This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft File: tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft (raw, json) Hash identifier: LzGTSqhqiZHlAa+Y0x9qA+tT8xMJwnRd3BAkVctCdUg= Subject key identifier: B1:4D:8F:B4:A0:34:2B:8E:77:05:D8:33:99:11:D4:E1:C9:F5:F9:8E Authority key identifier: B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81 Certificate issuer: /CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081 Certificate serial: 019B341F99663B8DC00EE7AF78DB2E0FE560 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft Manifest number: 0D70 Signing time: Fri 19 Dec 2025 01:00:44 +0000 Manifest this update: Fri 19 Dec 2025 01:00:44 +0000 Manifest next update: Sat 20 Dec 2025 01:00:44 +0000 Files and hashes: 1: Y7rbDno7w__NNU8_Y1vybLh8QhU.roa (hash: JcJWoK6XwWQ+PAZZ9rS/dpHArel2kscu87IT6w7P4BM=) 2: tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl (hash: dXes4wxjc4ERafPl6NXOwqcNXPpacCl8a4k/CGxhBwo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:1f:99:66:3b:8d:c0:0e:e7:af:78:db:2e:0f:e5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081 Validity Not Before: Dec 19 01:00:44 2025 GMT Not After : Dec 20 01:00:44 2025 GMT Subject: CN=b14d8fb4a0342b8e7705d8339911d4e1c9f5f98e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3f:1f:65:1e:0f:af:e9:42:7d:58:f2:d2:dc: 8b:e1:2a:6d:68:65:20:56:ae:e0:9b:e6:13:7f:15: 2a:cc:c3:e0:a8:e9:0c:57:e8:c2:26:2a:4a:79:57: 0e:f0:71:fa:1d:62:4e:53:8c:e1:c3:18:d0:21:ba: 8f:bb:ab:ce:de:5c:38:db:80:09:25:da:f3:b4:2d: 6c:68:64:79:d6:ab:7e:7f:78:be:d1:60:03:67:72: d0:93:46:83:e1:a5:91:25:ea:ef:41:f0:58:5d:db: 2c:ea:ed:30:03:5f:2c:d5:65:c5:53:9b:16:4d:b3: 49:67:9d:c6:cf:16:00:dd:f8:f8:74:45:eb:43:a4: 4a:60:14:69:ac:b8:71:9c:3e:ab:57:4f:64:cc:eb: de:f0:89:ae:cf:ec:c9:f8:df:df:16:ff:56:be:76: 34:32:57:da:6d:1d:99:1e:a5:59:fd:7e:a4:26:5a: 2c:76:d0:58:79:2f:ba:23:15:57:b9:f6:ec:c4:9d: 87:d1:6f:c4:b9:5d:bc:ba:50:94:34:eb:b0:63:be: de:60:b4:72:83:b6:35:4e:0a:8b:0b:5f:c3:07:1e: 79:66:5e:82:78:98:7b:41:1b:65:bc:55:c9:05:0f: d4:4c:93:c7:55:9c:95:50:62:9d:10:12:eb:e3:58: 12:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4D:8F:B4:A0:34:2B:8E:77:05:D8:33:99:11:D4:E1:C9:F5:F9:8E X509v3 Authority Key Identifier: keyid:B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:3a:8c:bc:cd:2a:65:ff:bd:c5:cd:37:68:a9:e4:fa:cd:43: a2:af:cc:09:47:8a:b2:d9:78:cd:2d:b2:fa:89:b4:7e:c9:42: 2e:f5:16:04:26:85:f3:ad:7a:52:4a:1c:4a:88:2c:90:48:69: 3b:bb:72:38:15:e7:e9:9c:ca:72:b2:59:84:17:69:bf:49:7f: b7:fa:37:e4:14:9b:35:cf:f8:d8:ca:a6:6f:5c:07:09:d8:7f: d5:17:f6:03:9e:30:71:a3:97:f1:9b:f6:6f:ff:0e:94:60:0d: 12:46:8f:03:a6:a8:be:85:d6:95:29:a4:95:b7:84:89:80:e8: c8:28:cf:ee:d9:a3:c9:0b:f3:6e:6f:57:4c:8c:a8:43:b4:16: cc:d2:58:f5:6e:47:f7:7e:c1:66:f0:32:84:ed:73:4f:25:d6: 30:5a:e1:3a:7a:9a:2c:94:bb:99:6e:10:eb:08:86:55:a2:b3: c8:3b:f8:86:84:56:e6:79:e5:cf:09:e7:e5:9b:a8:81:8a:f5: d5:dc:64:ea:9f:2e:c0:a1:55:a8:09:13:c0:4d:28:fc:64:1d: 6f:e9:4a:71:a2:02:b0:dd:88:28:d5:9e:a1:ef:5c:01:a6:0f: bc:28:2f:90:bf:bf:ba:77:76:f3:02:8e:0a:6a:d3:50:1b:b2: fe:db:98:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0H5lmO43ADueveNsuD+VgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDJiYzBkOGNjMjhmNTU4NjE1ZWQzZmFlNTNjYWNlNGE2 ZWYwODEwHhcNMjUxMjE5MDEwMDQ0WhcNMjUxMjIwMDEwMDQ0WjAzMTEwLwYDVQQD EyhiMTRkOGZiNGEwMzQyYjhlNzcwNWQ4MzM5OTExZDRlMWM5ZjVmOThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj8fZR4Pr+lCfVjy0tyL4SptaGUg Vq7gm+YTfxUqzMPgqOkMV+jCJipKeVcO8HH6HWJOU4zhwxjQIbqPu6vO3lw424AJ JdrztC1saGR51qt+f3i+0WADZ3LQk0aD4aWRJervQfBYXdss6u0wA18s1WXFU5sW TbNJZ53GzxYA3fj4dEXrQ6RKYBRprLhxnD6rV09kzOve8Imuz+zJ+N/fFv9WvnY0 MlfabR2ZHqVZ/X6kJlosdtBYeS+6IxVXufbsxJ2H0W/EuV28ulCUNOuwY77eYLRy g7Y1TgqLC1/DBx55Zl6CeJh7QRtlvFXJBQ/UTJPHVZyVUGKdEBLr41gSmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFNj7SgNCuOdwXYM5kR1OHJ9fmOMB8GA1UdIwQY MBaAFLVCvA2Mwo9VhhXtP65Tys5KbvCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVLOERZekNqMVdHRmUwX3JsUEt6a3B1OElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMWUwZmYtOTY5Ni00YjYxLWJkNWUt N2Y2ZTQ5MzBmMjVhLzEvdFVLOERZekNqMVdHRmUwX3JsUEt6a3B1OElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9iMWUwZmYtOTY5Ni00YjYxLWJkNWUtN2Y2ZTQ5MzBmMjVh LzEvdFVLOERZekNqMVdHRmUwX3JsUEt6a3B1OElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArzqMvM0q Zf+9xc03aKnk+s1Doq/MCUeKstl4zS2y+om0fslCLvUWBCaF8616UkocSogskEhp O7tyOBXn6ZzKcrJZhBdpv0l/t/o35BSbNc/42Mqmb1wHCdh/1Rf2A54wcaOX8Zv2 b/8OlGANEkaPA6aovoXWlSmklbeEiYDoyCjP7tmjyQvzbm9XTIyoQ7QWzNJY9W5H 937BZvAyhO1zTyXWMFrhOnqaLJS7mW4Q6wiGVaKzyDv4hoRW5nnlzwnn5ZuogYr1 1dxk6p8uwKFVqAkTwE0o/GQdb+lKcaICsN2IKNWeoe9cAaYPvCgvkL+/und28wKO CmrTUBuy/tuY6w== -----END CERTIFICATE-----Generated at Fri Dec 19 11:39:39 2025 by rpki-client