This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft File: Tu24VWoM8egtjnx5BY8O-1BALKY.mft (raw, json) Hash identifier: Bop+bHq84IiGqnvKwBCF0mOzgpG/s13CGZZlpQ7qP+U= Subject key identifier: 21:04:5E:C5:86:B3:41:CD:8E:AE:68:48:38:3A:9C:1D:E2:FC:31:6B Authority key identifier: 4E:ED:B8:55:6A:0C:F1:E8:2D:8E:7C:79:05:8F:0E:FB:50:40:2C:A6 Certificate issuer: /CN=4eedb8556a0cf1e82d8e7c79058f0efb50402ca6 Certificate serial: 019B5A882964068F5E8823EC1E57B51BC268 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu24VWoM8egtjnx5BY8O-1BALKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft Manifest number: 0113 Signing time: Fri 26 Dec 2025 12:00:31 +0000 Manifest this update: Fri 26 Dec 2025 12:00:31 +0000 Manifest next update: Sat 27 Dec 2025 12:00:31 +0000 Files and hashes: 1: Tu24VWoM8egtjnx5BY8O-1BALKY.crl (hash: 7q8AKYpHd9eo/yBEYZbo7mHgROWYGPhWKuDK5HqS6Kw=) 2: dTqGBPJdhAtYfJdhKht0AshnDHA.roa (hash: cv0gljmXyVFEUJxvPpTotnLGffpzplLUWeRT5xXyBkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft rsync://rpki.ripe.net/repository/DEFAULT/Tu24VWoM8egtjnx5BY8O-1BALKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:29:64:06:8f:5e:88:23:ec:1e:57:b5:1b:c2:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eedb8556a0cf1e82d8e7c79058f0efb50402ca6 Validity Not Before: Dec 26 12:00:31 2025 GMT Not After : Dec 27 12:00:31 2025 GMT Subject: CN=21045ec586b341cd8eae6848383a9c1de2fc316b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:31:d3:3c:cd:3e:2d:cc:18:46:54:f2:2e:c6: cc:63:f5:d3:42:9b:af:30:80:67:c3:93:02:99:f1: 61:38:1c:92:8a:c5:bb:35:f7:33:56:47:92:bd:09: ec:de:29:ab:89:b7:4b:40:32:43:e6:bc:d1:a2:d5: ea:18:c8:da:6a:e5:51:72:a8:a3:54:26:47:b1:88: 1c:fe:ef:29:e3:05:05:20:72:c2:91:63:76:4c:dc: d1:36:d9:98:cd:1b:4e:a6:d5:ac:78:e8:6d:3f:af: 80:3b:17:27:66:bf:c8:81:47:fd:f1:61:ff:e8:fe: 66:e3:01:fe:e9:87:30:a5:6d:e9:34:8f:a5:d8:b5: 92:61:f2:db:4e:74:aa:ce:7c:43:8a:f1:74:5a:a6: 2f:c8:36:8c:72:5d:ec:7c:e0:53:9e:d1:f3:41:f0: 49:50:3a:6f:73:fc:71:7f:f9:77:58:cf:8b:38:8d: 0b:43:b5:48:6d:21:26:df:f1:51:c3:2a:ff:4d:cf: 16:b4:cd:80:62:af:cd:86:cd:7a:68:07:eb:1a:f9: 65:fe:04:bc:21:82:d4:f0:63:e7:b8:0a:19:e2:98: 48:a0:9d:9e:cc:d7:48:87:46:fe:d9:3f:1a:45:6b: 0f:23:89:34:39:6b:26:80:be:f8:29:fa:20:99:e4: ff:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:04:5E:C5:86:B3:41:CD:8E:AE:68:48:38:3A:9C:1D:E2:FC:31:6B X509v3 Authority Key Identifier: keyid:4E:ED:B8:55:6A:0C:F1:E8:2D:8E:7C:79:05:8F:0E:FB:50:40:2C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu24VWoM8egtjnx5BY8O-1BALKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:19:3d:45:c0:fc:9d:cf:e5:11:4c:4f:51:70:7e:4e:45:9a: 00:11:29:b1:df:86:bc:30:de:2e:55:86:08:b4:ce:3d:87:bb: ba:b5:04:73:f2:0e:b4:54:6a:53:f8:83:d7:ea:37:c7:7c:81: b2:7d:c4:44:1d:e6:c4:5c:32:8c:de:e7:b3:09:51:6c:8e:a6: e7:23:c9:ad:ff:67:40:82:b8:37:39:53:ab:cb:fe:d9:9e:23: 5e:df:79:79:fe:8a:32:0a:ec:ca:1a:a8:74:65:af:6b:28:b9: 8d:60:83:18:6e:cc:a1:30:9a:c4:9a:2a:8e:ac:1a:11:41:0f: 5d:b6:c8:ae:a4:8a:db:9d:e2:d7:81:e1:57:aa:f5:89:42:98: 41:7c:73:3c:08:57:c6:8f:87:60:58:49:1e:a9:6c:2e:47:91: 83:5c:51:8d:6d:be:1a:d7:4e:b5:9b:4f:5b:96:8a:db:67:cf: da:08:b9:a3:b0:7b:c7:e2:ec:cd:0b:5e:c1:1d:09:d8:96:8c: 14:56:21:69:c4:41:0c:01:fc:1b:c6:99:ba:66:1e:a8:cd:0b: 76:73:32:3e:6b:ad:a0:58:a9:d6:c4:38:5a:63:cd:77:80:4c: 23:8d:03:54:78:60:3d:b5:77:38:c3:e9:b1:c9:75:8b:2d:60: 9e:ca:c7:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiClkBo9eiCPsHle1G8JoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWRiODU1NmEwY2YxZTgyZDhlN2M3OTA1OGYwZWZiNTA0 MDJjYTYwHhcNMjUxMjI2MTIwMDMxWhcNMjUxMjI3MTIwMDMxWjAzMTEwLwYDVQQD EygyMTA0NWVjNTg2YjM0MWNkOGVhZTY4NDgzODNhOWMxZGUyZmMzMTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jHTPM0+LcwYRlTyLsbMY/XTQpuv MIBnw5MCmfFhOBySisW7NfczVkeSvQns3imribdLQDJD5rzRotXqGMjaauVRcqij VCZHsYgc/u8p4wUFIHLCkWN2TNzRNtmYzRtOptWseOhtP6+AOxcnZr/IgUf98WH/ 6P5m4wH+6YcwpW3pNI+l2LWSYfLbTnSqznxDivF0WqYvyDaMcl3sfOBTntHzQfBJ UDpvc/xxf/l3WM+LOI0LQ7VIbSEm3/FRwyr/Tc8WtM2AYq/Nhs16aAfrGvll/gS8 IYLU8GPnuAoZ4phIoJ2ezNdIh0b+2T8aRWsPI4k0OWsmgL74KfogmeT/2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEEXsWGs0HNjq5oSDg6nB3i/DFrMB8GA1UdIwQY MBaAFE7tuFVqDPHoLY58eQWPDvtQQCymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHUyNFZXb004ZWd0am54NUJZOE8tMUJBTEtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84ODRhYWUtMjIwMy00ZjIxLTkxYTQt OGYxZmYzODgwMTAyLzEvVHUyNFZXb004ZWd0am54NUJZOE8tMUJBTEtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84ODRhYWUtMjIwMy00ZjIxLTkxYTQtOGYxZmYzODgwMTAy LzEvVHUyNFZXb004ZWd0am54NUJZOE8tMUJBTEtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMxk9RcD8 nc/lEUxPUXB+TkWaABEpsd+GvDDeLlWGCLTOPYe7urUEc/IOtFRqU/iD1+o3x3yB sn3ERB3mxFwyjN7nswlRbI6m5yPJrf9nQIK4NzlTq8v+2Z4jXt95ef6KMgrsyhqo dGWvayi5jWCDGG7MoTCaxJoqjqwaEUEPXbbIrqSK253i14HhV6r1iUKYQXxzPAhX xo+HYFhJHqlsLkeRg1xRjW2+GtdOtZtPW5aK22fP2gi5o7B7x+LszQtewR0J2JaM FFYhacRBDAH8G8aZumYeqM0LdnMyPmutoFip1sQ4WmPNd4BMI40DVHhgPbV3OMPp scl1iy1gnsrHhw== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:18 2025 by rpki-client