This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft File: TutrLD4JyhxF_XVH5FiUbMikaLQ.mft (raw, json) Hash identifier: KOmC3PUxG0n8q5awvypKSLbbRQ/PrW+z0Z+8jy87thE= Subject key identifier: 77:0A:67:1F:9A:B2:D2:3C:66:2B:F5:B8:50:7C:C8:9B:33:2F:AD:E8 Authority key identifier: 4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4 Certificate issuer: /CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4 Certificate serial: 019B3B6B666D3D2B5ABD9DC679E2474F718F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 11:00:52 +0000 Manifest this update: Sat 20 Dec 2025 11:00:52 +0000 Manifest next update: Sun 21 Dec 2025 11:00:52 +0000 Files and hashes: 1: K__GMoXF7tpKIBCiKEO4YQunEUE.roa (hash: Hsn/cSGE8VGLi98WwQiwxBKaIoAEOSSG1bmkWgHfUWc=) 2: TutrLD4JyhxF_XVH5FiUbMikaLQ.crl (hash: ECJ4AFx3BzG4im20wq5S38AsBUD7bg9jXenNzxIuuJU=) 3: dK2uMFUtEa8mJvzI5jfPlkvOrV0.roa (hash: UyKK2/i5Yn8gqe/TaIulEkQyB+tb4FXt18YdvEC0TSo=) 4: gF7051dp_cMuLgQvCjwhgEPPRqw.roa (hash: q3Q/Dxx58MNi5+ugrnS2SfmFlMdjPiuWsnFSR9Imvjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:66:6d:3d:2b:5a:bd:9d:c6:79:e2:47:4f:71:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4 Validity Not Before: Dec 20 11:00:52 2025 GMT Not After : Dec 21 11:00:52 2025 GMT Subject: CN=770a671f9ab2d23c662bf5b8507cc89b332fade8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4f:71:59:d6:0c:cd:ac:a5:6d:2b:57:e3:88: 15:b7:39:8b:af:d3:d5:f4:73:59:85:5e:ca:f8:e5: e1:a4:1c:da:8b:e6:ed:19:3c:6c:67:a3:28:d0:86: 34:21:b2:55:23:6c:46:31:15:bf:bb:50:4d:2b:bc: 3c:3a:91:56:32:45:09:2a:85:21:ac:1d:d8:49:66: 9f:e7:55:e3:d6:a3:e2:ce:75:34:89:de:77:93:50: e2:85:a7:0f:39:0a:e6:89:66:5d:02:7b:11:f4:f2: 30:72:29:9b:44:c2:68:7e:d8:37:b5:52:47:46:bb: b9:a0:5f:cc:38:11:45:4e:65:bb:00:50:6c:66:5f: cf:5c:8e:b9:48:ff:da:21:fd:8b:89:99:15:d1:99: 39:15:ef:7f:1f:50:59:98:e0:64:63:38:86:cd:ae: 0f:a5:ee:5a:6a:e9:35:03:2e:c0:37:8d:b1:c1:98: 9f:b7:fc:9f:87:2b:aa:b1:7f:24:27:66:45:8d:67: f1:2b:c9:17:a4:5b:c3:a2:a4:4a:f9:ac:de:1d:cd: da:96:79:9c:06:0d:d1:ad:70:b2:9f:93:c2:b7:6c: 01:65:10:0c:d6:fb:13:7d:7a:c5:a3:b0:02:a7:e5: 97:e9:4a:bb:9f:91:45:25:71:ce:96:d6:18:dd:b0: be:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0A:67:1F:9A:B2:D2:3C:66:2B:F5:B8:50:7C:C8:9B:33:2F:AD:E8 X509v3 Authority Key Identifier: keyid:4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:c0:59:77:eb:62:39:03:62:d9:a9:51:4a:32:de:b4:8c:a3: 98:ff:68:c0:55:47:b6:48:2c:e6:4c:2c:2d:47:bc:f6:19:ee: e1:49:9d:c5:df:c3:31:ae:e0:6b:b2:71:2a:1e:26:b5:69:1a: fd:77:46:cf:3c:af:8a:3b:ef:00:84:a7:70:6a:4a:e3:91:b7: 18:b6:2b:51:fb:60:c0:56:df:46:f0:c1:db:9d:7f:6f:3f:9f: 1d:b2:25:d5:ea:1e:1d:e3:61:07:a2:20:fe:eb:91:87:fb:be: 1f:5e:8e:81:a2:1e:92:2e:e8:92:0f:cc:58:2e:14:bc:a1:f2: ec:36:93:e2:93:32:33:a3:41:e2:54:c2:f1:96:bb:ce:91:ed: 86:56:b1:21:85:25:33:64:15:c1:7e:b1:7f:da:c4:e5:fc:e8: ad:35:8c:c1:1a:60:80:54:d5:ee:e5:d7:d1:12:9b:4c:aa:0e: d8:23:8e:24:c5:d5:8e:0d:fd:91:28:e3:0e:cc:f1:bc:f6:f2: 33:15:3c:f1:37:0e:c1:ae:d9:29:7b:53:8c:5d:59:fc:ac:22: 16:77:a4:3d:6e:0c:6d:26:c3:63:89:6f:a3:73:8f:67:28:81: 55:df:bb:2c:66:00:23:8b:51:5d:7c:c2:d3:2c:5c:41:98:a8: 79:87:fc:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a2ZtPStavZ3GeeJHT3GPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWI2YjJjM2UwOWNhMWM0NWZkNzU0N2U0NTg5NDZjYzhh NDY4YjQwHhcNMjUxMjIwMTEwMDUyWhcNMjUxMjIxMTEwMDUyWjAzMTEwLwYDVQQD Eyg3NzBhNjcxZjlhYjJkMjNjNjYyYmY1Yjg1MDdjYzg5YjMzMmZhZGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9U9xWdYMzaylbStX44gVtzmLr9PV 9HNZhV7K+OXhpBzai+btGTxsZ6Mo0IY0IbJVI2xGMRW/u1BNK7w8OpFWMkUJKoUh rB3YSWaf51Xj1qPiznU0id53k1DihacPOQrmiWZdAnsR9PIwcimbRMJoftg3tVJH Rru5oF/MOBFFTmW7AFBsZl/PXI65SP/aIf2LiZkV0Zk5Fe9/H1BZmOBkYziGza4P pe5aauk1Ay7AN42xwZift/yfhyuqsX8kJ2ZFjWfxK8kXpFvDoqRK+azeHc3alnmc Bg3RrXCyn5PCt2wBZRAM1vsTfXrFo7ACp+WX6Uq7n5FFJXHOltYY3bC+JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcKZx+astI8Ziv1uFB8yJszL63oMB8GA1UdIwQY MBaAFE7rayw+CcocRf11R+RYlGzIpGi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHV0ckxENEp5aHhGX1hWSDVGaVViTWlrYUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84ZjU5ZWMtZjkyYy00MjNkLThmYjct NmU5YWRkYzgxNjJiLzEvVHV0ckxENEp5aHhGX1hWSDVGaVViTWlrYUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi84ZjU5ZWMtZjkyYy00MjNkLThmYjctNmU5YWRkYzgxNjJi LzEvVHV0ckxENEp5aHhGX1hWSDVGaVViTWlrYUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA28BZd+ti OQNi2alRSjLetIyjmP9owFVHtkgs5kwsLUe89hnu4Umdxd/DMa7ga7JxKh4mtWka /XdGzzyvijvvAISncGpK45G3GLYrUftgwFbfRvDB251/bz+fHbIl1eoeHeNhB6Ig /uuRh/u+H16OgaIeki7okg/MWC4UvKHy7DaT4pMyM6NB4lTC8Za7zpHthlaxIYUl M2QVwX6xf9rE5fzorTWMwRpggFTV7uXX0RKbTKoO2COOJMXVjg39kSjjDszxvPby MxU88TcOwa7ZKXtTjF1Z/KwiFnekPW4MbSbDY4lvo3OPZyiBVd+7LGYAI4tRXXzC 0yxcQZioeYf8mQ== -----END CERTIFICATE-----Generated at Sat Dec 20 17:32:27 2025 by rpki-client