This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft File: tiuWfFIUXmeksyBrHKSShTyg34Q.mft (raw, json) Hash identifier: eeh40ia4oklxJPPkE/VDKr/jOu3UR8tLs3XSArBUJaE= Subject key identifier: 05:17:7D:DD:00:DC:6F:A4:70:68:C9:2D:F4:31:7E:0F:6B:73:71:4D Authority key identifier: B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84 Certificate issuer: /CN=b62b967c52145e67a4b3206b1ca492853ca0df84 Certificate serial: 019B31FA6AEC13C7A705A470815093519DEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 15:00:53 +0000 Manifest this update: Thu 18 Dec 2025 15:00:53 +0000 Manifest next update: Fri 19 Dec 2025 15:00:53 +0000 Files and hashes: 1: _dnntVUjWH4EUr4UpgbEErzH-do.asa (hash: vI/4RAPzURUhd78xQi/Y6eBRsyDpScnrAtCWF0EcTGY=) 2: hZxGZ5YrFD-BRifeGJgPjvYacq8.roa (hash: h+aCBqY4W4dfYzKLAFqGhW1i9FvyqjIDn+DISvEM+Ys=) 3: tiuWfFIUXmeksyBrHKSShTyg34Q.crl (hash: x68pmTNJ7JkPl0/NYMv+/SR2UhzSurWVk1qJ3bCk7NQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:fa:6a:ec:13:c7:a7:05:a4:70:81:50:93:51:9d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b62b967c52145e67a4b3206b1ca492853ca0df84 Validity Not Before: Dec 18 15:00:53 2025 GMT Not After : Dec 19 15:00:53 2025 GMT Subject: CN=05177ddd00dc6fa47068c92df4317e0f6b73714d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7f:02:3f:6f:9b:1a:71:9f:b2:fa:12:f6:2b: 3a:5e:b3:51:fa:82:bd:31:2e:16:f3:72:5c:a1:7a: c5:ac:7f:56:a8:7a:33:79:6f:4a:39:f5:a4:d7:50: 5a:10:d6:44:d7:ac:db:db:a4:12:6f:0b:2e:d1:0b: b2:b5:33:d8:50:8e:8e:6b:a9:49:77:48:9e:10:58: fb:04:7d:df:a5:b3:9e:6b:2a:58:ed:ab:12:be:97: ed:90:d4:cd:7b:ae:b5:78:7b:30:7f:34:eb:69:bc: 47:25:16:b4:57:ee:4b:96:21:34:41:66:f3:8b:77: e6:6b:8e:0d:5b:04:36:f2:5b:91:e6:a1:0b:a9:3a: bd:77:b8:27:44:3e:e6:3b:2f:95:2d:78:dd:9d:8f: 3a:57:0b:12:cd:db:41:6f:5d:71:2a:64:7e:a3:7b: 87:c0:c5:98:fd:a9:aa:67:d1:fa:36:ad:47:57:ea: 01:45:c5:7a:e4:00:6f:0a:07:82:8c:2d:21:a2:9d: 91:4e:f6:6a:9d:c6:de:b0:56:20:a1:f1:b2:4d:40: 19:c9:7c:03:1e:0a:d7:d0:4d:07:fa:d9:c2:26:84: 5d:cd:c7:cf:73:73:a2:57:7e:10:66:37:e8:87:4f: 9b:01:8c:c6:2a:b1:6b:0a:1e:85:6b:38:21:a8:a3: 5d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:17:7D:DD:00:DC:6F:A4:70:68:C9:2D:F4:31:7E:0F:6B:73:71:4D X509v3 Authority Key Identifier: keyid:B6:2B:96:7C:52:14:5E:67:A4:B3:20:6B:1C:A4:92:85:3C:A0:DF:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tiuWfFIUXmeksyBrHKSShTyg34Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/12ff71-9e6c-40d9-9df7-773cfc4333e1/1/tiuWfFIUXmeksyBrHKSShTyg34Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:e8:2e:0f:aa:01:47:78:41:c9:87:29:f1:ff:a9:10:39:a0: 13:ab:79:59:68:3a:b8:c3:9f:76:29:53:82:d2:16:45:74:1d: 89:b1:5d:61:e1:0b:82:05:f9:59:dd:93:fc:d6:56:20:a3:70: d2:f5:67:04:0f:6c:bc:7a:03:d2:e6:7a:71:9c:d1:68:57:2f: 5f:fb:b1:a3:20:0f:64:52:de:50:bc:8b:1b:91:1d:59:d7:ca: c5:99:43:77:6d:aa:92:32:a9:1f:8a:39:3f:58:68:2d:f2:ee: 83:20:38:27:68:83:47:08:f8:f8:8a:b1:51:da:eb:b0:f1:bc: 3c:1d:2a:53:6c:95:1b:85:84:25:03:c2:e3:bc:4e:c5:14:53: fa:37:1a:9b:4a:df:9f:f6:fc:ff:ec:2d:44:79:59:9e:28:49: 6c:c1:73:26:7c:26:85:68:25:50:48:30:eb:8e:fc:bf:cb:a0: 46:05:da:2a:07:08:64:90:08:cb:9e:db:84:ce:36:52:62:4e: 1e:e8:79:8d:aa:f5:79:84:8b:b7:2e:79:a4:ff:f7:47:4d:8a: eb:40:f6:af:5b:c2:81:4c:c8:93:5a:d7:0c:7b:a4:b9:40:f4: 00:14:38:49:dd:b1:e5:8f:43:68:14:26:76:bc:81:ba:a1:48: a3:55:3b:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsx+mrsE8enBaRwgVCTUZ3qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MmI5NjdjNTIxNDVlNjdhNGIzMjA2YjFjYTQ5Mjg1M2Nh MGRmODQwHhcNMjUxMjE4MTUwMDUzWhcNMjUxMjE5MTUwMDUzWjAzMTEwLwYDVQQD EygwNTE3N2RkZDAwZGM2ZmE0NzA2OGM5MmRmNDMxN2UwZjZiNzM3MTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoH8CP2+bGnGfsvoS9is6XrNR+oK9 MS4W83JcoXrFrH9WqHozeW9KOfWk11BaENZE16zb26QSbwsu0QuytTPYUI6Oa6lJ d0ieEFj7BH3fpbOeaypY7asSvpftkNTNe661eHswfzTrabxHJRa0V+5LliE0QWbz i3fma44NWwQ28luR5qELqTq9d7gnRD7mOy+VLXjdnY86VwsSzdtBb11xKmR+o3uH wMWY/amqZ9H6Nq1HV+oBRcV65ABvCgeCjC0hop2RTvZqncbesFYgofGyTUAZyXwD HgrX0E0H+tnCJoRdzcfPc3OiV34QZjfoh0+bAYzGKrFrCh6FazghqKNd5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUXfd0A3G+kcGjJLfQxfg9rc3FNMB8GA1UdIwQY MBaAFLYrlnxSFF5npLMgaxykkoU8oN+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjct NzczY2ZjNDMzM2UxLzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8xMmZmNzEtOWU2Yy00MGQ5LTlkZjctNzczY2ZjNDMzM2Ux LzEvdGl1V2ZGSVVYbWVrc3lCckhLU1NoVHlnMzRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOguD6oB R3hByYcp8f+pEDmgE6t5WWg6uMOfdilTgtIWRXQdibFdYeELggX5Wd2T/NZWIKNw 0vVnBA9svHoD0uZ6cZzRaFcvX/uxoyAPZFLeULyLG5EdWdfKxZlDd22qkjKpH4o5 P1hoLfLugyA4J2iDRwj4+IqxUdrrsPG8PB0qU2yVG4WEJQPC47xOxRRT+jcam0rf n/b8/+wtRHlZnihJbMFzJnwmhWglUEgw6478v8ugRgXaKgcIZJAIy57bhM42UmJO Huh5jar1eYSLty55pP/3R02K60D2r1vCgUzIk1rXDHukuUD0ABQ4Sd2x5Y9DaBQm dryBuqFIo1U7og== -----END CERTIFICATE-----Generated at Thu Dec 18 16:58:59 2025 by rpki-client