This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft File: Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft (raw, json) Hash identifier: 9ie9ChizezkdhxrXz9jAwCAJxj2AN0MXoO1w6M0SeRY= Subject key identifier: 07:63:80:11:5F:E0:DF:23:B4:E4:D5:BF:56:FB:49:F2:D0:52:14:9F Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE Certificate issuer: /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee Certificate serial: 019B243ECBD587CE9EDE389D82DDCC003063 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft Manifest number: 1774 Signing time: Mon 15 Dec 2025 23:00:53 +0000 Manifest this update: Mon 15 Dec 2025 23:00:53 +0000 Manifest next update: Tue 16 Dec 2025 23:00:53 +0000 Files and hashes: 1: EsNde2nZ0dUcA8Xoq5-tHg_EXc8.roa (hash: EuB6IqBcAAWKbULQ1dsjzb0/Ucv72mc0J9mJsdHmCGA=) 2: Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl (hash: H2WYaBH4vt5KsKLzmx37yLa1AkQacvZ2JRYqIsrIRBk=) 3: eUaNjbQ13AL_bdj9OsodbJhievk.roa (hash: vqTtUX/Z4j6GrRJo/zNXECftqpV9YIa2rqV3Ge4NXvs=) 4: occ86qiOIs73r7C894le5tLORUc.roa (hash: vjqBb3FygjXd34w4UXc66ToikB55Yx9gYxFBgH7Uvw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:3e:cb:d5:87:ce:9e:de:38:9d:82:dd:cc:00:30:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee Validity Not Before: Dec 15 23:00:53 2025 GMT Not After : Dec 16 23:00:53 2025 GMT Subject: CN=076380115fe0df23b4e4d5bf56fb49f2d052149f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:40:ec:8d:3d:67:56:f9:ff:a6:de:1a:4a:37: 39:d8:a2:f5:56:87:47:94:46:92:29:46:d5:f6:2e: 06:bc:fe:92:69:c2:66:9d:e2:48:8d:e0:35:c2:54: c9:78:36:e5:1d:4e:c9:d9:ae:50:35:a7:04:21:8b: d7:0b:61:03:18:6a:fa:89:2b:a5:d8:fc:79:fb:e2: 6d:91:d3:a4:08:e4:ea:e3:93:16:97:aa:59:f6:71: 30:22:a1:16:3f:2e:c2:23:2d:70:60:ef:0c:c4:8f: 53:80:62:d1:90:9b:84:b9:50:84:e6:25:3a:d6:ab: a9:30:6c:ec:3f:d6:01:6b:81:a4:98:a6:fd:ae:72: 35:da:77:39:fd:8a:fd:39:04:e9:91:d3:d3:ae:9b: 47:31:3c:6a:ae:d4:7b:12:3a:c6:99:60:24:60:64: f4:43:12:a2:9f:b5:97:18:6a:a4:90:50:41:e0:ad: a1:04:4c:4b:f5:12:ab:a1:31:fe:c9:90:4d:14:74: 89:b8:2a:34:ad:97:e6:20:4e:ef:03:fa:a1:49:00: 14:ea:98:81:2c:d0:ac:d4:b1:b7:50:1d:c2:fa:cc: 25:20:bc:32:b5:03:1a:8b:c6:bf:33:b0:0a:08:f4: 02:ef:58:26:4c:55:31:0c:0b:80:b5:e5:46:51:b2: 86:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:63:80:11:5F:E0:DF:23:B4:E4:D5:BF:56:FB:49:F2:D0:52:14:9F X509v3 Authority Key Identifier: keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:38:ff:5b:9b:56:3c:d5:b0:09:14:d1:f0:b6:ba:1f:1c:a9: dc:9f:fa:e0:4d:f6:80:8c:cb:39:4f:78:7d:b3:56:e2:94:d6: 06:64:3a:f4:54:24:26:03:92:52:56:04:6b:c6:cd:de:cd:d8: d7:f8:0c:bf:15:6a:37:97:ad:bb:d6:1e:40:fc:5e:48:21:3a: fa:83:be:96:4f:75:ea:2b:38:41:0f:11:7d:74:0f:7c:a3:71: ec:55:71:bf:e2:77:62:e9:97:1e:e5:09:3c:cb:dc:e0:56:c5: f3:2e:07:c3:c8:4f:39:0f:81:8f:ac:f6:cc:05:60:d2:ad:6c: 5b:d0:cf:70:2e:77:5e:4c:90:f3:57:dc:d0:45:5d:90:2a:95: 1a:92:79:2b:ac:cc:3d:e2:17:f0:56:e3:3e:3d:5c:d9:87:0c: 87:c8:4a:20:3a:06:1d:2c:2b:b6:c8:c1:34:4b:b1:f0:68:b5: 94:86:f6:36:7f:85:1c:74:d3:24:9e:80:49:3c:98:35:c1:00: e2:7b:17:f5:0c:f1:40:94:14:c3:1d:0a:87:a6:a5:9d:0a:bb: f7:d5:2f:c2:74:1a:35:96:39:7e:ba:74:3e:09:50:8c:f6:61: f5:4b:1c:4f:3c:f8:19:d9:1c:3a:24:21:43:14:ca:94:82:8b: cb:9f:aa:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskPsvVh86e3jidgt3MADBjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWY2YWFlNmZiYTVjNjFhNjE3MzlhZmNhYjU1YTYyMjY2 ZTg5ZWUwHhcNMjUxMjE1MjMwMDUzWhcNMjUxMjE2MjMwMDUzWjAzMTEwLwYDVQQD EygwNzYzODAxMTVmZTBkZjIzYjRlNGQ1YmY1NmZiNDlmMmQwNTIxNDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEDsjT1nVvn/pt4aSjc52KL1VodH lEaSKUbV9i4GvP6SacJmneJIjeA1wlTJeDblHU7J2a5QNacEIYvXC2EDGGr6iSul 2Px5++JtkdOkCOTq45MWl6pZ9nEwIqEWPy7CIy1wYO8MxI9TgGLRkJuEuVCE5iU6 1qupMGzsP9YBa4GkmKb9rnI12nc5/Yr9OQTpkdPTrptHMTxqrtR7EjrGmWAkYGT0 QxKin7WXGGqkkFBB4K2hBExL9RKroTH+yZBNFHSJuCo0rZfmIE7vA/qhSQAU6piB LNCs1LG3UB3C+swlILwytQMai8a/M7AKCPQC71gmTFUxDAuAteVGUbKG6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdjgBFf4N8jtOTVv1b7SfLQUhSfMB8GA1UdIwQY MBaAFE7vaq5vulxhphc5r8q1WmImbonuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHU5cXJtLTZYR0dtRnptdnlyVmFZaVp1aWU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iOGU1YzQtMzhlYi00NDVmLWIwMzYt YzM3NzkwZTZkNDgyLzEvVHU5cXJtLTZYR0dtRnptdnlyVmFZaVp1aWU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iOGU1YzQtMzhlYi00NDVmLWIwMzYtYzM3NzkwZTZkNDgy LzEvVHU5cXJtLTZYR0dtRnptdnlyVmFZaVp1aWU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjj/W5tW PNWwCRTR8La6Hxyp3J/64E32gIzLOU94fbNW4pTWBmQ69FQkJgOSUlYEa8bN3s3Y 1/gMvxVqN5etu9YeQPxeSCE6+oO+lk916is4QQ8RfXQPfKNx7FVxv+J3YumXHuUJ PMvc4FbF8y4Hw8hPOQ+Bj6z2zAVg0q1sW9DPcC53XkyQ81fc0EVdkCqVGpJ5K6zM PeIX8FbjPj1c2YcMh8hKIDoGHSwrtsjBNEux8Gi1lIb2Nn+FHHTTJJ6ASTyYNcEA 4nsX9QzxQJQUwx0Kh6alnQq799UvwnQaNZY5frp0PglQjPZh9UscTzz4GdkcOiQh QxTKlIKLy5+q+A== -----END CERTIFICATE-----Generated at Tue Dec 16 04:45:14 2025 by rpki-client