update: Wed 24 Dec 2025 12:01:07 +0000 Files and hashes: 1: OS7c8-e6_IPhh6UsfkxpmetgvVM.roa (hash: u4NSl9jjxeT5MDlBDBHxspeJOasrj/ytcidQr1I6tQs=) 2: TTAqLdUXpho7lSdG8u6fvkNtY0k.crl (hash: QTXYsVzoyUn+Y4ylXHLtJC2Mr3pp5Ecpj30/PeeXUpk=) 3: ujFYCfp3NT3vzURuQfX3QSbCmrc.roa (hash: Mq+9HfcpF+4pzQa3kfg+LdSo4w+vmYd+Egj8pIwlOE4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:a2:65:ca:b8:b2:bf:2d:9c:9b:26:50:64:d4:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d302a2dd517a61a3b952746f2ee9fbe436d6349 Validity Not Before: Dec 23 12:01:07 2025 GMT Not After : Dec 24 12:01:07 2025 GMT Subject: CN=e7fcac043a50459449b7bb90df7b8e1ef54488bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:34:13:40:2a:9b:d0:73:1c:07:15:97:24:6e: 06:8f:1a:35:43:a6:63:73:d1:21:62:2a:9c:de:4a: d4:90:a3:b3:32:33:45:35:cb:a4:fe:aa:aa:17:78: f3:9d:8b:45:c5:4e:db:9e:11:c6:5d:cd:46:3f:f1: 96:34:7f:3f:e7:a2:cb:f6:19:26:0a:3b:e9:ad:97: d7:55:4c:15:b4:ff:15:d9:fb:b1:81:73:6f:7f:c6: 54:42:e9:d5:8f:a9:02:89:c9:54:67:cb:aa:88:ad: 83:b0:95:31:93:33:7e:e2:f1:2c:15:7c:15:1e:f7: e0:99:70:a5:b8:04:7f:df:8c:7a:88:ad:38:32:fe: 5a:8d:fc:5c:4f:35:15:6c:00:9d:61:89:26:7f:d8: 16:d2:8b:13:64:6b:2f:6a:d2:68:66:df:bf:d7:df: 38:60:75:68:b4:24:c7:fa:2e:af:17:b6:33:f0:12: b6:0f:74:60:65:86:b5:3b:b9:89:a6:6f:f0:fa:b9: 13:f5:91:e8:88:33:a0:bb:47:31:80:f2:18:81:98: 6f:4a:eb:0e:bc:b5:53:3e:bc:0d:a8:19:b6:3f:d2: 87:42:58:13:ae:2c:b9:ce:ab:47:6e:54:fe:6e:02: 1b:d2:56:2d:2c:b2:d7:18:e4:a8:eb:b6:2a:d0:c6: 87:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:FC:AC:04:3A:50:45:94:49:B7:BB:90:DF:7B:8E:1E:F5:44:88:BD X509v3 Authority Key Identifier: keyid:4D:30:2A:2D:D5:17:A6:1A:3B:95:27:46:F2:EE:9F:BE:43:6D:63:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTAqLdUXpho7lSdG8u6fvkNtY0k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f0dd5f-b972-410b-9907-166fb9db6db3/1/TTAqLdUXpho7lSdG8u6fvkNtY0k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:28:f6:1d:0a:77:f0:7f:a9:c1:df:2b:76:8e:55:44:72:0d: 55:26:57:ef:2e:a3:ec:8a:64:da:7f:20:aa:5a:58:7b:0d:0a: c3:40:06:30:02:f6:d0:a4:eb:66:23:d4:11:dd:9b:ee:32:ab: 29:c7:92:8a:4d:d7:7d:9f:2f:ef:d3:c1:8a:1d:11:e0:0a:c6: 89:93:8d:b8:7d:7b:a3:eb:67:c5:8c:a8:92:70:a2:60:9e:81: d2:ea:12:75:9d:0b:b9:df:c8:ed:1e:fb:61:ee:c5:c2:e9:d6: 5d:c0:3d:8b:f2:42:7f:a5:24:d3:c3:0a:19:9d:d0:38:cc:d9: 5e:56:65:b6:02:a8:49:9f:9e:11:70:b7:73:91:57:2a:4c:8e: 72:11:e4:2f:fb:50:3a:36:e6:af:9a:15:2d:13:ab:54:e5:43: b7:af:dc:90:ab:fe:c5:aa:ed:10:b2:0d:2d:ed:c1:4b:8d:d6: 0c:6e:0a:fd:d4:e4:9d:f3:ae:47:c1:70:81:03:7e:61:9d:b0: 70:91:d2:d9:90:c1:37:c2:6e:8f:4e:f9:04:25:bc:34:1e:d2: 41:f4:b0:9e:e6:6e:0e:41:54:95:23:66:aa:e6:45:d8:39:d0: d1:ce:cd:96:39:26:23:af:12:38:47:f3:67:fb:14:5b:1a:b4: 27:c8:49:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFaJlyriyvy2cmyZQZNQzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMzAyYTJkZDUxN2E2MWEzYjk1Mjc0NmYyZWU5ZmJlNDM2 ZDYzNDkwHhcNMjUxMjIzMTIwMTA3WhcNMjUxMjI0MTIwMTA3WjAzMTEwLwYDVQQD EyhlN2ZjYWMwNDNhNTA0NTk0NDliN2JiOTBkZjdiOGUxZWY1NDQ4OGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DQTQCqb0HMcBxWXJG4Gjxo1Q6Zj c9EhYiqc3krUkKOzMjNFNcuk/qqqF3jznYtFxU7bnhHGXc1GP/GWNH8/56LL9hkm CjvprZfXVUwVtP8V2fuxgXNvf8ZUQunVj6kCiclUZ8uqiK2DsJUxkzN+4vEsFXwV HvfgmXCluAR/34x6iK04Mv5ajfxcTzUVbACdYYkmf9gW0osTZGsvatJoZt+/1984 YHVotCTH+i6vF7Yz8BK2D3RgZYa1O7mJpm/w+rkT9ZHoiDOgu0cxgPIYgZhvSusO vLVTPrwNqBm2P9KHQlgTriy5zqtHblT+bgIb0lYtLLLXGOSo67Yq0MaH2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOf8rAQ6UEWUSbe7kN97jh71RIi9MB8GA1UdIwQY MBaAFE0wKi3VF6YaO5UnRvLun75DbWNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDct MTY2ZmI5ZGI2ZGIzLzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mMGRkNWYtYjk3Mi00MTBiLTk5MDctMTY2ZmI5ZGI2ZGIz LzEvVFRBcUxkVVhwaG83bFNkRzh1NmZ2a050WTBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCj2HQp3 8H+pwd8rdo5VRHINVSZX7y6j7Ipk2n8gqlpYew0Kw0AGMAL20KTrZiPUEd2b7jKr KceSik3XfZ8v79PBih0R4ArGiZONuH17o+tnxYyoknCiYJ6B0uoSdZ0Lud/I7R77 Ye7FwunWXcA9i/JCf6Uk08MKGZ3QOMzZXlZltgKoSZ+eEXC3c5FXKkyOchHkL/tQ Ojbmr5oVLROrVOVDt6/ckKv+xartELINLe3BS43WDG4K/dTknfOuR8FwgQN+YZ2w cJHS2ZDBN8Juj075BCW8NB7SQfSwnuZuDkFUlSNmquZF2DnQ0c7NljkmI68SOEfz Z/sUWxq0J8hJxA== -----END CERTIFICATE-----Generated at Tue Dec 23 17:18:00 2025 by rpki-client