This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft File: TU0qfS8eqI_7WgMlnLP06o0vVfs.mft (raw, json) Hash identifier: LAtgzbCeduMspvcuhVekxZQlg2p0ndF/WpMb7unn+lo= Subject key identifier: 38:E2:14:B4:7C:45:50:B0:EC:EB:41:D3:2A:11:D7:16:35:60:E4:B5 Authority key identifier: 4D:4D:2A:7D:2F:1E:A8:8F:FB:5A:03:25:9C:B3:F4:EA:8D:2F:55:FB Certificate issuer: /CN=4d4d2a7d2f1ea88ffb5a03259cb3f4ea8d2f55fb Certificate serial: 019B43255897A2C72EBDBF8B1D237FB09D27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TU0qfS8eqI_7WgMlnLP06o0vVfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft Manifest number: 36 Signing time: Sun 21 Dec 2025 23:01:19 +0000 Manifest this update: Sun 21 Dec 2025 23:01:19 +0000 Manifest next update: Mon 22 Dec 2025 23:01:19 +0000 Files and hashes: 1: 5m1b01hL5BcjzP8FrpknmUKlQbs.roa (hash: T3XZKupiy6iYEpA63mlPw7Ubl9igvLOEfmR+hPcujQk=) 2: TU0qfS8eqI_7WgMlnLP06o0vVfs.crl (hash: Pfeda6UYMwsFkAyI1Fruv16U90IoMTeWruZM7QyBR3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft rsync://rpki.ripe.net/repository/DEFAULT/TU0qfS8eqI_7WgMlnLP06o0vVfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:25:58:97:a2:c7:2e:bd:bf:8b:1d:23:7f:b0:9d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d4d2a7d2f1ea88ffb5a03259cb3f4ea8d2f55fb Validity Not Before: Dec 21 23:01:19 2025 GMT Not After : Dec 22 23:01:19 2025 GMT Subject: CN=38e214b47c4550b0eceb41d32a11d7163560e4b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ce:70:aa:26:f5:e2:25:35:5d:f5:66:72:c6: ca:82:fa:0c:0a:f2:64:f1:e8:fa:ac:82:28:48:8b: 50:d8:af:70:6c:a3:d4:33:b4:da:a1:1a:dc:16:e4: 7d:90:80:ab:4d:da:4a:fc:c0:34:21:05:03:f2:f6: c5:db:a6:d2:29:e8:5f:7d:f7:6d:ed:dd:b4:82:3b: a1:d2:ff:0b:c6:bb:d0:35:82:a3:58:9d:4f:3f:b3: 50:c1:8b:f7:d1:07:0e:ea:9e:fc:df:3f:68:1c:fd: 00:f0:69:8d:97:cf:c6:10:e7:96:38:eb:d5:fa:25: 72:b9:d7:96:9d:d8:c2:e1:1e:d0:fc:b0:8d:6c:2b: 72:f5:4e:58:07:3b:e5:ea:65:19:1e:2d:19:f2:a8: 32:9e:d5:cf:56:79:36:82:de:76:b0:16:cc:bc:71: 71:8a:7e:f3:a3:4e:57:4f:47:2b:4b:07:16:a5:cb: 8d:26:c7:cb:7e:28:dd:dc:17:0c:aa:99:29:a3:43: 5f:65:d7:f5:1c:02:c1:8b:73:53:7c:50:65:97:ed: 32:ad:a8:99:18:66:37:e9:f9:fe:1a:ca:41:f3:1f: fb:a4:fe:85:75:60:da:2e:85:de:78:3d:ee:95:81: 45:35:de:c7:dc:76:3a:ff:fe:ab:12:74:ff:7a:a2: e9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E2:14:B4:7C:45:50:B0:EC:EB:41:D3:2A:11:D7:16:35:60:E4:B5 X509v3 Authority Key Identifier: keyid:4D:4D:2A:7D:2F:1E:A8:8F:FB:5A:03:25:9C:B3:F4:EA:8D:2F:55:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TU0qfS8eqI_7WgMlnLP06o0vVfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e72c80-6ad7-4b1f-989a-a6b513c47f85/1/TU0qfS8eqI_7WgMlnLP06o0vVfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:90:fa:ff:b5:3e:e7:b8:41:ea:cf:87:11:15:c5:d0:05:eb: 41:b5:8e:ac:3f:72:dc:bb:8a:5a:eb:c4:49:2e:c0:25:85:1d: 79:b3:e2:6a:9d:53:fc:12:c2:b2:bc:68:9e:95:db:2e:4f:f1: 0b:87:df:79:85:d7:6a:3b:61:84:63:d6:98:d3:68:bb:ee:d2: bf:84:64:1f:4d:84:b2:3a:c8:21:cd:4a:62:65:61:8d:5d:75: 50:2b:fe:c6:ab:86:e5:12:ad:b1:71:95:fe:38:e0:07:50:ee: 0c:55:90:41:44:08:5f:73:5c:18:72:21:fe:ff:aa:7d:80:16: 50:1e:62:c7:e3:31:08:b8:f0:02:50:3a:f2:a7:d2:fa:7e:fc: cf:81:c6:14:49:0a:17:7b:df:34:f5:e7:34:6c:9a:ad:20:c9: dc:62:5e:f8:d2:0a:18:44:33:f6:0a:58:ca:af:6e:f7:1d:f4: 68:f6:29:b3:4f:f1:7c:c1:e5:8f:eb:2f:d0:1a:4a:20:f8:a6: a0:71:af:e5:c4:61:e5:c1:dc:2d:03:05:58:1b:29:f5:f7:20: 1d:4d:ad:41:40:18:f2:c8:0d:fa:86:cb:c5:eb:91:ba:58:73: e8:5e:73:b4:36:db:92:9e:b8:b6:eb:ed:2f:9b:f4:30:eb:c5: 46:b6:69:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJViXoscuvb+LHSN/sJ0nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNGQyYTdkMmYxZWE4OGZmYjVhMDMyNTljYjNmNGVhOGQy ZjU1ZmIwHhcNMjUxMjIxMjMwMTE5WhcNMjUxMjIyMjMwMTE5WjAzMTEwLwYDVQQD EygzOGUyMTRiNDdjNDU1MGIwZWNlYjQxZDMyYTExZDcxNjM1NjBlNGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls5wqib14iU1XfVmcsbKgvoMCvJk 8ej6rIIoSItQ2K9wbKPUM7TaoRrcFuR9kICrTdpK/MA0IQUD8vbF26bSKehfffdt 7d20gjuh0v8LxrvQNYKjWJ1PP7NQwYv30QcO6p783z9oHP0A8GmNl8/GEOeWOOvV +iVyudeWndjC4R7Q/LCNbCty9U5YBzvl6mUZHi0Z8qgyntXPVnk2gt52sBbMvHFx in7zo05XT0crSwcWpcuNJsfLfijd3BcMqpkpo0NfZdf1HALBi3NTfFBll+0yraiZ GGY36fn+GspB8x/7pP6FdWDaLoXeeD3ulYFFNd7H3HY6//6rEnT/eqLpNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjiFLR8RVCw7OtB0yoR1xY1YOS1MB8GA1UdIwQY MBaAFE1NKn0vHqiP+1oDJZyz9OqNL1X7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFUwcWZTOGVxSV83V2dNbG5MUDA2bzB2VmZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lNzJjODAtNmFkNy00YjFmLTk4OWEt YTZiNTEzYzQ3Zjg1LzEvVFUwcWZTOGVxSV83V2dNbG5MUDA2bzB2VmZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9lNzJjODAtNmFkNy00YjFmLTk4OWEtYTZiNTEzYzQ3Zjg1 LzEvVFUwcWZTOGVxSV83V2dNbG5MUDA2bzB2VmZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjZD6/7U+ 57hB6s+HERXF0AXrQbWOrD9y3LuKWuvESS7AJYUdebPiap1T/BLCsrxonpXbLk/x C4ffeYXXajthhGPWmNNou+7Sv4RkH02EsjrIIc1KYmVhjV11UCv+xquG5RKtsXGV /jjgB1DuDFWQQUQIX3NcGHIh/v+qfYAWUB5ix+MxCLjwAlA68qfS+n78z4HGFEkK F3vfNPXnNGyarSDJ3GJe+NIKGEQz9gpYyq9u9x30aPYps0/xfMHlj+sv0BpKIPim oHGv5cRh5cHcLQMFWBsp9fcgHU2tQUAY8sgN+obLxeuRulhz6F5ztDbbkp64tuvt L5v0MOvFRrZpkA== -----END CERTIFICATE-----Generated at Mon Dec 22 04:36:05 2025 by rpki-client