This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft File: tu2bXLS2SGbDg97kV2v_P_h1JC0.mft (raw, json) Hash identifier: FvtZ7ZQZ/bTvpvHEaoBeOKWLgdpeZIVZOsr8Q/ji1ho= Subject key identifier: 5E:2B:6B:4C:F7:18:D2:DE:A1:7D:74:4A:0E:39:B1:F2:8E:9D:69:E6 Authority key identifier: B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D Certificate issuer: /CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d Certificate serial: 019B35A09E24CD419C0BAC492DF438B62AEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft Manifest number: 0EFC Signing time: Fri 19 Dec 2025 08:01:17 +0000 Manifest this update: Fri 19 Dec 2025 08:01:17 +0000 Manifest next update: Sat 20 Dec 2025 08:01:17 +0000 Files and hashes: 1: Cr7WIZXJqqSxx1MgWk3fJvY56gA.roa (hash: W0p2Ng/L4A+CUhGlPSgje47dkJ8+aMEjdUAnh4zo9Rc=) 2: tu2bXLS2SGbDg97kV2v_P_h1JC0.crl (hash: /dVRttKKKszO73fIvCnRGWYFn6wDKhe6wZy/W1lQOoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:9e:24:cd:41:9c:0b:ac:49:2d:f4:38:b6:2a:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6ed9b5cb4b64866c383dee4576bff3ff875242d Validity Not Before: Dec 19 08:01:17 2025 GMT Not After : Dec 20 08:01:17 2025 GMT Subject: CN=5e2b6b4cf718d2dea17d744a0e39b1f28e9d69e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:f8:35:c9:f5:6d:9e:ba:6c:5a:33:30:87: 4c:03:ff:87:1a:06:3b:40:b3:f3:f6:e0:34:ae:fc: e2:d4:0b:cf:ab:21:bb:1c:c4:d9:71:90:a2:be:50: 20:42:9d:d0:26:70:e6:3d:4c:d1:5d:2d:4c:72:47: e3:56:95:ce:1b:33:23:87:a9:f8:62:d9:09:b4:0c: a0:0d:a2:7f:a4:e7:fb:24:68:17:bc:1a:68:0d:22: fc:5a:41:9f:b9:f7:fb:70:0e:53:fa:32:ac:be:87: 8d:8f:b2:95:a0:a0:11:ad:d5:c1:bc:96:f8:c4:da: 37:6b:05:93:9c:84:f6:e6:92:3a:08:8f:88:5e:ba: 17:5b:67:b4:83:e2:ee:ef:6f:5c:df:b5:73:28:e2: 8f:4d:21:f5:af:92:39:4c:48:7a:6a:90:93:24:43: f3:37:9d:bd:f9:3b:43:29:61:b1:76:f9:84:22:b6: c9:12:b1:9f:9a:03:12:a9:4c:3b:80:74:08:7b:f0: 8a:4b:51:3e:eb:d4:f8:6b:8a:5c:14:4f:9f:49:e0: 81:10:a8:10:30:52:30:c8:82:b6:84:70:8c:ab:e8: a3:aa:ab:21:59:d6:0b:aa:14:ca:c3:7a:9d:1b:e1: 97:b8:df:47:a1:71:60:73:50:75:ab:ae:fb:5a:c8: 24:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2B:6B:4C:F7:18:D2:DE:A1:7D:74:4A:0E:39:B1:F2:8E:9D:69:E6 X509v3 Authority Key Identifier: keyid:B6:ED:9B:5C:B4:B6:48:66:C3:83:DE:E4:57:6B:FF:3F:F8:75:24:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu2bXLS2SGbDg97kV2v_P_h1JC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/171cea-3d78-4513-ad49-5a905af507c3/1/tu2bXLS2SGbDg97kV2v_P_h1JC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:c4:68:72:39:9b:40:c7:9d:e2:b0:93:a2:17:2a:85:4a:d3: 56:6d:a3:2d:ca:29:d8:47:35:61:43:a5:d4:99:da:41:0e:b1: ac:b8:33:ca:51:9d:f2:bf:aa:c1:e9:bc:8b:3d:b8:2b:fe:cf: b7:ff:a6:a9:af:26:fc:83:98:19:88:ad:ee:42:40:82:86:42: 72:66:26:a5:9f:0a:68:c0:32:a0:b8:9f:02:b2:7e:6e:d9:98: 23:a0:b7:f6:b0:f8:80:ef:a4:d3:1a:31:f9:6f:d0:95:c3:d2: 5f:bc:63:03:ce:fd:6c:4d:cb:e7:bd:3d:cc:5f:00:42:98:0f: 0b:3b:93:04:8b:94:d7:5b:bf:36:e6:a4:a3:7b:e2:e1:a1:b6: 63:fd:4f:cc:72:70:e9:b4:08:ed:45:fa:4a:c7:6c:c6:0d:39: 9f:6c:58:c6:54:f4:b5:ce:7c:40:dd:9f:46:fa:4b:a4:bb:c1: 81:d8:bc:3e:32:b6:20:bd:6c:42:b2:c2:70:63:e8:0e:ce:97: 28:7a:1c:d4:7d:79:05:75:3a:82:9b:2a:5f:0f:9a:87:43:33: 06:07:5e:da:13:27:d5:37:53:bf:74:e7:ea:67:5e:25:15:67: 2c:bf:b5:4f:3f:68:ec:02:1f:6a:f0:fb:17:c8:49:83:cb:9e: 64:b2:53:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oJ4kzUGcC6xJLfQ4tiruMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZWQ5YjVjYjRiNjQ4NjZjMzgzZGVlNDU3NmJmZjNmZjg3 NTI0MmQwHhcNMjUxMjE5MDgwMTE3WhcNMjUxMjIwMDgwMTE3WjAzMTEwLwYDVQQD Eyg1ZTJiNmI0Y2Y3MThkMmRlYTE3ZDc0NGEwZTM5YjFmMjhlOWQ2OWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWb4Ncn1bZ66bFozMIdMA/+HGgY7 QLPz9uA0rvzi1AvPqyG7HMTZcZCivlAgQp3QJnDmPUzRXS1MckfjVpXOGzMjh6n4 YtkJtAygDaJ/pOf7JGgXvBpoDSL8WkGfuff7cA5T+jKsvoeNj7KVoKARrdXBvJb4 xNo3awWTnIT25pI6CI+IXroXW2e0g+Lu729c37VzKOKPTSH1r5I5TEh6apCTJEPz N529+TtDKWGxdvmEIrbJErGfmgMSqUw7gHQIe/CKS1E+69T4a4pcFE+fSeCBEKgQ MFIwyIK2hHCMq+ijqqshWdYLqhTKw3qdG+GXuN9HoXFgc1B1q677WsgkYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4ra0z3GNLeoX10Sg45sfKOnWnmMB8GA1UdIwQY MBaAFLbtm1y0tkhmw4Pe5Fdr/z/4dSQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHUyYlhMUzJTR2JEZzk3a1Yydl9QX2gxSkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xNzFjZWEtM2Q3OC00NTEzLWFkNDkt NWE5MDVhZjUwN2MzLzEvdHUyYlhMUzJTR2JEZzk3a1Yydl9QX2gxSkMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xNzFjZWEtM2Q3OC00NTEzLWFkNDktNWE5MDVhZjUwN2Mz LzEvdHUyYlhMUzJTR2JEZzk3a1Yydl9QX2gxSkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMRocjmb QMed4rCTohcqhUrTVm2jLcop2Ec1YUOl1JnaQQ6xrLgzylGd8r+qwem8iz24K/7P t/+mqa8m/IOYGYit7kJAgoZCcmYmpZ8KaMAyoLifArJ+btmYI6C39rD4gO+k0xox +W/QlcPSX7xjA879bE3L5709zF8AQpgPCzuTBIuU11u/Nuako3vi4aG2Y/1PzHJw 6bQI7UX6Ssdsxg05n2xYxlT0tc58QN2fRvpLpLvBgdi8PjK2IL1sQrLCcGPoDs6X KHoc1H15BXU6gpsqXw+ah0MzBgde2hMn1TdTv3Tn6mdeJRVnLL+1Tz9o7AIfavD7 F8hJg8ueZLJTZg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:21:25 2025 by rpki-client