This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft File: TuUnUqgb3-CkAfmiYdef7kthcRU.mft (raw, json) Hash identifier: J0pxqe7gF5R5u0cN/IyaWG7+9OJ+MoZCJ6MvLxVg9nI= Subject key identifier: EF:87:C1:EB:38:41:99:78:AA:FC:09:FE:DB:01:5C:93:1A:D0:44:21 Authority key identifier: 4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15 Certificate issuer: /CN=4ee52752a81bdfe0a401f9a261d79fee4b617115 Certificate serial: 019AF2401B52608146D39280070836F26C41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft Manifest number: 10ED Signing time: Sat 06 Dec 2025 06:01:18 +0000 Manifest this update: Sat 06 Dec 2025 06:01:18 +0000 Manifest next update: Sun 07 Dec 2025 06:01:18 +0000 Files and hashes: 1: 55sTvowHGJg92qkZxcKwSCfNCK4.roa (hash: b91GQDkCCdywVY2XmrIvPHNucxaPtQ8aCIEGw0MjxvQ=) 2: TuUnUqgb3-CkAfmiYdef7kthcRU.crl (hash: rY/n23wHmyFu2QF9jyT1LFnOuzEp9qsGM8fPnsH1YIc=) 3: lOXoXnSoYH-Ze2jDn-kLGtNui38.roa (hash: Pz0iJoXh4tIWOR42AxlitpnyK4ra9wQb5adMKDc9S9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 06:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1b:52:60:81:46:d3:92:80:07:08:36:f2:6c:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee52752a81bdfe0a401f9a261d79fee4b617115 Validity Not Before: Dec 6 06:01:18 2025 GMT Not After : Dec 7 06:01:18 2025 GMT Subject: CN=ef87c1eb38419978aafc09fedb015c931ad04421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:30:65:80:13:f4:9d:bf:66:61:ca:b8:80:50: a7:19:6c:33:59:a9:b5:16:58:23:9e:eb:31:52:25: 1f:ba:7d:d4:59:3c:11:f8:fa:cf:0e:7c:7a:e4:c2: 45:73:29:71:d0:75:44:45:12:22:40:24:10:e2:5e: fc:70:72:59:39:05:ee:18:2b:b6:9d:7e:ca:fc:46: d0:76:6c:5e:41:0d:01:af:ca:6d:df:b1:1c:37:2f: a0:cb:2b:8e:a9:94:00:7f:7b:7a:19:49:19:e4:a8: c4:05:a3:af:bd:9f:92:ab:80:cc:dc:71:f1:c3:54: 27:82:e1:ca:93:12:d5:30:6c:5e:d3:75:03:11:bd: 34:76:a6:b4:01:0f:01:63:53:3d:4d:a5:98:77:9f: eb:70:75:0d:a7:04:d9:56:a4:4d:65:9f:54:14:01: 81:17:6f:06:e0:75:79:c4:65:0a:7c:2d:4b:e7:64: 8a:8b:ed:ac:db:ae:a9:2f:9f:15:22:44:df:dc:2d: 44:b0:1c:35:98:7e:bb:d4:80:90:9e:c9:ce:a7:2b: 9a:9d:59:5a:92:b2:74:b7:fb:8c:1b:ff:b3:f6:84: 3d:bd:d6:18:54:ae:4c:15:6a:74:2e:e1:81:27:f6: 69:6c:29:35:17:30:4e:32:41:ed:1f:cd:47:e7:28: 57:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:87:C1:EB:38:41:99:78:AA:FC:09:FE:DB:01:5C:93:1A:D0:44:21 X509v3 Authority Key Identifier: keyid:4E:E5:27:52:A8:1B:DF:E0:A4:01:F9:A2:61:D7:9F:EE:4B:61:71:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuUnUqgb3-CkAfmiYdef7kthcRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/31e0d4-35ce-4d02-9734-d78fb97f9828/1/TuUnUqgb3-CkAfmiYdef7kthcRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:ed:4b:f6:ff:16:82:63:fa:d5:e1:54:80:25:8e:fd:87:0c: ce:50:c0:61:93:72:8d:5e:6d:49:2e:35:b3:ca:c1:36:21:37: 7c:bd:fb:58:28:7b:35:5b:de:52:b2:07:41:06:05:92:cf:e4: 98:6a:4d:02:b0:b5:14:bc:e0:9e:af:00:84:c0:ab:81:ae:b7: a3:a4:ef:be:e3:f6:f6:12:de:b1:af:3e:a3:15:80:09:ac:15: c0:dc:c5:c4:45:45:c9:81:fc:3d:5f:e1:26:54:9c:f2:b4:89: 70:d6:4d:51:bf:7d:f0:fa:1a:3d:d9:0b:86:35:c0:2e:1f:3a: 5f:1d:ae:66:37:07:71:e1:c8:99:e6:bf:7a:9e:23:00:ba:eb: 38:d3:77:73:65:c7:c3:d6:49:5d:b5:ee:fa:ee:77:52:a4:42: 94:24:42:e2:85:a0:6e:9e:e5:2a:05:fe:3d:89:c2:0e:e2:1c: 36:79:8e:ce:8f:87:2f:7c:51:47:5d:76:63:17:b2:29:8b:6b: 6a:77:f5:b7:cf:74:cf:c2:46:ad:44:02:e2:57:1c:c7:14:8a: 7d:ab:27:fe:59:1f:a0:8f:dc:e0:ae:12:0b:f0:eb:d7:34:e6: 42:29:c0:e3:8a:36:ac:ee:32:2f:57:23:5a:45:61:3a:46:cd: e2:d1:5e:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBtSYIFG05KABwg28mxBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTUyNzUyYTgxYmRmZTBhNDAxZjlhMjYxZDc5ZmVlNGI2 MTcxMTUwHhcNMjUxMjA2MDYwMTE4WhcNMjUxMjA3MDYwMTE4WjAzMTEwLwYDVQQD EyhlZjg3YzFlYjM4NDE5OTc4YWFmYzA5ZmVkYjAxNWM5MzFhZDA0NDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzBlgBP0nb9mYcq4gFCnGWwzWam1 FlgjnusxUiUfun3UWTwR+PrPDnx65MJFcylx0HVERRIiQCQQ4l78cHJZOQXuGCu2 nX7K/EbQdmxeQQ0Br8pt37EcNy+gyyuOqZQAf3t6GUkZ5KjEBaOvvZ+Sq4DM3HHx w1QnguHKkxLVMGxe03UDEb00dqa0AQ8BY1M9TaWYd5/rcHUNpwTZVqRNZZ9UFAGB F28G4HV5xGUKfC1L52SKi+2s266pL58VIkTf3C1EsBw1mH671ICQnsnOpyuanVla krJ0t/uMG/+z9oQ9vdYYVK5MFWp0LuGBJ/ZpbCk1FzBOMkHtH81H5yhXdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+Hwes4QZl4qvwJ/tsBXJMa0EQhMB8GA1UdIwQY MBaAFE7lJ1KoG9/gpAH5omHXn+5LYXEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zMWUwZDQtMzVjZS00ZDAyLTk3MzQt ZDc4ZmI5N2Y5ODI4LzEvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zMWUwZDQtMzVjZS00ZDAyLTk3MzQtZDc4ZmI5N2Y5ODI4 LzEvVHVVblVxZ2IzLUNrQWZtaVlkZWY3a3RoY1JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAru1L9v8W gmP61eFUgCWO/YcMzlDAYZNyjV5tSS41s8rBNiE3fL37WCh7NVveUrIHQQYFks/k mGpNArC1FLzgnq8AhMCrga63o6TvvuP29hLesa8+oxWACawVwNzFxEVFyYH8PV/h JlSc8rSJcNZNUb998PoaPdkLhjXALh86Xx2uZjcHceHImea/ep4jALrrONN3c2XH w9ZJXbXu+u53UqRClCRC4oWgbp7lKgX+PYnCDuIcNnmOzo+HL3xRR112YxeyKYtr anf1t890z8JGrUQC4lccxxSKfasn/lkfoI/c4K4SC/Dr1zTmQinA44o2rO4yL1cj WkVhOkbN4tFeqw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:47:41 2025 by rpki-client