This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json) Hash identifier: jHASzT/8CGIAUXsbTVOGuWrq9q8/8scFG+FFMp4HJf8= Subject key identifier: D9:21:06:70:96:E4:D9:EB:14:50:49:C4:44:71:3F:6E:E9:2A:22:64 Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84 Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84 Certificate serial: 019B3D90B84EC3E4F2DC2E1EB96C2AF8DE38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 21:00:53 +0000 Manifest this update: Sat 20 Dec 2025 21:00:53 +0000 Manifest next update: Sun 21 Dec 2025 21:00:53 +0000 Files and hashes: 1: _dnntVUjWH4EUr4UpgbEErzH-do.asa (hash: vI/4RAPzURUhd78xQi/Y6eBRsyDpScnrAtCWF0EcTGY=) 2: hZxGZ5YrFD-BRifeGJgPjvYacq8.roa (hash: h+aCBqY4W4dfYzKLAFqGhW1i9FvyqjIDn+DISvEM+Ys=) 3: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: 54RtV9JW1DAeNP6pVkBxlGZ16xCQONQMPtmQclm3HmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:b8:4e:c3:e4:f2:dc:2e:1e:b9:6c:2a:f8:de:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84 Validity Not Before: Dec 20 21:00:53 2025 GMT Not After : Dec 21 21:00:53 2025 GMT Subject: CN=d921067096e4d9eb145049c444713f6ee92a2264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d1:8c:36:22:a8:51:3a:1d:77:ac:e6:37:ba: a4:c8:c2:44:5f:46:73:c1:01:9a:d9:b9:84:0d:66: d0:34:4b:54:50:4c:30:2c:2d:0e:32:17:f8:ce:f5: da:2e:8e:65:c4:a1:d5:82:57:48:ab:91:a9:57:3a: af:4b:ce:4f:34:02:77:03:f2:a8:78:49:33:7d:ea: bd:e3:eb:35:07:1f:f5:3a:35:bc:4b:f3:b3:e8:41: c1:3c:4a:40:d0:0d:2e:dd:3a:b6:e9:95:62:d7:b0: 1d:7c:6c:e1:d0:47:39:f4:20:a3:72:13:ce:f3:af: 4c:1c:80:54:8d:32:b3:45:c8:0a:d3:b5:9e:ab:09: b5:3d:eb:f2:52:87:2e:ed:3e:2d:2e:d7:60:ae:cb: d2:60:58:02:82:e7:41:61:99:3a:2d:ed:59:2c:69: d4:89:c4:0d:19:58:91:c7:15:3e:12:06:18:8c:ad: 2b:c4:ec:a4:da:1e:41:34:ce:06:5c:3c:72:53:69: 62:36:2b:87:dd:3a:6e:27:c7:5b:e3:af:f2:b6:f1: ec:d7:19:86:f9:d8:02:68:00:9a:a1:e7:1a:7d:45: c9:4e:82:d4:c6:7e:1f:db:a2:a4:27:08:68:ab:61: 58:62:27:3b:e0:44:d2:71:cd:f9:2e:ec:51:0c:fa: 2c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:21:06:70:96:E4:D9:EB:14:50:49:C4:44:71:3F:6E:E9:2A:22:64 X509v3 Authority Key Identifier: keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:d2:4d:62:cf:1b:a5:74:8d:f6:cd:f2:21:6b:11:95:1f:e9: 07:17:9d:5e:31:14:5f:8d:77:1e:a6:21:ec:26:64:0e:b2:74: 8a:72:59:c7:70:a7:64:a7:09:4d:db:7a:46:c4:73:92:8d:9d: 87:f6:07:e1:7e:d2:73:92:d4:8a:08:a7:48:42:88:0e:6b:ce: 5e:bf:de:07:e9:d5:80:66:4e:86:10:0e:4c:72:0d:d9:13:cb: 35:52:71:40:51:a1:0e:8d:07:1b:b4:69:e5:01:2b:1c:61:61: b6:c9:04:f3:d5:02:cc:04:53:1a:de:44:88:a4:a8:1e:58:c3: 88:6c:93:fd:c4:fc:e4:71:30:dd:8d:c1:bd:c3:5b:ac:5c:bf: 3a:0c:20:5d:cd:24:c8:e9:67:46:bb:5d:73:e9:87:f7:43:4c: b1:b3:28:1d:52:6f:88:75:9d:5a:33:cf:28:6d:de:30:9c:6d: 59:ce:5c:e3:12:0e:8d:33:e4:5a:2c:35:88:91:b1:f2:39:83: 44:2d:58:25:e6:a8:25:82:c4:fc:96:35:be:e2:cd:e0:6e:b1: 5f:37:f3:bf:f8:90:d7:2f:fb:dc:67:04:a6:3a:fb:f5:94:f9: 5c:84:7f:4b:28:04:b2:d9:dd:23:a7:86:5d:19:8c:91:08:aa: f8:07:6e:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kLhOw+Ty3C4euWwq+N44MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MmI5NjdjNTIxNDVlNjdhNGIzMjA2YjFjYTQ5Mjg1M2Nh MGRmODQwHhcNMjUxMjIwMjEwMDUzWhcNMjUxMjIxMjEwMDUzWjAzMTEwLwYDVQQD EyhkOTIxMDY3MDk2ZTRkOWViMTQ1MDQ5YzQ0NDcxM2Y2ZWU5MmEyMjY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tGMNiKoUTodd6zmN7qkyMJEX0Zz wQGa2bmEDWbQNEtUUEwwLC0OMhf4zvXaLo5lxKHVgldIq5GpVzqvS85PNAJ3A/Ko eEkzfeq94+s1Bx/1OjW8S/Oz6EHBPEpA0A0u3Tq26ZVi17AdfGzh0Ec59CCjchPO 869MHIBUjTKzRcgK07Weqwm1PevyUocu7T4tLtdgrsvSYFgCgudBYZk6Le1ZLGnU icQNGViRxxU+EgYYjK0rxOyk2h5BNM4GXDxyU2liNiuH3TpuJ8db46/ytvHs1xmG +dgCaACaoecafUXJToLUxn4f26KkJwhoq2FYYic74ETScc35LuxRDPosmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkhBnCW5NnrFFBJxERxP27pKiJkMB8GA1UdIwQY MBaAFLYrlnxSFF5npLMgaxykkoU8oN+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjct NzczY2ZjNDMzM2UxLzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjctNzczY2ZjNDMzM2Ux LzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadJNYs8b pXSN9s3yIWsRlR/pBxedXjEUX413HqYh7CZkDrJ0inJZx3CnZKcJTdt6RsRzko2d h/YH4X7Sc5LUiginSEKIDmvOXr/eB+nVgGZOhhAOTHIN2RPLNVJxQFGhDo0HG7Rp 5QErHGFhtskE89UCzARTGt5EiKSoHljDiGyT/cT85HEw3Y3BvcNbrFy/OgwgXc0k yOlnRrtdc+mH90NMsbMoHVJviHWdWjPPKG3eMJxtWc5c4xIOjTPkWiw1iJGx8jmD RC1YJeaoJYLE/JY1vuLN4G6xXzfzv/iQ1y/73GcEpjr79ZT5XIR/SygEstndI6eG XRmMkQiq+Adu6g== -----END CERTIFICATE-----Generated at Sun Dec 21 03:30:26 2025 by rpki-client