This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft File: TtaClltaFeoMReqF7z20vnFnlpY.mft (raw, json) Hash identifier: W19Dfj2L4I9B6yjPmPUwClgPbwGJx07SWcP8Rd3QgHw= Subject key identifier: B6:50:2C:CB:F8:86:FD:60:F8:55:FF:44:27:61:7F:07:C2:8D:EB:B6 Authority key identifier: 4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96 Certificate issuer: /CN=4ed682965b5a15ea0c45ea85ef3db4be71679696 Certificate serial: 019B41A446C6CEA2DD9E274E7B95B87E49AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft Manifest number: 05B1 Signing time: Sun 21 Dec 2025 16:00:43 +0000 Manifest this update: Sun 21 Dec 2025 16:00:43 +0000 Manifest next update: Mon 22 Dec 2025 16:00:43 +0000 Files and hashes: 1: 3aqe87dN2fz6qQQtxNwtFo2__ps.roa (hash: Lt1Bd1g6jAvktpInXW5Oo10n3abY0buPeadfOybeVY0=) 2: TtaClltaFeoMReqF7z20vnFnlpY.crl (hash: c7WmKurZT7rVXOMWkwIEnZ8LSoSyRocK2M/waCrOAhA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:46:c6:ce:a2:dd:9e:27:4e:7b:95:b8:7e:49:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ed682965b5a15ea0c45ea85ef3db4be71679696 Validity Not Before: Dec 21 16:00:43 2025 GMT Not After : Dec 22 16:00:43 2025 GMT Subject: CN=b6502ccbf886fd60f855ff4427617f07c28debb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cf:eb:dc:f0:1c:fc:5b:19:4e:65:7b:89:9f: a4:0f:fd:47:ae:2f:19:ff:ca:00:86:ba:58:93:74: 6e:d8:fd:24:c1:fe:d0:bb:0f:7c:3b:2b:cb:04:0d: 14:39:ba:58:5f:79:86:85:12:7e:ef:97:56:5a:a5: 60:73:21:83:68:66:0f:b6:b7:25:6e:37:6d:d6:26: 1e:a4:39:ea:b0:73:95:91:d5:83:8e:0f:9c:b0:1a: 69:f9:ac:b8:6e:a6:6f:7c:29:90:78:53:cf:73:47: 85:c2:1f:4e:79:d3:98:60:61:ef:05:87:9e:4c:50: 16:64:d4:4a:ae:d3:37:4e:3e:d3:bb:fe:a3:e7:1c: 85:67:0e:e3:e1:ce:a1:8a:83:12:c4:f1:28:3b:7f: 4d:f8:4d:1a:2f:2b:d8:04:83:d3:ed:fd:a4:f2:76: e6:7f:d3:ad:65:87:5b:44:f0:2a:3b:03:04:5b:cf: ba:f1:6e:26:a3:b2:7a:50:36:44:33:ce:25:53:a3: d2:8e:b3:11:52:37:47:aa:b4:5a:6d:5c:14:c9:f7: 5a:4b:65:5c:48:9a:9a:49:e5:86:eb:12:60:83:9e: 50:4e:eb:9b:99:00:a0:c9:60:9a:82:42:07:91:10: 55:20:1f:dc:04:60:94:72:4c:ad:68:a2:bb:2a:6d: f0:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:50:2C:CB:F8:86:FD:60:F8:55:FF:44:27:61:7F:07:C2:8D:EB:B6 X509v3 Authority Key Identifier: keyid:4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:1d:e5:96:b3:96:ac:39:d5:e9:c7:43:98:c5:82:af:4e:86: 60:c8:c1:f7:b7:7e:23:b8:10:63:f0:14:cb:9b:9b:a3:eb:f4: b6:d5:45:c5:6b:0c:99:0e:00:96:39:5e:48:d1:c9:af:36:cb: bb:6e:f1:a0:54:84:0a:63:51:1a:aa:96:5f:fb:05:2d:22:5b: 41:6a:18:97:42:70:fa:ef:c6:3e:2b:84:df:f0:b1:31:3f:a4: d7:3e:fb:28:34:d4:6d:73:28:6b:cf:33:7a:a1:2e:7a:e5:26: 96:a4:6e:00:6a:8f:0b:b5:8a:47:07:79:99:c4:fd:d0:7e:e5: 44:c7:87:94:2b:41:53:b2:fd:e7:6b:e2:7e:8e:64:0b:db:11: 0d:aa:c5:fe:a9:b1:db:f6:a9:03:b4:89:f1:51:f0:69:ae:6c: 8b:22:73:68:6f:8b:69:13:60:9b:81:47:21:36:78:27:70:64: 63:18:91:c3:65:c5:75:af:d4:6b:a7:8e:fd:44:b7:a1:d3:ea: c0:58:79:1d:cb:0b:19:9b:5d:de:7b:8f:45:e9:b5:b6:a0:eb: 51:49:de:80:63:b8:ab:f7:02:c0:1f:98:c4:cf:77:4c:95:d2: 8a:53:d5:0c:64:b2:00:c1:37:23:50:c5:fd:da:69:b8:9f:32: 52:ec:26:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpEbGzqLdnidOe5W4fkmuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZDY4Mjk2NWI1YTE1ZWEwYzQ1ZWE4NWVmM2RiNGJlNzE2 Nzk2OTYwHhcNMjUxMjIxMTYwMDQzWhcNMjUxMjIyMTYwMDQzWjAzMTEwLwYDVQQD EyhiNjUwMmNjYmY4ODZmZDYwZjg1NWZmNDQyNzYxN2YwN2MyOGRlYmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8/r3PAc/FsZTmV7iZ+kD/1Hri8Z /8oAhrpYk3Ru2P0kwf7Quw98OyvLBA0UObpYX3mGhRJ+75dWWqVgcyGDaGYPtrcl bjdt1iYepDnqsHOVkdWDjg+csBpp+ay4bqZvfCmQeFPPc0eFwh9OedOYYGHvBYee TFAWZNRKrtM3Tj7Tu/6j5xyFZw7j4c6hioMSxPEoO39N+E0aLyvYBIPT7f2k8nbm f9OtZYdbRPAqOwMEW8+68W4mo7J6UDZEM84lU6PSjrMRUjdHqrRabVwUyfdaS2Vc SJqaSeWG6xJgg55QTuubmQCgyWCagkIHkRBVIB/cBGCUckytaKK7Km3wlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZQLMv4hv1g+FX/RCdhfwfCjeu2MB8GA1UdIwQY MBaAFE7WgpZbWhXqDEXqhe89tL5xZ5aWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHRhQ2xsdGFGZW9NUmVxRjd6MjB2bkZubHBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zZTQwMWItNjRjMS00MWFhLTk4ZGYt MTMzZTdlNmY2MDY5LzEvVHRhQ2xsdGFGZW9NUmVxRjd6MjB2bkZubHBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8zZTQwMWItNjRjMS00MWFhLTk4ZGYtMTMzZTdlNmY2MDY5 LzEvVHRhQ2xsdGFGZW9NUmVxRjd6MjB2bkZubHBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkx3llrOW rDnV6cdDmMWCr06GYMjB97d+I7gQY/AUy5ubo+v0ttVFxWsMmQ4AljleSNHJrzbL u27xoFSECmNRGqqWX/sFLSJbQWoYl0Jw+u/GPiuE3/CxMT+k1z77KDTUbXMoa88z eqEueuUmlqRuAGqPC7WKRwd5mcT90H7lRMeHlCtBU7L952vifo5kC9sRDarF/qmx 2/apA7SJ8VHwaa5siyJzaG+LaRNgm4FHITZ4J3BkYxiRw2XFda/Ua6eO/US3odPq wFh5HcsLGZtd3nuPRem1tqDrUUnegGO4q/cCwB+YxM93TJXSilPVDGSyAME3I1DF /dppuJ8yUuwmMQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:28:14 2025 by rpki-client