This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft File: tucewFWW3EmUEGcP8hk_MJT6pqc.mft (raw, json) Hash identifier: SuvHu8q56Zjg8zJ8AHtf3ghpkzbNk+QorrCZrNFMbrc= Subject key identifier: F0:34:7B:65:62:C8:D7:61:0D:21:22:14:D0:DB:C1:96:6E:6B:00:AB Authority key identifier: B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7 Certificate issuer: /CN=b6e71ec05596dc499410670ff2193f3094faa6a7 Certificate serial: 019B22F0453213DFC0282FA78081BFC03149 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft Manifest number: 0160 Signing time: Mon 15 Dec 2025 16:55:30 +0000 Manifest this update: Mon 15 Dec 2025 16:55:30 +0000 Manifest next update: Tue 16 Dec 2025 16:55:30 +0000 Files and hashes: 1: S4YGxjFFYx1UUq6yBfO6YiDY5dI.roa (hash: rARze1SAZfPfzKqy2ZF22Nvf9MCEwRwPev+H/8Ra6Ak=) 2: tucewFWW3EmUEGcP8hk_MJT6pqc.crl (hash: 3oWpUxn9vUNXfw3ChBOsUQbUm9Y9zS2FDTNqK0UYQ88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f0:45:32:13:df:c0:28:2f:a7:80:81:bf:c0:31:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6e71ec05596dc499410670ff2193f3094faa6a7 Validity Not Before: Dec 15 16:55:30 2025 GMT Not After : Dec 16 16:55:30 2025 GMT Subject: CN=f0347b6562c8d7610d212214d0dbc1966e6b00ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:29:0b:55:c4:2f:60:e4:0a:f2:68:a7:ed: 2c:ac:d2:c5:64:35:1d:55:91:ea:b8:dd:22:c9:76: f3:34:b5:2c:79:b8:b1:f9:74:18:05:11:e0:f4:48: 7d:79:bc:28:72:1c:e8:31:4e:4b:ab:45:b4:1e:61: e2:3a:49:6b:0f:b9:7c:e4:56:7f:e0:19:6c:f1:47: c4:bf:2f:1d:43:6a:a0:06:cc:6d:8d:da:6e:4a:46: 61:f4:6b:d8:60:31:df:9d:01:fa:24:e5:0b:85:ee: d5:e7:36:a4:9b:0d:45:14:5b:c7:4a:3c:6a:29:0b: 5e:f2:02:4e:c6:6c:7b:6b:7a:08:e3:2f:fd:d3:89: fd:80:e3:fe:d2:df:8f:6c:1a:74:0d:85:58:01:02: 28:8b:36:e5:b6:a4:7e:e3:f5:63:00:f8:19:e3:7a: 18:f6:bf:e5:95:94:fe:20:ab:c8:1a:90:f4:81:4e: 17:b1:76:07:61:49:34:bd:15:40:53:6c:c5:a6:c3: 29:97:b6:47:af:29:d4:3d:46:7a:44:00:fe:0a:a2: 44:a6:67:7f:d4:dc:3a:95:f5:9a:ea:59:db:16:ea: 5a:22:92:6e:32:ec:23:79:fb:3f:1f:c9:7c:8e:fc: ce:23:08:a0:75:fb:f5:95:2a:19:27:4e:56:66:2a: c3:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:34:7B:65:62:C8:D7:61:0D:21:22:14:D0:DB:C1:96:6E:6B:00:AB X509v3 Authority Key Identifier: keyid:B6:E7:1E:C0:55:96:DC:49:94:10:67:0F:F2:19:3F:30:94:FA:A6:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tucewFWW3EmUEGcP8hk_MJT6pqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/941bd0-c4f3-45ee-8fd1-d5bcf28f748b/1/tucewFWW3EmUEGcP8hk_MJT6pqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:73:28:6e:77:ad:d7:87:e6:17:31:70:20:bc:93:c9:6a:26: 4d:54:a3:e8:dd:60:42:77:b1:2c:71:2b:46:71:67:bf:b4:e8: 72:5d:53:2c:69:a2:67:2d:5e:1d:07:69:2b:c1:f4:0a:f4:0d: e5:2b:e3:4a:0b:db:68:3f:6d:90:e0:fe:e5:1b:24:95:ad:d8: d5:f7:60:6c:07:44:15:39:2d:54:5c:f0:e3:51:53:34:1e:44: 76:d4:9a:a2:f1:5d:d8:82:41:12:5a:86:28:a2:5b:52:22:9f: 82:ed:88:95:97:bd:b1:62:1b:f9:9e:b7:00:f9:f1:e8:fe:25: e2:e6:11:b4:a2:19:a6:8c:de:33:32:3e:e9:f2:de:93:31:b6: fd:4e:8b:9f:1b:9c:46:e2:30:6e:5d:f1:56:c0:07:ce:7f:30: b0:43:18:08:5a:d9:9e:ad:1b:9b:18:82:19:99:28:ca:6a:29: 94:91:67:b8:f2:67:36:bf:e3:ac:f5:3c:ed:9a:a2:fe:ef:66: 06:00:ee:7c:f2:41:d8:44:a2:14:05:e3:b1:e0:82:20:fe:48: 24:34:5b:51:88:86:b3:82:f9:51:97:3d:3c:87:8c:72:bb:09: b6:9a:50:41:6d:69:2d:4e:39:ec:0e:64:f2:f7:b5:f6:c2:9a: 4a:b7:9c:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi8EUyE9/AKC+ngIG/wDFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZTcxZWMwNTU5NmRjNDk5NDEwNjcwZmYyMTkzZjMwOTRm YWE2YTcwHhcNMjUxMjE1MTY1NTMwWhcNMjUxMjE2MTY1NTMwWjAzMTEwLwYDVQQD EyhmMDM0N2I2NTYyYzhkNzYxMGQyMTIyMTRkMGRiYzE5NjZlNmIwMGFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWApC1XEL2DkCvJop+0srNLFZDUd VZHquN0iyXbzNLUsebix+XQYBRHg9Eh9ebwochzoMU5Lq0W0HmHiOklrD7l85FZ/ 4Bls8UfEvy8dQ2qgBsxtjdpuSkZh9GvYYDHfnQH6JOULhe7V5zakmw1FFFvHSjxq KQte8gJOxmx7a3oI4y/904n9gOP+0t+PbBp0DYVYAQIoizbltqR+4/VjAPgZ43oY 9r/llZT+IKvIGpD0gU4XsXYHYUk0vRVAU2zFpsMpl7ZHrynUPUZ6RAD+CqJEpmd/ 1Nw6lfWa6lnbFupaIpJuMuwjefs/H8l8jvzOIwigdfv1lSoZJ05WZirD+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPA0e2ViyNdhDSEiFNDbwZZuawCrMB8GA1UdIwQY MBaAFLbnHsBVltxJlBBnD/IZPzCU+qanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHVjZXdGV1czRW1VRUdjUDhoa19NSlQ2cHFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85NDFiZDAtYzRmMy00NWVlLThmZDEt ZDViY2YyOGY3NDhiLzEvdHVjZXdGV1czRW1VRUdjUDhoa19NSlQ2cHFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85NDFiZDAtYzRmMy00NWVlLThmZDEtZDViY2YyOGY3NDhi LzEvdHVjZXdGV1czRW1VRUdjUDhoa19NSlQ2cHFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoXMobnet 14fmFzFwILyTyWomTVSj6N1gQnexLHErRnFnv7Tocl1TLGmiZy1eHQdpK8H0CvQN 5SvjSgvbaD9tkOD+5Rskla3Y1fdgbAdEFTktVFzw41FTNB5EdtSaovFd2IJBElqG KKJbUiKfgu2IlZe9sWIb+Z63APnx6P4l4uYRtKIZpozeMzI+6fLekzG2/U6Lnxuc RuIwbl3xVsAHzn8wsEMYCFrZnq0bmxiCGZkoymoplJFnuPJnNr/jrPU87Zqi/u9m BgDufPJB2ESiFAXjseCCIP5IJDRbUYiGs4L5UZc9PIeMcrsJtppQQW1pLU457A5k 8ve19sKaSrecUA== -----END CERTIFICATE-----Generated at Tue Dec 16 01:09:38 2025 by rpki-client