This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft File: tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft (raw, json) Hash identifier: +dL/zOvTkIxNI/lTZy/uXr7GIPjtf3OsUlHGQ9K47JM= Subject key identifier: 4D:7C:B2:A9:61:80:2B:05:BD:DE:12:5E:23:5A:B6:42:4E:FB:3A:7B Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94 Certificate issuer: /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94 Certificate serial: 019B4DDFB0D0D16E3B31DE8B400D19E7EA21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft Manifest number: 0867 Signing time: Wed 24 Dec 2025 01:01:03 +0000 Manifest this update: Wed 24 Dec 2025 01:01:03 +0000 Manifest next update: Thu 25 Dec 2025 01:01:03 +0000 Files and hashes: 1: rgegcxxJ3TsTdq27HR0NAjR9oC8.roa (hash: c0wEsNYvh664VokeqgrZS5bI3twxSLXX7CSRIaVE4Zs=) 2: tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl (hash: ONCemTHxdrAr3jqvPMzc8T/sSNngj+9wFuNDCyYDNaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:b0:d0:d1:6e:3b:31:de:8b:40:0d:19:e7:ea:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94 Validity Not Before: Dec 24 01:01:03 2025 GMT Not After : Dec 25 01:01:03 2025 GMT Subject: CN=4d7cb2a961802b05bdde125e235ab6424efb3a7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:76:69:49:97:3e:55:fc:bb:59:02:f0:1f:8b: 8d:c4:3f:ce:1b:1d:25:6a:33:57:9b:2b:51:7e:7d: 63:a1:23:06:c0:fb:2f:4b:23:5d:3b:85:33:4d:5d: fe:1d:48:94:a9:de:2f:1e:7b:0e:d8:17:e8:a9:3c: 5f:b5:74:b8:fc:ca:a8:d3:6d:7b:9b:f8:ce:ac:c4: cf:bc:1a:24:3a:98:6c:c4:35:a3:73:ca:0b:43:4b: 13:7f:03:6c:95:69:76:90:8d:c2:e3:19:fa:d1:ff: a4:57:67:f7:5e:d1:33:ae:86:62:e7:06:c2:e7:40: 79:80:7e:16:08:83:98:dc:6a:26:1e:a2:43:3b:49: bf:39:34:85:71:77:09:d3:4b:85:6d:58:38:97:33: 33:b4:fc:63:1b:1f:41:e1:d8:a2:b0:60:b4:cc:4c: 2d:d2:28:68:21:71:89:97:fc:6c:f5:cb:9f:bd:7c: 41:34:38:7d:99:29:9a:45:84:7d:a4:3e:af:58:c9: 22:0d:ef:fa:ed:4d:12:44:e7:d5:97:7b:21:03:a3: 12:e7:54:62:e0:3e:6a:df:42:c8:18:af:b5:e0:5e: f2:9e:c9:03:f2:f7:e2:2f:69:f9:f2:27:f1:24:b9: 00:2b:ff:56:a0:43:a1:5c:fd:96:a4:bc:32:69:fe: 8e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:7C:B2:A9:61:80:2B:05:BD:DE:12:5E:23:5A:B6:42:4E:FB:3A:7B X509v3 Authority Key Identifier: keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:2b:a1:46:15:71:70:52:6c:6a:9b:3f:5f:28:e4:cf:59:79: 81:c5:f5:ba:83:11:c1:f9:b9:a0:9f:b4:d1:73:bb:c5:f6:e9: ce:b5:b7:5c:e6:e0:ae:4e:37:e0:ac:97:53:af:69:38:eb:bc: 0c:20:90:03:af:6a:c9:f0:e5:5f:fb:0d:9b:d3:07:ce:fb:69: 34:6f:41:cb:d7:df:a8:7f:3c:a8:d7:ee:24:a9:83:24:f0:ea: 61:09:f6:f6:62:7d:ee:67:a4:30:f6:14:4c:9a:ba:87:9b:b0: 2d:e3:96:04:63:0c:02:3c:a2:ba:30:92:f4:b8:b3:31:57:8c: a5:56:0a:09:1b:ba:aa:f0:fd:86:83:86:52:01:4c:86:a3:13: c0:af:ac:d9:c3:3f:fc:2e:81:6e:3a:f4:ec:1f:90:73:cf:6d: cc:9d:fc:b0:20:be:71:ea:4c:73:80:61:5d:e8:1b:ba:5a:fc: f8:41:5c:9e:9f:f5:e1:bb:ae:e8:32:35:f0:06:2c:45:80:54: a9:5f:61:d7:fb:3e:88:c8:ff:65:ce:70:9e:a6:be:db:be:3a: 77:ef:7f:f9:62:f6:2a:3a:ea:c1:bf:b8:56:6c:f1:c7:cf:98: 80:e9:af:8a:d5:95:83:18:a2:1f:2d:7e:4b:87:a4:5e:87:61: 33:7a:2a:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN37DQ0W47Md6LQA0Z5+ohMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZTNhMmE0OTA4ZGQ5NjgyMWM4MGM2NGQxNWQxNzE0MTQz YWFhOTQwHhcNMjUxMjI0MDEwMTAzWhcNMjUxMjI1MDEwMTAzWjAzMTEwLwYDVQQD Eyg0ZDdjYjJhOTYxODAyYjA1YmRkZTEyNWUyMzVhYjY0MjRlZmIzYTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnZpSZc+Vfy7WQLwH4uNxD/OGx0l ajNXmytRfn1joSMGwPsvSyNdO4UzTV3+HUiUqd4vHnsO2BfoqTxftXS4/Mqo0217 m/jOrMTPvBokOphsxDWjc8oLQ0sTfwNslWl2kI3C4xn60f+kV2f3XtEzroZi5wbC 50B5gH4WCIOY3GomHqJDO0m/OTSFcXcJ00uFbVg4lzMztPxjGx9B4diisGC0zEwt 0ihoIXGJl/xs9cufvXxBNDh9mSmaRYR9pD6vWMkiDe/67U0SROfVl3shA6MS51Ri 4D5q30LIGK+14F7ynskD8vfiL2n58ifxJLkAK/9WoEOhXP2WpLwyaf6OuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE18sqlhgCsFvd4SXiNatkJO+zp7MB8GA1UdIwQY MBaAFLbjoqSQjdloIcgMZNFdFxQUOqqUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iMzZmMzEtMWNjZC00ZGEzLTljZjkt MGVkYmRmZjlmOGYyLzEvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9iMzZmMzEtMWNjZC00ZGEzLTljZjktMGVkYmRmZjlmOGYy LzEvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCuhRhVx cFJsaps/Xyjkz1l5gcX1uoMRwfm5oJ+00XO7xfbpzrW3XObgrk434KyXU69pOOu8 DCCQA69qyfDlX/sNm9MHzvtpNG9By9ffqH88qNfuJKmDJPDqYQn29mJ97mekMPYU TJq6h5uwLeOWBGMMAjyiujCS9LizMVeMpVYKCRu6qvD9hoOGUgFMhqMTwK+s2cM/ /C6Bbjr07B+Qc89tzJ38sCC+cepMc4BhXegbulr8+EFcnp/14buu6DI18AYsRYBU qV9h1/s+iMj/Zc5wnqa+2746d+9/+WL2Kjrqwb+4Vmzxx8+YgOmvitWVgxiiHy1+ S4ekXodhM3oqDw== -----END CERTIFICATE-----Generated at Wed Dec 24 11:40:05 2025 by rpki-client