This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft File: TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json) Hash identifier: bRvdT24VEJSNp/pZ90XdnSPmqB5g+mbdJrAUoCS0ewA= Subject key identifier: 2C:6C:B1:79:E4:DC:EC:39:CE:15:87:CE:3B:8A:03:6B:AB:46:A5:DB Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15 Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115 Certificate serial: 019B33E925A2B7529617E158967EAC3C516A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft Manifest number: 110F Signing time: Fri 19 Dec 2025 00:01:16 +0000 Manifest this update: Fri 19 Dec 2025 00:01:16 +0000 Manifest next update: Sat 20 Dec 2025 00:01:16 +0000 Files and hashes: 1: 55sTvowHGJg92qkZxcKwSCfNCK4.roa (hash: b91GQDkCCdywVY2XmrIvPHNucxaPtQ8aCIEGw0MjxvQ=) 2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: 1WJNpf3gI+VG9vncJ48fkg33jpp7M1pTwBlNhfSC0Hg=) 3: lOXoXnSoYH-Ze2jDn-kLGtNui38.roa (hash: Pz0iJoXh4tIWOR42AxlitpnyK4ra9wQb5adMKDc9S9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e9:25:a2:b7:52:96:17:e1:58:96:7e:ac:3c:51:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115 Validity Not Before: Dec 19 00:01:16 2025 GMT Not After : Dec 20 00:01:16 2025 GMT Subject: CN=2c6cb179e4dcec39ce1587ce3b8a036bab46a5db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b5:e7:96:d3:c1:00:1e:65:50:c4:c8:07:17: ba:b5:92:a8:f9:ab:2c:a9:7a:06:ea:73:f2:f0:ce: c6:9d:1f:fb:b1:6b:f1:47:c8:9a:a5:30:a8:0b:45: 5b:d4:4b:91:e2:3b:12:ed:bd:8a:63:25:4a:47:f0: ee:f4:bb:ea:a8:9a:c5:8c:a9:8c:85:a2:62:53:04: 90:80:ad:ed:ca:4c:50:1c:b5:dd:0a:83:c6:99:52: 4c:c8:a2:c2:e9:47:7f:c9:0d:cb:9e:30:90:43:bb: b4:ac:e7:fd:1f:be:31:83:a9:74:21:9d:30:45:86: a6:92:ac:27:23:a2:56:2c:f3:f9:5a:6c:99:5c:a1: bc:a1:eb:3c:29:4b:68:18:1f:55:ad:6b:99:9b:38: 54:e8:6d:ba:c1:0d:05:5a:13:0c:e4:9e:14:08:f2: 59:c8:a0:47:fe:c2:27:4a:8f:53:19:7e:b0:aa:e0: b5:a6:58:db:3b:5e:a6:3a:03:1d:5a:9c:24:e2:10: 2b:bf:d9:89:af:1c:54:9e:ea:de:5d:e5:e0:33:d6: 63:54:f9:42:c4:95:e6:ee:81:22:86:fe:02:07:ff: ad:09:42:e5:61:06:dc:04:0c:d1:19:ea:5c:09:8b: e0:8f:8c:7f:13:16:d4:65:c8:50:db:1a:16:8a:fa: 31:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:6C:B1:79:E4:DC:EC:39:CE:15:87:CE:3B:8A:03:6B:AB:46:A5:DB X509v3 Authority Key Identifier: keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:73:65:40:38:9b:a0:38:0e:15:23:07:8d:2e:6f:32:69:af: 1d:07:3b:30:61:ce:02:a9:97:d3:bb:46:c2:bb:34:24:d6:60: c6:11:1a:ad:24:a7:73:da:7a:33:48:99:83:ae:22:fa:e7:c9: f6:97:8f:9a:db:1f:6e:f0:94:17:b3:57:7e:29:c1:54:2f:b5: 6b:1b:d1:f1:2f:fc:03:c3:7f:e6:cc:27:19:48:17:2d:0e:2b: 67:d6:51:cd:2a:94:e2:5f:aa:d5:59:d8:b2:27:c6:1f:7b:f3: ce:10:a1:70:f3:b9:70:aa:e4:53:c2:0e:d0:8f:eb:8e:40:32: f3:da:5f:fc:41:54:d7:6b:d6:de:36:f5:b4:d2:06:1a:91:fd: 7c:e8:0f:e8:eb:0c:ae:c4:c4:5d:f3:15:4d:86:44:0b:e0:62: 4d:be:4d:ca:fe:8b:64:af:f5:9a:8f:25:e2:9a:0f:77:c7:87: 62:98:f5:a3:c9:20:da:39:ef:3a:a1:ae:99:22:7b:46:5d:70: cf:7c:00:96:93:8b:e5:52:6a:a7:61:70:6f:3f:d2:60:94:1c: 95:bd:40:b9:bf:b6:f3:ba:e7:bc:45:bc:a8:bf:f4:d8:0b:3f: 92:d4:1a:d7:a9:c1:56:8f:c3:08:e2:9c:19:23:c3:e5:d5:8b: d2:65:d9:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6SWit1KWF+FYln6sPFFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTUyNzUyYTgxYmRmZTBhNDAxZjlhMjYxZDc5ZmVlNGI2 MTcxMTUwHhcNMjUxMjE5MDAwMTE2WhcNMjUxMjIwMDAwMTE2WjAzMTEwLwYDVQQD EygyYzZjYjE3OWU0ZGNlYzM5Y2UxNTg3Y2UzYjhhMDM2YmFiNDZhNWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7XnltPBAB5lUMTIBxe6tZKo+ass qXoG6nPy8M7GnR/7sWvxR8iapTCoC0Vb1EuR4jsS7b2KYyVKR/Du9LvqqJrFjKmM haJiUwSQgK3tykxQHLXdCoPGmVJMyKLC6Ud/yQ3LnjCQQ7u0rOf9H74xg6l0IZ0w RYamkqwnI6JWLPP5WmyZXKG8oes8KUtoGB9VrWuZmzhU6G26wQ0FWhMM5J4UCPJZ yKBH/sInSo9TGX6wquC1pljbO16mOgMdWpwk4hArv9mJrxxUnureXeXgM9ZjVPlC xJXm7oEihv4CB/+tCULlYQbcBAzRGepcCYvgj4x/ExbUZchQ2xoWivoxZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxssXnk3Ow5zhWHzjuKA2urRqXbMB8GA1UdIwQY MBaAFE7lJ1KoG9/gpAH5omHXn+5LYXEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zMWUwZDQtMzVjZS00ZDAyLTk3MzQt ZDc4ZmI5N2Y5ODI4LzEvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zMWUwZDQtMzVjZS00ZDAyLTk3MzQtZDc4ZmI5N2Y5ODI4 LzEvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALXNlQDib oDgOFSMHjS5vMmmvHQc7MGHOAqmX07tGwrs0JNZgxhEarSSnc9p6M0iZg64i+ufJ 9pePmtsfbvCUF7NXfinBVC+1axvR8S/8A8N/5swnGUgXLQ4rZ9ZRzSqU4l+q1VnY sifGH3vzzhChcPO5cKrkU8IO0I/rjkAy89pf/EFU12vW3jb1tNIGGpH9fOgP6OsM rsTEXfMVTYZEC+BiTb5Nyv6LZK/1mo8l4poPd8eHYpj1o8kg2jnvOqGumSJ7Rl1w z3wAlpOL5VJqp2Fwbz/SYJQclb1Aub+287rnvEW8qL/02As/ktQa16nBVo/DCOKc GSPD5dWL0mXZRw== -----END CERTIFICATE-----Generated at Fri Dec 19 08:08:18 2025 by rpki-client