This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft File: RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft (raw, json) Hash identifier: DpGQUmmLBJlbem7lpDWrCz78gRNAJ4l4tneRvcGpXBw= Subject key identifier: 64:67:1D:9A:B4:0A:6C:23:FD:8B:31:65:FD:23:C0:0C:28:A1:C0:CA Authority key identifier: 45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24 Certificate issuer: /CN=4534cab4450404862b201fe733f2c70a6bf52924 Certificate serial: 019B337B4F59E5EBCAED1937987FFF7A82EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 22:01:17 +0000 Manifest this update: Thu 18 Dec 2025 22:01:17 +0000 Manifest next update: Fri 19 Dec 2025 22:01:17 +0000 Files and hashes: 1: RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl (hash: FPh3mSCK5U7TE0S02a6Hnw64HaQI0vlaMDXGu+PBmxI=) 2: t9aRg7EBYi_eHqwtU6HeqBVRtO0.roa (hash: guaRd+4F8a2eF9Z9YS8nsI0hSSMT45GD3G3ESCtdqNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:4f:59:e5:eb:ca:ed:19:37:98:7f:ff:7a:82:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4534cab4450404862b201fe733f2c70a6bf52924 Validity Not Before: Dec 18 22:01:17 2025 GMT Not After : Dec 19 22:01:17 2025 GMT Subject: CN=64671d9ab40a6c23fd8b3165fd23c00c28a1c0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f5:b4:42:bd:f5:0a:90:76:33:e5:af:57:3e: be:e2:36:db:44:3a:d7:4d:28:9d:5f:68:88:e7:09: d2:b1:44:dd:b0:46:59:6d:cf:af:82:b5:d1:8f:cf: 16:57:09:93:5c:9f:ec:2d:91:aa:43:b4:23:7a:83: 19:a0:41:94:86:86:05:ca:02:13:a2:43:f6:fa:73: ec:33:bd:53:05:ac:6f:fc:48:75:8d:d4:9b:17:eb: a9:81:71:d4:17:c0:47:32:f2:53:f7:07:5e:81:0a: d8:f2:3b:4f:16:e5:1b:87:3d:15:3e:21:2a:be:1c: 4f:8a:7e:ec:45:d4:7a:b0:0a:7c:e2:26:89:fc:2e: e5:23:06:10:5d:a8:57:db:b5:20:2c:5c:4d:dd:d7: 4d:66:0a:68:10:ba:5f:a9:b2:36:a6:47:5d:a4:3e: d9:5b:a9:06:5e:db:29:a1:e3:76:06:1b:59:ce:55: c8:89:9e:66:cb:fe:49:02:08:29:e8:ff:54:03:de: 83:84:a9:b3:6e:d8:6d:09:ec:bd:d0:32:c3:ca:71: 5a:92:06:99:10:58:84:20:71:82:74:e2:78:ef:d6: 00:ad:30:bc:78:66:a5:86:7a:b5:4e:ee:a1:4f:bc: 96:e0:b4:81:32:52:3b:2c:26:ab:bd:b8:b8:45:ac: ef:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:67:1D:9A:B4:0A:6C:23:FD:8B:31:65:FD:23:C0:0C:28:A1:C0:CA X509v3 Authority Key Identifier: keyid:45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:98:88:57:f4:9c:1e:89:19:ba:81:43:4e:89:8f:6b:9d:c6: 43:ba:33:40:3e:52:83:ac:4c:ef:c5:05:e0:5a:5b:2e:98:24: fc:6f:38:0e:8d:9c:6f:eb:b4:85:31:e1:bb:b1:3a:50:8b:5f: da:65:6a:1d:31:37:77:bb:08:26:30:d2:9c:bf:cc:66:8e:d7: 47:22:d2:22:40:d8:47:7b:e6:92:40:8e:70:2a:8a:59:69:a6: d8:78:41:ed:18:ee:91:f5:38:b4:50:01:2c:b0:76:97:64:19: 81:f7:93:e3:40:2c:31:88:59:23:fd:ef:3f:f1:3d:b2:a1:f8: 44:07:c3:61:36:eb:23:26:de:5c:c9:38:d3:09:fb:2e:ef:09: eb:db:a8:7e:2b:eb:f4:f7:27:8a:bf:4c:2b:42:32:48:05:46: 22:b2:0b:10:eb:3b:30:84:d4:e5:6c:24:82:4c:21:6d:fe:73: 98:5b:cc:58:78:ab:98:26:76:62:3c:31:60:bc:29:7c:45:03: 84:e3:59:71:78:79:b5:f5:0c:39:81:3e:88:1b:07:08:ae:75: bd:ad:f3:cb:db:4d:03:4d:73:85:9f:25:70:89:d5:a9:2f:52: f8:5d:26:bf:78:92:26:7b:b1:6b:6d:15:90:2a:06:3d:8e:f7: 07:c6:16:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsze09Z5evK7Rk3mH//eoLuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MzRjYWI0NDUwNDA0ODYyYjIwMWZlNzMzZjJjNzBhNmJm NTI5MjQwHhcNMjUxMjE4MjIwMTE3WhcNMjUxMjE5MjIwMTE3WjAzMTEwLwYDVQQD Eyg2NDY3MWQ5YWI0MGE2YzIzZmQ4YjMxNjVmZDIzYzAwYzI4YTFjMGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPW0Qr31CpB2M+WvVz6+4jbbRDrX TSidX2iI5wnSsUTdsEZZbc+vgrXRj88WVwmTXJ/sLZGqQ7QjeoMZoEGUhoYFygIT okP2+nPsM71TBaxv/Eh1jdSbF+upgXHUF8BHMvJT9wdegQrY8jtPFuUbhz0VPiEq vhxPin7sRdR6sAp84iaJ/C7lIwYQXahX27UgLFxN3ddNZgpoELpfqbI2pkddpD7Z W6kGXtspoeN2BhtZzlXIiZ5my/5JAggp6P9UA96DhKmzbthtCey90DLDynFakgaZ EFiEIHGCdOJ479YArTC8eGalhnq1Tu6hT7yW4LSBMlI7LCarvbi4RazvnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRnHZq0Cmwj/YsxZf0jwAwoocDKMB8GA1UdIwQY MBaAFEU0yrRFBASGKyAf5zPyxwpr9SkkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlRUS3RFVUVCSVlySUJfbk1fTEhDbXYxS1NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC81ZDQ2NzgtNDk3Yy00NzQwLTk0MGYt NmIwODRlYTk5OTNmLzEvUlRUS3RFVUVCSVlySUJfbk1fTEhDbXYxS1NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC81ZDQ2NzgtNDk3Yy00NzQwLTk0MGYtNmIwODRlYTk5OTNm LzEvUlRUS3RFVUVCSVlySUJfbk1fTEhDbXYxS1NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbpiIV/Sc HokZuoFDTomPa53GQ7ozQD5Sg6xM78UF4FpbLpgk/G84Do2cb+u0hTHhu7E6UItf 2mVqHTE3d7sIJjDSnL/MZo7XRyLSIkDYR3vmkkCOcCqKWWmm2HhB7RjukfU4tFAB LLB2l2QZgfeT40AsMYhZI/3vP/E9sqH4RAfDYTbrIybeXMk40wn7Lu8J69uofivr 9Pcnir9MK0IySAVGIrILEOs7MITU5Wwkgkwhbf5zmFvMWHirmCZ2YjwxYLwpfEUD hONZcXh5tfUMOYE+iBsHCK51va3zy9tNA01zhZ8lcInVqS9S+F0mv3iSJnuxa20V kCoGPY73B8YWXQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:51:48 2025 by rpki-client