This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft File: TutrLD4JyhxF_XVH5FiUbMikaLQ.mft (raw, json) Hash identifier: 0iZYPw3+V3iW0cW+zpLAjnWZtNlKYHzlHPAorJj81iQ= Subject key identifier: 1E:AC:53:19:E6:7A:48:79:2D:74:EF:A9:96:44:B5:95:F8:31:EA:FB Authority key identifier: 4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4 Certificate issuer: /CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4 Certificate serial: 019B397D2263D737904F4AD2C80D53F825DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 02:01:00 +0000 Manifest this update: Sat 20 Dec 2025 02:01:00 +0000 Manifest next update: Sun 21 Dec 2025 02:01:00 +0000 Files and hashes: 1: K__GMoXF7tpKIBCiKEO4YQunEUE.roa (hash: Hsn/cSGE8VGLi98WwQiwxBKaIoAEOSSG1bmkWgHfUWc=) 2: TutrLD4JyhxF_XVH5FiUbMikaLQ.crl (hash: 8223ZGecim1Md2MDxPNxHZXfwrN5GKDr2HYCzrTttXA=) 3: dK2uMFUtEa8mJvzI5jfPlkvOrV0.roa (hash: UyKK2/i5Yn8gqe/TaIulEkQyB+tb4FXt18YdvEC0TSo=) 4: gF7051dp_cMuLgQvCjwhgEPPRqw.roa (hash: q3Q/Dxx58MNi5+ugrnS2SfmFlMdjPiuWsnFSR9Imvjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:22:63:d7:37:90:4f:4a:d2:c8:0d:53:f8:25:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4 Validity Not Before: Dec 20 02:01:00 2025 GMT Not After : Dec 21 02:01:00 2025 GMT Subject: CN=1eac5319e67a48792d74efa99644b595f831eafb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:df:97:7b:16:05:af:0b:1f:64:12:e9:88: b4:b7:3a:65:cf:83:85:be:52:19:cb:41:86:cc:e5: 63:93:a4:7b:22:c3:87:fd:97:74:65:14:d9:98:d0: a6:fe:1e:01:20:ed:61:5a:d7:7a:85:a6:d0:21:f3: be:3d:f3:aa:89:5b:01:46:0f:14:8d:14:f0:04:4f: 23:8e:76:e8:18:5f:ea:c5:98:e9:08:e2:22:9c:fb: fe:f8:75:c1:61:b5:f5:03:1a:6e:be:be:b1:a0:d9: 77:51:8b:66:cc:0d:9c:87:b0:48:bd:0a:b4:75:1f: af:62:80:c8:f2:f9:1b:e5:bb:03:c2:c9:7a:77:74: 32:d1:a8:3d:cf:62:a6:51:bc:a2:14:10:21:33:cd: cd:ca:9e:e5:7c:4c:b7:74:4a:10:48:24:6a:28:c4: b3:0b:f5:f6:bd:91:ef:82:44:45:d9:0f:ac:04:ed: a5:70:85:7e:39:39:48:b3:5b:8a:21:b9:2e:d7:fc: 3a:1a:5d:25:62:12:d7:60:fb:9d:ab:6c:2a:7b:77: 0b:5b:5b:16:ca:d0:40:80:ef:a4:b0:5f:e8:fe:ae: f2:55:a3:30:3b:07:15:74:11:00:1f:b7:f8:c9:e0: dc:e5:a2:5c:93:b2:53:47:6c:9e:48:3c:74:c9:b2: f1:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:AC:53:19:E6:7A:48:79:2D:74:EF:A9:96:44:B5:95:F8:31:EA:FB X509v3 Authority Key Identifier: keyid:4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b8:db:7d:3c:68:da:20:97:a1:cb:2b:05:68:24:64:77:e6: 42:ba:09:ae:e3:a2:bd:f4:a7:f3:dc:d4:83:bf:4d:62:95:d9: 03:0e:43:5f:ea:3e:8c:5e:09:d7:cc:86:61:80:31:f7:e5:8f: 8e:c0:38:91:f2:63:f9:4c:7b:58:78:26:48:c0:21:08:94:b2: ab:72:80:cd:eb:54:28:ac:db:67:14:67:de:20:06:6f:ed:df: a9:09:a2:c0:68:4c:50:ac:c4:85:1c:f1:0f:28:b8:72:a9:d2: 28:1a:7e:9e:d4:c3:ce:b3:ad:56:69:93:34:4e:23:1c:1d:14: 19:17:1a:19:ce:9e:41:df:72:ed:68:16:49:72:24:b6:c1:6a: bf:02:fb:d8:ce:d4:e6:72:ee:5b:3c:f4:b5:0c:9d:39:83:6e: 59:0f:e1:5e:9c:e3:bc:37:e7:9a:e9:14:2c:9f:90:67:fa:24: c0:25:6a:01:1f:64:c9:89:d9:5e:a2:e6:8a:eb:d0:b6:69:7b: 55:fb:f7:9f:67:95:0e:f8:4f:8e:67:d8:65:d0:13:70:85:3b: 3b:68:e0:36:7a:2e:cd:dd:52:c7:4d:5f:90:ee:08:96:46:03: a1:0b:01:23:a6:5f:99:64:f5:77:3c:50:0d:df:cf:4d:8e:1c: 3f:0f:fa:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fSJj1zeQT0rSyA1T+CXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWI2YjJjM2UwOWNhMWM0NWZkNzU0N2U0NTg5NDZjYzhh NDY4YjQwHhcNMjUxMjIwMDIwMTAwWhcNMjUxMjIxMDIwMTAwWjAzMTEwLwYDVQQD EygxZWFjNTMxOWU2N2E0ODc5MmQ3NGVmYTk5NjQ0YjU5NWY4MzFlYWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9ffl3sWBa8LH2QS6Yi0tzplz4OF vlIZy0GGzOVjk6R7IsOH/Zd0ZRTZmNCm/h4BIO1hWtd6habQIfO+PfOqiVsBRg8U jRTwBE8jjnboGF/qxZjpCOIinPv++HXBYbX1Axpuvr6xoNl3UYtmzA2ch7BIvQq0 dR+vYoDI8vkb5bsDwsl6d3Qy0ag9z2KmUbyiFBAhM83Nyp7lfEy3dEoQSCRqKMSz C/X2vZHvgkRF2Q+sBO2lcIV+OTlIs1uKIbku1/w6Gl0lYhLXYPudq2wqe3cLW1sW ytBAgO+ksF/o/q7yVaMwOwcVdBEAH7f4yeDc5aJck7JTR2yeSDx0ybLxpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6sUxnmekh5LXTvqZZEtZX4Mer7MB8GA1UdIwQY MBaAFE7rayw+CcocRf11R+RYlGzIpGi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHV0ckxENEp5aHhGX1hWSDVGaVViTWlrYUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84ZjU5ZWMtZjkyYy00MjNkLThmYjct NmU5YWRkYzgxNjJiLzEvVHV0ckxENEp5aHhGX1hWSDVGaVViTWlrYUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi84ZjU5ZWMtZjkyYy00MjNkLThmYjctNmU5YWRkYzgxNjJi LzEvVHV0ckxENEp5aHhGX1hWSDVGaVViTWlrYUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLjbfTxo 2iCXocsrBWgkZHfmQroJruOivfSn89zUg79NYpXZAw5DX+o+jF4J18yGYYAx9+WP jsA4kfJj+Ux7WHgmSMAhCJSyq3KAzetUKKzbZxRn3iAGb+3fqQmiwGhMUKzEhRzx Dyi4cqnSKBp+ntTDzrOtVmmTNE4jHB0UGRcaGc6eQd9y7WgWSXIktsFqvwL72M7U 5nLuWzz0tQydOYNuWQ/hXpzjvDfnmukULJ+QZ/okwCVqAR9kyYnZXqLmiuvQtml7 Vfv3n2eVDvhPjmfYZdATcIU7O2jgNnouzd1Sx01fkO4IlkYDoQsBI6ZfmWT1dzxQ Dd/PTY4cPw/6Yw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:48:41 2025 by rpki-client