This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft File: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft (raw, json) Hash identifier: 9uDTnClkCUJdd803UiFZF0b9yxGbDr+oR1nS/EYngSQ= Subject key identifier: C1:01:4D:87:DE:2B:C2:A0:C6:B1:DE:50:37:9A:7A:96:99:03:FD:8A Authority key identifier: D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76 Certificate issuer: /CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976 Certificate serial: 019B32D5F97FF120CFBAAE620630A5A7B24C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft Manifest number: 1281 Signing time: Thu 18 Dec 2025 19:00:42 +0000 Manifest this update: Thu 18 Dec 2025 19:00:42 +0000 Manifest next update: Fri 19 Dec 2025 19:00:42 +0000 Files and hashes: 1: 0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl (hash: 9NtRj9q98RwiOYhJFeNQ8Ow0O5fzvJyHGM9GKuIRL+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:f9:7f:f1:20:cf:ba:ae:62:06:30:a5:a7:b2:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d13bbc92a2fa90a0a1122b8330346f9a6171d976 Validity Not Before: Dec 18 19:00:42 2025 GMT Not After : Dec 19 19:00:42 2025 GMT Subject: CN=c1014d87de2bc2a0c6b1de50379a7a969903fd8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:02:93:83:ec:7b:77:ee:1e:ba:80:92:32:42: 9e:f5:81:44:22:68:ab:60:19:33:70:49:f0:15:d0: c5:a4:d5:ec:d5:45:a2:31:40:37:0f:94:6a:39:2b: 5b:91:1c:ac:56:13:76:cb:a3:aa:77:36:6d:af:3d: 80:5c:5e:02:ec:37:84:f7:aa:a2:24:ca:1f:8e:6b: 85:a6:7d:de:3e:11:71:96:f8:3f:29:8f:3f:61:46: 98:ef:e5:3a:73:15:0b:c4:48:93:1f:33:7f:f2:aa: b7:20:c4:fb:40:a0:c9:b4:ce:72:40:d6:d8:2b:12: f8:63:ea:e2:ef:98:d0:31:ea:68:d7:2b:08:22:06: 15:3d:90:aa:44:46:19:e1:41:64:40:31:a0:ac:b1: 22:b0:5f:09:24:22:af:c5:53:cd:d0:3a:19:1b:58: d6:8f:e2:91:ff:ea:4f:50:ac:e4:93:45:53:db:6d: 45:3e:24:43:28:e3:38:e3:bc:c5:04:63:cb:9f:14: 98:fd:5c:4d:4b:0a:dd:47:fc:16:6d:0f:d9:0e:b8: ba:f8:01:77:3a:50:b4:1b:f4:c4:a9:65:13:9b:08: 67:c8:44:12:2c:93:67:f6:6b:77:8e:f9:33:78:90: c1:e6:93:f3:15:39:e4:fd:d4:49:95:05:89:f7:45: 0c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:01:4D:87:DE:2B:C2:A0:C6:B1:DE:50:37:9A:7A:96:99:03:FD:8A X509v3 Authority Key Identifier: keyid:D1:3B:BC:92:A2:FA:90:A0:A1:12:2B:83:30:34:6F:9A:61:71:D9:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Tu8kqL6kKChEiuDMDRvmmFx2XY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2566c2-be52-4b42-a84c-cc3384ad81a1/1/0Tu8kqL6kKChEiuDMDRvmmFx2XY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:35:bb:50:97:41:eb:fe:48:a5:cf:cf:c0:37:54:b9:b5:ee: ee:76:fd:83:d6:15:af:21:1b:5a:ef:a1:92:3c:10:3c:f1:8b: 1d:fb:73:d5:89:3a:c8:a6:fd:be:13:a2:e4:b9:bc:0e:77:f8: 98:8a:16:c0:dc:dd:6f:a1:bb:b3:26:43:58:0f:ca:c8:0f:72: 5f:11:1b:91:58:9d:9d:46:83:ae:9d:c4:bd:96:de:32:b5:dc: fe:54:8f:69:ec:2f:f0:21:97:24:d5:08:ee:06:bf:90:f8:8c: a0:0b:5f:b1:1e:39:12:64:39:f3:9f:8e:fe:89:f8:3a:69:60: 40:8a:63:1c:26:99:eb:25:fa:f7:5c:0f:d7:66:ba:0a:a6:fe: c8:ac:dd:e9:90:56:bb:6e:8f:ba:6b:d0:06:23:92:33:d2:d3: db:d4:fc:dc:d7:16:32:e8:5e:a8:58:bf:09:d9:10:ea:97:1f: 2c:36:88:9d:bc:d8:55:83:1c:58:37:59:11:e1:38:10:8d:a0: 19:8c:d4:b6:c4:8e:14:d3:cc:5a:9d:a7:d7:98:46:6a:b8:5c: 48:eb:fc:ee:49:00:d8:6b:1d:25:d7:d0:0b:f9:d5:8e:fb:69: cd:61:c6:4b:bd:27:71:a5:af:6d:c4:7a:49:b9:b4:83:56:51: 19:92:78:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1fl/8SDPuq5iBjClp7JMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxM2JiYzkyYTJmYTkwYTBhMTEyMmI4MzMwMzQ2ZjlhNjE3 MWQ5NzYwHhcNMjUxMjE4MTkwMDQyWhcNMjUxMjE5MTkwMDQyWjAzMTEwLwYDVQQD EyhjMTAxNGQ4N2RlMmJjMmEwYzZiMWRlNTAzNzlhN2E5Njk5MDNmZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwKTg+x7d+4euoCSMkKe9YFEImir YBkzcEnwFdDFpNXs1UWiMUA3D5RqOStbkRysVhN2y6OqdzZtrz2AXF4C7DeE96qi JMofjmuFpn3ePhFxlvg/KY8/YUaY7+U6cxULxEiTHzN/8qq3IMT7QKDJtM5yQNbY KxL4Y+ri75jQMepo1ysIIgYVPZCqREYZ4UFkQDGgrLEisF8JJCKvxVPN0DoZG1jW j+KR/+pPUKzkk0VT221FPiRDKOM447zFBGPLnxSY/VxNSwrdR/wWbQ/ZDri6+AF3 OlC0G/TEqWUTmwhnyEQSLJNn9mt3jvkzeJDB5pPzFTnk/dRJlQWJ90UMoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEBTYfeK8KgxrHeUDeaepaZA/2KMB8GA1UdIwQY MBaAFNE7vJKi+pCgoRIrgzA0b5phcdl2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8yNTY2YzItYmU1Mi00YjQyLWE4NGMt Y2MzMzg0YWQ4MWExLzEvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8yNTY2YzItYmU1Mi00YjQyLWE4NGMtY2MzMzg0YWQ4MWEx LzEvMFR1OGtxTDZrS0NoRWl1RE1EUnZtbUZ4MlhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjW7UJdB 6/5Ipc/PwDdUubXu7nb9g9YVryEbWu+hkjwQPPGLHftz1Yk6yKb9vhOi5Lm8Dnf4 mIoWwNzdb6G7syZDWA/KyA9yXxEbkVidnUaDrp3EvZbeMrXc/lSPaewv8CGXJNUI 7ga/kPiMoAtfsR45EmQ585+O/on4OmlgQIpjHCaZ6yX691wP12a6Cqb+yKzd6ZBW u26PumvQBiOSM9LT29T83NcWMuheqFi/CdkQ6pcfLDaInbzYVYMcWDdZEeE4EI2g GYzUtsSOFNPMWp2n15hGarhcSOv87kkA2GsdJdfQC/nVjvtpzWHGS70ncaWvbcR6 Sbm0g1ZRGZJ4Fw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:08:54 2025 by rpki-client