This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft File: tUcxKN5Ul222LZvRYU53xD3uObU.mft (raw, json) Hash identifier: Xe06C5tbuDrsvM76324KIsNHkP9LdQwLES8Nuqm3sa0= Subject key identifier: AD:54:40:C2:02:F7:D5:29:4F:92:87:D2:05:3F:6E:D0:77:8F:35:BD Authority key identifier: B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5 Certificate issuer: /CN=b5473128de54976db62d9bd1614e77c43dee39b5 Certificate serial: 019B5606B4D832D9DB4E61B88DEAFC291C45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft Manifest number: 146D Signing time: Thu 25 Dec 2025 15:00:38 +0000 Manifest this update: Thu 25 Dec 2025 15:00:38 +0000 Manifest next update: Fri 26 Dec 2025 15:00:38 +0000 Files and hashes: 1: TmvOzGWnmK2lk0JBtr2hwCa8AyI.asa (hash: jT3uzkFsF2IKke7bmyYM9JWOSf+ukPwuY/SlyIWkCoE=) 2: WT51Xxp6wSpnMPjyEAyyUhxOXPk.roa (hash: GG3W3sv/8g51OizpERxg8YmbMm76mWXeFGoFM/wpQ9M=) 3: tUcxKN5Ul222LZvRYU53xD3uObU.crl (hash: DohMzI9IFOUdbZgSpuxxR6gBvBioM8LvUT+7TAF5KlE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:06:b4:d8:32:d9:db:4e:61:b8:8d:ea:fc:29:1c:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5473128de54976db62d9bd1614e77c43dee39b5 Validity Not Before: Dec 25 15:00:38 2025 GMT Not After : Dec 26 15:00:38 2025 GMT Subject: CN=ad5440c202f7d5294f9287d2053f6ed0778f35bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2b:00:45:3e:4b:1f:28:c1:ca:a1:fd:a0:07: dc:00:5c:ac:cf:c8:d9:0e:f3:96:ed:ce:59:bd:d1: b8:cb:d0:37:5f:a3:db:11:38:ac:86:22:f0:70:eb: 5b:2b:90:d2:57:23:41:ad:84:77:5b:b4:a1:cf:8e: 3f:37:5e:a7:50:b8:07:3c:d3:68:01:7d:ab:e2:2f: 80:0a:43:b3:cc:bf:56:5f:6d:a2:d9:13:fc:30:65: 8c:46:cd:63:65:66:e4:fd:30:b6:a0:5a:00:e2:94: 05:17:67:a4:c8:bc:33:e3:37:84:8d:02:fd:d8:e9: 9c:bc:1d:b2:ae:29:7b:de:5e:fb:a8:10:64:f2:5c: df:b0:a7:b2:40:5d:ae:21:89:8b:a4:bf:7d:91:80: b8:cc:5a:fd:11:7b:9f:f2:33:93:8c:75:ec:fd:d6: 75:a4:02:49:5e:bd:a8:ad:39:64:a9:51:1f:0e:50: f1:24:c4:40:dd:c1:ca:2f:6b:5f:e6:92:6c:8c:45: 7a:5b:a2:25:2c:4f:c0:23:24:a1:97:92:88:09:af: cb:0c:cf:78:a4:c9:a9:a1:32:77:e0:5a:58:5e:26: 9f:b5:41:d4:07:e4:a0:37:29:5f:37:61:0c:58:41: 21:12:12:4f:d2:b7:cb:85:9e:ff:74:f4:59:ab:af: 57:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:54:40:C2:02:F7:D5:29:4F:92:87:D2:05:3F:6E:D0:77:8F:35:BD X509v3 Authority Key Identifier: keyid:B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:90:d5:7d:f5:85:02:c3:20:e6:32:30:7a:7a:1d:a3:2c:52: cb:5d:85:a4:ba:e8:35:a3:6b:73:f5:ea:b7:af:c9:f7:df:22: b7:b4:52:8b:95:61:3f:56:d4:9d:e0:5f:36:1c:00:80:9b:c4: db:9e:9e:0b:cb:a3:79:fd:b2:0c:51:d2:ef:cb:dd:25:4b:c3: 94:76:e0:49:41:9c:4b:04:28:ec:8a:37:08:cc:b7:09:95:39: 7e:f7:dc:c9:0f:d9:7d:da:e6:d7:00:33:80:5c:e3:8f:fc:d3: 6a:2d:f8:39:0b:c7:c8:d1:c9:f8:96:c7:c3:45:b6:9a:e6:ad: 81:77:9c:3a:87:6e:8b:e2:2f:dd:95:bd:a2:37:e7:02:ed:1f: 4c:b0:e3:b7:c6:d6:12:34:04:5f:fe:19:e4:b9:9b:f7:14:f9: 88:9e:74:1b:50:cc:22:0c:eb:27:ee:b5:06:6d:c7:48:2d:a0: 09:7a:71:cd:10:57:ac:cd:16:fb:fe:7c:7c:c1:3a:bd:bd:42: 03:f2:1c:72:ec:c3:80:57:14:21:2b:96:e1:1d:a2:e9:08:9b: 6b:04:0e:5b:fd:ff:e5:9d:e6:8a:15:b0:77:e6:36:99:61:41: 15:81:ae:60:96:b5:f3:38:20:59:7c:43:7a:c5:d9:06:ff:f0: ca:f7:f9:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtWBrTYMtnbTmG4jer8KRxFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDczMTI4ZGU1NDk3NmRiNjJkOWJkMTYxNGU3N2M0M2Rl ZTM5YjUwHhcNMjUxMjI1MTUwMDM4WhcNMjUxMjI2MTUwMDM4WjAzMTEwLwYDVQQD EyhhZDU0NDBjMjAyZjdkNTI5NGY5Mjg3ZDIwNTNmNmVkMDc3OGYzNWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ysART5LHyjByqH9oAfcAFysz8jZ DvOW7c5ZvdG4y9A3X6PbETishiLwcOtbK5DSVyNBrYR3W7Shz44/N16nULgHPNNo AX2r4i+ACkOzzL9WX22i2RP8MGWMRs1jZWbk/TC2oFoA4pQFF2ekyLwz4zeEjQL9 2OmcvB2yril73l77qBBk8lzfsKeyQF2uIYmLpL99kYC4zFr9EXuf8jOTjHXs/dZ1 pAJJXr2orTlkqVEfDlDxJMRA3cHKL2tf5pJsjEV6W6IlLE/AIyShl5KICa/LDM94 pMmpoTJ34FpYXiaftUHUB+SgNylfN2EMWEEhEhJP0rfLhZ7/dPRZq69XcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1UQMIC99UpT5KH0gU/btB3jzW9MB8GA1UdIwQY MBaAFLVHMSjeVJdtti2b0WFOd8Q97jm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MGRlODAtNTBlOS00YzFkLWE3YjQt ZTkwNDMxODM0MmVlLzEvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MGRlODAtNTBlOS00YzFkLWE3YjQtZTkwNDMxODM0MmVl LzEvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJDVffWF AsMg5jIwenodoyxSy12FpLroNaNrc/Xqt6/J998it7RSi5VhP1bUneBfNhwAgJvE 256eC8ujef2yDFHS78vdJUvDlHbgSUGcSwQo7Io3CMy3CZU5fvfcyQ/Zfdrm1wAz gFzjj/zTai34OQvHyNHJ+JbHw0W2muatgXecOodui+Iv3ZW9ojfnAu0fTLDjt8bW EjQEX/4Z5Lmb9xT5iJ50G1DMIgzrJ+61Bm3HSC2gCXpxzRBXrM0W+/58fME6vb1C A/IccuzDgFcUISuW4R2i6QibawQOW/3/5Z3mihWwd+Y2mWFBFYGuYJa18zggWXxD esXZBv/wyvf5cQ== -----END CERTIFICATE-----Generated at Thu Dec 25 18:03:01 2025 by rpki-client