This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft File: TuwmeuLxv5Xm16FCCA5d96MTlJI.mft (raw, json) Hash identifier: tL4nCRzvTc2eJaq0hZCWsjXaFk5TrUZh0aB99IL7a+8= Subject key identifier: 2F:9C:17:43:3D:12:AA:25:0A:AD:A5:4A:64:15:7C:27:03:17:2E:69 Authority key identifier: 4E:EC:26:7A:E2:F1:BF:95:E6:D7:A1:42:08:0E:5D:F7:A3:13:94:92 Certificate issuer: /CN=4eec267ae2f1bf95e6d7a142080e5df7a3139492 Certificate serial: 019B4C5ED07A63858A08B24EEA9E8FFECAA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuwmeuLxv5Xm16FCCA5d96MTlJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft Manifest number: 0C73 Signing time: Tue 23 Dec 2025 18:00:40 +0000 Manifest this update: Tue 23 Dec 2025 18:00:40 +0000 Manifest next update: Wed 24 Dec 2025 18:00:40 +0000 Files and hashes: 1: TuwmeuLxv5Xm16FCCA5d96MTlJI.crl (hash: POVlSU/NmLfzJHpCFtLjjbOhDqKv+Cab61FIkqvleSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft rsync://rpki.ripe.net/repository/DEFAULT/TuwmeuLxv5Xm16FCCA5d96MTlJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 18:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:5e:d0:7a:63:85:8a:08:b2:4e:ea:9e:8f:fe:ca:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eec267ae2f1bf95e6d7a142080e5df7a3139492 Validity Not Before: Dec 23 18:00:40 2025 GMT Not After : Dec 24 18:00:40 2025 GMT Subject: CN=2f9c17433d12aa250aada54a64157c2703172e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:40:b8:b0:79:1b:86:58:6e:b6:59:c8:d8: 83:6e:b9:9c:3d:f9:01:ef:82:10:32:05:1d:c7:9f: c3:c2:47:73:ad:65:82:2f:85:33:f1:af:97:dd:7b: d4:14:1d:b6:a9:eb:4f:a4:37:1f:60:55:e3:27:2d: 31:4d:1e:89:3e:f5:e6:54:27:5c:32:99:61:f0:ce: e2:98:d1:c7:40:a2:8b:09:65:18:23:64:17:86:a2: 2c:9e:cd:a6:36:e1:ff:bd:b9:d5:3b:32:cd:07:bc: 14:9d:4d:b4:fc:f5:e6:0b:e6:8a:cc:5a:00:8c:58: 61:bb:4e:f2:59:eb:32:30:46:8b:ba:88:fd:77:8c: 0c:f2:4b:39:b2:07:3c:78:de:3f:12:27:e1:11:5a: d0:d4:4f:d9:a4:33:cf:3d:8a:0f:4a:f2:da:80:03: b3:80:2d:cd:d0:4d:ab:83:e4:2c:1a:6f:24:ff:10: 55:2b:8f:ac:02:a8:6a:06:ff:12:16:b0:9b:64:4b: 7c:0a:14:ef:3d:c3:be:02:a1:ca:cc:5c:f6:e6:0f: 28:55:98:8b:c6:e6:b2:a9:87:d8:87:bd:89:f5:99: b3:af:89:15:a3:16:22:a8:ae:da:c5:ac:66:19:9c: e5:9f:d8:f3:04:94:dc:9f:e8:30:7c:7f:b3:9a:37: 54:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9C:17:43:3D:12:AA:25:0A:AD:A5:4A:64:15:7C:27:03:17:2E:69 X509v3 Authority Key Identifier: keyid:4E:EC:26:7A:E2:F1:BF:95:E6:D7:A1:42:08:0E:5D:F7:A3:13:94:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuwmeuLxv5Xm16FCCA5d96MTlJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:04:95:a0:c5:9a:b2:ad:09:f6:f4:0c:74:54:63:ea:a3:59: 24:d0:cb:d7:f2:ee:ad:0e:9f:c3:02:2e:74:8d:09:11:f0:18: da:f5:72:b0:a5:85:8a:d2:25:1b:c9:f6:d2:df:f0:b9:f0:fe: 40:7c:4d:d9:2a:76:d6:5f:dc:d6:87:48:c0:c7:b7:27:c5:08: 32:d7:d2:9d:86:f9:2d:b8:77:c8:43:1a:43:2e:1b:58:ab:7b: 25:5d:d5:25:96:9b:42:b4:14:35:3a:2b:35:62:e7:73:89:91: 79:a6:05:c2:45:7b:e8:4b:23:58:59:60:57:5e:8f:54:0d:64: 17:cf:13:da:92:dc:c4:11:72:51:3f:55:26:c0:d5:25:a4:58: b4:10:00:76:c3:8b:1c:8d:13:4c:1c:85:31:e3:0a:96:42:96: 5b:ff:99:1c:f1:3f:bd:ac:ca:a7:20:11:a8:f1:d3:d9:37:de: be:58:14:52:de:19:3e:3e:1e:ac:44:d2:7a:db:aa:04:66:a0: ef:28:f8:55:17:b2:9f:cc:fb:99:9b:1f:a8:0f:4d:0a:68:71: 55:ce:17:c7:ae:25:ca:8d:48:82:d3:7d:cc:7f:6d:ad:bc:28: 65:5b:a5:cc:b7:e1:17:e7:99:ef:6e:ae:d7:a3:1d:46:ab:9e: cc:bb:61:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMXtB6Y4WKCLJO6p6P/sqmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWMyNjdhZTJmMWJmOTVlNmQ3YTE0MjA4MGU1ZGY3YTMx Mzk0OTIwHhcNMjUxMjIzMTgwMDQwWhcNMjUxMjI0MTgwMDQwWjAzMTEwLwYDVQQD EygyZjljMTc0MzNkMTJhYTI1MGFhZGE1NGE2NDE1N2MyNzAzMTcyZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWBAuLB5G4ZYbrZZyNiDbrmcPfkB 74IQMgUdx5/DwkdzrWWCL4Uz8a+X3XvUFB22qetPpDcfYFXjJy0xTR6JPvXmVCdc Mplh8M7imNHHQKKLCWUYI2QXhqIsns2mNuH/vbnVOzLNB7wUnU20/PXmC+aKzFoA jFhhu07yWesyMEaLuoj9d4wM8ks5sgc8eN4/EifhEVrQ1E/ZpDPPPYoPSvLagAOz gC3N0E2rg+QsGm8k/xBVK4+sAqhqBv8SFrCbZEt8ChTvPcO+AqHKzFz25g8oVZiL xuayqYfYh72J9Zmzr4kVoxYiqK7axaxmGZzln9jzBJTcn+gwfH+zmjdURwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+cF0M9EqolCq2lSmQVfCcDFy5pMB8GA1UdIwQY MBaAFE7sJnri8b+V5tehQggOXfejE5SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHV3bWV1THh2NVhtMTZGQ0NBNWQ5Nk1UbEpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS82OGI0NjQtMjQ2MC00ZTUzLWFkZTMt NmI5NmM4MzYxMjY1LzEvVHV3bWV1THh2NVhtMTZGQ0NBNWQ5Nk1UbEpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS82OGI0NjQtMjQ2MC00ZTUzLWFkZTMtNmI5NmM4MzYxMjY1 LzEvVHV3bWV1THh2NVhtMTZGQ0NBNWQ5Nk1UbEpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwSVoMWa sq0J9vQMdFRj6qNZJNDL1/LurQ6fwwIudI0JEfAY2vVysKWFitIlG8n20t/wufD+ QHxN2Sp21l/c1odIwMe3J8UIMtfSnYb5Lbh3yEMaQy4bWKt7JV3VJZabQrQUNTor NWLnc4mReaYFwkV76EsjWFlgV16PVA1kF88T2pLcxBFyUT9VJsDVJaRYtBAAdsOL HI0TTByFMeMKlkKWW/+ZHPE/vazKpyARqPHT2TfevlgUUt4ZPj4erETSetuqBGag 7yj4VReyn8z7mZsfqA9NCmhxVc4Xx64lyo1IgtN9zH9trbwoZVulzLfhF+eZ726u 16MdRquezLthbQ== -----END CERTIFICATE-----Generated at Wed Dec 24 02:18:46 2025 by rpki-client