This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft File: TTxfCqFBARzi2_GMzOqsjSOoAlM.mft (raw, json) Hash identifier: sxJ/RqHmwmIgf5A1wIzGo0dGHSng0E5c1kzDrIj0xTs= Subject key identifier: A5:AF:41:27:74:0F:71:B6:0A:86:E3:01:61:C1:89:30:0C:72:F2:F0 Authority key identifier: 4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53 Certificate issuer: /CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253 Certificate serial: 019B0AECAF452F42944F966DC57E34202D29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft Manifest number: 049A Signing time: Thu 11 Dec 2025 01:00:41 +0000 Manifest this update: Thu 11 Dec 2025 01:00:41 +0000 Manifest next update: Fri 12 Dec 2025 01:00:41 +0000 Files and hashes: 1: TTxfCqFBARzi2_GMzOqsjSOoAlM.crl (hash: JkVYd5R7FjCtFhUjFtSbvM8ioIqZCdNLvvstbBirZ5k=) 2: VzuF2DppIrspDzJ85GPpog256VM.roa (hash: NVhHykKnaNaKUFenioMV2s+C+yHI/RstE5ooTmdayhs=) 3: gl57ADSHY0k4ndDK_OjTyc2Vj-w.roa (hash: K2iUKBC94qqs+lcuU9alkOi5wrj2IpvPW1nPAtFGI+M=) 4: wVbnrxwKxuyFCykAZfTxIk8usp4.roa (hash: nUg8btnlBOx76JKnTAelqbIAdPi5nKQqhhSAdUCbOU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 23:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:ec:af:45:2f:42:94:4f:96:6d:c5:7e:34:20:2d:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253 Validity Not Before: Dec 11 01:00:41 2025 GMT Not After : Dec 12 01:00:41 2025 GMT Subject: CN=a5af4127740f71b60a86e30161c189300c72f2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:33:e9:52:e2:70:14:fd:30:a5:dd:1b:90:ca: a1:9c:80:9c:9b:e1:b8:fa:b9:bc:e4:89:9c:31:02: 0a:f0:3c:fa:40:e3:6d:a3:3a:3f:9d:6d:14:6e:5b: 8a:d1:fb:6b:57:57:34:27:bf:16:96:30:18:d9:87: 10:43:3f:a8:3b:18:94:c8:6d:68:95:84:19:02:59: fc:ca:26:13:c0:eb:f7:1a:1a:b8:0d:e8:98:db:c6: f8:b0:11:d2:9c:c6:4f:78:31:46:86:0e:00:a3:84: ea:8e:56:b9:2c:78:31:e0:fa:4d:67:ac:02:42:f8: 6f:d0:dd:db:4e:04:e4:e5:7d:9a:e5:7c:76:1e:a6: 31:23:76:0b:ad:78:55:40:94:30:4d:08:5a:fb:af: 22:b9:a9:0e:ac:69:57:78:16:99:56:04:96:5d:d5: af:88:22:29:1c:e3:2c:fa:31:da:a6:78:5a:f5:ae: d8:12:ea:5f:40:a3:7b:48:aa:37:44:35:51:fe:c8: 69:7c:6d:98:ff:cf:bb:ab:d1:91:84:fb:56:d9:55: d9:f2:25:f7:99:74:51:34:a4:b2:87:d0:1a:b2:ff: f7:2c:2b:00:fb:43:15:46:a5:09:1b:e4:81:f3:4a: 4f:d1:16:3d:55:e7:37:14:d6:47:73:9a:c2:62:ee: f7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AF:41:27:74:0F:71:B6:0A:86:E3:01:61:C1:89:30:0C:72:F2:F0 X509v3 Authority Key Identifier: keyid:4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:9a:59:5d:5d:76:84:f1:a3:69:02:28:20:d7:c6:fb:3e:66: 6e:b3:7d:72:d3:4d:0f:18:4d:09:04:25:3a:44:cd:5f:bc:bd: 44:13:58:70:f5:41:07:b0:9c:9f:bc:e3:59:5c:bd:b3:78:35: dc:57:74:24:02:1a:66:2e:17:c4:37:7a:73:24:dc:ef:20:21: 74:b1:ca:a8:6b:97:69:cd:1e:dd:82:8e:e7:16:f9:1c:23:c9: 64:eb:00:3e:0e:c4:e6:f8:69:e9:93:9c:65:32:45:86:c9:81: 64:7b:29:40:ab:36:c1:0f:b4:43:54:5c:67:05:ae:f4:3a:89: 71:c9:9d:5c:2b:2a:ea:1d:95:11:a8:6f:04:e7:97:e8:1c:8d: ae:e9:81:7e:6c:b9:2e:3c:2f:d0:43:e0:3f:88:01:92:0c:88: 0c:d6:f2:da:9f:ae:05:bc:30:36:18:c0:d2:4d:58:12:14:61: f3:ec:5e:89:a6:30:8c:71:7f:3c:26:f4:66:91:3d:26:98:6b: 99:50:2b:1d:09:5e:86:5b:a2:2b:21:ce:c9:75:f7:91:ac:b1: b3:81:aa:e7:13:be:79:f9:bd:ba:b8:03:60:59:90:77:9d:97: e8:25:5b:81:f6:f4:e6:0e:86:84:9e:1d:8f:a5:ee:07:9f:cb: af:30:3e:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsK7K9FL0KUT5ZtxX40IC0pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkM2M1ZjBhYTE0MTAxMWNlMmRiZjE4Y2NjZWFhYzhkMjNh ODAyNTMwHhcNMjUxMjExMDEwMDQxWhcNMjUxMjEyMDEwMDQxWjAzMTEwLwYDVQQD EyhhNWFmNDEyNzc0MGY3MWI2MGE4NmUzMDE2MWMxODkzMDBjNzJmMmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDPpUuJwFP0wpd0bkMqhnICcm+G4 +rm85ImcMQIK8Dz6QONtozo/nW0UbluK0ftrV1c0J78WljAY2YcQQz+oOxiUyG1o lYQZAln8yiYTwOv3Ghq4DeiY28b4sBHSnMZPeDFGhg4Ao4Tqjla5LHgx4PpNZ6wC Qvhv0N3bTgTk5X2a5Xx2HqYxI3YLrXhVQJQwTQha+68iuakOrGlXeBaZVgSWXdWv iCIpHOMs+jHapnha9a7YEupfQKN7SKo3RDVR/shpfG2Y/8+7q9GRhPtW2VXZ8iX3 mXRRNKSyh9Aasv/3LCsA+0MVRqUJG+SB80pP0RY9Vec3FNZHc5rCYu735QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWvQSd0D3G2CobjAWHBiTAMcvLwMB8GA1UdIwQY MBaAFE08XwqhQQEc4tvxjMzqrI0jqAJTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFR4ZkNxRkJBUnppMl9HTXpPcXNqU09vQWxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8yZDA2N2MtZGY3Mi00MDQwLWJjNDMt MTkzOTdmYzc2ZmVjLzEvVFR4ZkNxRkJBUnppMl9HTXpPcXNqU09vQWxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS8yZDA2N2MtZGY3Mi00MDQwLWJjNDMtMTkzOTdmYzc2ZmVj LzEvVFR4ZkNxRkJBUnppMl9HTXpPcXNqU09vQWxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyJpZXV12 hPGjaQIoINfG+z5mbrN9ctNNDxhNCQQlOkTNX7y9RBNYcPVBB7Ccn7zjWVy9s3g1 3Fd0JAIaZi4XxDd6cyTc7yAhdLHKqGuXac0e3YKO5xb5HCPJZOsAPg7E5vhp6ZOc ZTJFhsmBZHspQKs2wQ+0Q1RcZwWu9DqJccmdXCsq6h2VEahvBOeX6ByNrumBfmy5 Ljwv0EPgP4gBkgyIDNby2p+uBbwwNhjA0k1YEhRh8+xeiaYwjHF/PCb0ZpE9Jphr mVArHQlehluiKyHOyXX3kayxs4Gq5xO+efm9urgDYFmQd52X6CVbgfb05g6GhJ4d j6XuB5/LrzA+VQ== -----END CERTIFICATE-----Generated at Thu Dec 11 07:07:34 2025 by rpki-client