This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9d958d-fe88-4bef-8c42-b514d65557c4/1/TtDX7ERt5StwulWVjOKf_0VRLdU.mft File: TtDX7ERt5StwulWVjOKf_0VRLdU.mft (raw, json) Hash identifier: N6lZM58SFpvwB0bVn4SXwPpiq0wzSdY1LDUSLqr6ZgQ= Subject key identifier: 78:E8:D0:C1:00:2D:2C:DB:B7:D2:F7:A4:47:D6:B2:23:24:6F:12:4D Authority key identifier: 4E:D0:D7:EC:44:6D:E5:2B:70:BA:55:95:8C:E2:9F:FF:45:51:2D:D5 Certificate issuer: /CN=4ed0d7ec446de52b70ba55958ce29fff45512dd5 Certificate serial: 019B5ABFEBF8079CEB74614987C95C54603C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtDX7ERt5StwulWVjOKf_0VRLdU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9d958d-fe88-4bef-8c42-b514d65557c4/1/TtDX7ERt5StwulWVjOKf_0VRLdU.mft Manifest number: 2D Signing time: Fri 26 Dec 2025 13:01:25 +0000 Manifest this update: Fri 26 Dec 2025 13:01:25 +0000 Manifest next update: Sat 27 Dec 2025 13:01:25 +0000 Files and hashes: 1: TtDX7ERt5StwulWVjOKf_0VRLdU.crl (hash: 2XIjeQ4RSrMa9gu+BefnEGBCmETBOFNMDQJ6GJlA0lM=) 2: a8fsui1cavowzbsfQUOK3utbQ5k.roa (hash: KiE5sg4ki8+WuyvtAvZ8lbIg8LnlYLJRIquhphvBDt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/9d958d-fe88-4bef-8c42-b514d65557c4/1/TtDX7ERt5StwulWVjOKf_0VRLdU.crl rsync://rpki.ripe.net/repository/DEFAULT/15/9d958d-fe88-4bef-8c42-b514d65557c4/1/TtDX7ERt5StwulWVjOKf_0VRLdU.mft rsync://rpki.ripe.net/repository/DEFAULT/TtDX7ERt5StwulWVjOKf_0VRLdU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:eb:f8:07:9c:eb:74:61:49:87:c9:5c:54:60:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ed0d7ec446de52b70ba55958ce29fff45512dd5 Validity Not Before: Dec 26 13:01:25 2025 GMT Not After : Dec 27 13:01:25 2025 GMT Subject: CN=78e8d0c1002d2cdbb7d2f7a447d6b223246f124d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ff:86:8e:01:b9:e3:d4:34:b9:6e:2e:cc:96: b8:cd:fb:4e:61:2d:97:e0:ca:1f:b3:13:b0:85:1f: 0b:54:bb:ec:c9:d9:ca:e0:6c:69:be:22:8a:95:31: f1:26:bd:e2:f4:e2:80:92:19:b2:91:3f:15:ea:ab: ba:4c:64:25:fe:a5:6a:ed:71:00:cc:67:85:ee:49: 91:3e:29:af:03:ab:d7:48:de:19:75:59:7d:46:23: c1:0e:9a:fe:39:44:c4:3d:2a:ac:d0:b4:bc:6a:ca: fc:10:6b:7a:50:6c:c7:2c:db:b5:b7:8c:dd:76:6a: e6:f9:14:f9:9f:e6:3c:af:b8:de:92:ca:05:da:75: 07:46:53:e3:42:9b:19:aa:d1:36:2d:33:bf:3a:a1: 17:59:d7:a6:1a:3e:e2:b3:bc:4a:36:6a:8d:5c:1f: 99:36:51:23:b7:97:b3:b8:54:03:54:8e:3b:64:59: 50:89:33:78:8c:e1:d2:80:e6:e3:78:ca:88:7c:49: c4:a3:e8:17:9a:c6:9d:dc:6a:ad:f4:7f:f0:38:06: b3:74:94:46:90:b6:5f:82:7f:4c:11:59:13:33:c2: 74:8f:21:1d:f5:5c:ca:60:01:07:ec:0c:a7:4d:38: 15:dd:87:83:57:d9:8a:87:42:0d:55:63:31:eb:bf: b2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:E8:D0:C1:00:2D:2C:DB:B7:D2:F7:A4:47:D6:B2:23:24:6F:12:4D X509v3 Authority Key Identifier: keyid:4E:D0:D7:EC:44:6D:E5:2B:70:BA:55:95:8C:E2:9F:FF:45:51:2D:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtDX7ERt5StwulWVjOKf_0VRLdU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d958d-fe88-4bef-8c42-b514d65557c4/1/TtDX7ERt5StwulWVjOKf_0VRLdU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d958d-fe88-4bef-8c42-b514d65557c4/1/TtDX7ERt5StwulWVjOKf_0VRLdU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:87:3e:41:9e:3c:11:04:02:44:2f:c0:f2:7c:0f:a7:ba:8b: 68:9c:75:25:0f:c5:0a:5b:3e:1b:39:3c:ef:a6:f2:62:50:e5: 96:8e:fe:71:48:40:19:b9:d5:f3:e1:4c:0b:67:2d:1f:0c:28: 55:2a:d8:a8:24:62:db:88:f7:a8:53:d3:a7:61:50:c0:fa:6a: e2:cf:81:4c:10:a4:24:26:e4:26:03:84:ee:03:00:4f:88:cb: 70:a7:ad:cf:09:aa:68:0d:4b:e3:8d:1a:a5:60:d8:df:70:4f: 00:b9:eb:b9:af:6a:8a:e0:d9:0f:bf:fd:1e:c9:5f:78:fc:a7: 00:63:0f:2f:68:15:70:42:bb:ab:a1:2e:03:17:3f:8b:8a:ab: e2:c8:68:0d:78:3a:5b:72:df:9b:02:45:89:a2:2b:2f:fa:28: e8:5b:49:6d:8b:6e:e3:25:e7:f2:00:62:d2:c0:fe:49:68:9d: 45:1a:87:6b:86:f5:37:8c:b7:e3:05:bf:1b:76:cc:4d:5e:5b: a6:e6:73:f7:8e:69:4f:86:da:43:68:f0:b9:f9:5b:2d:c4:8d: 2f:23:f2:17:dd:e1:40:bf:27:69:26:15:f6:22:7d:07:f6:87: ed:ac:ed:aa:30:a8:53:73:74:82:fc:ed:3b:1e:35:cf:0a:93: 57:1a:84:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav+v4B5zrdGFJh8lcVGA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZDBkN2VjNDQ2ZGU1MmI3MGJhNTU5NThjZTI5ZmZmNDU1 MTJkZDUwHhcNMjUxMjI2MTMwMTI1WhcNMjUxMjI3MTMwMTI1WjAzMTEwLwYDVQQD Eyg3OGU4ZDBjMTAwMmQyY2RiYjdkMmY3YTQ0N2Q2YjIyMzI0NmYxMjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf+GjgG549Q0uW4uzJa4zftOYS2X 4MofsxOwhR8LVLvsydnK4GxpviKKlTHxJr3i9OKAkhmykT8V6qu6TGQl/qVq7XEA zGeF7kmRPimvA6vXSN4ZdVl9RiPBDpr+OUTEPSqs0LS8asr8EGt6UGzHLNu1t4zd dmrm+RT5n+Y8r7jeksoF2nUHRlPjQpsZqtE2LTO/OqEXWdemGj7is7xKNmqNXB+Z NlEjt5ezuFQDVI47ZFlQiTN4jOHSgObjeMqIfEnEo+gXmsad3Gqt9H/wOAazdJRG kLZfgn9MEVkTM8J0jyEd9VzKYAEH7AynTTgV3YeDV9mKh0INVWMx67+yPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjo0MEALSzbt9L3pEfWsiMkbxJNMB8GA1UdIwQY MBaAFE7Q1+xEbeUrcLpVlYzin/9FUS3VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHREWDdFUnQ1U3R3dWxXVmpPS2ZfMFZSTGRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS85ZDk1OGQtZmU4OC00YmVmLThjNDIt YjUxNGQ2NTU1N2M0LzEvVHREWDdFUnQ1U3R3dWxXVmpPS2ZfMFZSTGRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS85ZDk1OGQtZmU4OC00YmVmLThjNDItYjUxNGQ2NTU1N2M0 LzEvVHREWDdFUnQ1U3R3dWxXVmpPS2ZfMFZSTGRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4c+QZ48 EQQCRC/A8nwPp7qLaJx1JQ/FCls+Gzk876byYlDllo7+cUhAGbnV8+FMC2ctHwwo VSrYqCRi24j3qFPTp2FQwPpq4s+BTBCkJCbkJgOE7gMAT4jLcKetzwmqaA1L440a pWDY33BPALnrua9qiuDZD7/9HslfePynAGMPL2gVcEK7q6EuAxc/i4qr4shoDXg6 W3LfmwJFiaIrL/oo6FtJbYtu4yXn8gBi0sD+SWidRRqHa4b1N4y34wW/G3bMTV5b puZz945pT4baQ2jwuflbLcSNLyPyF93hQL8naSYV9iJ9B/aH7aztqjCoU3N0gvzt Ox41zwqTVxqEJA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:12 2025 by rpki-client