This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft File: TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft (raw, json) Hash identifier: cP9aCYe2T9dix/uqu8MuwY+w2/EjFAiXOXkd2OM53sM= Subject key identifier: DA:0C:07:13:C3:6D:D2:4E:CE:6D:75:F8:16:76:97:18:2B:FF:F6:2F Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A Certificate issuer: /CN=4eeb86abd5374e553098209075b9afecabef333a Certificate serial: 019B405B3732236E702E3AE1B7988910755C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft Manifest number: 1597 Signing time: Sun 21 Dec 2025 10:01:18 +0000 Manifest this update: Sun 21 Dec 2025 10:01:18 +0000 Manifest next update: Mon 22 Dec 2025 10:01:18 +0000 Files and hashes: 1: DppKxT5ljLij19Y9kuFKbXPtInE.roa (hash: dBb9XFhPZs/yEDFIrNxXoE0ofTm7AGuxUXTTkIoqD0w=) 2: H9SO8EzcNBS2yNz1oqlQvF8nYaA.roa (hash: DHcHXu+DGDdMpd1sZPMiGOEXUFezuU4wJP51eqKaDv0=) 3: Ie5KawkP4b238jzWIkt7U1G1OH0.roa (hash: b/NOk3BaQteK7RVlxUiaRcKQ/ZGCaP84MpBuSn/nXxo=) 4: TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl (hash: qdEABwyk2XCz9P0jzbJ7NqSYRwAlVM+GljjFn03TnXc=) 5: vHwCw7oMDPrClYvdX-A30AyKV5Q.roa (hash: rqndv/sj8Hh1XnVuBVWvDlA5Odz01ECXqpzsqO0GIsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:37:32:23:6e:70:2e:3a:e1:b7:98:89:10:75:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a Validity Not Before: Dec 21 10:01:18 2025 GMT Not After : Dec 22 10:01:18 2025 GMT Subject: CN=da0c0713c36dd24ece6d75f8167697182bfff62f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d7:1c:5b:50:9f:ce:39:3d:bc:05:72:51:83: ed:fd:1d:a9:be:09:27:ac:92:8b:66:36:11:cc:97: d5:f4:67:dc:26:a0:cb:89:3e:06:dc:5b:2c:ac:2a: 03:82:e4:5f:44:83:9f:3b:82:23:31:f5:9c:a5:64: 0b:68:23:a5:fb:dc:17:ea:ab:c2:31:b8:0b:3b:92: b5:ae:40:27:47:a2:b7:0f:44:ae:e8:3d:f5:ef:ff: 00:67:c9:fe:f1:a4:3a:0f:96:9f:42:c9:f0:d1:44: 20:30:b9:5f:1c:47:b7:51:83:78:26:19:39:87:1b: 96:8b:4d:9f:ef:4a:53:ef:3f:28:57:a1:3f:63:cd: 81:fd:70:9e:74:d6:a6:2c:f2:d7:f8:09:17:9f:fe: 17:58:b1:7a:b8:18:ce:36:55:e7:fe:96:63:61:28: 8a:3e:0f:12:6f:90:8c:4b:42:a0:56:45:67:3a:fd: 57:24:0a:ad:c8:de:58:0d:58:a0:f3:1d:0c:e8:f4: 55:4d:98:cf:1a:46:8a:0d:d2:e0:23:d2:98:3a:90: 58:0c:d0:8f:47:0c:8d:6b:9e:d3:89:26:d3:fc:6b: 86:ee:fc:c2:01:6c:d6:b9:50:b3:08:f6:62:5b:b5: f6:a0:d6:5b:91:8d:e3:8e:28:18:82:58:78:01:c1: e5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0C:07:13:C3:6D:D2:4E:CE:6D:75:F8:16:76:97:18:2B:FF:F6:2F X509v3 Authority Key Identifier: keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ea:29:53:0b:48:03:7c:cb:5c:86:d6:a3:36:38:62:1a:ea: 76:3c:73:f0:3d:1f:bf:58:8b:49:b1:fa:e1:6e:f1:82:97:93: be:8e:13:1b:88:6c:24:5b:80:2e:a3:4a:16:2c:4a:33:ae:87: 56:f3:62:a5:bf:f4:38:a9:a6:95:45:35:95:96:2a:4d:db:7e: aa:60:ab:a4:80:c5:df:ac:48:ea:e7:de:c9:a1:17:46:53:ac: b4:b3:5c:2b:bd:6c:ee:d7:f5:26:d5:b2:5e:43:72:68:72:85: 5a:e7:05:cf:77:60:3b:74:8d:1d:06:0d:d9:63:88:8c:11:22: 54:c2:b5:07:a3:ce:f6:8d:20:52:31:c8:10:7f:36:3d:1e:21: 97:fc:04:68:7a:c9:b2:d3:e9:6e:74:0d:eb:cf:3c:32:1e:bd: 76:dd:50:c5:c5:5c:4c:ed:1b:5e:b6:45:55:1a:ee:b1:51:a0: 7f:ea:6e:4f:95:46:57:3d:8b:24:b3:f7:4a:bb:b8:40:6a:1f: 5d:57:4d:59:47:d8:ba:c7:9d:d5:3c:a7:e6:56:35:7f:8f:cb: 9c:fa:f1:46:60:2f:42:36:6a:12:7a:73:aa:92:9a:90:49:85: 3f:7b:26:cd:f0:88:f6:79:9d:a8:9e:ad:8e:b6:a4:ff:50:75: 4b:82:fd:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWzcyI25wLjrht5iJEHVcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWI4NmFiZDUzNzRlNTUzMDk4MjA5MDc1YjlhZmVjYWJl ZjMzM2EwHhcNMjUxMjIxMTAwMTE4WhcNMjUxMjIyMTAwMTE4WjAzMTEwLwYDVQQD EyhkYTBjMDcxM2MzNmRkMjRlY2U2ZDc1ZjgxNjc2OTcxODJiZmZmNjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdccW1Cfzjk9vAVyUYPt/R2pvgkn rJKLZjYRzJfV9GfcJqDLiT4G3FssrCoDguRfRIOfO4IjMfWcpWQLaCOl+9wX6qvC MbgLO5K1rkAnR6K3D0Su6D317/8AZ8n+8aQ6D5afQsnw0UQgMLlfHEe3UYN4Jhk5 hxuWi02f70pT7z8oV6E/Y82B/XCedNamLPLX+AkXn/4XWLF6uBjONlXn/pZjYSiK Pg8Sb5CMS0KgVkVnOv1XJAqtyN5YDVig8x0M6PRVTZjPGkaKDdLgI9KYOpBYDNCP RwyNa57TiSbT/GuG7vzCAWzWuVCzCPZiW7X2oNZbkY3jjigYglh4AcHlTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoMBxPDbdJOzm11+BZ2lxgr//YvMB8GA1UdIwQY MBaAFE7rhqvVN05VMJggkHW5r+yr7zM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHV1R3E5VTNUbFV3bUNDUWRibXY3S3Z2TXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zZTVjOTYtN2U5NS00Nzk3LWFhNmEt YTg5NzhlM2FhZTk4LzEvVHV1R3E5VTNUbFV3bUNDUWRibXY3S3Z2TXpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zZTVjOTYtN2U5NS00Nzk3LWFhNmEtYTg5NzhlM2FhZTk4 LzEvVHV1R3E5VTNUbFV3bUNDUWRibXY3S3Z2TXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOopUwtI A3zLXIbWozY4Yhrqdjxz8D0fv1iLSbH64W7xgpeTvo4TG4hsJFuALqNKFixKM66H VvNipb/0OKmmlUU1lZYqTdt+qmCrpIDF36xI6ufeyaEXRlOstLNcK71s7tf1JtWy XkNyaHKFWucFz3dgO3SNHQYN2WOIjBEiVMK1B6PO9o0gUjHIEH82PR4hl/wEaHrJ stPpbnQN6888Mh69dt1QxcVcTO0bXrZFVRrusVGgf+puT5VGVz2LJLP3Sru4QGof XVdNWUfYused1Tyn5lY1f4/LnPrxRmAvQjZqEnpzqpKakEmFP3smzfCI9nmdqJ6t jrak/1B1S4L95g== -----END CERTIFICATE-----Generated at Sun Dec 21 14:12:02 2025 by rpki-client