This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft File: tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft (raw, json) Hash identifier: 31rndt1Eab4hii+MQ36ru/pb/5XHqRYCBodqW5omPMQ= Subject key identifier: E4:26:F1:4D:59:3E:BF:47:A2:92:29:48:88:CD:A4:8D:8B:5A:4B:2F Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94 Certificate issuer: /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94 Certificate serial: 019B2551EDC504169C799392C1764E1A93BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft Manifest number: 0852 Signing time: Tue 16 Dec 2025 04:01:24 +0000 Manifest this update: Tue 16 Dec 2025 04:01:24 +0000 Manifest next update: Wed 17 Dec 2025 04:01:24 +0000 Files and hashes: 1: rgegcxxJ3TsTdq27HR0NAjR9oC8.roa (hash: c0wEsNYvh664VokeqgrZS5bI3twxSLXX7CSRIaVE4Zs=) 2: tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl (hash: JB44yFYzuo5BAMJ6L/sTe10GtIpol8SexT7lYo0aT7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:51:ed:c5:04:16:9c:79:93:92:c1:76:4e:1a:93:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94 Validity Not Before: Dec 16 04:01:24 2025 GMT Not After : Dec 17 04:01:24 2025 GMT Subject: CN=e426f14d593ebf47a292294888cda48d8b5a4b2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:07:33:bc:76:5e:00:a5:f2:21:1f:e7:de:3f: 48:e1:7d:42:b6:87:fb:f7:f2:3b:42:8d:bd:ae:0c: 7c:4b:f8:0b:b1:bd:e0:da:70:97:3e:f7:9e:de:b3: c9:ed:b7:14:67:c0:97:aa:25:c4:60:36:7f:25:ef: 5f:88:e0:bf:72:f6:c8:6a:9d:11:8b:ea:78:f3:25: ff:94:59:84:e2:c1:f0:4b:18:fc:5c:e8:06:11:bd: 87:01:d8:4e:f5:75:e5:d8:2f:88:3e:ee:78:0d:0f: b1:65:60:24:99:f1:d6:e9:82:84:64:3b:f7:5b:2f: 45:27:2d:e1:f6:a7:87:d8:68:b8:67:ba:54:cd:cb: e8:c5:07:d0:5b:a4:f6:5b:60:ec:75:91:17:63:c0: 68:b6:5a:1c:c4:e2:65:0f:ed:e8:d1:9c:db:df:8b: 22:09:9f:43:49:c6:a8:86:d5:ca:aa:c3:4c:0a:dc: 65:82:ef:1a:8f:f6:b4:65:38:d6:ff:30:8e:a2:62: 33:6d:11:d7:85:2a:a0:d4:17:67:5c:90:ee:52:47: 99:c5:7d:0d:c0:76:ee:5c:7f:94:c6:6c:b4:d2:d4: 54:37:34:36:55:33:0a:97:a8:a9:d1:1c:38:12:ab: c5:02:85:ba:65:71:0e:ce:3b:4a:05:1f:20:c1:40: a5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:26:F1:4D:59:3E:BF:47:A2:92:29:48:88:CD:A4:8D:8B:5A:4B:2F X509v3 Authority Key Identifier: keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:dc:14:0c:a4:2c:4e:2b:4d:85:1f:09:15:23:d3:68:eb:37: 16:eb:a1:69:df:47:b7:02:d7:84:a5:e3:92:ab:bb:ad:cc:0f: 7e:0e:90:2a:75:c4:02:fe:dd:98:9a:f4:11:78:f1:c0:8f:b5: 6a:7a:83:bd:2f:0d:45:95:21:4f:e1:7d:cb:b5:bc:99:63:5a: 6b:74:15:a6:37:b3:4d:95:d8:1d:54:73:e2:f6:c6:fa:b0:57: d6:71:dc:18:3d:34:60:24:0a:9b:8a:7c:87:76:47:b3:5d:7f: f3:e8:be:76:03:0a:a5:74:ea:fe:3c:49:b5:e3:a4:c0:dd:6e: 46:a1:e7:9a:27:59:8f:9b:1d:2a:cc:82:8e:a1:e2:5c:e7:c5: 15:88:1f:52:cb:06:09:ce:70:f7:cd:03:5c:82:9e:2f:7a:89: 73:08:15:34:b2:1f:40:f9:da:35:b3:99:d3:5b:89:10:44:e9: 6f:6f:ba:26:85:9c:c9:ea:85:62:42:a5:28:f2:70:da:d4:81: 83:13:86:60:49:90:65:24:38:d1:0e:c9:a7:14:14:84:e1:6f: 71:f8:e9:57:ee:be:62:bc:b9:5c:65:eb:b1:04:ea:9f:b7:47: 3b:e9:e5:b4:4b:3b:0f:28:d1:85:2e:1a:c5:b1:28:e0:79:e2: 4a:90:55:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUe3FBBaceZOSwXZOGpO8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZTNhMmE0OTA4ZGQ5NjgyMWM4MGM2NGQxNWQxNzE0MTQz YWFhOTQwHhcNMjUxMjE2MDQwMTI0WhcNMjUxMjE3MDQwMTI0WjAzMTEwLwYDVQQD EyhlNDI2ZjE0ZDU5M2ViZjQ3YTI5MjI5NDg4OGNkYTQ4ZDhiNWE0YjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wczvHZeAKXyIR/n3j9I4X1Ctof7 9/I7Qo29rgx8S/gLsb3g2nCXPvee3rPJ7bcUZ8CXqiXEYDZ/Je9fiOC/cvbIap0R i+p48yX/lFmE4sHwSxj8XOgGEb2HAdhO9XXl2C+IPu54DQ+xZWAkmfHW6YKEZDv3 Wy9FJy3h9qeH2Gi4Z7pUzcvoxQfQW6T2W2DsdZEXY8BotlocxOJlD+3o0Zzb34si CZ9DScaohtXKqsNMCtxlgu8aj/a0ZTjW/zCOomIzbRHXhSqg1BdnXJDuUkeZxX0N wHbuXH+Uxmy00tRUNzQ2VTMKl6ip0Rw4EqvFAoW6ZXEOzjtKBR8gwUClsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQm8U1ZPr9HopIpSIjNpI2LWksvMB8GA1UdIwQY MBaAFLbjoqSQjdloIcgMZNFdFxQUOqqUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iMzZmMzEtMWNjZC00ZGEzLTljZjkt MGVkYmRmZjlmOGYyLzEvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9iMzZmMzEtMWNjZC00ZGEzLTljZjktMGVkYmRmZjlmOGYy LzEvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNwUDKQs TitNhR8JFSPTaOs3Fuuhad9HtwLXhKXjkqu7rcwPfg6QKnXEAv7dmJr0EXjxwI+1 anqDvS8NRZUhT+F9y7W8mWNaa3QVpjezTZXYHVRz4vbG+rBX1nHcGD00YCQKm4p8 h3ZHs11/8+i+dgMKpXTq/jxJteOkwN1uRqHnmidZj5sdKsyCjqHiXOfFFYgfUssG Cc5w980DXIKeL3qJcwgVNLIfQPnaNbOZ01uJEETpb2+6JoWcyeqFYkKlKPJw2tSB gxOGYEmQZSQ40Q7JpxQUhOFvcfjpV+6+Yry5XGXrsQTqn7dHO+nltEs7DyjRhS4a xbEo4HniSpBVTg== -----END CERTIFICATE-----Generated at Tue Dec 16 11:48:02 2025 by rpki-client