This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft File: ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft (raw, json) Hash identifier: bovSkmNaaeW/hu/ulAVY5qmnF56zYcJ53XskIUMf4sI= Subject key identifier: C0:0F:32:24:37:05:B3:A5:6E:8C:3C:87:01:FB:EA:92:13:64:5D:7E Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26 Certificate issuer: /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426 Certificate serial: 019B495DE2B299F7E6E2D945C924F51E8186 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft Manifest number: 0664 Signing time: Tue 23 Dec 2025 04:00:48 +0000 Manifest this update: Tue 23 Dec 2025 04:00:48 +0000 Manifest next update: Wed 24 Dec 2025 04:00:48 +0000 Files and hashes: 1: mgO2bfWYu0Z3yfKtycB0eHY39X8.roa (hash: 60DQx4kpFtDfON86MP27ODodoK2c+Xs/qbF18XYACcg=) 2: rg97vUvro1QUCZLNC-zT_PYGVh8.roa (hash: iZBiJSmpj/Q8UocwtFDbOX3xmzAVEyiNjKTvOdI8ZqE=) 3: ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl (hash: I0zl6USvpTDpCjHW3/faGHqi9kpABlIhmlIjUKQ/H1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:5d:e2:b2:99:f7:e6:e2:d9:45:c9:24:f5:1e:81:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426 Validity Not Before: Dec 23 04:00:48 2025 GMT Not After : Dec 24 04:00:48 2025 GMT Subject: CN=c00f32243705b3a56e8c3c8701fbea9213645d7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cc:e7:79:cf:7b:3b:7e:5e:9d:37:8e:f2:cb: f0:5e:62:2e:5d:22:d6:4a:47:3b:42:46:d8:bb:de: 6f:68:58:28:70:cf:d8:ef:2e:24:64:ef:d5:fc:88: 47:2c:c3:87:cb:37:bb:3a:18:60:5a:6b:75:86:5f: 47:7b:ac:1b:6d:e5:2a:bc:d2:62:b5:c4:f6:2e:86: 83:44:5c:43:07:53:b5:7d:fa:6d:b3:9c:15:38:9b: 3c:93:36:cf:f0:e9:58:37:05:c8:c1:d6:7d:15:e9: b0:74:ae:cf:35:3a:5a:69:ea:53:9c:d3:ed:45:ce: ef:2a:c2:75:a8:cf:e4:55:01:26:e6:e7:51:09:73: b7:59:81:f2:86:e3:f7:80:ee:d5:c0:19:0b:33:e3: d7:a6:30:d8:3d:bb:3d:8e:53:84:93:a5:af:f4:9e: 4b:5c:3d:a2:15:e6:cd:94:77:b0:c0:49:1e:81:c9: 92:de:17:6e:bf:1c:ae:f2:25:10:48:89:11:63:d6: 25:05:fb:b3:ca:70:37:b8:09:d4:5d:f5:ca:75:05: 55:00:86:e0:28:32:0d:a3:73:4b:4c:99:d0:14:30: 1b:f5:19:53:48:56:37:34:b8:04:3f:ff:a9:f2:16: d2:2f:84:c7:19:5d:40:bb:f0:77:77:6b:a6:d2:32: 23:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0F:32:24:37:05:B3:A5:6E:8C:3C:87:01:FB:EA:92:13:64:5D:7E X509v3 Authority Key Identifier: keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:b6:0b:c3:f9:13:ba:ae:95:5a:85:23:6d:68:63:91:7a:a4: 5d:8b:7d:b9:69:9d:a1:be:e9:5b:e2:dd:cc:da:2d:5d:cf:fc: 5c:22:29:73:60:c3:e3:c0:99:cc:5d:27:1d:2d:2b:d4:e2:d2: 6b:4d:30:95:8c:6a:ca:a1:42:e5:ff:1d:9a:0b:b4:f5:3a:7e: 80:6c:93:32:ae:fe:36:e9:3c:95:ef:29:14:67:38:2b:9a:a7: f6:ec:33:85:7a:8a:d0:69:67:b9:ad:5b:8d:12:0a:d2:19:ad: 4c:cd:53:a2:4a:ba:e0:ae:cc:a3:6f:c6:d2:58:cf:a3:fa:39: eb:3e:5b:4d:28:22:f9:e0:cd:aa:1f:d2:96:ef:36:d2:ef:40: 5a:99:5f:0d:44:1b:90:a7:40:27:ae:5e:49:68:d6:e8:36:2a: 04:c9:79:15:0c:a6:26:e7:d3:a1:b1:2c:2c:8e:a3:23:80:e5: f0:f4:db:80:62:40:ba:ff:16:f9:e6:5a:94:84:bd:7b:c3:a2: 2d:c5:ba:04:01:4b:17:7b:0b:5b:d8:54:0d:61:91:a6:f6:07: 0f:3d:d6:a0:50:30:7b:ee:87:d6:c2:e5:07:aa:35:03:b6:7a: 61:89:5a:0d:ae:4a:62:bd:81:17:07:75:a3:15:85:8e:79:17: 18:28:85:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJXeKymffm4tlFyST1HoGGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZDdmMzY4ZmExY2Y1YjFhYWFhNzZiMGYxZjIzYzA2NzUw YTg0MjYwHhcNMjUxMjIzMDQwMDQ4WhcNMjUxMjI0MDQwMDQ4WjAzMTEwLwYDVQQD EyhjMDBmMzIyNDM3MDViM2E1NmU4YzNjODcwMWZiZWE5MjEzNjQ1ZDdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsznec97O35enTeO8svwXmIuXSLW Skc7QkbYu95vaFgocM/Y7y4kZO/V/IhHLMOHyze7OhhgWmt1hl9He6wbbeUqvNJi tcT2LoaDRFxDB1O1ffpts5wVOJs8kzbP8OlYNwXIwdZ9FemwdK7PNTpaaepTnNPt Rc7vKsJ1qM/kVQEm5udRCXO3WYHyhuP3gO7VwBkLM+PXpjDYPbs9jlOEk6Wv9J5L XD2iFebNlHewwEkegcmS3hduvxyu8iUQSIkRY9YlBfuzynA3uAnUXfXKdQVVAIbg KDINo3NLTJnQFDAb9RlTSFY3NLgEP/+p8hbSL4THGV1Au/B3d2um0jIjqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAPMiQ3BbOlbow8hwH76pITZF1+MB8GA1UdIwQY MBaAFLbX82j6HPWxqqp2sPHyPAZ1CoQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHRmemFQb2M5YkdxcW5hdzhmSThCblVLaENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82ZDE1ZjQtODZhMi00NmQ5LWIzZWQt MDhhZWRjMmYyNjM5LzEvdHRmemFQb2M5YkdxcW5hdzhmSThCblVLaENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS82ZDE1ZjQtODZhMi00NmQ5LWIzZWQtMDhhZWRjMmYyNjM5 LzEvdHRmemFQb2M5YkdxcW5hdzhmSThCblVLaENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiLYLw/kT uq6VWoUjbWhjkXqkXYt9uWmdob7pW+LdzNotXc/8XCIpc2DD48CZzF0nHS0r1OLS a00wlYxqyqFC5f8dmgu09Tp+gGyTMq7+Nuk8le8pFGc4K5qn9uwzhXqK0Glnua1b jRIK0hmtTM1Tokq64K7Mo2/G0ljPo/o56z5bTSgi+eDNqh/Slu820u9AWplfDUQb kKdAJ65eSWjW6DYqBMl5FQymJufTobEsLI6jI4Dl8PTbgGJAuv8W+eZalIS9e8Oi LcW6BAFLF3sLW9hUDWGRpvYHDz3WoFAwe+6H1sLlB6o1A7Z6YYlaDa5KYr2BFwd1 oxWFjnkXGCiFlQ== -----END CERTIFICATE-----Generated at Tue Dec 23 14:17:49 2025 by rpki-client