This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft File: TTR1C-IXPLmwhqd8bepUtKhGmvM.mft (raw, json) Hash identifier: jVK6Ji8vstI7Ca5j6U1UeQmfRZy+x8Hxt6B0hEFieGg= Subject key identifier: FC:42:65:39:3F:66:38:76:60:CB:AC:DC:4E:B7:0C:F5:94:E6:47:A9 Authority key identifier: 4D:34:75:0B:E2:17:3C:B9:B0:86:A7:7C:6D:EA:54:B4:A8:46:9A:F3 Certificate issuer: /CN=4d34750be2173cb9b086a77c6dea54b4a8469af3 Certificate serial: 019B1FBD36E67C21DCA44563578452C5068C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft Manifest number: 0AED Signing time: Mon 15 Dec 2025 02:00:52 +0000 Manifest this update: Mon 15 Dec 2025 02:00:52 +0000 Manifest next update: Tue 16 Dec 2025 02:00:52 +0000 Files and hashes: 1: TTR1C-IXPLmwhqd8bepUtKhGmvM.crl (hash: UqxQ5n2zQJ2+WWApL693La2qC72fCw4P0o9tjLd1XmE=) 2: WYXlKPxfFrF5-delsIPB_r6FESQ.roa (hash: cI2mCSSEwOLi9AIJI3IVWlSF6M3b+jAGtzx5i3z7sFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:bd:36:e6:7c:21:dc:a4:45:63:57:84:52:c5:06:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d34750be2173cb9b086a77c6dea54b4a8469af3 Validity Not Before: Dec 15 02:00:52 2025 GMT Not After : Dec 16 02:00:52 2025 GMT Subject: CN=fc4265393f66387660cbacdc4eb70cf594e647a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:98:03:67:78:6d:47:85:7a:bf:20:c8:0b:c2: 3f:70:09:75:6e:f5:60:f8:d9:c7:e5:79:94:2d:99: 0d:a5:23:2c:81:67:ef:ff:44:d5:f2:8b:23:5a:a4: 8a:c6:a8:99:47:d8:c1:4a:47:67:17:df:82:28:3a: 04:36:10:76:d1:be:c1:c4:05:e4:ab:8b:fb:4f:f6: 4e:4b:62:74:e0:69:46:b9:50:c4:ef:ce:e0:7c:79: 8d:ff:a8:7f:38:a0:8d:aa:9a:b0:b0:98:86:46:ad: d1:ef:70:d5:27:00:d5:f8:79:2e:7c:fd:71:d3:1d: fd:d3:56:16:37:35:c8:d0:4c:dc:8a:d4:96:36:5b: 70:3e:e4:4a:09:ef:95:98:49:d6:bd:f2:41:60:ac: c9:34:42:c4:ed:35:8f:e5:ea:e0:16:4b:4c:7c:86: 35:6e:7a:e9:01:6d:5b:e2:68:f3:15:cb:cc:e5:22: 2f:3f:fd:d6:ec:fd:48:f4:5b:68:5b:64:79:55:ad: f0:bd:1d:a8:1c:f3:13:21:4f:55:41:a9:9f:bf:e0: c5:5c:1d:c4:33:19:ee:55:e8:a9:c7:c7:0e:92:3f: 41:c0:23:13:dc:f0:3c:fb:14:66:14:4e:4f:cc:2f: ee:ab:f8:47:8d:d1:4c:c1:57:8b:b7:6a:db:c8:2a: a5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:42:65:39:3F:66:38:76:60:CB:AC:DC:4E:B7:0C:F5:94:E6:47:A9 X509v3 Authority Key Identifier: keyid:4D:34:75:0B:E2:17:3C:B9:B0:86:A7:7C:6D:EA:54:B4:A8:46:9A:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTR1C-IXPLmwhqd8bepUtKhGmvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/76778e-5f56-48ee-a9de-e8b011ea8897/1/TTR1C-IXPLmwhqd8bepUtKhGmvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b3:35:1b:74:fa:b9:49:ea:72:1f:db:62:04:41:e8:03:35: 4c:84:ed:05:bc:34:fa:7d:75:43:ae:2d:24:d0:c1:0e:27:fb: 1c:49:9a:dc:a8:74:f9:09:cd:fc:56:21:25:ca:f4:3a:a4:34: 00:bf:a9:9b:1b:1a:d2:33:50:55:65:d3:aa:2d:41:38:93:c9: 60:c3:24:83:26:73:7f:5f:0d:f2:c8:c7:a3:db:b8:23:dd:9f: 98:90:da:57:97:32:99:83:15:83:67:b9:f9:81:90:30:1a:de: 32:f2:84:d1:8f:68:46:40:b5:5d:f4:e6:4d:b8:9d:c3:6d:b0: b7:d0:98:8c:b9:e0:55:78:fe:fc:9a:d7:1d:6d:bc:b5:c8:14: 33:29:4a:03:6d:ff:8c:db:30:27:f2:7b:8f:f1:1a:88:08:32: 75:42:d3:21:b4:0e:07:94:dc:e0:64:f2:b5:f0:20:eb:ef:4c: 86:bb:23:7a:fb:9a:0d:20:c6:6d:9f:50:e8:fb:09:9d:a2:0e: e4:34:b4:f7:6e:4a:63:26:86:91:61:de:6d:35:fc:aa:9c:c1: 05:f2:ad:26:11:82:aa:c2:0e:77:56:8d:b2:5e:9c:aa:f3:18: ee:5b:83:69:8b:9d:b3:6f:a2:12:4f:11:1e:13:9b:54:72:4a: 0e:9a:22:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfvTbmfCHcpEVjV4RSxQaMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkMzQ3NTBiZTIxNzNjYjliMDg2YTc3YzZkZWE1NGI0YTg0 NjlhZjMwHhcNMjUxMjE1MDIwMDUyWhcNMjUxMjE2MDIwMDUyWjAzMTEwLwYDVQQD EyhmYzQyNjUzOTNmNjYzODc2NjBjYmFjZGM0ZWI3MGNmNTk0ZTY0N2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5gDZ3htR4V6vyDIC8I/cAl1bvVg +NnH5XmULZkNpSMsgWfv/0TV8osjWqSKxqiZR9jBSkdnF9+CKDoENhB20b7BxAXk q4v7T/ZOS2J04GlGuVDE787gfHmN/6h/OKCNqpqwsJiGRq3R73DVJwDV+HkufP1x 0x3901YWNzXI0EzcitSWNltwPuRKCe+VmEnWvfJBYKzJNELE7TWP5ergFktMfIY1 bnrpAW1b4mjzFcvM5SIvP/3W7P1I9FtoW2R5Va3wvR2oHPMTIU9VQamfv+DFXB3E MxnuVeipx8cOkj9BwCMT3PA8+xRmFE5PzC/uq/hHjdFMwVeLt2rbyCql6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxCZTk/Zjh2YMus3E63DPWU5kepMB8GA1UdIwQY MBaAFE00dQviFzy5sIanfG3qVLSoRprzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFRSMUMtSVhQTG13aHFkOGJlcFV0S2hHbXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83Njc3OGUtNWY1Ni00OGVlLWE5ZGUt ZThiMDExZWE4ODk3LzEvVFRSMUMtSVhQTG13aHFkOGJlcFV0S2hHbXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83Njc3OGUtNWY1Ni00OGVlLWE5ZGUtZThiMDExZWE4ODk3 LzEvVFRSMUMtSVhQTG13aHFkOGJlcFV0S2hHbXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADrM1G3T6 uUnqch/bYgRB6AM1TITtBbw0+n11Q64tJNDBDif7HEma3Kh0+QnN/FYhJcr0OqQ0 AL+pmxsa0jNQVWXTqi1BOJPJYMMkgyZzf18N8sjHo9u4I92fmJDaV5cymYMVg2e5 +YGQMBreMvKE0Y9oRkC1XfTmTbidw22wt9CYjLngVXj+/JrXHW28tcgUMylKA23/ jNswJ/J7j/EaiAgydULTIbQOB5Tc4GTytfAg6+9MhrsjevuaDSDGbZ9Q6PsJnaIO 5DS0925KYyaGkWHebTX8qpzBBfKtJhGCqsIOd1aNsl6cqvMY7luDaYuds2+iEk8R HhObVHJKDpoi0w== -----END CERTIFICATE-----Generated at Mon Dec 15 04:54:16 2025 by rpki-client