This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft File: tucewFWW3EmUEGcP8hk_MJT6pqc.mft (raw, json) Hash identifier: GT5bdRsPArBM7oH+rc/e1Q4N4RKDH7n/L0WzkMk7PXw= Subject key identifier: 1D:82:F1:E5:C4:08:BD:D2:E4:79:D6:D3:39:4E:15:04:08:24:3A:47 Authority key identifier: B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7 Certificate issuer: /CN=b6e71ec05596dc499410670ff2193f3094faa6a7 Certificate serial: 019B3FB6540AA81DF968F06781F36EF6C397 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft Manifest number: 016F Signing time: Sun 21 Dec 2025 07:01:12 +0000 Manifest this update: Sun 21 Dec 2025 07:01:12 +0000 Manifest next update: Mon 22 Dec 2025 07:01:12 +0000 Files and hashes: 1: S4YGxjFFYx1UUq6yBfO6YiDY5dI.roa (hash: rARze1SAZfPfzKqy2ZF22Nvf9MCEwRwPev+H/8Ra6Ak=) 2: tucewFWW3EmUEGcP8hk_MJT6pqc.crl (hash: DcknrtjRZnCaeUF2epXlqfGECS+A3EQekchi2VwvoFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:54:0a:a8:1d:f9:68:f0:67:81:f3:6e:f6:c3:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6e71ec05596dc499410670ff2193f3094faa6a7 Validity Not Before: Dec 21 07:01:12 2025 GMT Not After : Dec 22 07:01:12 2025 GMT Subject: CN=1d82f1e5c408bdd2e479d6d3394e150408243a47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8d:69:e5:46:2e:c7:58:29:fc:22:62:87:89: 79:51:ec:ad:51:54:7e:18:e3:f7:7b:a1:50:41:4e: ad:c5:7e:15:18:5f:2b:c4:37:52:38:62:78:1e:1b: 3b:81:18:95:3c:4f:93:71:39:d0:70:c5:c3:a3:9e: e2:6d:ff:ad:0b:88:a2:33:32:91:9b:55:77:ed:76: 58:13:10:8b:4f:48:5e:7f:10:16:09:68:7d:2f:5d: 92:d7:79:4f:33:20:f3:2e:62:e3:88:74:eb:11:62: fe:42:a8:df:b2:0f:c2:fb:55:a2:fa:6b:a8:21:31: 83:1b:99:8a:45:68:cf:5a:1e:4c:ce:2f:3f:29:47: 8e:f3:4f:20:66:77:c3:c4:83:4b:a6:4d:b2:b1:59: cf:03:a6:48:f1:b6:71:17:c3:34:78:e1:a4:e7:2a: e4:2a:62:cd:66:d9:59:c8:2c:9d:b1:32:cc:7b:9a: 1c:e8:0c:89:fe:75:75:1a:4f:5b:b6:ac:01:a0:88: f3:56:ac:28:89:a7:da:99:69:70:45:b2:19:80:53: 8f:4a:1f:9b:ed:bc:95:2b:1b:a9:c8:72:97:22:03: 0c:86:e4:fc:0a:49:5e:b0:ef:54:55:ce:ec:b5:08: c0:70:58:d0:9d:93:08:4a:b8:6a:e1:4a:56:1c:8e: 11:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:82:F1:E5:C4:08:BD:D2:E4:79:D6:D3:39:4E:15:04:08:24:3A:47 X509v3 Authority Key Identifier: keyid:B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:98:e3:46:76:f4:4a:fd:c3:70:a5:d4:dc:0f:6d:17:52:ae: c8:6b:49:70:66:b3:5c:d9:e8:fc:23:94:a5:0c:0f:3a:ef:ff: c2:e1:a3:e6:67:7b:80:c9:06:65:e3:14:63:66:d6:0d:09:93: 33:05:1f:fd:89:48:38:50:d4:01:f7:7d:2a:0b:0a:43:3c:14: 7c:19:a0:0c:43:ea:b2:a4:ef:5b:b4:38:99:7f:b3:8f:81:4c: 2c:eb:b0:44:f1:05:5c:94:48:33:75:39:27:e6:1d:0b:c5:a8: 54:ea:82:af:15:ae:91:2b:d4:21:60:63:0f:cc:53:96:66:06: 32:63:ec:b1:94:3b:30:ab:65:47:59:41:ca:ef:1a:f5:de:f3: dc:db:be:d2:7e:46:b0:09:21:e0:93:04:ae:d9:c1:89:2b:1d: d1:89:6d:0c:61:a2:33:8a:9b:9e:6c:28:51:84:b9:2a:34:b6: 1f:ce:bf:59:98:af:fd:ea:45:b7:3d:48:74:9b:fd:36:d7:af: 54:b9:43:e9:62:50:51:88:71:06:45:64:e1:78:4b:58:2e:68: b9:c3:c2:33:c6:a3:87:a6:d9:3d:ad:97:7f:c2:da:d0:21:82: cb:9d:72:85:6c:87:ff:5a:fa:80:6b:2a:0c:44:d8:53:86:b7: 14:30:6a:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tlQKqB35aPBngfNu9sOXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZTcxZWMwNTU5NmRjNDk5NDEwNjcwZmYyMTkzZjMwOTRm YWE2YTcwHhcNMjUxMjIxMDcwMTEyWhcNMjUxMjIyMDcwMTEyWjAzMTEwLwYDVQQD EygxZDgyZjFlNWM0MDhiZGQyZTQ3OWQ2ZDMzOTRlMTUwNDA4MjQzYTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl41p5UYux1gp/CJih4l5UeytUVR+ GOP3e6FQQU6txX4VGF8rxDdSOGJ4Hhs7gRiVPE+TcTnQcMXDo57ibf+tC4iiMzKR m1V37XZYExCLT0hefxAWCWh9L12S13lPMyDzLmLjiHTrEWL+Qqjfsg/C+1Wi+muo ITGDG5mKRWjPWh5Mzi8/KUeO808gZnfDxINLpk2ysVnPA6ZI8bZxF8M0eOGk5yrk KmLNZtlZyCydsTLMe5oc6AyJ/nV1Gk9btqwBoIjzVqwoiafamWlwRbIZgFOPSh+b 7byVKxupyHKXIgMMhuT8CklesO9UVc7stQjAcFjQnZMISrhq4UpWHI4RAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2C8eXECL3S5HnW0zlOFQQIJDpHMB8GA1UdIwQY MBaAFLbnHsBVltxJlBBnD/IZPzCU+qanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHVjZXdGV1czRW1VRUdjUDhoa19NSlQ2cHFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85NDFiZDAtYzRmMy00NWVlLThmZDEt ZDViY2YyOGY3NDhiLzEvdHVjZXdGV1czRW1VRUdjUDhoa19NSlQ2cHFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85NDFiZDAtYzRmMy00NWVlLThmZDEtZDViY2YyOGY3NDhi LzEvdHVjZXdGV1czRW1VRUdjUDhoa19NSlQ2cHFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZjjRnb0 Sv3DcKXU3A9tF1KuyGtJcGazXNno/COUpQwPOu//wuGj5md7gMkGZeMUY2bWDQmT MwUf/YlIOFDUAfd9KgsKQzwUfBmgDEPqsqTvW7Q4mX+zj4FMLOuwRPEFXJRIM3U5 J+YdC8WoVOqCrxWukSvUIWBjD8xTlmYGMmPssZQ7MKtlR1lByu8a9d7z3Nu+0n5G sAkh4JMErtnBiSsd0YltDGGiM4qbnmwoUYS5KjS2H86/WZiv/epFtz1IdJv9Ntev VLlD6WJQUYhxBkVk4XhLWC5oucPCM8ajh6bZPa2Xf8La0CGCy51yhWyH/1r6gGsq DETYU4a3FDBqWA== -----END CERTIFICATE-----Generated at Sun Dec 21 12:46:52 2025 by rpki-client