This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft File: tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft (raw, json) Hash identifier: b/+rrvX48BCQAv0kU+RzfEfCJLMsme7I7mIjNX3kX/I= Subject key identifier: 21:97:86:AF:21:B2:D9:43:75:74:BE:36:28:86:83:81:6E:75:BB:91 Authority key identifier: B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF Certificate issuer: /CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef Certificate serial: 019B4C5F954A2DDCF7270CA7A76C08D8D58B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft Manifest number: 0EB7 Signing time: Tue 23 Dec 2025 18:01:31 +0000 Manifest this update: Tue 23 Dec 2025 18:01:31 +0000 Manifest next update: Wed 24 Dec 2025 18:01:31 +0000 Files and hashes: 1: 9FStBrS0NlZ9f0JDPC2m90a8BCY.roa (hash: xw+KW2Ni2Cd+C3tg5Q5Vf8DrtdT917ZQWwgX4LJaEm4=) 2: NcymNU3Ex55jeE07rsjVQP17Yc4.roa (hash: rqRVyPcE0vuZ2ea448N6H2EJDC40DdbDXkISgXkK53E=) 3: XUHwJb1I3gkKMlf7v2dTxFe6360.roa (hash: Gm/rvLP3jZuTC48xJtdoJ5/c1V7BDKST3JSzW3p7S08=) 4: tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl (hash: OD8+x2vgAX3IbFsOHBOTqKom9EzuPs0O0YHnw8Y0O3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5f:95:4a:2d:dc:f7:27:0c:a7:a7:6c:08:d8:d5:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b53ba18d5ceb8e794c8139ce02a791b8501825ef Validity Not Before: Dec 23 18:01:31 2025 GMT Not After : Dec 24 18:01:31 2025 GMT Subject: CN=219786af21b2d9437574be36288683816e75bb91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:66:c9:2d:c0:fb:ea:5f:7e:c0:e6:6b:62:2b: bf:02:6f:f6:40:d8:cd:9c:b9:b9:c8:5b:18:9f:41: 42:6f:82:c4:6a:62:28:3b:c6:9a:b0:22:9f:10:ea: 22:c3:ca:0b:c9:7e:a7:bc:e1:60:cd:f2:77:1f:93: e9:56:11:bf:20:26:99:3a:e9:f2:d1:85:25:d8:c0: 95:48:99:3d:a0:36:18:be:ab:9c:b4:e1:a5:19:bb: dc:bd:57:e2:36:99:0c:99:98:36:0c:89:e2:51:9f: 97:24:79:33:14:c4:6b:5d:f6:d0:03:d7:cc:3f:19: d6:2f:4a:e2:6e:0a:c8:bf:c2:a9:21:a4:76:fb:3b: f2:de:7f:3b:9d:0b:2e:5b:df:7f:ac:88:26:e3:b5: 4b:f7:57:f3:4a:32:70:9d:ad:1f:a9:6f:b0:9c:95: f6:70:a0:9f:0d:65:4b:48:0e:a4:00:b8:4c:e0:21: ce:29:6b:97:56:57:33:1e:bd:08:f0:04:85:80:59: 1e:43:ed:22:d0:a2:a5:73:1d:b8:54:3b:bb:8b:9c: b5:56:19:ba:03:ab:46:f5:bb:6a:de:18:bf:c1:50: aa:11:6a:b2:32:c5:0e:42:d9:9e:c6:df:bc:ae:e5: db:21:77:ac:59:53:62:0d:95:31:85:a7:8c:fa:10: e0:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:97:86:AF:21:B2:D9:43:75:74:BE:36:28:86:83:81:6E:75:BB:91 X509v3 Authority Key Identifier: keyid:B5:3B:A1:8D:5C:EB:8E:79:4C:81:39:CE:02:A7:91:B8:50:18:25:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTuhjVzrjnlMgTnOAqeRuFAYJe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/e2510d-e573-45d3-9d20-754b60c5b568/1/tTuhjVzrjnlMgTnOAqeRuFAYJe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:dc:07:67:84:ce:1e:fe:9c:77:2a:c5:2a:0c:4f:79:57:44: 55:c6:09:8e:d5:88:77:36:97:8d:96:59:05:f7:d7:99:55:c9: ee:88:75:34:03:92:7b:b9:e5:97:5c:41:d5:2b:ac:93:e4:77: 33:fa:39:25:64:fd:48:b1:69:eb:69:e5:e7:ee:0d:7b:64:c4: 70:dd:05:18:b0:48:39:0f:70:6f:de:5d:1e:d2:ad:44:b2:01: 09:bd:39:66:53:d2:c4:df:a1:4c:b9:ee:74:5e:e8:f1:71:af: 88:b9:f8:4f:5b:cb:18:8b:3c:c7:a5:91:09:e3:dd:59:49:eb: ff:18:d7:88:f3:ee:37:3c:88:14:2c:88:e8:17:ca:7e:85:fd: b2:97:b0:fa:36:53:8f:e7:53:eb:3e:63:d6:c9:0c:75:2c:55: 5d:e3:a6:47:d4:84:98:34:18:eb:56:e9:f2:4c:83:ee:14:15: 7b:87:39:11:1e:f4:3b:9b:22:b3:00:55:66:e4:ff:3c:58:b2: ad:72:fb:3f:f7:dd:cc:07:2d:28:31:fa:f4:b4:48:f2:2c:2a: 3f:52:22:aa:ac:37:c5:ff:5a:e2:19:ea:25:d7:94:74:2c:61: 5a:ac:f7:f5:8f:dc:b8:88:48:5a:ea:87:5e:12:be:17:d3:57: 70:3e:48:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMX5VKLdz3Jwynp2wI2NWLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1M2JhMThkNWNlYjhlNzk0YzgxMzljZTAyYTc5MWI4NTAx ODI1ZWYwHhcNMjUxMjIzMTgwMTMxWhcNMjUxMjI0MTgwMTMxWjAzMTEwLwYDVQQD EygyMTk3ODZhZjIxYjJkOTQzNzU3NGJlMzYyODg2ODM4MTZlNzViYjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWbJLcD76l9+wOZrYiu/Am/2QNjN nLm5yFsYn0FCb4LEamIoO8aasCKfEOoiw8oLyX6nvOFgzfJ3H5PpVhG/ICaZOuny 0YUl2MCVSJk9oDYYvquctOGlGbvcvVfiNpkMmZg2DIniUZ+XJHkzFMRrXfbQA9fM PxnWL0ribgrIv8KpIaR2+zvy3n87nQsuW99/rIgm47VL91fzSjJwna0fqW+wnJX2 cKCfDWVLSA6kALhM4CHOKWuXVlczHr0I8ASFgFkeQ+0i0KKlcx24VDu7i5y1Vhm6 A6tG9btq3hi/wVCqEWqyMsUOQtmext+8ruXbIXesWVNiDZUxhaeM+hDg5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGXhq8hstlDdXS+NiiGg4FudbuRMB8GA1UdIwQY MBaAFLU7oY1c6455TIE5zgKnkbhQGCXvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lMjUxMGQtZTU3My00NWQzLTlkMjAt NzU0YjYwYzViNTY4LzEvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9lMjUxMGQtZTU3My00NWQzLTlkMjAtNzU0YjYwYzViNTY4 LzEvdFR1aGpWenJqbmxNZ1RuT0FxZVJ1RkFZSmU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9wHZ4TO Hv6cdyrFKgxPeVdEVcYJjtWIdzaXjZZZBffXmVXJ7oh1NAOSe7nll1xB1Susk+R3 M/o5JWT9SLFp62nl5+4Ne2TEcN0FGLBIOQ9wb95dHtKtRLIBCb05ZlPSxN+hTLnu dF7o8XGviLn4T1vLGIs8x6WRCePdWUnr/xjXiPPuNzyIFCyI6BfKfoX9spew+jZT j+dT6z5j1skMdSxVXeOmR9SEmDQY61bp8kyD7hQVe4c5ER70O5siswBVZuT/PFiy rXL7P/fdzActKDH69LRI8iwqP1Iiqqw3xf9a4hnqJdeUdCxhWqz39Y/cuIhIWuqH XhK+F9NXcD5I6A== -----END CERTIFICATE-----Generated at Tue Dec 23 23:52:01 2025 by rpki-client