This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json) Hash identifier: wBi2Gj6Dxz/1kmTrVGda2QdqW6qdbT2y8dcHxzzel+I= Subject key identifier: 9B:BB:C7:12:C6:35:06:AF:55:C6:4C:CB:44:DD:8A:21:BE:5D:B2:16 Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d Certificate serial: 019B432552A0650E601C1CB6AFC5FCEAB10C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft Manifest number: 1109 Signing time: Sun 21 Dec 2025 23:01:18 +0000 Manifest this update: Sun 21 Dec 2025 23:01:18 +0000 Manifest next update: Mon 22 Dec 2025 23:01:18 +0000 Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: 5qoaW1zf39axLmSitKlsyW4W4CAKNrhKwk1e9rfJ3vg=) 2: eOJpQF5FNoppqB79NhjuknNPvas.roa (hash: 0TneR6h3XAtyeO7uLkVkGQTYXZHCJ04//nJtpw2jBn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:52:a0:65:0e:60:1c:1c:b6:af:c5:fc:ea:b1:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d Validity Not Before: Dec 21 23:01:18 2025 GMT Not After : Dec 22 23:01:18 2025 GMT Subject: CN=9bbbc712c63506af55c64ccb44dd8a21be5db216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:bf:ce:92:83:6c:c7:77:9f:b7:07:8e:9b: 22:a2:cb:d0:a7:3b:9a:7e:75:e2:69:3d:f4:cd:d3: 8f:7a:bb:f8:40:e4:8c:34:00:22:b0:8e:8a:c5:50: 98:5a:3e:57:f5:68:31:01:f5:5c:4f:9a:39:d2:6e: 10:31:68:eb:7d:b8:2c:51:4d:74:ec:61:09:15:54: 6b:4d:5f:89:9b:19:03:7f:fe:fa:2c:a0:81:13:91: 8b:77:09:fc:3f:d1:2d:3e:08:51:53:cc:fa:e7:6b: 87:9c:5c:6f:67:06:9e:95:40:b8:5c:db:70:d5:94: 31:70:ee:b5:60:10:3b:83:ba:98:e9:07:b2:f2:73: 9e:a1:8a:6e:a5:ba:de:86:18:5d:42:44:37:bc:b1: 74:36:2d:02:7a:e5:63:c9:ea:43:18:32:06:d8:03: a2:95:30:e0:47:ce:05:d1:9d:71:d6:39:33:84:1e: b3:0a:cd:18:84:8f:c3:09:83:07:6f:69:72:2a:b3: 50:c5:27:ec:12:33:32:30:25:91:53:56:8b:0f:a6: 6f:14:df:78:12:d4:53:16:01:c1:01:8b:77:67:f6: 26:3f:ef:08:4d:bf:68:f6:95:71:f0:8e:cd:f5:d8: 98:71:af:7e:fe:29:2a:57:13:fa:fd:3e:17:9c:09: b9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BB:C7:12:C6:35:06:AF:55:C6:4C:CB:44:DD:8A:21:BE:5D:B2:16 X509v3 Authority Key Identifier: keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:94:c0:0d:02:84:f4:c5:69:5f:e2:bf:6d:eb:17:8e:e4:94: 75:26:e5:d5:9f:46:0c:25:73:41:05:5a:57:f8:47:35:ee:cb: 4b:68:c7:a2:37:6d:aa:70:92:a4:7b:0a:38:a1:7e:84:f9:89: 8a:15:73:7a:b2:10:68:5f:e0:72:15:66:76:10:5b:2f:56:7d: 8f:d7:9b:32:29:b4:3e:1a:e5:08:ed:19:05:62:eb:96:06:ae: 0a:f7:cf:c5:5b:b7:7e:58:5c:9e:52:2f:7b:36:ae:57:85:fe: fd:a9:98:64:d0:d0:0c:ab:03:1b:d3:85:17:1a:e0:d3:4e:07: 34:f9:f4:2e:fd:8a:c2:df:9f:65:0d:b9:8b:8a:cd:40:38:6e: 82:50:da:ed:f4:a5:9f:e6:c3:3b:61:76:ba:0a:34:82:f4:46: f7:2e:09:1f:67:a7:de:d6:6e:60:d0:5a:b8:13:bd:60:24:d6: 81:3d:e3:a5:b3:44:60:b3:65:ce:03:7e:f1:d2:dd:13:31:2c: 38:bb:02:3c:8a:e5:df:c5:b3:53:48:51:50:fa:a1:0f:d9:6b: de:1b:ae:46:93:07:f9:c7:a9:f3:df:a7:30:ad:87:81:a1:58: 53:81:74:58:4e:f1:35:68:e7:3a:ab:65:36:3d:c3:52:60:a4: 2e:06:fc:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJVKgZQ5gHBy2r8X86rEMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZDAzN2Q0ZWUzZTVkMjcwNjVhZDgwMzU2NTgyYTJmZGMy YjQ4OGQwHhcNMjUxMjIxMjMwMTE4WhcNMjUxMjIyMjMwMTE4WjAzMTEwLwYDVQQD Eyg5YmJiYzcxMmM2MzUwNmFmNTVjNjRjY2I0NGRkOGEyMWJlNWRiMjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthq/zpKDbMd3n7cHjpsiosvQpzua fnXiaT30zdOPerv4QOSMNAAisI6KxVCYWj5X9WgxAfVcT5o50m4QMWjrfbgsUU10 7GEJFVRrTV+JmxkDf/76LKCBE5GLdwn8P9EtPghRU8z652uHnFxvZwaelUC4XNtw 1ZQxcO61YBA7g7qY6Qey8nOeoYpupbrehhhdQkQ3vLF0Ni0CeuVjyepDGDIG2AOi lTDgR84F0Z1x1jkzhB6zCs0YhI/DCYMHb2lyKrNQxSfsEjMyMCWRU1aLD6ZvFN94 EtRTFgHBAYt3Z/YmP+8ITb9o9pVx8I7N9diYca9+/ikqVxP6/T4XnAm5NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJu7xxLGNQavVcZMy0TdiiG+XbIWMB8GA1UdIwQY MBaAFE7QN9TuPl0nBlrYA1ZYKi/cK0iNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS83NGI5OTYtODBlZS00YzM5LThlNzQt MzUwZTY4MWI5OWQxLzEvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS83NGI5OTYtODBlZS00YzM5LThlNzQtMzUwZTY4MWI5OWQx LzEvVHRBMzFPNC1YU2NHV3RnRFZsZ3FMOXdyU0kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppTADQKE 9MVpX+K/besXjuSUdSbl1Z9GDCVzQQVaV/hHNe7LS2jHojdtqnCSpHsKOKF+hPmJ ihVzerIQaF/gchVmdhBbL1Z9j9ebMim0PhrlCO0ZBWLrlgauCvfPxVu3flhcnlIv ezauV4X+/amYZNDQDKsDG9OFFxrg004HNPn0Lv2Kwt+fZQ25i4rNQDhuglDa7fSl n+bDO2F2ugo0gvRG9y4JH2en3tZuYNBauBO9YCTWgT3jpbNEYLNlzgN+8dLdEzEs OLsCPIrl38WzU0hRUPqhD9lr3huuRpMH+cep89+nMK2HgaFYU4F0WE7xNWjnOqtl Nj3DUmCkLgb8+Q== -----END CERTIFICATE-----Generated at Mon Dec 22 07:22:07 2025 by rpki-client