This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft File: TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json) Hash identifier: Jz5h8Fg9PpF1m71NYzfZCxglMBgtv89kI0AhZy6Lu+I= Subject key identifier: 1D:3E:22:E8:F9:8B:E0:6D:1B:79:8B:52:2E:D5:05:8E:A1:F8:0D:B7 Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15 Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115 Certificate serial: 019B3BA2AFB5A374BA99220B7899B4C2C19C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft Manifest number: 1113 Signing time: Sat 20 Dec 2025 12:01:16 +0000 Manifest this update: Sat 20 Dec 2025 12:01:16 +0000 Manifest next update: Sun 21 Dec 2025 12:01:16 +0000 Files and hashes: 1: 55sTvowHGJg92qkZxcKwSCfNCK4.roa (hash: b91GQDkCCdywVY2XmrIvPHNucxaPtQ8aCIEGw0MjxvQ=) 2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: qnynGJIdAeioWIw0fJc8nWo3x85eSCPD0D4pqp29Dp4=) 3: lOXoXnSoYH-Ze2jDn-kLGtNui38.roa (hash: Pz0iJoXh4tIWOR42AxlitpnyK4ra9wQb5adMKDc9S9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:af:b5:a3:74:ba:99:22:0b:78:99:b4:c2:c1:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115 Validity Not Before: Dec 20 12:01:16 2025 GMT Not After : Dec 21 12:01:16 2025 GMT Subject: CN=1d3e22e8f98be06d1b798b522ed5058ea1f80db7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2a:cd:e3:2e:d5:51:f6:01:b6:86:a2:ea:e2: 66:5c:15:27:a2:93:3e:31:9d:ff:df:65:34:69:86: 5a:73:56:d7:39:23:67:c3:7b:39:86:5c:5c:a8:0b: ec:46:5e:42:5b:b9:ef:f8:72:ad:5a:3b:35:e8:c3: 8b:6f:b3:6b:e1:77:5f:7d:48:84:e2:0b:31:b1:41: 66:40:21:4e:a9:4f:69:db:91:2e:f2:ef:52:0e:2d: cd:c1:e5:41:78:6e:3c:02:67:46:81:2b:9d:cb:71: 0c:9a:59:f1:f3:e8:18:7b:2f:d5:da:52:7c:90:37: b1:30:71:7f:f8:6c:bf:2d:ec:5a:10:52:8b:61:fe: 0d:dd:60:80:97:6e:6f:2b:90:34:63:30:2c:c5:35: 0a:79:c7:ff:6c:a4:c8:b8:2a:a6:cb:75:2e:93:a1: 4d:ac:bf:2a:4f:c0:a4:2e:be:6d:c7:c1:39:3b:85: 99:c9:14:16:26:a3:e7:f9:78:1c:25:bc:4b:f8:fc: f9:4e:09:a4:15:16:63:62:e5:4e:61:37:63:27:e8: 07:cd:45:05:93:de:9d:73:14:7e:a9:3d:a1:18:f1: 33:be:dd:57:c1:f0:e3:ae:6e:fa:db:09:3a:a2:5b: 4d:7a:44:2e:ae:4a:a4:68:52:01:67:ac:4e:26:35: 09:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3E:22:E8:F9:8B:E0:6D:1B:79:8B:52:2E:D5:05:8E:A1:F8:0D:B7 X509v3 Authority Key Identifier: keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:1c:5e:de:69:04:28:b9:e3:7c:08:f6:23:1a:e9:43:5f:24: 55:8d:5e:83:b2:f0:d6:0e:d2:93:45:8d:13:eb:f9:9d:70:02: 27:5e:4b:57:b7:55:bd:ac:d7:a4:70:5f:1f:aa:b5:28:02:60: 4f:b1:3f:86:f6:7e:c4:61:10:b6:b9:a8:1e:e5:72:d2:ef:2b: 9f:d2:d1:9a:4a:09:74:fe:f9:f0:ef:1e:f3:7b:0a:91:5b:25: 26:8c:33:ee:16:5f:95:ca:24:ec:e6:fa:cc:a8:e8:1b:58:95: 04:c7:4d:1f:61:a2:50:bf:19:6a:67:d4:0a:e7:4c:78:b2:91: d7:00:39:ed:2c:ac:dd:ca:94:af:89:f6:29:56:97:4b:64:e3: 22:c2:17:64:6b:8c:ec:fc:05:d8:f0:f1:d2:dd:7a:91:c8:51: 6e:40:9e:bf:25:3f:dd:a3:d0:8c:fc:c3:6b:89:99:c4:00:26: 06:e4:d9:94:2b:20:c7:76:90:48:21:34:b8:c8:0f:9d:be:c8: 5e:fa:4a:74:92:b4:2c:8c:b1:c0:4a:26:5d:74:84:d2:c8:ac: 88:b5:4f:49:80:8b:d1:d6:72:3e:6f:70:4f:d1:f8:dc:86:3c: de:d3:2f:3a:14:b1:04:8c:18:5f:eb:ce:af:a8:07:c9:73:9b: d9:40:05:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oq+1o3S6mSILeJm0wsGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTUyNzUyYTgxYmRmZTBhNDAxZjlhMjYxZDc5ZmVlNGI2 MTcxMTUwHhcNMjUxMjIwMTIwMTE2WhcNMjUxMjIxMTIwMTE2WjAzMTEwLwYDVQQD EygxZDNlMjJlOGY5OGJlMDZkMWI3OThiNTIyZWQ1MDU4ZWExZjgwZGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSrN4y7VUfYBtoai6uJmXBUnopM+ MZ3/32U0aYZac1bXOSNnw3s5hlxcqAvsRl5CW7nv+HKtWjs16MOLb7Nr4XdffUiE 4gsxsUFmQCFOqU9p25Eu8u9SDi3NweVBeG48AmdGgSudy3EMmlnx8+gYey/V2lJ8 kDexMHF/+Gy/LexaEFKLYf4N3WCAl25vK5A0YzAsxTUKecf/bKTIuCqmy3Uuk6FN rL8qT8CkLr5tx8E5O4WZyRQWJqPn+XgcJbxL+Pz5TgmkFRZjYuVOYTdjJ+gHzUUF k96dcxR+qT2hGPEzvt1XwfDjrm762wk6oltNekQurkqkaFIBZ6xOJjUJkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0+Iuj5i+BtG3mLUi7VBY6h+A23MB8GA1UdIwQY MBaAFE7lJ1KoG9/gpAH5omHXn+5LYXEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zMWUwZDQtMzVjZS00ZDAyLTk3MzQt ZDc4ZmI5N2Y5ODI4LzEvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zMWUwZDQtMzVjZS00ZDAyLTk3MzQtZDc4ZmI5N2Y5ODI4 LzEvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBxe3mkE KLnjfAj2IxrpQ18kVY1eg7Lw1g7Sk0WNE+v5nXACJ15LV7dVvazXpHBfH6q1KAJg T7E/hvZ+xGEQtrmoHuVy0u8rn9LRmkoJdP758O8e83sKkVslJowz7hZflcok7Ob6 zKjoG1iVBMdNH2GiUL8ZamfUCudMeLKR1wA57Sys3cqUr4n2KVaXS2TjIsIXZGuM 7PwF2PDx0t16kchRbkCevyU/3aPQjPzDa4mZxAAmBuTZlCsgx3aQSCE0uMgPnb7I XvpKdJK0LIyxwEomXXSE0sisiLVPSYCL0dZyPm9wT9H43IY83tMvOhSxBIwYX+vO r6gHyXOb2UAFgQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:45:59 2025 by rpki-client