This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft File: TuFxPha0_Y8zAYh95qERmARJsp4.mft (raw, json) Hash identifier: EX37LqwEyPLh1v7vK7zPN4MC8T1baDR09SIEt0w2z9s= Subject key identifier: CC:5A:23:99:B6:18:D0:F7:03:86:56:F5:37:51:20:77:D6:AB:0A:DB Authority key identifier: 4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E Certificate issuer: /CN=4ee1713e16b4fd8f3301887de6a111980449b29e Certificate serial: 019B3FB5F97555C854455C11946ABAC52F02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 07:00:49 +0000 Manifest this update: Sun 21 Dec 2025 07:00:49 +0000 Manifest next update: Mon 22 Dec 2025 07:00:49 +0000 Files and hashes: 1: IJqJkkG32juZ9JC_-n807ugagLE.roa (hash: a5ckR7gAH5+zi6QRTimZRXE/Wgs09xk/gP8A83O6nQM=) 2: TuFxPha0_Y8zAYh95qERmARJsp4.crl (hash: ZNufNKiFyOK1LFBiZIX7jlMiQ366fkeozdEca6Os6Es=) 3: yXKulFLipTbjSUmowLRqtzSALEA.roa (hash: LNf43mdJtw9mAKFqBqZr/MgvJNf0ToK4qGWZ05MJPz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b5:f9:75:55:c8:54:45:5c:11:94:6a:ba:c5:2f:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee1713e16b4fd8f3301887de6a111980449b29e Validity Not Before: Dec 21 07:00:49 2025 GMT Not After : Dec 22 07:00:49 2025 GMT Subject: CN=cc5a2399b618d0f7038656f537512077d6ab0adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:e7:5f:7c:b4:f2:9e:65:4e:bf:05:0b:a6:0b: 79:35:f2:85:ad:36:a5:f3:12:f0:14:20:fa:63:20: f5:19:e9:e2:7b:f6:e6:2f:39:58:b7:be:45:25:ac: 5f:7c:33:e4:06:14:3b:03:a7:52:29:7c:c4:00:87: 14:ed:ce:3c:e5:fd:65:d0:b0:b3:df:d6:8c:21:98: 0f:be:a8:1f:e6:d8:95:bd:f4:c0:96:36:2e:a4:41: b6:bd:1a:bd:02:80:14:d2:81:57:dd:ff:fc:f9:4f: 47:f0:25:84:28:61:39:5f:c1:34:c5:62:a6:ea:bb: 83:ad:9a:14:fb:50:0d:b7:12:ab:58:98:5e:37:0a: ba:de:28:62:75:73:c3:d0:ca:64:04:22:0f:c8:d3: 08:a9:9e:fa:63:fd:22:2b:e9:12:bc:24:ac:a5:f0: 4f:ca:dc:3a:57:04:e5:fc:d8:45:9c:50:a2:f0:ce: 76:4c:d0:39:26:49:14:33:23:ea:eb:31:4e:78:f2: 3f:35:c6:93:7d:b8:25:71:77:2d:f0:7a:b2:6a:56: cf:04:99:4a:fc:a4:13:a5:e5:a7:70:14:58:95:46: ad:33:64:fd:60:d1:0d:45:81:b1:2e:ea:f4:33:d0: 99:c8:72:bd:b4:a2:76:65:3a:c3:35:31:9e:0a:dc: d2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5A:23:99:B6:18:D0:F7:03:86:56:F5:37:51:20:77:D6:AB:0A:DB X509v3 Authority Key Identifier: keyid:4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:75:50:27:2e:3c:52:8a:22:56:5c:37:af:2d:57:48:ed:7b: 78:59:49:c8:d5:a4:2b:d8:12:8a:5f:3d:12:d7:ae:63:de:41: e6:a5:6a:b8:cb:d7:0d:38:e6:4e:8d:a9:96:ad:37:49:f4:10: 20:3f:1a:82:c3:f7:f3:6b:a5:54:d5:a5:ad:68:fa:ca:e3:ca: dc:f2:22:b2:3c:c9:21:11:92:4b:f8:f5:61:67:98:6e:bb:fd: 50:8d:0e:6e:cb:ff:09:7c:a3:26:a6:a1:58:63:ac:2f:a7:fd: 58:00:06:fc:0f:c2:d3:4d:71:f4:52:e6:c6:ed:c0:7a:9f:ac: d6:0c:5e:0e:8d:4f:dd:93:74:07:b9:ed:21:48:09:f4:44:ab: 44:01:4f:27:a9:63:ac:a9:41:b8:80:62:c5:3a:d7:7e:db:91: a3:0a:f4:52:f4:67:4a:9f:69:dd:18:43:6b:50:f6:c4:1e:e0: 94:75:19:cb:5b:1c:5a:96:40:63:c1:df:f0:0b:15:c0:b2:4c: d5:28:bd:98:2b:33:28:83:bb:27:d3:a8:15:55:a4:ef:4b:08: 71:2c:12:be:59:c4:81:0b:d4:6d:da:c5:c0:ff:c3:6c:7e:e9: 11:29:79:a6:74:5f:a2:ec:ba:3b:f7:94:54:04:e5:e0:d3:23: f1:f9:44:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tfl1VchURVwRlGq6xS8CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTE3MTNlMTZiNGZkOGYzMzAxODg3ZGU2YTExMTk4MDQ0 OWIyOWUwHhcNMjUxMjIxMDcwMDQ5WhcNMjUxMjIyMDcwMDQ5WjAzMTEwLwYDVQQD EyhjYzVhMjM5OWI2MThkMGY3MDM4NjU2ZjUzNzUxMjA3N2Q2YWIwYWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzudffLTynmVOvwULpgt5NfKFrTal 8xLwFCD6YyD1Genie/bmLzlYt75FJaxffDPkBhQ7A6dSKXzEAIcU7c485f1l0LCz 39aMIZgPvqgf5tiVvfTAljYupEG2vRq9AoAU0oFX3f/8+U9H8CWEKGE5X8E0xWKm 6ruDrZoU+1ANtxKrWJheNwq63ihidXPD0MpkBCIPyNMIqZ76Y/0iK+kSvCSspfBP ytw6VwTl/NhFnFCi8M52TNA5JkkUMyPq6zFOePI/NcaTfbglcXct8HqyalbPBJlK /KQTpeWncBRYlUatM2T9YNENRYGxLur0M9CZyHK9tKJ2ZTrDNTGeCtzSSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxaI5m2GND3A4ZW9TdRIHfWqwrbMB8GA1UdIwQY MBaAFE7hcT4WtP2PMwGIfeahEZgESbKeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVGeFBoYTBfWTh6QVloOTVxRVJtQVJKc3A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80OGM5ZjYtNWI1Zi00MWQ0LThlNTYt MDhlNGI3OTM4N2MwLzEvVHVGeFBoYTBfWTh6QVloOTVxRVJtQVJKc3A0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC80OGM5ZjYtNWI1Zi00MWQ0LThlNTYtMDhlNGI3OTM4N2Mw LzEvVHVGeFBoYTBfWTh6QVloOTVxRVJtQVJKc3A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3VQJy48 UooiVlw3ry1XSO17eFlJyNWkK9gSil89EteuY95B5qVquMvXDTjmTo2plq03SfQQ ID8agsP382ulVNWlrWj6yuPK3PIisjzJIRGSS/j1YWeYbrv9UI0Obsv/CXyjJqah WGOsL6f9WAAG/A/C001x9FLmxu3Aep+s1gxeDo1P3ZN0B7ntIUgJ9ESrRAFPJ6lj rKlBuIBixTrXftuRowr0UvRnSp9p3RhDa1D2xB7glHUZy1scWpZAY8Hf8AsVwLJM 1Si9mCszKIO7J9OoFVWk70sIcSwSvlnEgQvUbdrFwP/DbH7pESl5pnRfouy6O/eU VATl4NMj8flECg== -----END CERTIFICATE-----Generated at Sun Dec 21 12:27:11 2025 by rpki-client