This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft File: Tu8gTX6G_4FiSmGBKG521DOHa8c.mft (raw, json) Hash identifier: XkEKim8c9Iqog9JFQRnh2kx5f0W2sDrK7DUz/N61Jvo= Subject key identifier: E3:90:C4:DC:78:1A:03:23:5B:E7:FA:14:3A:54:18:CC:01:B7:DF:5E Authority key identifier: 4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7 Certificate issuer: /CN=4eef204d7e86ff81624a6181286e76d433876bc7 Certificate serial: 019B597730FC8B21A41B80543EA98D201E83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft Manifest number: 1697 Signing time: Fri 26 Dec 2025 07:02:22 +0000 Manifest this update: Fri 26 Dec 2025 07:02:22 +0000 Manifest next update: Sat 27 Dec 2025 07:02:22 +0000 Files and hashes: 1: Tu8gTX6G_4FiSmGBKG521DOHa8c.crl (hash: YZgjMLtvf+rm6bCy9uMYkZAL+WytArpwVym70e0QJJw=) 2: shBm13sVD-3FD9e1R6_cr96dhfU.roa (hash: n/xarPDtIVC1p+Buc2MZvYZnuxYBvdgfF2U0DRag658=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:30:fc:8b:21:a4:1b:80:54:3e:a9:8d:20:1e:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eef204d7e86ff81624a6181286e76d433876bc7 Validity Not Before: Dec 26 07:02:22 2025 GMT Not After : Dec 27 07:02:22 2025 GMT Subject: CN=e390c4dc781a03235be7fa143a5418cc01b7df5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a4:eb:57:a5:5c:25:99:36:e5:33:7a:c6:47: 3e:26:fe:71:8e:30:e8:18:01:45:f9:37:7f:da:ab: 54:57:77:2d:25:c7:47:0d:e2:88:3d:e4:16:17:5f: 95:c1:db:3d:e2:b0:e8:66:1b:4e:46:19:b3:2d:30: 07:ba:4a:26:9d:63:87:42:56:9e:9d:20:da:e3:06: 75:6d:4b:61:3b:f2:c6:ca:8a:94:73:d2:54:7f:21: db:29:16:a2:b7:25:26:b1:86:6f:fd:f1:cd:b6:3a: 51:4e:8a:35:87:51:9c:a1:90:25:da:70:45:80:f5: 03:ea:2e:f0:9a:db:8d:5e:d3:2e:e2:c7:6f:f6:bd: e2:06:e6:35:c0:3e:ac:65:3c:19:d1:2a:62:46:20: f1:50:bd:cb:a5:f2:47:28:33:18:3d:be:f3:a3:bb: e1:27:c4:71:4b:cf:a2:84:c8:53:a1:dd:86:71:a6: 57:ed:99:d2:ea:42:53:01:33:41:34:c1:c4:34:55: 9a:ff:90:e9:90:46:93:a9:ee:0a:50:0c:ff:a1:e8: 24:73:10:c6:fc:a0:d7:ec:31:41:cc:9d:6c:12:e4: d2:02:c6:ff:e9:e0:04:2a:27:82:e4:4d:4a:c4:6b: 0a:03:e5:40:db:54:b7:bf:c0:91:19:15:eb:61:8b: 0e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:90:C4:DC:78:1A:03:23:5B:E7:FA:14:3A:54:18:CC:01:B7:DF:5E X509v3 Authority Key Identifier: keyid:4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c9:27:f0:80:b6:65:c9:95:39:c8:2a:07:5f:0b:f6:2b:0e: f6:46:9c:e7:07:d5:d1:71:77:3e:98:06:42:a2:c6:8b:a0:bd: 1e:85:c8:23:83:f6:e1:25:96:d6:ff:c6:a0:71:53:04:cb:35: 2c:7a:be:bd:8d:a7:fc:8d:33:48:0e:0a:63:ef:20:a9:0f:68: d3:05:fe:ec:c7:da:07:f0:78:ec:49:c0:9d:8a:86:38:a8:de: b1:20:4f:ac:6e:00:a6:ca:41:dd:95:e7:4f:ac:20:7e:77:cf: df:fa:54:bd:19:f7:d4:c9:7b:02:3e:48:c4:f3:64:63:e5:e4: dd:55:9d:1e:c1:a2:da:e8:39:a7:e3:61:3a:e1:61:b7:a6:5c: bb:c4:0a:ca:23:6b:15:e4:cd:72:60:3e:c1:d9:1a:32:fb:c7: 5e:ef:18:d4:3a:45:3e:28:2d:cd:d4:d3:f3:4a:99:d5:3c:07: 2d:af:5f:1c:e8:c6:72:82:1e:70:9c:40:da:4d:39:c3:f5:29: 16:fd:be:d7:c7:ba:cb:4e:fc:14:b5:6a:90:ee:2d:89:29:88: e3:f5:23:9e:f5:90:67:60:10:07:57:80:a5:ed:bd:70:5b:51: 50:7b:92:42:89:79:22:a1:9d:2c:28:f0:0b:85:db:6a:0b:66: 33:6d:b8:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdzD8iyGkG4BUPqmNIB6DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWYyMDRkN2U4NmZmODE2MjRhNjE4MTI4NmU3NmQ0MzM4 NzZiYzcwHhcNMjUxMjI2MDcwMjIyWhcNMjUxMjI3MDcwMjIyWjAzMTEwLwYDVQQD EyhlMzkwYzRkYzc4MWEwMzIzNWJlN2ZhMTQzYTU0MThjYzAxYjdkZjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqTrV6VcJZk25TN6xkc+Jv5xjjDo GAFF+Td/2qtUV3ctJcdHDeKIPeQWF1+Vwds94rDoZhtORhmzLTAHukomnWOHQlae nSDa4wZ1bUthO/LGyoqUc9JUfyHbKRaityUmsYZv/fHNtjpRToo1h1GcoZAl2nBF gPUD6i7wmtuNXtMu4sdv9r3iBuY1wD6sZTwZ0SpiRiDxUL3LpfJHKDMYPb7zo7vh J8RxS8+ihMhTod2GcaZX7ZnS6kJTATNBNMHENFWa/5DpkEaTqe4KUAz/oegkcxDG /KDX7DFBzJ1sEuTSAsb/6eAEKieC5E1KxGsKA+VA21S3v8CRGRXrYYsOawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOQxNx4GgMjW+f6FDpUGMwBt99eMB8GA1UdIwQY MBaAFE7vIE1+hv+BYkphgShudtQzh2vHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHU4Z1RYNkdfNEZpU21HQktHNTIxRE9IYThjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82OTMyMmQtYWQ3MS00ODc3LWE0NzAt OWFkOTA5OWRlMWQzLzEvVHU4Z1RYNkdfNEZpU21HQktHNTIxRE9IYThjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82OTMyMmQtYWQ3MS00ODc3LWE0NzAtOWFkOTA5OWRlMWQz LzEvVHU4Z1RYNkdfNEZpU21HQktHNTIxRE9IYThjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACckn8IC2 ZcmVOcgqB18L9isO9kac5wfV0XF3PpgGQqLGi6C9HoXII4P24SWW1v/GoHFTBMs1 LHq+vY2n/I0zSA4KY+8gqQ9o0wX+7MfaB/B47EnAnYqGOKjesSBPrG4ApspB3ZXn T6wgfnfP3/pUvRn31Ml7Aj5IxPNkY+Xk3VWdHsGi2ug5p+NhOuFht6Zcu8QKyiNr FeTNcmA+wdkaMvvHXu8Y1DpFPigtzdTT80qZ1TwHLa9fHOjGcoIecJxA2k05w/Up Fv2+18e6y078FLVqkO4tiSmI4/UjnvWQZ2AQB1eApe29cFtRUHuSQol5IqGdLCjw C4XbagtmM224jg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:57 2025 by rpki-client