This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft File: TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json) Hash identifier: pjkb02Fxh20g4Sh1Z4UHXfSMZm+YRRhzKtS+WaeecHE= Subject key identifier: 40:4A:D1:9F:7F:DB:15:43:98:13:6A:46:2A:0A:E5:C5:54:89:AF:1C Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15 Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115 Certificate serial: 019B1CBC696DC78EE6EC7CA72FFF3B50A367 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft Manifest number: 1103 Signing time: Sun 14 Dec 2025 12:01:08 +0000 Manifest this update: Sun 14 Dec 2025 12:01:08 +0000 Manifest next update: Mon 15 Dec 2025 12:01:08 +0000 Files and hashes: 1: 55sTvowHGJg92qkZxcKwSCfNCK4.roa (hash: b91GQDkCCdywVY2XmrIvPHNucxaPtQ8aCIEGw0MjxvQ=) 2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: i200o74wlK6DROtLQiIBRT4ARTDWxNEKZnWV8Gc1rmo=) 3: lOXoXnSoYH-Ze2jDn-kLGtNui38.roa (hash: Pz0iJoXh4tIWOR42AxlitpnyK4ra9wQb5adMKDc9S9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bc:69:6d:c7:8e:e6:ec:7c:a7:2f:ff:3b:50:a3:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115 Validity Not Before: Dec 14 12:01:08 2025 GMT Not After : Dec 15 12:01:08 2025 GMT Subject: CN=404ad19f7fdb154398136a462a0ae5c55489af1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:15:1d:41:5a:ac:99:87:01:06:7f:fe:62:6a: 64:45:67:1a:db:61:1e:11:bb:80:3a:e5:36:d6:76: 99:1d:0e:e1:29:93:08:79:b8:65:ae:02:6c:32:58: ed:cb:55:fa:52:57:34:5b:50:35:fb:d3:04:51:31: 1e:bf:b5:a4:f4:a9:87:fa:fe:b0:6b:aa:62:73:d0: cf:78:08:86:0b:5a:0f:75:a1:23:68:01:e3:73:3b: 0a:3f:60:f1:5d:4e:08:30:e9:ff:d6:3d:99:f1:a1: d2:b7:83:46:b5:21:62:f6:8b:34:0e:98:ef:18:1b: a7:c9:41:3f:72:0f:41:b3:9f:4a:26:11:6f:e7:71: 33:ce:c5:70:1a:1b:71:38:63:d4:9d:56:81:03:b5: 72:39:30:c0:d1:83:1c:10:b8:0d:9b:1d:f1:10:b7: ad:64:8d:dc:cf:de:41:25:03:26:d0:fc:b0:20:f3: f2:3b:a7:b0:0a:ab:b5:7d:09:63:70:3f:7f:a3:4b: 65:24:d2:67:e6:4e:68:2d:7d:12:1a:dc:42:33:9b: 32:18:b7:92:ec:f2:fe:c5:7a:0d:c2:f9:48:e1:3b: 93:d1:7a:aa:a9:16:d0:96:ce:f7:4b:1e:a9:aa:a0: 07:76:d8:ec:33:d2:34:7b:32:46:f9:2c:f7:db:32: 7b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:4A:D1:9F:7F:DB:15:43:98:13:6A:46:2A:0A:E5:C5:54:89:AF:1C X509v3 Authority Key Identifier: keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:15:c7:02:95:85:6e:8a:7d:76:b5:23:3d:b7:27:45:80:d0: 91:7e:f7:81:41:54:67:4d:61:c0:8b:15:54:49:b0:10:7a:5e: dd:bb:0f:b9:b4:0d:a9:d5:f2:39:8a:f1:dc:c7:2b:da:b9:75: f7:28:1c:81:af:87:a4:92:e9:a3:97:b4:0a:cb:51:d2:81:32: bd:f4:cb:18:7b:0d:91:f0:ab:c3:53:0f:f1:60:bc:0a:02:07: 24:34:1a:3d:99:38:b9:56:a6:1e:07:91:61:4d:4a:6c:d2:45: c3:7a:1b:2a:e8:2f:e0:79:b5:44:20:7d:e2:35:ca:e1:90:2b: 1a:a7:94:97:1c:07:c8:51:28:79:1d:60:36:85:b9:7f:77:a7: 4e:31:98:44:60:11:ab:80:55:cc:26:a4:82:75:4b:11:8c:36: d4:2c:4e:e0:48:a0:e6:ba:ca:a3:6e:de:b3:42:a1:0f:a6:4b: ba:08:c4:34:c2:9c:c2:b7:30:84:58:9c:2a:3e:73:3b:4f:45: 6f:17:eb:32:66:8b:61:42:55:2d:5b:72:2e:01:15:d4:88:fd: d4:fd:b1:99:2d:f6:06:2f:39:35:9e:93:08:a2:b3:17:b3:81: ca:7f:62:13:eb:ea:29:6b:4b:d3:0d:12:3e:86:bd:89:bf:e7: 71:f3:1d:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscvGltx47m7HynL/87UKNnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTUyNzUyYTgxYmRmZTBhNDAxZjlhMjYxZDc5ZmVlNGI2 MTcxMTUwHhcNMjUxMjE0MTIwMTA4WhcNMjUxMjE1MTIwMTA4WjAzMTEwLwYDVQQD Eyg0MDRhZDE5ZjdmZGIxNTQzOTgxMzZhNDYyYTBhZTVjNTU0ODlhZjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhUdQVqsmYcBBn/+YmpkRWca22Ee EbuAOuU21naZHQ7hKZMIebhlrgJsMljty1X6Ulc0W1A1+9MEUTEev7Wk9KmH+v6w a6pic9DPeAiGC1oPdaEjaAHjczsKP2DxXU4IMOn/1j2Z8aHSt4NGtSFi9os0Dpjv GBunyUE/cg9Bs59KJhFv53EzzsVwGhtxOGPUnVaBA7VyOTDA0YMcELgNmx3xELet ZI3cz95BJQMm0PywIPPyO6ewCqu1fQljcD9/o0tlJNJn5k5oLX0SGtxCM5syGLeS 7PL+xXoNwvlI4TuT0XqqqRbQls73Sx6pqqAHdtjsM9I0ezJG+Sz32zJ7oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBK0Z9/2xVDmBNqRioK5cVUia8cMB8GA1UdIwQY MBaAFE7lJ1KoG9/gpAH5omHXn+5LYXEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zMWUwZDQtMzVjZS00ZDAyLTk3MzQt ZDc4ZmI5N2Y5ODI4LzEvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zMWUwZDQtMzVjZS00ZDAyLTk3MzQtZDc4ZmI5N2Y5ODI4 LzEvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshXHApWF bop9drUjPbcnRYDQkX73gUFUZ01hwIsVVEmwEHpe3bsPubQNqdXyOYrx3Mcr2rl1 9ygcga+HpJLpo5e0CstR0oEyvfTLGHsNkfCrw1MP8WC8CgIHJDQaPZk4uVamHgeR YU1KbNJFw3obKugv4Hm1RCB94jXK4ZArGqeUlxwHyFEoeR1gNoW5f3enTjGYRGAR q4BVzCakgnVLEYw21CxO4Eig5rrKo27es0KhD6ZLugjENMKcwrcwhFicKj5zO09F bxfrMmaLYUJVLVtyLgEV1Ij91P2xmS32Bi85NZ6TCKKzF7OByn9iE+vqKWtL0w0S Poa9ib/ncfMdKw== -----END CERTIFICATE-----Generated at Sun Dec 14 19:13:58 2025 by rpki-client