This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft File: Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft (raw, json) Hash identifier: X4OeQ3penWKJBaOiK0C2x0AHuCFNmK9xHzpkklzGr6M= Subject key identifier: 79:94:06:F9:C8:43:CA:2D:13:7A:8D:63:B3:E5:26:8E:77:0B:2E:57 Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE Certificate issuer: /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee Certificate serial: 019B4701C5F962ABC47C5D17BF34EA89B3A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft Manifest number: 1786 Signing time: Mon 22 Dec 2025 17:00:57 +0000 Manifest this update: Mon 22 Dec 2025 17:00:57 +0000 Manifest next update: Tue 23 Dec 2025 17:00:57 +0000 Files and hashes: 1: EsNde2nZ0dUcA8Xoq5-tHg_EXc8.roa (hash: EuB6IqBcAAWKbULQ1dsjzb0/Ucv72mc0J9mJsdHmCGA=) 2: Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl (hash: L2KdSmwTCKAlYLDTfS06DaOcPvs9IeSCvj0nbSca1VA=) 3: eUaNjbQ13AL_bdj9OsodbJhievk.roa (hash: vqTtUX/Z4j6GrRJo/zNXECftqpV9YIa2rqV3Ge4NXvs=) 4: occ86qiOIs73r7C894le5tLORUc.roa (hash: vjqBb3FygjXd34w4UXc66ToikB55Yx9gYxFBgH7Uvw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 17:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:01:c5:f9:62:ab:c4:7c:5d:17:bf:34:ea:89:b3:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee Validity Not Before: Dec 22 17:00:57 2025 GMT Not After : Dec 23 17:00:57 2025 GMT Subject: CN=799406f9c843ca2d137a8d63b3e5268e770b2e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:12:2d:99:1f:9c:92:30:00:10:43:8a:d3:b8: 1b:fb:8b:e0:df:5c:6f:d5:a5:f1:e2:0b:c6:4a:a4: 77:1b:c0:6e:c2:8c:19:55:2b:3d:60:d8:c9:66:a9: 6f:0d:35:b6:28:72:03:8b:c8:4e:97:5f:ff:ef:23: 7f:21:11:4f:46:73:d0:29:42:3b:32:4b:3b:2b:23: b8:51:f3:2a:17:29:99:87:47:8c:db:1a:ca:95:99: 18:c1:b3:50:7d:a1:df:4d:1b:be:97:10:c0:f0:13: cd:d4:e9:01:44:7a:9b:5f:8b:a3:f9:d0:ef:0f:10: c0:dd:d4:58:ca:67:2e:7b:a5:59:1f:1e:21:e6:29: 17:77:76:78:9e:82:91:2e:d7:e9:e6:fa:07:b8:a4: 9d:c7:a7:cd:43:17:40:b1:87:38:7f:03:cf:bc:b8: 15:5d:73:21:78:d6:95:2b:5b:31:04:2d:26:63:6c: 82:d0:29:3d:56:4b:4b:f7:5e:48:fd:64:a1:b0:e5: 30:26:54:74:79:e4:b1:e7:c7:3d:39:8f:6b:22:a1: bc:38:88:c1:9e:db:96:65:e4:b2:dc:3f:05:7c:fd: 75:5c:c4:b9:1b:5b:f1:46:66:62:02:71:8a:f7:17: cf:f8:2b:83:a5:c9:84:7d:ab:ed:8d:f1:22:45:31: 89:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:94:06:F9:C8:43:CA:2D:13:7A:8D:63:B3:E5:26:8E:77:0B:2E:57 X509v3 Authority Key Identifier: keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:5f:d7:d3:a3:ac:fe:1b:6f:34:a3:5a:24:80:14:f7:18:3f: 58:65:f2:b1:bc:11:1e:8d:44:fa:c2:5b:ff:f2:e7:84:02:e0: 73:46:e0:e2:0e:08:65:29:d5:16:36:51:da:b7:72:64:cd:2f: f9:56:e3:db:e9:ab:09:9d:e2:cf:ae:98:0a:05:0d:2d:26:af: f9:16:6d:2a:7b:79:69:db:02:0d:3a:9c:8f:91:5f:88:ab:db: eb:ba:c4:a9:b8:6c:a4:de:ed:a1:0c:b9:fd:3f:38:5c:26:45: 13:7a:c1:b7:a3:5b:84:2e:6a:22:8b:17:ee:c5:cf:b7:fa:6c: 1d:21:9c:e7:c9:46:38:a9:0c:4b:c3:d4:4f:b3:e2:2b:e8:dd: 8b:a4:4f:c2:93:6d:d8:d4:14:56:8a:0f:04:f0:ee:76:a2:8c: f2:91:19:78:25:9c:ba:e1:0e:4c:67:6d:36:bb:a4:d6:9d:b3: f7:80:79:84:cb:86:4d:83:c9:e4:de:43:15:2a:29:b7:75:0d: fd:2a:d0:2e:1e:f9:e2:ab:77:1b:91:bd:d6:11:c3:c1:84:e0: 0e:45:86:26:e9:ac:7c:9d:88:68:3c:ba:ff:fc:c9:bf:e4:61: 37:f7:6d:89:94:70:f1:2b:aa:b6:e1:bb:fc:68:55:7a:8c:f8: c2:8f:09:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAcX5YqvEfF0XvzTqibOiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWY2YWFlNmZiYTVjNjFhNjE3MzlhZmNhYjU1YTYyMjY2 ZTg5ZWUwHhcNMjUxMjIyMTcwMDU3WhcNMjUxMjIzMTcwMDU3WjAzMTEwLwYDVQQD Eyg3OTk0MDZmOWM4NDNjYTJkMTM3YThkNjNiM2U1MjY4ZTc3MGIyZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthItmR+ckjAAEEOK07gb+4vg31xv 1aXx4gvGSqR3G8BuwowZVSs9YNjJZqlvDTW2KHIDi8hOl1//7yN/IRFPRnPQKUI7 Mks7KyO4UfMqFymZh0eM2xrKlZkYwbNQfaHfTRu+lxDA8BPN1OkBRHqbX4uj+dDv DxDA3dRYymcue6VZHx4h5ikXd3Z4noKRLtfp5voHuKSdx6fNQxdAsYc4fwPPvLgV XXMheNaVK1sxBC0mY2yC0Ck9VktL915I/WShsOUwJlR0eeSx58c9OY9rIqG8OIjB ntuWZeSy3D8FfP11XMS5G1vxRmZiAnGK9xfP+CuDpcmEfavtjfEiRTGJBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmUBvnIQ8otE3qNY7PlJo53Cy5XMB8GA1UdIwQY MBaAFE7vaq5vulxhphc5r8q1WmImbonuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHU5cXJtLTZYR0dtRnptdnlyVmFZaVp1aWU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iOGU1YzQtMzhlYi00NDVmLWIwMzYt YzM3NzkwZTZkNDgyLzEvVHU5cXJtLTZYR0dtRnptdnlyVmFZaVp1aWU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iOGU1YzQtMzhlYi00NDVmLWIwMzYtYzM3NzkwZTZkNDgy LzEvVHU5cXJtLTZYR0dtRnptdnlyVmFZaVp1aWU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABl/X06Os /htvNKNaJIAU9xg/WGXysbwRHo1E+sJb//LnhALgc0bg4g4IZSnVFjZR2rdyZM0v +Vbj2+mrCZ3iz66YCgUNLSav+RZtKnt5adsCDTqcj5FfiKvb67rEqbhspN7toQy5 /T84XCZFE3rBt6NbhC5qIosX7sXPt/psHSGc58lGOKkMS8PUT7PiK+jdi6RPwpNt 2NQUVooPBPDudqKM8pEZeCWcuuEOTGdtNruk1p2z94B5hMuGTYPJ5N5DFSopt3UN /SrQLh754qt3G5G91hHDwYTgDkWGJumsfJ2IaDy6//zJv+RhN/dtiZRw8SuqtuG7 /GhVeoz4wo8JrQ== -----END CERTIFICATE-----Generated at Tue Dec 23 03:23:27 2025 by rpki-client