This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft File: tucewFWW3EmUEGcP8hk_MJT6pqc.mft (raw, json) Hash identifier: gcp5Kbquy44HNeJzCp1JmWEOMT9qtTjLdrri7wO4tQY= Subject key identifier: 32:1F:54:32:0B:1A:FD:49:9E:30:C9:3D:A3:36:CD:70:95:A1:FB:43 Authority key identifier: B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7 Certificate issuer: /CN=b6e71ec05596dc499410670ff2193f3094faa6a7 Certificate serial: 019C2329DE29234A4A2AE24B0DCF3567FD3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft Manifest number: 01E5 Signing time: Tue 03 Feb 2026 11:01:12 +0000 Manifest this update: Tue 03 Feb 2026 11:01:12 +0000 Manifest next update: Wed 04 Feb 2026 11:01:12 +0000 Files and hashes: 1: tucewFWW3EmUEGcP8hk_MJT6pqc.crl (hash: u/o6XOVASsvTZBaZSqZdVzSE8XVXg9tUyQ6NbM8VFPk=) 2: wFdwl3GPZJGJpXxabTkhX-gww84.roa (hash: 1a0mdIaHaosCkhFYntZmxOwmIiA+NPlXeJT6rqJ3578=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:23:29:de:29:23:4a:4a:2a:e2:4b:0d:cf:35:67:fd:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6e71ec05596dc499410670ff2193f3094faa6a7 Validity Not Before: Feb 3 11:01:12 2026 GMT Not After : Feb 4 11:01:12 2026 GMT Subject: CN=321f54320b1afd499e30c93da336cd7095a1fb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d8:e1:11:ce:df:01:bd:d1:90:9d:03:b4:55: 65:10:40:41:94:fe:66:e9:d8:73:ee:0b:b8:2a:30: f8:4d:d5:ff:43:25:7d:8e:e4:d8:8e:a6:c5:4f:0b: 73:ff:68:f3:65:8d:9c:70:41:d0:30:86:2b:21:09: be:07:32:bf:23:5b:2e:f5:43:e7:97:2b:48:22:a7: d2:40:5d:f0:92:27:c6:6d:06:7f:e5:cb:c0:07:55: f2:5a:c7:bc:df:cf:a0:af:ec:e1:3d:6b:94:a1:d6: df:f4:4e:07:47:08:47:e3:6e:25:29:ab:a1:2e:c7: fa:3d:6b:07:34:9d:76:af:10:3e:8c:84:a2:44:0d: fe:0d:b8:7b:5f:e6:b6:60:28:47:75:a3:12:3b:77: 4c:07:65:ef:a9:12:2c:78:72:24:f9:bb:f9:ce:38: 23:5d:cd:08:2e:a4:78:77:20:d7:9e:1f:24:65:1b: 7b:f2:4c:fe:e2:ed:ca:60:cb:16:31:f5:07:4b:63: 5b:b9:0e:8f:e6:cd:6b:2c:6c:ae:67:ec:52:df:09: c0:12:34:cc:1f:a2:c4:50:7b:68:5a:83:fb:e1:9e: b8:c1:2e:12:ca:b8:cf:6b:2d:8d:da:6c:41:52:d7: 00:5c:95:e6:bb:3c:67:2d:a1:24:e0:f3:7d:6e:8f: 7f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1F:54:32:0B:1A:FD:49:9E:30:C9:3D:A3:36:CD:70:95:A1:FB:43 X509v3 Authority Key Identifier: keyid:B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:81:21:3f:17:68:a0:5e:eb:99:c5:2a:8e:25:e0:71:f9:4c: 1f:50:c2:af:f3:ba:36:53:64:32:57:6f:a4:d2:e9:79:00:5a: de:83:77:99:71:8e:55:f3:8e:e2:e8:15:69:fe:ce:65:60:f7: b7:16:c9:14:28:46:71:ef:91:3b:78:76:0c:6c:84:ca:ed:6f: 74:41:05:b5:d0:ca:36:d9:20:7f:79:0c:13:2a:9c:e5:df:28: 81:0b:82:ad:35:f8:f5:0e:9a:50:50:c3:3f:86:72:2c:f1:ff: 41:1a:3e:ff:ee:b9:06:ac:d7:d9:d4:ca:bc:ef:13:f3:f9:23: ea:e5:94:ac:22:3d:04:2f:b0:0e:05:2d:fc:ce:62:05:6d:07: d1:c2:b9:67:16:89:66:bb:07:21:dd:4c:9f:bf:0f:a0:71:43: 76:ba:ea:48:30:b3:e5:02:71:38:88:23:4d:d0:92:25:3e:93: 10:6b:04:58:0c:c4:0c:cc:8b:d1:fe:9e:83:43:ae:0f:33:f8: a1:43:06:b2:c8:d3:4d:55:37:85:c5:a0:5a:9f:e1:be:ff:f1: d6:01:98:fc:64:59:91:01:6f:dd:23:4e:8b:34:2c:7f:b0:53: 41:81:f6:a0:bd:9e:3a:e6:ae:47:a5:bb:17:e1:42:60:63:f9: 4d:26:33:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwjKd4pI0pKKuJLDc81Z/09MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZTcxZWMwNTU5NmRjNDk5NDEwNjcwZmYyMTkzZjMwOTRm YWE2YTcwHhcNMjYwMjAzMTEwMTEyWhcNMjYwMjA0MTEwMTEyWjAzMTEwLwYDVQQD EygzMjFmNTQzMjBiMWFmZDQ5OWUzMGM5M2RhMzM2Y2Q3MDk1YTFmYjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdjhEc7fAb3RkJ0DtFVlEEBBlP5m 6dhz7gu4KjD4TdX/QyV9juTYjqbFTwtz/2jzZY2ccEHQMIYrIQm+BzK/I1su9UPn lytIIqfSQF3wkifGbQZ/5cvAB1XyWse838+gr+zhPWuUodbf9E4HRwhH424lKauh Lsf6PWsHNJ12rxA+jISiRA3+Dbh7X+a2YChHdaMSO3dMB2XvqRIseHIk+bv5zjgj Xc0ILqR4dyDXnh8kZRt78kz+4u3KYMsWMfUHS2NbuQ6P5s1rLGyuZ+xS3wnAEjTM H6LEUHtoWoP74Z64wS4SyrjPay2N2mxBUtcAXJXmuzxnLaEk4PN9bo9/3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIfVDILGv1JnjDJPaM2zXCVoftDMB8GA1UdIwQY MBaAFLbnHsBVltxJlBBnD/IZPzCU+qanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHVjZXdGV1czRW1VRUdjUDhoa19NSlQ2cHFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85NDFiZDAtYzRmMy00NWVlLThmZDEt ZDViY2YyOGY3NDhiLzEvdHVjZXdGV1czRW1VRUdjUDhoa19NSlQ2cHFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85NDFiZDAtYzRmMy00NWVlLThmZDEtZDViY2YyOGY3NDhi LzEvdHVjZXdGV1czRW1VRUdjUDhoa19NSlQ2cHFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4EhPxdo oF7rmcUqjiXgcflMH1DCr/O6NlNkMldvpNLpeQBa3oN3mXGOVfOO4ugVaf7OZWD3 txbJFChGce+RO3h2DGyEyu1vdEEFtdDKNtkgf3kMEyqc5d8ogQuCrTX49Q6aUFDD P4ZyLPH/QRo+/+65BqzX2dTKvO8T8/kj6uWUrCI9BC+wDgUt/M5iBW0H0cK5ZxaJ ZrsHId1Mn78PoHFDdrrqSDCz5QJxOIgjTdCSJT6TEGsEWAzEDMyL0f6eg0OuDzP4 oUMGssjTTVU3hcWgWp/hvv/x1gGY/GRZkQFv3SNOizQsf7BTQYH2oL2eOuauR6W7 F+FCYGP5TSYzZg== -----END CERTIFICATE-----Generated at Tue Feb 3 14:43:34 2026 by rpki-client