This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft File: tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft (raw, json) Hash identifier: jOK6mwUdB9cEjACbMnQfftt+9R2w9xSSA1Pf/A69xuA= Subject key identifier: 2A:6A:25:30:10:B7:1A:BA:4F:C4:2B:78:6C:A3:9B:5C:50:ED:A2:96 Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94 Certificate issuer: /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94 Certificate serial: 019AF50A05F5BF34B3D28A146562B6E1649D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft Manifest number: 0839 Signing time: Sat 06 Dec 2025 19:01:06 +0000 Manifest this update: Sat 06 Dec 2025 19:01:06 +0000 Manifest next update: Sun 07 Dec 2025 19:01:06 +0000 Files and hashes: 1: rgegcxxJ3TsTdq27HR0NAjR9oC8.roa (hash: c0wEsNYvh664VokeqgrZS5bI3twxSLXX7CSRIaVE4Zs=) 2: tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl (hash: swnwZh4yEydIPZ6xDF4Fn/AIrsQpNwCKoxEo7fUUrw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:05:f5:bf:34:b3:d2:8a:14:65:62:b6:e1:64:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94 Validity Not Before: Dec 6 19:01:06 2025 GMT Not After : Dec 7 19:01:06 2025 GMT Subject: CN=2a6a253010b71aba4fc42b786ca39b5c50eda296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:87:68:4b:d6:24:8d:b3:4e:17:bc:be:71:e9: f5:ca:be:f2:0d:2c:ba:5d:54:b6:18:44:ed:b3:73: fb:f5:37:78:71:95:2a:8d:e5:13:5d:84:dd:87:cc: b5:b1:fa:77:99:03:fe:5d:37:5d:dc:02:51:68:b6: ae:23:c2:59:6b:15:51:0d:6f:58:bc:e7:af:39:de: e3:1f:4b:d5:54:d2:e4:65:98:6e:49:51:7f:fb:39: a9:98:02:b2:f3:ed:79:27:c3:04:01:c7:e7:57:61: 8e:83:a2:3f:b8:ff:12:30:84:87:d9:a3:1a:9e:85: 0f:8d:62:d5:1e:d4:66:a0:c5:a3:82:5a:a4:b0:b4: 72:2b:7a:34:df:32:a6:87:4b:8c:36:e7:1a:75:72: 6e:ea:30:8a:f1:7a:bb:69:5f:0d:1e:ca:9f:9b:f7: 37:08:99:67:c1:9e:05:ea:cc:33:94:78:15:7b:9b: 67:24:c0:99:6a:3c:7d:8c:1c:e1:66:d4:0f:5c:f0: 45:5d:c4:50:c6:60:67:eb:c3:7c:f7:da:c9:45:a2: 4d:ab:7b:1d:68:11:9a:b1:06:d0:d2:d1:5a:b7:a3: 22:35:d5:31:9d:12:0a:be:93:9f:98:44:0e:1f:21: ee:74:29:b0:f9:59:ba:a3:1d:e8:9a:48:a3:fc:fa: a0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:6A:25:30:10:B7:1A:BA:4F:C4:2B:78:6C:A3:9B:5C:50:ED:A2:96 X509v3 Authority Key Identifier: keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:e2:bd:7f:af:6a:9b:65:48:21:61:0b:df:cc:4e:de:6d:61: 43:c0:9e:57:fe:7d:84:be:6f:28:ca:da:cd:0b:c5:e8:c0:de: 07:77:06:fa:1b:b0:d1:c6:9e:91:3d:a4:e0:51:96:4c:fc:14: 1e:86:1e:66:87:56:3e:91:47:a8:6f:c3:4b:9a:86:9a:8e:7f: 4a:b8:b1:95:51:ac:8c:ac:76:44:aa:58:fa:07:a4:9c:f4:8c: 26:91:0a:47:25:55:29:9f:ea:ea:6f:4d:2d:43:66:58:1f:f3: 77:31:08:00:27:93:39:ac:cd:58:fb:01:1f:64:b0:ae:17:3e: 3f:35:3d:85:50:92:ff:20:ba:a5:f3:0b:80:51:92:78:e2:42: f8:96:8e:5b:4d:16:67:cb:84:17:51:0d:e2:27:63:4d:e4:40: b3:f9:ff:4d:c9:a2:07:f7:f5:bf:cb:00:1e:04:6f:f4:63:b2: 3b:3c:f3:49:17:7a:42:a0:3a:6c:6a:ca:0f:e5:52:80:5d:80: 8f:b8:65:26:53:2d:03:11:f2:82:17:4b:8b:ca:43:53:d7:ac: 58:2c:3f:51:c2:37:ed:f3:d5:91:1a:34:97:4d:c7:6c:76:99: e6:f3:d7:b8:bc:a2:81:f2:c0:8f:93:cc:3f:0f:dd:0e:4b:e5: 86:0f:e9:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CgX1vzSz0ooUZWK24WSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZTNhMmE0OTA4ZGQ5NjgyMWM4MGM2NGQxNWQxNzE0MTQz YWFhOTQwHhcNMjUxMjA2MTkwMTA2WhcNMjUxMjA3MTkwMTA2WjAzMTEwLwYDVQQD EygyYTZhMjUzMDEwYjcxYWJhNGZjNDJiNzg2Y2EzOWI1YzUwZWRhMjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4doS9YkjbNOF7y+cen1yr7yDSy6 XVS2GETts3P79Td4cZUqjeUTXYTdh8y1sfp3mQP+XTdd3AJRaLauI8JZaxVRDW9Y vOevOd7jH0vVVNLkZZhuSVF/+zmpmAKy8+15J8MEAcfnV2GOg6I/uP8SMISH2aMa noUPjWLVHtRmoMWjglqksLRyK3o03zKmh0uMNucadXJu6jCK8Xq7aV8NHsqfm/c3 CJlnwZ4F6swzlHgVe5tnJMCZajx9jBzhZtQPXPBFXcRQxmBn68N899rJRaJNq3sd aBGasQbQ0tFat6MiNdUxnRIKvpOfmEQOHyHudCmw+Vm6ox3omkij/Pqg/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpqJTAQtxq6T8QreGyjm1xQ7aKWMB8GA1UdIwQY MBaAFLbjoqSQjdloIcgMZNFdFxQUOqqUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iMzZmMzEtMWNjZC00ZGEzLTljZjkt MGVkYmRmZjlmOGYyLzEvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9iMzZmMzEtMWNjZC00ZGEzLTljZjktMGVkYmRmZjlmOGYy LzEvdHVPaXBKQ04yV2doeUF4azBWMFhGQlE2cXBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAneK9f69q m2VIIWEL38xO3m1hQ8CeV/59hL5vKMrazQvF6MDeB3cG+huw0caekT2k4FGWTPwU HoYeZodWPpFHqG/DS5qGmo5/SrixlVGsjKx2RKpY+geknPSMJpEKRyVVKZ/q6m9N LUNmWB/zdzEIACeTOazNWPsBH2Swrhc+PzU9hVCS/yC6pfMLgFGSeOJC+JaOW00W Z8uEF1EN4idjTeRAs/n/TcmiB/f1v8sAHgRv9GOyOzzzSRd6QqA6bGrKD+VSgF2A j7hlJlMtAxHyghdLi8pDU9esWCw/UcI37fPVkRo0l03HbHaZ5vPXuLyigfLAj5PM Pw/dDkvlhg/p0w== -----END CERTIFICATE-----Generated at Sun Dec 7 04:15:02 2025 by rpki-client