This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft File: tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft (raw, json) Hash identifier: ij5elO/vnbaHnHNJD9UfhtozGkxXhw09MHegey5H2HQ= Subject key identifier: 22:5C:34:85:34:9F:8B:64:0F:DE:56:1F:F7:16:87:43:F7:53:FB:3C Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A Certificate issuer: /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a Certificate serial: 019B41DBC570F8952F169AAF74D0E28FF097 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft Manifest number: 178F Signing time: Sun 21 Dec 2025 17:01:20 +0000 Manifest this update: Sun 21 Dec 2025 17:01:20 +0000 Manifest next update: Mon 22 Dec 2025 17:01:20 +0000 Files and hashes: 1: AwMEJfGD-_TNRZ72c5x-9dIRsd4.roa (hash: 6UVDM1JqxHmjbnJ4pDDIOsD2r8EQyy1bF6KNp9ocKGg=) 2: VJtvXDXYtAcS9C4LIbmlaqXh4Co.roa (hash: THcKGdc9aA5a+OjJYNnV65xxowh1d3kb8KQrHqiCPq4=) 3: fUXrv6-AqG-Sdl9xICl4cQAU7yA.roa (hash: jv2v4x0octz1D9witRg3iiWbwIrgi4wxjje3xLewI+U=) 4: tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl (hash: Wko3vKf1LMD6YLo99blxzu9jlI6kD9Wlng58roxvIf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:db:c5:70:f8:95:2f:16:9a:af:74:d0:e2:8f:f0:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a Validity Not Before: Dec 21 17:01:20 2025 GMT Not After : Dec 22 17:01:20 2025 GMT Subject: CN=225c3485349f8b640fde561ff7168743f753fb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:ce:b8:9a:d7:03:26:1c:a0:3b:81:e6:a1: eb:60:56:ab:8c:32:e9:c5:1f:b6:4e:88:f4:ee:5e: 1e:fd:47:3a:3e:eb:8c:7a:4b:c5:c5:0a:ab:a2:d4: 66:26:1b:f9:3b:b0:de:74:45:0b:39:35:ba:a5:43: 4b:82:51:2c:89:61:7a:15:6e:91:79:c4:e4:b0:5d: 16:22:64:8c:09:59:54:0f:7f:fe:15:7e:43:1c:85: f8:37:26:76:b5:4e:41:3d:c9:26:3a:77:b5:a7:69: db:77:8c:d4:8a:b1:35:3f:bb:6c:a9:47:8f:d2:23: 6c:f0:33:2d:8d:4d:a6:08:ff:a1:a7:73:1d:bb:20: 76:c3:e3:d6:6f:52:d6:b2:ca:b2:c3:e0:fa:69:1f: 81:ba:3b:bf:cd:ca:8f:c2:8a:3d:50:c1:99:c4:76: ab:80:c6:f7:dd:8d:f5:f5:0a:3d:93:46:37:e9:08: c0:f9:3e:6d:59:25:bd:2b:1b:69:62:80:16:25:0e: 23:83:0c:59:0a:2f:e8:e7:1b:4e:9f:61:38:58:78: 90:2c:a8:19:3c:96:23:71:b8:4c:06:5b:77:be:8a: 43:f3:99:d2:0c:ed:43:64:90:9a:99:a2:08:de:29: 42:53:cb:53:aa:c5:6f:de:44:bf:99:98:d8:23:ec: e8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5C:34:85:34:9F:8B:64:0F:DE:56:1F:F7:16:87:43:F7:53:FB:3C X509v3 Authority Key Identifier: keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:81:30:b1:20:c9:49:69:45:60:f6:eb:35:c1:4f:b8:fc:8a: 83:1c:23:c2:98:ad:26:92:c5:63:fa:b6:b6:3d:75:c0:46:0f: 06:b6:10:aa:41:9c:e0:94:a3:04:07:8e:7c:f5:fa:6f:6d:12: 39:bb:c4:11:60:55:2b:a0:da:4a:b1:a0:e1:02:9d:0d:1b:47: 61:d2:83:27:ed:37:7d:00:16:2f:34:fd:18:b5:ee:1b:6d:b9: 97:b3:1b:30:d0:d6:ad:7a:69:c9:5e:5e:93:05:b5:77:2a:ee: 21:22:e0:16:6a:e8:bc:cd:a8:0a:46:70:2d:39:c9:73:e3:aa: e1:ec:30:66:dc:89:29:80:7d:6c:4e:8e:af:9d:87:58:29:4a: 85:47:8c:3d:0c:fe:67:bb:3e:64:06:00:e9:a5:e3:a0:71:4d: cd:d4:7c:18:65:fc:91:c2:cb:c2:bf:f8:58:08:72:91:f9:5c: 64:b3:69:03:db:4b:b8:58:97:21:aa:00:00:3c:b3:1b:2c:fc: 0d:bd:00:3d:fc:eb:7f:74:1a:7e:90:27:85:69:d9:2d:e4:c6: 00:6e:a5:c7:a0:40:c8:4f:5e:66:2a:f8:a6:f0:85:84:42:27: 81:f0:db:34:32:1c:33:07:9e:6b:fa:4a:23:e6:eb:3b:27:ba: e0:33:56:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtB28Vw+JUvFpqvdNDij/CXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDI3ZWE0OWY5NzJkMTljNTYzOTNhNjg5ZTdjYmViOTkw ZDVkN2EwHhcNMjUxMjIxMTcwMTIwWhcNMjUxMjIyMTcwMTIwWjAzMTEwLwYDVQQD EygyMjVjMzQ4NTM0OWY4YjY0MGZkZTU2MWZmNzE2ODc0M2Y3NTNmYjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoofOuJrXAyYcoDuB5qHrYFarjDLp xR+2Toj07l4e/Uc6PuuMekvFxQqrotRmJhv5O7DedEULOTW6pUNLglEsiWF6FW6R ecTksF0WImSMCVlUD3/+FX5DHIX4NyZ2tU5BPckmOne1p2nbd4zUirE1P7tsqUeP 0iNs8DMtjU2mCP+hp3MduyB2w+PWb1LWssqyw+D6aR+Buju/zcqPwoo9UMGZxHar gMb33Y319Qo9k0Y36QjA+T5tWSW9KxtpYoAWJQ4jgwxZCi/o5xtOn2E4WHiQLKgZ PJYjcbhMBlt3vopD85nSDO1DZJCamaII3ilCU8tTqsVv3kS/mZjYI+zonwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJcNIU0n4tkD95WH/cWh0P3U/s8MB8GA1UdIwQY MBaAFLVCfqSfly0ZxWOTponny+uZDV16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVKLXBKLVhMUm5GWTVPbWllZkw2NWtOWFhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kMmJiNjgtOWJjNy00NzkxLTg1Mjgt MGM0OTU0NzdjYTEwLzEvdFVKLXBKLVhMUm5GWTVPbWllZkw2NWtOWFhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kMmJiNjgtOWJjNy00NzkxLTg1MjgtMGM0OTU0NzdjYTEw LzEvdFVKLXBKLVhMUm5GWTVPbWllZkw2NWtOWFhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApoEwsSDJ SWlFYPbrNcFPuPyKgxwjwpitJpLFY/q2tj11wEYPBrYQqkGc4JSjBAeOfPX6b20S ObvEEWBVK6DaSrGg4QKdDRtHYdKDJ+03fQAWLzT9GLXuG225l7MbMNDWrXppyV5e kwW1dyruISLgFmrovM2oCkZwLTnJc+Oq4ewwZtyJKYB9bE6Or52HWClKhUeMPQz+ Z7s+ZAYA6aXjoHFNzdR8GGX8kcLLwr/4WAhykflcZLNpA9tLuFiXIaoAADyzGyz8 Db0APfzrf3QafpAnhWnZLeTGAG6lx6BAyE9eZir4pvCFhEIngfDbNDIcMweea/pK I+brOye64DNWuw== -----END CERTIFICATE-----Generated at Sun Dec 21 22:37:38 2025 by rpki-client