This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft File: tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft (raw, json) Hash identifier: o/tNOXYazeXNlJO7njaPj2xsyNQrbgxota1T/KIReZg= Subject key identifier: 7E:C9:10:F7:D8:E8:B0:28:FF:53:3E:1F:54:CE:EA:B3:A9:52:7E:60 Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A Certificate issuer: /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a Certificate serial: 019B3C1018F2F8501981810D129836BE9446 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 14:00:46 +0000 Manifest this update: Sat 20 Dec 2025 14:00:46 +0000 Manifest next update: Sun 21 Dec 2025 14:00:46 +0000 Files and hashes: 1: AwMEJfGD-_TNRZ72c5x-9dIRsd4.roa (hash: 6UVDM1JqxHmjbnJ4pDDIOsD2r8EQyy1bF6KNp9ocKGg=) 2: VJtvXDXYtAcS9C4LIbmlaqXh4Co.roa (hash: THcKGdc9aA5a+OjJYNnV65xxowh1d3kb8KQrHqiCPq4=) 3: fUXrv6-AqG-Sdl9xICl4cQAU7yA.roa (hash: jv2v4x0octz1D9witRg3iiWbwIrgi4wxjje3xLewI+U=) 4: tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl (hash: 2NLtmRaJtnYyPDgw2qnUxdEKaIu/uEgjCjNGokq5OYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:10:18:f2:f8:50:19:81:81:0d:12:98:36:be:94:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a Validity Not Before: Dec 20 14:00:46 2025 GMT Not After : Dec 21 14:00:46 2025 GMT Subject: CN=7ec910f7d8e8b028ff533e1f54ceeab3a9527e60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:73:ef:a3:9f:c8:e2:9e:59:4e:50:f4:d4:2f: d6:14:77:f1:a1:b5:03:ab:a4:f7:60:ab:48:b6:f5: 22:ef:ee:cc:c3:04:3c:72:4a:6c:b1:41:c7:57:df: 8e:28:9d:01:2d:29:f0:61:67:02:9e:90:5f:d3:e6: 67:65:db:d7:37:7f:fe:eb:c4:a3:34:b8:b6:84:4e: f4:ce:ee:c5:ad:da:7b:cb:b7:b8:cf:37:bb:53:a4: a0:b8:72:54:01:82:59:21:07:69:fd:d4:d5:f0:1d: c7:f4:9f:3a:7c:43:64:2c:bf:8b:2f:0a:2a:ba:b8: 98:ea:9d:70:91:a7:ee:8f:43:b5:97:68:55:0b:87: 93:48:ad:76:ea:bf:48:23:7a:d6:64:af:ce:9d:7e: e1:32:da:8d:41:d2:f1:48:26:69:73:45:f3:de:e1: eb:11:83:4f:06:90:8a:ac:78:63:c6:9e:6e:ef:a9: 30:cc:bd:7a:3a:2d:8f:b7:e9:7d:85:ca:ca:3a:9e: 5b:75:4b:ca:c7:19:3e:4d:9a:6f:61:c7:28:5c:5b: 72:a6:d5:94:86:35:eb:79:07:3b:d4:f8:14:18:e6: 0d:4c:a3:d9:98:be:80:da:e4:c4:70:26:c9:f1:78: ba:7a:f4:cd:9d:49:7b:8d:3a:da:f0:ce:95:a0:e9: 68:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C9:10:F7:D8:E8:B0:28:FF:53:3E:1F:54:CE:EA:B3:A9:52:7E:60 X509v3 Authority Key Identifier: keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:29:ac:38:58:4f:77:bd:40:02:f9:0e:9f:d4:e1:66:56:cc: ba:bb:c5:6b:de:91:6d:c7:01:2f:7d:9c:92:0b:12:d8:34:8e: f9:fc:8e:d2:8d:87:fd:09:2b:01:c6:ee:88:c1:b1:01:eb:26: 4c:ff:8a:a5:24:11:e1:ef:6e:bf:f3:89:8e:1a:d4:f3:b3:fc: 5e:92:70:15:99:46:70:50:e1:25:91:49:f5:d8:64:08:ba:46: 1f:22:0c:7b:09:08:21:35:62:ad:c7:f7:0d:8d:a3:a1:50:ec: 9e:7e:27:47:f5:b5:f8:e9:cf:d3:7d:b8:89:2d:ef:f9:58:a4: 04:27:e9:72:ae:07:f4:0a:f5:79:b5:2d:c9:97:f5:29:a8:57: d7:f9:8a:27:d4:2e:e7:6e:05:f6:2b:0c:0e:8f:ac:54:e6:a5: 3c:c7:0a:90:37:f4:68:9b:7e:b0:51:41:ab:9a:f4:c2:21:3b: b8:a6:f9:a4:a5:81:f5:e5:91:2d:55:06:85:bb:8a:cc:46:96: 61:b8:cf:ec:8e:04:b7:ef:2b:ee:6c:37:4a:62:03:a9:ed:ad: 3e:6f:85:ff:11:0e:05:52:5e:8b:51:a6:14:0f:6e:8f:cd:80: d2:80:f0:91:08:2a:1f:72:36:6f:c2:1f:7d:1c:4d:29:54:61: fd:11:07:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8EBjy+FAZgYENEpg2vpRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDI3ZWE0OWY5NzJkMTljNTYzOTNhNjg5ZTdjYmViOTkw ZDVkN2EwHhcNMjUxMjIwMTQwMDQ2WhcNMjUxMjIxMTQwMDQ2WjAzMTEwLwYDVQQD Eyg3ZWM5MTBmN2Q4ZThiMDI4ZmY1MzNlMWY1NGNlZWFiM2E5NTI3ZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHPvo5/I4p5ZTlD01C/WFHfxobUD q6T3YKtItvUi7+7MwwQ8ckpssUHHV9+OKJ0BLSnwYWcCnpBf0+ZnZdvXN3/+68Sj NLi2hE70zu7Frdp7y7e4zze7U6SguHJUAYJZIQdp/dTV8B3H9J86fENkLL+LLwoq uriY6p1wkafuj0O1l2hVC4eTSK126r9II3rWZK/OnX7hMtqNQdLxSCZpc0Xz3uHr EYNPBpCKrHhjxp5u76kwzL16Oi2Pt+l9hcrKOp5bdUvKxxk+TZpvYccoXFtyptWU hjXreQc71PgUGOYNTKPZmL6A2uTEcCbJ8Xi6evTNnUl7jTra8M6VoOloCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7JEPfY6LAo/1M+H1TO6rOpUn5gMB8GA1UdIwQY MBaAFLVCfqSfly0ZxWOTponny+uZDV16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVKLXBKLVhMUm5GWTVPbWllZkw2NWtOWFhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kMmJiNjgtOWJjNy00NzkxLTg1Mjgt MGM0OTU0NzdjYTEwLzEvdFVKLXBKLVhMUm5GWTVPbWllZkw2NWtOWFhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kMmJiNjgtOWJjNy00NzkxLTg1MjgtMGM0OTU0NzdjYTEw LzEvdFVKLXBKLVhMUm5GWTVPbWllZkw2NWtOWFhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCmsOFhP d71AAvkOn9ThZlbMurvFa96RbccBL32ckgsS2DSO+fyO0o2H/QkrAcbuiMGxAesm TP+KpSQR4e9uv/OJjhrU87P8XpJwFZlGcFDhJZFJ9dhkCLpGHyIMewkIITVircf3 DY2joVDsnn4nR/W1+OnP0324iS3v+VikBCfpcq4H9Ar1ebUtyZf1KahX1/mKJ9Qu 524F9isMDo+sVOalPMcKkDf0aJt+sFFBq5r0wiE7uKb5pKWB9eWRLVUGhbuKzEaW YbjP7I4Et+8r7mw3SmIDqe2tPm+F/xEOBVJei1GmFA9uj82A0oDwkQgqH3I2b8If fRxNKVRh/REHYw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:54:40 2025 by rpki-client