This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft File: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json) Hash identifier: k24nuvtXXX85XC55O1M4BoqoxYNvBoRC0n4b8NF7VnU= Subject key identifier: 0A:3A:1D:04:3B:62:50:7E:44:F4:21:5A:DF:D3:7C:E1:13:17:2C:B9 Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76 Certificate issuer: /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976 Certificate serial: 019B405A826A56170B834075087CF4B9E8CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft Manifest number: 1288 Signing time: Sun 21 Dec 2025 10:00:31 +0000 Manifest this update: Sun 21 Dec 2025 10:00:31 +0000 Manifest next update: Mon 22 Dec 2025 10:00:31 +0000 Files and hashes: 1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: tfKlJX5J2J3GB4dNxnPpqKwdACMaT73GJncmxFn2uE8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:82:6a:56:17:0b:83:40:75:08:7c:f4:b9:e8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976 Validity Not Before: Dec 21 10:00:31 2025 GMT Not After : Dec 22 10:00:31 2025 GMT Subject: CN=0a3a1d043b62507e44f4215adfd37ce113172cb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:aa:08:4c:7f:07:55:0f:53:50:40:7c:54:10: f1:ff:ba:b6:40:c7:ac:bf:97:09:09:42:89:84:3f: 04:8a:5d:ad:b3:f2:68:26:f5:6f:f9:0a:ef:cb:82: 20:eb:62:a5:6f:e2:47:4a:77:d6:99:4e:3e:ac:4c: 27:01:f5:4a:2f:32:fe:b4:13:8a:81:b0:58:77:04: 7d:e5:0c:97:ef:13:ab:3a:9b:ca:31:16:4e:dd:6e: 80:6a:8b:a3:92:72:3e:63:53:7f:b5:03:89:c5:2a: 35:aa:60:53:b2:36:d1:94:b6:2a:0c:b5:30:4b:62: 82:18:eb:f4:b6:c5:24:96:1b:d9:93:cb:cf:95:16: 4f:0d:ee:40:ec:b5:50:0b:23:0f:67:4f:bd:31:81: 55:7c:e4:b1:53:09:bf:ca:40:2f:0c:e3:63:a6:c0: c4:90:37:5c:26:4f:4c:6c:e7:aa:e3:20:f7:3e:18: 74:4e:5f:bc:ba:65:35:99:33:55:18:05:da:fd:28: 88:6f:ba:7c:49:43:69:e6:3e:3d:dc:ef:bd:55:09: 70:e1:ea:5f:5b:b2:0b:d1:68:e1:69:d7:e2:01:54: c5:b1:72:89:9c:78:43:39:1a:ac:0f:e8:99:cd:97: ad:89:f1:17:bc:bc:76:d6:88:2a:06:20:e9:1e:2c: f2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3A:1D:04:3B:62:50:7E:44:F4:21:5A:DF:D3:7C:E1:13:17:2C:B9 X509v3 Authority Key Identifier: keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:d2:b8:dd:57:7b:5e:ef:72:ba:ab:ee:7f:28:2a:67:ed:c1: 99:9f:2d:64:bb:d0:87:17:74:f9:58:cc:c5:b2:8a:fc:97:f5: 75:99:fd:4b:78:f8:7a:c9:01:0b:2e:ae:0d:bb:83:50:b9:6b: f5:ff:9b:58:7d:12:73:36:54:9a:d5:27:38:35:86:16:7d:cd: 31:54:cd:6d:e0:56:c9:a1:0f:71:8f:31:bc:74:26:d9:22:c6: 45:b0:1f:3c:d5:48:e4:56:5b:95:70:d4:ca:1a:0b:fb:2d:5c: b0:41:e1:c1:1c:83:63:8d:7c:d0:78:e5:66:d5:60:11:bc:24: bb:aa:74:d0:32:f2:5a:96:0c:db:be:68:bc:8a:52:42:b7:33: 00:8b:c2:ec:8d:15:94:5c:68:04:8c:64:c4:45:dd:be:f5:ce: bc:af:56:70:4a:56:c9:02:81:92:52:85:3f:ca:6b:b5:73:05: f9:69:2c:1d:24:bf:73:dd:86:65:d3:58:13:4c:92:e8:bd:83: 10:e4:1a:a0:90:06:ff:93:e9:98:a0:b9:16:83:38:57:3c:5e: 10:1c:af:ef:f7:3f:5e:91:b8:ef:8b:76:ec:dd:74:b6:07:30: 4c:d6:30:c8:88:b3:6b:8e:d2:f1:62:b4:63:74:f0:54:f7:fd: 9e:4d:21:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWoJqVhcLg0B1CHz0uejPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxM2JiYzkyYTJmYTkwYTBhMTEyMmI4MzMwMzQ2ZjlhNjE3 MWQ5NzYwHhcNMjUxMjIxMTAwMDMxWhcNMjUxMjIyMTAwMDMxWjAzMTEwLwYDVQQD EygwYTNhMWQwNDNiNjI1MDdlNDRmNDIxNWFkZmQzN2NlMTEzMTcyY2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaoITH8HVQ9TUEB8VBDx/7q2QMes v5cJCUKJhD8Eil2ts/JoJvVv+Qrvy4Ig62Klb+JHSnfWmU4+rEwnAfVKLzL+tBOK gbBYdwR95QyX7xOrOpvKMRZO3W6AaoujknI+Y1N/tQOJxSo1qmBTsjbRlLYqDLUw S2KCGOv0tsUklhvZk8vPlRZPDe5A7LVQCyMPZ0+9MYFVfOSxUwm/ykAvDONjpsDE kDdcJk9MbOeq4yD3Phh0Tl+8umU1mTNVGAXa/SiIb7p8SUNp5j493O+9VQlw4epf W7IL0WjhadfiAVTFsXKJnHhDORqsD+iZzZetifEXvLx21ogqBiDpHizyMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAo6HQQ7YlB+RPQhWt/TfOETFyy5MB8GA1UdIwQY MBaAFNE7vJKi+pCgoRIrgzA0b5phcdl2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNTY2YzItYmU1Mi00YjQyLWE4NGMt Y2MzMzg0YWQ4MWExLzEvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8yNTY2YzItYmU1Mi00YjQyLWE4NGMtY2MzMzg0YWQ4MWEx LzEvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK9K43Vd7 Xu9yuqvufygqZ+3BmZ8tZLvQhxd0+VjMxbKK/Jf1dZn9S3j4eskBCy6uDbuDULlr 9f+bWH0SczZUmtUnODWGFn3NMVTNbeBWyaEPcY8xvHQm2SLGRbAfPNVI5FZblXDU yhoL+y1csEHhwRyDY4180HjlZtVgEbwku6p00DLyWpYM275ovIpSQrczAIvC7I0V lFxoBIxkxEXdvvXOvK9WcEpWyQKBklKFP8prtXMF+WksHSS/c92GZdNYE0yS6L2D EOQaoJAG/5PpmKC5FoM4VzxeEByv7/c/XpG474t27N10tgcwTNYwyIiza47S8WK0 Y3TwVPf9nk0hCg== -----END CERTIFICATE-----Generated at Sun Dec 21 13:55:03 2025 by rpki-client