This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft File: TuFxPha0_Y8zAYh95qERmARJsp4.mft (raw, json) Hash identifier: +pnCyoot83adrekmS6vjdoe+byA3wXwYmwrem0BWfEA= Subject key identifier: 73:28:FE:36:BA:AF:08:DE:EC:84:D6:9A:89:ED:1A:D5:CE:8F:53:A0 Authority key identifier: 4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E Certificate issuer: /CN=4ee1713e16b4fd8f3301887de6a111980449b29e Certificate serial: 019AF088B091A46F6FB6EA4AD603C1386485 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 22:01:21 +0000 Manifest this update: Fri 05 Dec 2025 22:01:21 +0000 Manifest next update: Sat 06 Dec 2025 22:01:21 +0000 Files and hashes: 1: IJqJkkG32juZ9JC_-n807ugagLE.roa (hash: a5ckR7gAH5+zi6QRTimZRXE/Wgs09xk/gP8A83O6nQM=) 2: TuFxPha0_Y8zAYh95qERmARJsp4.crl (hash: ofdoloQQg1vQNCAPa7wUIki5SNkhb95FB3PsaOHMaPw=) 3: yXKulFLipTbjSUmowLRqtzSALEA.roa (hash: LNf43mdJtw9mAKFqBqZr/MgvJNf0ToK4qGWZ05MJPz4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:b0:91:a4:6f:6f:b6:ea:4a:d6:03:c1:38:64:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ee1713e16b4fd8f3301887de6a111980449b29e Validity Not Before: Dec 5 22:01:21 2025 GMT Not After : Dec 6 22:01:21 2025 GMT Subject: CN=7328fe36baaf08deec84d69a89ed1ad5ce8f53a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ba:5a:cc:14:ea:2e:ce:8c:20:63:c5:00:14: c7:bf:ba:13:d2:62:84:32:f8:29:8f:d3:9d:7c:d0: d4:39:85:26:bb:a0:2a:57:9b:88:bf:1d:7f:6f:b8: b7:7e:fd:76:35:22:18:e1:f4:eb:8a:13:b9:c3:91: 53:44:24:20:15:d0:1f:d1:98:6b:94:ee:9d:af:8f: 1f:a1:03:0e:f4:9d:cf:37:cb:97:d2:f2:a2:35:a6: 70:f8:fd:a3:cf:70:65:2a:63:52:83:e5:ec:a1:a0: e1:e2:b9:29:ae:46:31:33:81:11:d2:ff:cc:bb:a0: 94:5f:d0:2e:05:22:f9:f8:d4:50:e3:4f:d4:de:95: c1:7e:49:9f:49:e1:a5:5f:55:0d:29:2b:08:48:10: bf:80:7e:95:00:fd:d7:f7:c1:7c:87:06:7b:ac:88: 9c:4c:ef:ab:81:6b:d5:93:95:e2:12:33:85:d8:0e: 24:54:39:9e:bb:2e:92:b8:1f:d8:52:12:51:d3:73: 18:6a:ae:ac:09:05:89:a8:f4:b8:f6:eb:41:1a:67: 57:0b:50:ee:2c:38:8d:6c:58:5d:10:13:49:af:db: 0a:31:14:04:79:f8:53:84:b7:fb:61:5b:28:a9:c0: f7:56:f8:1c:b5:c7:03:9f:83:1f:dc:88:9a:22:38: 79:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:28:FE:36:BA:AF:08:DE:EC:84:D6:9A:89:ED:1A:D5:CE:8F:53:A0 X509v3 Authority Key Identifier: keyid:4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:32:5e:1d:14:13:06:0d:30:4d:cd:ab:f5:41:55:b5:c0:58: ea:63:68:7b:cd:9e:e2:54:fa:1a:3a:c6:0c:94:ef:77:6b:73: 51:57:ba:c7:09:5d:40:73:43:bc:03:01:36:4e:3f:0d:9f:03: 63:f5:c0:6a:da:fc:7d:47:43:66:37:fc:d2:00:3b:97:6c:cd: f3:03:d2:d8:bb:06:c5:47:dc:f2:9a:74:36:6a:1d:c9:d3:5f: f6:ba:4d:a4:36:a5:f1:3a:b6:16:e0:67:4f:c6:4a:79:69:6a: ba:17:ef:02:06:c0:81:a4:0f:05:2d:1c:a5:fd:30:1c:0e:f2: 85:18:be:d4:93:2c:30:de:7d:57:d6:0e:0c:1e:3f:83:94:a4: 8c:26:b8:b9:e0:3d:c2:12:aa:5f:d4:60:f2:b6:48:76:b1:43: 7a:fb:53:4e:5e:1e:a4:36:3a:d5:ec:3c:a6:09:b7:c2:f4:d3: c6:71:81:13:8c:e0:dd:4c:c1:3e:e4:a3:f2:b6:6e:2a:26:19: fc:3e:e1:97:38:e1:0b:0a:3b:ab:77:33:d7:b4:d0:93:25:30: fe:1a:bd:19:1e:9b:a8:1b:b2:aa:f6:33:b3:bc:15:fa:ed:ae: c0:45:af:57:17:4b:10:d7:90:7e:6d:7a:0b:2d:a4:f6:e7:26: 0e:c0:ab:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiLCRpG9vtupK1gPBOGSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZTE3MTNlMTZiNGZkOGYzMzAxODg3ZGU2YTExMTk4MDQ0 OWIyOWUwHhcNMjUxMjA1MjIwMTIxWhcNMjUxMjA2MjIwMTIxWjAzMTEwLwYDVQQD Eyg3MzI4ZmUzNmJhYWYwOGRlZWM4NGQ2OWE4OWVkMWFkNWNlOGY1M2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7pazBTqLs6MIGPFABTHv7oT0mKE Mvgpj9OdfNDUOYUmu6AqV5uIvx1/b7i3fv12NSIY4fTrihO5w5FTRCQgFdAf0Zhr lO6dr48foQMO9J3PN8uX0vKiNaZw+P2jz3BlKmNSg+XsoaDh4rkprkYxM4ER0v/M u6CUX9AuBSL5+NRQ40/U3pXBfkmfSeGlX1UNKSsISBC/gH6VAP3X98F8hwZ7rIic TO+rgWvVk5XiEjOF2A4kVDmeuy6SuB/YUhJR03MYaq6sCQWJqPS49utBGmdXC1Du LDiNbFhdEBNJr9sKMRQEefhThLf7YVsoqcD3VvgctccDn4Mf3IiaIjh5SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHMo/ja6rwje7ITWmontGtXOj1OgMB8GA1UdIwQY MBaAFE7hcT4WtP2PMwGIfeahEZgESbKeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHVGeFBoYTBfWTh6QVloOTVxRVJtQVJKc3A0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80OGM5ZjYtNWI1Zi00MWQ0LThlNTYt MDhlNGI3OTM4N2MwLzEvVHVGeFBoYTBfWTh6QVloOTVxRVJtQVJKc3A0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC80OGM5ZjYtNWI1Zi00MWQ0LThlNTYtMDhlNGI3OTM4N2Mw LzEvVHVGeFBoYTBfWTh6QVloOTVxRVJtQVJKc3A0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtTJeHRQT Bg0wTc2r9UFVtcBY6mNoe82e4lT6GjrGDJTvd2tzUVe6xwldQHNDvAMBNk4/DZ8D Y/XAatr8fUdDZjf80gA7l2zN8wPS2LsGxUfc8pp0NmodydNf9rpNpDal8Tq2FuBn T8ZKeWlquhfvAgbAgaQPBS0cpf0wHA7yhRi+1JMsMN59V9YODB4/g5SkjCa4ueA9 whKqX9Rg8rZIdrFDevtTTl4epDY61ew8pgm3wvTTxnGBE4zg3UzBPuSj8rZuKiYZ /D7hlzjhCwo7q3cz17TQkyUw/hq9GR6bqBuyqvYzs7wV+u2uwEWvVxdLENeQfm16 Cy2k9ucmDsCrkw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:08 2025 by rpki-client