This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft File: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft (raw, json) Hash identifier: PBJSyJPsKrnzSk2dTmjCZrqRn5sY8r7mj3qDIo6B3ws= Subject key identifier: CA:7E:55:49:EA:5D:15:96:3E:9D:2C:0C:C4:A2:4D:7F:31:FA:12:53 Authority key identifier: 4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23 Certificate issuer: /CN=4eec68f7514db22173650088294b0143b377fc23 Certificate serial: 019B1F185577E8ED1025C743A928B9852A61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft Manifest number: 07FB Signing time: Sun 14 Dec 2025 23:00:46 +0000 Manifest this update: Sun 14 Dec 2025 23:00:46 +0000 Manifest next update: Mon 15 Dec 2025 23:00:46 +0000 Files and hashes: 1: I39FUsGFsmr9SUUDo-UEb6qOXN4.roa (hash: u4zl9OvdC2vc0LELt8+dwM6CALTiKOkmaqaJx/FGR/8=) 2: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl (hash: m2SRvbZH+WeboMuZUvdHMLHuf1pSy1oZKZ/c9wBKcWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:18:55:77:e8:ed:10:25:c7:43:a9:28:b9:85:2a:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eec68f7514db22173650088294b0143b377fc23 Validity Not Before: Dec 14 23:00:46 2025 GMT Not After : Dec 15 23:00:46 2025 GMT Subject: CN=ca7e5549ea5d15963e9d2c0cc4a24d7f31fa1253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:17:a4:7b:7b:84:25:f2:64:6e:ed:ad:0b:b6: dd:74:a3:16:27:52:54:79:f5:25:ec:f3:bd:2b:54: bf:9c:8f:c1:d4:62:6f:21:26:47:f1:f9:65:b9:3f: 58:04:87:d0:1c:ff:97:04:01:12:aa:5e:50:e7:33: 60:bf:7b:a5:0c:5d:86:f5:9f:3b:a9:2f:1d:2b:27: 94:1b:6b:eb:43:f2:28:13:db:6f:fd:04:bc:88:b8: 4b:e5:18:58:19:ab:e9:9e:b9:55:c9:e0:a8:d6:a4: 66:a4:a9:c7:ba:ef:8f:38:21:d4:9f:97:4e:19:1c: eb:37:37:d4:dc:21:7e:a8:51:a4:be:17:64:a9:48: 2a:23:00:fd:f0:73:99:cc:70:33:6f:55:53:ce:17: 84:25:d3:da:33:3c:30:ac:7b:b0:54:cd:ee:4d:a6: 3e:3d:f1:83:96:47:93:79:15:e0:36:25:92:97:28: 44:56:1e:08:67:23:eb:2c:29:fd:3b:70:05:fd:5c: 71:74:92:5e:61:b0:36:93:41:fe:5f:14:46:37:7c: 34:7c:dc:4e:cf:f6:ce:b0:be:c5:f2:77:3f:78:ba: 76:2e:6f:49:48:c4:c5:d6:73:e9:b7:42:8a:eb:57: bb:7a:e8:63:c8:02:ab:36:1a:ce:9e:f9:af:d4:15: 36:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:7E:55:49:EA:5D:15:96:3E:9D:2C:0C:C4:A2:4D:7F:31:FA:12:53 X509v3 Authority Key Identifier: keyid:4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:20:e8:1f:5c:eb:60:2e:dc:80:2e:5e:01:5f:67:70:b6:e4: 09:ec:41:72:dc:fd:1e:09:84:01:21:d3:33:82:80:6e:22:19: 2e:8c:64:a3:ad:81:e6:2b:85:11:00:6c:d7:e9:74:9e:69:39: 40:37:fb:50:95:7b:85:71:2b:50:b0:a3:25:dd:d2:5f:0e:17: ef:d4:12:9e:94:ea:f3:33:b4:8e:06:cc:71:e2:b4:34:6c:47: de:ca:eb:a7:6f:38:75:2f:7a:22:ae:b7:25:57:e8:c7:08:cf: 11:ef:3d:67:6e:0f:18:b6:60:61:9a:88:5e:b5:59:ac:38:f4: 06:e1:fb:6f:63:9c:c3:1a:ee:c6:6c:b9:f0:df:36:bd:7a:6b: ef:03:66:c5:e0:6b:34:56:f7:d6:c7:bf:5b:87:8f:64:16:24: 27:88:90:3b:89:58:c2:68:21:b5:e9:df:ba:c6:cf:1d:c0:a2: 46:97:9e:d6:3f:0b:8d:0d:6a:d3:01:51:76:74:13:61:38:fc: 9f:14:b8:e4:20:ce:c3:a2:f5:11:3f:41:9b:cc:a7:1e:b9:ae: ed:74:07:c6:14:d3:6e:23:bf:ac:bd:9f:19:ce:69:de:66:58: 90:48:42:0c:50:28:94:5d:3d:b2:72:67:f4:f2:9c:62:5b:80: 24:02:f8:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfGFV36O0QJcdDqSi5hSphMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWM2OGY3NTE0ZGIyMjE3MzY1MDA4ODI5NGIwMTQzYjM3 N2ZjMjMwHhcNMjUxMjE0MjMwMDQ2WhcNMjUxMjE1MjMwMDQ2WjAzMTEwLwYDVQQD EyhjYTdlNTU0OWVhNWQxNTk2M2U5ZDJjMGNjNGEyNGQ3ZjMxZmExMjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxReke3uEJfJkbu2tC7bddKMWJ1JU efUl7PO9K1S/nI/B1GJvISZH8flluT9YBIfQHP+XBAESql5Q5zNgv3ulDF2G9Z87 qS8dKyeUG2vrQ/IoE9tv/QS8iLhL5RhYGavpnrlVyeCo1qRmpKnHuu+POCHUn5dO GRzrNzfU3CF+qFGkvhdkqUgqIwD98HOZzHAzb1VTzheEJdPaMzwwrHuwVM3uTaY+ PfGDlkeTeRXgNiWSlyhEVh4IZyPrLCn9O3AF/VxxdJJeYbA2k0H+XxRGN3w0fNxO z/bOsL7F8nc/eLp2Lm9JSMTF1nPpt0KK61e7euhjyAKrNhrOnvmv1BU2aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMp+VUnqXRWWPp0sDMSiTX8x+hJTMB8GA1UdIwQY MBaAFE7saPdRTbIhc2UAiClLAUOzd/wjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHV4bzkxRk5zaUZ6WlFDSUtVc0JRN04zX0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MzIwNjUtNjE1MS00Y2UwLWFjNmIt NWQzNGM4NTc1YmVhLzEvVHV4bzkxRk5zaUZ6WlFDSUtVc0JRN04zX0NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81MzIwNjUtNjE1MS00Y2UwLWFjNmItNWQzNGM4NTc1YmVh LzEvVHV4bzkxRk5zaUZ6WlFDSUtVc0JRN04zX0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCDoH1zr YC7cgC5eAV9ncLbkCexBctz9HgmEASHTM4KAbiIZLoxko62B5iuFEQBs1+l0nmk5 QDf7UJV7hXErULCjJd3SXw4X79QSnpTq8zO0jgbMceK0NGxH3srrp284dS96Iq63 JVfoxwjPEe89Z24PGLZgYZqIXrVZrDj0BuH7b2Ocwxruxmy58N82vXpr7wNmxeBr NFb31se/W4ePZBYkJ4iQO4lYwmghtenfusbPHcCiRpee1j8LjQ1q0wFRdnQTYTj8 nxS45CDOw6L1ET9Bm8ynHrmu7XQHxhTTbiO/rL2fGc5p3mZYkEhCDFAolF09snJn 9PKcYluAJAL4BA== -----END CERTIFICATE-----Generated at Mon Dec 15 08:58:54 2025 by rpki-client