This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft File: TutrLD4JyhxF_XVH5FiUbMikaLQ.mft (raw, json) Hash identifier: TuX10r0693BBlVcc8vM0ZOra82P2fNumRfzaEwzytTU= Subject key identifier: 5D:CC:F2:94:09:1F:42:A0:15:E0:AD:3B:B9:BD:C5:73:50:F9:2D:23 Authority key identifier: 4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4 Certificate issuer: /CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4 Certificate serial: 019AF5E5B9855B3394418292386D83F930F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 23:01:04 +0000 Manifest this update: Sat 06 Dec 2025 23:01:04 +0000 Manifest next update: Sun 07 Dec 2025 23:01:04 +0000 Files and hashes: 1: K__GMoXF7tpKIBCiKEO4YQunEUE.roa (hash: Hsn/cSGE8VGLi98WwQiwxBKaIoAEOSSG1bmkWgHfUWc=) 2: TutrLD4JyhxF_XVH5FiUbMikaLQ.crl (hash: 5BdqHTWApJbN9LWw+BSoocFLR70sSzCM3r0tBOJseIA=) 3: dK2uMFUtEa8mJvzI5jfPlkvOrV0.roa (hash: UyKK2/i5Yn8gqe/TaIulEkQyB+tb4FXt18YdvEC0TSo=) 4: gF7051dp_cMuLgQvCjwhgEPPRqw.roa (hash: q3Q/Dxx58MNi5+ugrnS2SfmFlMdjPiuWsnFSR9Imvjo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:b9:85:5b:33:94:41:82:92:38:6d:83:f9:30:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4 Validity Not Before: Dec 6 23:01:04 2025 GMT Not After : Dec 7 23:01:04 2025 GMT Subject: CN=5dccf294091f42a015e0ad3bb9bdc57350f92d23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5d:41:42:b7:c4:42:51:f8:94:fe:37:25:2e: 5c:03:ee:cd:d8:cf:f6:18:5f:2c:82:f5:75:2f:5d: ad:89:f8:45:90:3a:4c:d4:5b:e9:3c:1d:9c:2e:72: 6e:33:d6:86:8c:1c:d4:a0:6c:98:35:40:34:da:80: e0:da:8e:ab:fa:81:df:dd:95:b2:d4:f9:a7:82:fb: d7:9c:fa:74:2b:0a:33:02:1a:c8:ab:3d:2a:fd:46: da:7c:c0:70:fe:e5:a2:8e:00:a4:00:a4:31:50:f9: 5e:06:80:b7:98:48:19:a7:af:1f:f5:14:93:95:03: 3b:d7:a2:62:d7:b0:5b:72:25:0f:48:a4:40:76:ff: d2:05:3a:d9:7b:66:d8:34:f1:b5:a0:cb:e4:c9:f3: 61:4a:2a:ed:61:a5:b8:43:9d:2f:4a:28:02:a8:31: a3:b0:40:cd:63:5c:39:fe:e5:b2:f2:73:1a:54:45: 19:66:9d:27:24:33:a3:24:ed:69:45:23:ff:64:29: 47:c1:73:6c:da:63:25:97:9c:52:23:5b:4b:3e:e0: d4:44:e5:62:d4:44:92:58:9b:15:1f:6d:03:c1:ac: 8b:1c:13:56:f9:b0:f4:2f:eb:d7:f0:57:ff:37:90: a7:88:77:4e:a5:5f:80:b3:c8:5a:5f:dd:54:73:b1: 8f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CC:F2:94:09:1F:42:A0:15:E0:AD:3B:B9:BD:C5:73:50:F9:2D:23 X509v3 Authority Key Identifier: keyid:4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:4f:54:b1:5d:34:d4:dd:b5:91:81:fd:12:59:08:e7:37:b6: 5d:f4:11:11:c0:d7:0f:33:f8:6e:97:af:a5:26:22:4b:de:67: 57:30:5c:1c:77:de:7b:b7:2b:37:87:99:ac:ed:72:17:fd:a3: 94:5f:d9:aa:e3:36:ce:28:94:fb:1e:7e:a1:83:69:d4:80:4f: 6f:2d:a9:8d:9d:f4:f3:43:c6:d4:02:06:ec:fd:ed:56:fb:79: b2:a4:07:f1:7d:47:6e:e4:38:cd:ff:cf:5a:0a:2b:71:65:5b: 14:d4:fe:eb:ee:c9:e7:8b:54:b3:e7:15:f9:41:0f:b6:09:c0: 8e:30:fe:b5:e5:7b:53:13:6c:5c:5e:48:07:db:db:46:77:7e: 5a:bc:fb:a5:a2:e8:cc:f8:38:0a:a6:1b:2b:df:15:f0:8f:48: eb:3e:27:6b:39:2f:f7:07:67:2e:aa:6f:83:46:65:d6:56:20: 08:1c:ad:08:11:7e:af:9d:9b:7c:03:6b:91:a5:67:bb:cd:f4: d1:1c:df:1a:9c:3e:0b:0d:9b:74:b5:bb:c7:33:7f:52:9d:e9: 3a:e9:ea:97:23:db:b3:b4:ca:92:e8:c1:57:52:0a:d1:de:8c: 31:2b:ad:5d:08:a9:15:50:aa:29:85:1f:e4:8c:ea:e8:8a:06: eb:0b:b1:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15bmFWzOUQYKSOG2D+TDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWI2YjJjM2UwOWNhMWM0NWZkNzU0N2U0NTg5NDZjYzhh NDY4YjQwHhcNMjUxMjA2MjMwMTA0WhcNMjUxMjA3MjMwMTA0WjAzMTEwLwYDVQQD Eyg1ZGNjZjI5NDA5MWY0MmEwMTVlMGFkM2JiOWJkYzU3MzUwZjkyZDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl1BQrfEQlH4lP43JS5cA+7N2M/2 GF8sgvV1L12tifhFkDpM1FvpPB2cLnJuM9aGjBzUoGyYNUA02oDg2o6r+oHf3ZWy 1PmngvvXnPp0KwozAhrIqz0q/UbafMBw/uWijgCkAKQxUPleBoC3mEgZp68f9RST lQM716Ji17BbciUPSKRAdv/SBTrZe2bYNPG1oMvkyfNhSirtYaW4Q50vSigCqDGj sEDNY1w5/uWy8nMaVEUZZp0nJDOjJO1pRSP/ZClHwXNs2mMll5xSI1tLPuDUROVi 1ESSWJsVH20DwayLHBNW+bD0L+vX8Ff/N5CniHdOpV+As8haX91Uc7GPVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3M8pQJH0KgFeCtO7m9xXNQ+S0jMB8GA1UdIwQY MBaAFE7rayw+CcocRf11R+RYlGzIpGi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHV0ckxENEp5aHhGX1hWSDVGaVViTWlrYUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84ZjU5ZWMtZjkyYy00MjNkLThmYjct NmU5YWRkYzgxNjJiLzEvVHV0ckxENEp5aHhGX1hWSDVGaVViTWlrYUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi84ZjU5ZWMtZjkyYy00MjNkLThmYjctNmU5YWRkYzgxNjJi LzEvVHV0ckxENEp5aHhGX1hWSDVGaVViTWlrYUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlE9UsV00 1N21kYH9ElkI5ze2XfQREcDXDzP4bpevpSYiS95nVzBcHHfee7crN4eZrO1yF/2j lF/ZquM2ziiU+x5+oYNp1IBPby2pjZ3080PG1AIG7P3tVvt5sqQH8X1HbuQ4zf/P WgorcWVbFNT+6+7J54tUs+cV+UEPtgnAjjD+teV7UxNsXF5IB9vbRnd+Wrz7paLo zPg4CqYbK98V8I9I6z4nazkv9wdnLqpvg0Zl1lYgCBytCBF+r52bfANrkaVnu830 0RzfGpw+Cw2bdLW7xzN/Up3pOunqlyPbs7TKkujBV1IK0d6MMSutXQipFVCqKYUf 5Izq6IoG6wuxew== -----END CERTIFICATE-----Generated at Sun Dec 7 05:24:56 2025 by rpki-client