This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft File: RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft (raw, json) Hash identifier: P4xEf0xWJGIh+EQScR0U0zXID8JFV+vp0McNM9Z7MQk= Subject key identifier: BA:F0:CF:96:B1:22:48:60:FC:BA:E6:E9:D0:D2:B1:ED:34:7A:8B:CB Authority key identifier: 45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24 Certificate issuer: /CN=4534cab4450404862b201fe733f2c70a6bf52924 Certificate serial: 019B3946C892390263A9167FEE8F4D63FA24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 01:01:38 +0000 Manifest this update: Sat 20 Dec 2025 01:01:38 +0000 Manifest next update: Sun 21 Dec 2025 01:01:38 +0000 Files and hashes: 1: RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl (hash: Zm2FPs5sApWxgH+3Cpvdq1corAB4yGjk7itwuJmAM9c=) 2: t9aRg7EBYi_eHqwtU6HeqBVRtO0.roa (hash: guaRd+4F8a2eF9Z9YS8nsI0hSSMT45GD3G3ESCtdqNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:c8:92:39:02:63:a9:16:7f:ee:8f:4d:63:fa:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4534cab4450404862b201fe733f2c70a6bf52924 Validity Not Before: Dec 20 01:01:38 2025 GMT Not After : Dec 21 01:01:38 2025 GMT Subject: CN=baf0cf96b1224860fcbae6e9d0d2b1ed347a8bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:6b:00:d0:dc:b1:31:6a:70:bf:ba:39:d9: 8f:a9:6a:12:e3:8a:9c:6a:b5:90:0d:00:9f:d0:ae: ef:cc:c8:04:9a:54:3a:41:73:fd:ce:17:38:7e:fb: ca:a4:66:f1:0b:78:d4:31:fd:9f:6e:55:31:a1:99: 47:78:05:19:ff:f1:eb:fe:93:de:b8:87:76:7b:51: b5:f9:aa:d7:a4:bd:21:96:a8:07:72:fe:60:71:29: 03:0c:8b:29:12:3f:ff:89:ab:80:30:a4:a7:9a:65: 65:c7:73:3f:53:8e:09:b0:34:35:dc:18:fe:af:53: 45:a4:c4:fb:15:de:22:66:e8:0e:56:b6:13:c6:08: 67:84:27:20:84:0f:bf:d0:62:86:ee:25:5d:00:74: d7:44:5a:a5:d2:77:40:22:87:3b:9f:27:24:e1:5f: ca:63:80:e0:e2:8e:51:63:ec:d9:be:7d:fd:e3:4b: 29:34:61:fb:d2:68:c6:9f:dc:d6:be:da:5a:92:30: 19:68:18:cf:4a:28:4f:49:e2:34:30:04:02:81:35: d5:de:fd:a4:8c:69:a7:2f:b3:05:21:c5:1b:73:b7: 0a:3f:cb:b7:5d:b9:8a:5a:f1:12:4b:20:08:a2:f4: d5:e9:b7:59:2f:2e:e8:d3:c7:9c:bd:fe:fb:35:29: bd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F0:CF:96:B1:22:48:60:FC:BA:E6:E9:D0:D2:B1:ED:34:7A:8B:CB X509v3 Authority Key Identifier: keyid:45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:1f:d8:46:60:cb:5a:53:fb:4d:87:ad:ee:47:b1:8d:f3:a7: e3:9c:66:47:54:81:be:4e:5a:0e:e8:95:0e:95:1c:1e:df:ff: 4c:bb:96:6a:d3:5a:8e:a0:63:cd:7e:d2:d0:e3:73:c7:1f:7c: 91:3d:91:ba:ce:00:24:65:fb:71:97:e6:75:a3:1f:14:44:92: 79:52:ca:e4:ad:2b:80:78:04:17:fc:fc:9f:43:c5:8a:8b:7a: f0:d3:03:4c:dd:ea:b7:ac:19:54:1f:da:d2:5b:a6:2e:b2:d4: 5f:a7:23:29:8f:d5:de:85:d4:36:37:64:55:7d:88:60:a0:83: 39:a0:14:71:a1:19:34:73:f8:98:0c:b6:60:1b:5f:a5:5a:22: b3:b7:d3:89:cc:b4:80:e6:a7:1a:5c:f9:9c:fd:b0:c5:91:88: 43:6c:1a:86:dc:6a:45:a9:d5:63:0f:f6:11:f4:82:8c:50:08: 5e:22:c8:c2:c2:57:66:bc:93:fd:2d:f5:b4:fb:a8:99:68:2a: c3:20:20:bb:3c:34:19:00:10:9e:31:7e:68:e3:c7:d3:f8:52: 38:e8:6e:ea:a4:0e:0f:31:14:b8:af:1a:b1:3c:95:66:20:5e: f3:cf:e5:26:01:0d:e5:f9:ac:2f:a8:87:37:ca:2c:9b:df:e7: 35:1b:09:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RsiSOQJjqRZ/7o9NY/okMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MzRjYWI0NDUwNDA0ODYyYjIwMWZlNzMzZjJjNzBhNmJm NTI5MjQwHhcNMjUxMjIwMDEwMTM4WhcNMjUxMjIxMDEwMTM4WjAzMTEwLwYDVQQD EyhiYWYwY2Y5NmIxMjI0ODYwZmNiYWU2ZTlkMGQyYjFlZDM0N2E4YmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleprANDcsTFqcL+6OdmPqWoS44qc arWQDQCf0K7vzMgEmlQ6QXP9zhc4fvvKpGbxC3jUMf2fblUxoZlHeAUZ//Hr/pPe uId2e1G1+arXpL0hlqgHcv5gcSkDDIspEj//iauAMKSnmmVlx3M/U44JsDQ13Bj+ r1NFpMT7Fd4iZugOVrYTxghnhCcghA+/0GKG7iVdAHTXRFql0ndAIoc7nyck4V/K Y4Dg4o5RY+zZvn3940spNGH70mjGn9zWvtpakjAZaBjPSihPSeI0MAQCgTXV3v2k jGmnL7MFIcUbc7cKP8u3XbmKWvESSyAIovTV6bdZLy7o08ecvf77NSm9GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrwz5axIkhg/Lrm6dDSse00eovLMB8GA1UdIwQY MBaAFEU0yrRFBASGKyAf5zPyxwpr9SkkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlRUS3RFVUVCSVlySUJfbk1fTEhDbXYxS1NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81ZDQ2NzgtNDk3Yy00NzQwLTk0MGYt NmIwODRlYTk5OTNmLzEvUlRUS3RFVUVCSVlySUJfbk1fTEhDbXYxS1NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81ZDQ2NzgtNDk3Yy00NzQwLTk0MGYtNmIwODRlYTk5OTNm LzEvUlRUS3RFVUVCSVlySUJfbk1fTEhDbXYxS1NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnB/YRmDL WlP7TYet7kexjfOn45xmR1SBvk5aDuiVDpUcHt//TLuWatNajqBjzX7S0ONzxx98 kT2Rus4AJGX7cZfmdaMfFESSeVLK5K0rgHgEF/z8n0PFiot68NMDTN3qt6wZVB/a 0lumLrLUX6cjKY/V3oXUNjdkVX2IYKCDOaAUcaEZNHP4mAy2YBtfpVois7fTicy0 gOanGlz5nP2wxZGIQ2wahtxqRanVYw/2EfSCjFAIXiLIwsJXZryT/S31tPuomWgq wyAguzw0GQAQnjF+aOPH0/hSOOhu6qQODzEUuK8asTyVZiBe88/lJgEN5fmsL6iH N8osm9/nNRsJ3A== -----END CERTIFICATE-----Generated at Sat Dec 20 05:30:49 2025 by rpki-client