This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft File: tUcxKN5Ul222LZvRYU53xD3uObU.mft (raw, json) Hash identifier: 0Rr4USD4IrsVU9vJOQ/BCj7qih5DMOxSGjv6KuSNjbY= Subject key identifier: 79:CD:21:C6:C2:59:3E:D8:79:53:8C:BF:A1:0A:B1:A7:5C:58:0D:B2 Authority key identifier: B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5 Certificate issuer: /CN=b5473128de54976db62d9bd1614e77c43dee39b5 Certificate serial: 019AF12D25BEF91007099429E20C4AF98911 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft Manifest number: 1438 Signing time: Sat 06 Dec 2025 01:00:59 +0000 Manifest this update: Sat 06 Dec 2025 01:00:59 +0000 Manifest next update: Sun 07 Dec 2025 01:00:59 +0000 Files and hashes: 1: WT51Xxp6wSpnMPjyEAyyUhxOXPk.roa (hash: GG3W3sv/8g51OizpERxg8YmbMm76mWXeFGoFM/wpQ9M=) 2: tUcxKN5Ul222LZvRYU53xD3uObU.crl (hash: CgA97R8pOCQN6K6WHatRpoHfCPA70JIBPnIruW5Nvu8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:25:be:f9:10:07:09:94:29:e2:0c:4a:f9:89:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5473128de54976db62d9bd1614e77c43dee39b5 Validity Not Before: Dec 6 01:00:59 2025 GMT Not After : Dec 7 01:00:59 2025 GMT Subject: CN=79cd21c6c2593ed879538cbfa10ab1a75c580db2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:69:e7:d5:7a:a7:f1:2b:7b:2a:9d:8d:54:ef: c4:49:8e:03:e3:ff:e7:a6:b6:1c:e3:c4:e7:33:66: 3d:33:4b:85:76:22:60:96:eb:91:fc:b1:6c:45:48: 83:da:bf:46:10:43:be:ce:1e:f5:ae:b3:00:21:3c: b9:5c:52:51:23:96:67:53:d8:04:f2:39:a3:16:02: 50:46:5d:a4:b7:80:ce:66:71:8c:73:d1:96:87:e4: c6:93:4f:63:26:53:07:5c:14:3c:cb:0c:af:bf:59: 1f:a1:a0:ce:9b:df:4b:5c:be:26:85:ab:0d:15:49: ba:ff:8a:e8:b2:76:21:d7:9f:26:65:5c:1f:93:76: ac:c4:0d:11:3f:97:90:a3:13:2c:01:0b:b2:d5:f2: a4:4a:96:99:8c:68:e6:0d:d8:03:ae:81:89:48:02: 73:fc:02:34:af:11:1a:0a:cb:d5:e1:7c:04:3d:8f: 23:b3:fc:52:db:89:ef:02:9c:a9:63:e3:af:3c:6b: 75:94:36:75:30:f3:9c:bd:92:47:af:86:01:9f:51: 10:87:c2:b1:13:f8:1d:db:ac:71:ed:4c:80:38:b2: 5c:76:53:13:dd:7e:8a:d1:68:ea:47:86:d6:e9:1f: b1:49:16:d5:37:ef:1d:14:13:c5:6e:fa:e8:c9:6d: 9f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CD:21:C6:C2:59:3E:D8:79:53:8C:BF:A1:0A:B1:A7:5C:58:0D:B2 X509v3 Authority Key Identifier: keyid:B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:13:10:fc:b0:4f:96:25:08:fc:6e:b6:7a:c4:6b:c2:95:96: e0:f7:51:44:fa:1b:81:a7:1b:f3:1b:86:12:b3:47:8c:2d:ee: 36:ba:ee:53:1f:49:1e:dd:6c:6c:bd:7c:e7:9c:e5:ba:61:b9: 40:20:3d:fb:cb:b1:66:23:2e:31:d5:4f:07:53:c1:8e:c3:b6: 50:67:ee:16:0e:5a:a4:cf:8c:8d:c1:1a:82:35:fe:f7:e8:26: 12:90:70:41:53:27:06:4f:87:60:94:e4:34:f2:ee:29:a4:d1: ec:62:05:88:3d:cc:4e:0a:e2:98:a7:c1:a1:e6:57:5d:c7:4f: da:6b:cf:26:ea:93:11:40:5d:b7:1d:2c:1d:9b:5c:14:ec:3f: 14:23:5a:ce:86:a4:b8:c4:2a:31:2d:9b:5c:e5:e8:79:d8:fd: 80:4b:28:d8:01:93:bf:58:b2:0c:49:aa:3e:12:39:fc:9e:ae: 87:97:31:b9:6f:e1:e3:5b:d8:1b:b6:e0:61:27:02:07:0b:2a: b8:69:e0:25:80:12:da:29:0f:a1:4f:ff:d3:31:a4:bf:63:0c: 49:69:21:cd:90:27:7f:e5:cb:0a:f2:54:31:d1:a5:71:86:47: 6b:be:e0:f4:17:b8:23:6b:9e:2e:e2:4b:4b:67:e5:6a:48:2e: 66:b2:c2:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSW++RAHCZQp4gxK+YkRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDczMTI4ZGU1NDk3NmRiNjJkOWJkMTYxNGU3N2M0M2Rl ZTM5YjUwHhcNMjUxMjA2MDEwMDU5WhcNMjUxMjA3MDEwMDU5WjAzMTEwLwYDVQQD Eyg3OWNkMjFjNmMyNTkzZWQ4Nzk1MzhjYmZhMTBhYjFhNzVjNTgwZGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2nn1Xqn8St7Kp2NVO/ESY4D4//n prYc48TnM2Y9M0uFdiJgluuR/LFsRUiD2r9GEEO+zh71rrMAITy5XFJRI5ZnU9gE 8jmjFgJQRl2kt4DOZnGMc9GWh+TGk09jJlMHXBQ8ywyvv1kfoaDOm99LXL4mhasN FUm6/4rosnYh158mZVwfk3asxA0RP5eQoxMsAQuy1fKkSpaZjGjmDdgDroGJSAJz /AI0rxEaCsvV4XwEPY8js/xS24nvApypY+OvPGt1lDZ1MPOcvZJHr4YBn1EQh8Kx E/gd26xx7UyAOLJcdlMT3X6K0WjqR4bW6R+xSRbVN+8dFBPFbvroyW2f2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnNIcbCWT7YeVOMv6EKsadcWA2yMB8GA1UdIwQY MBaAFLVHMSjeVJdtti2b0WFOd8Q97jm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MGRlODAtNTBlOS00YzFkLWE3YjQt ZTkwNDMxODM0MmVlLzEvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MGRlODAtNTBlOS00YzFkLWE3YjQtZTkwNDMxODM0MmVl LzEvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEBMQ/LBP liUI/G62esRrwpWW4PdRRPobgacb8xuGErNHjC3uNrruUx9JHt1sbL1855zlumG5 QCA9+8uxZiMuMdVPB1PBjsO2UGfuFg5apM+MjcEagjX+9+gmEpBwQVMnBk+HYJTk NPLuKaTR7GIFiD3MTgrimKfBoeZXXcdP2mvPJuqTEUBdtx0sHZtcFOw/FCNazoak uMQqMS2bXOXoedj9gEso2AGTv1iyDEmqPhI5/J6uh5cxuW/h41vYG7bgYScCBwsq uGngJYAS2ikPoU//0zGkv2MMSWkhzZAnf+XLCvJUMdGlcYZHa77g9Be4I2ueLuJL S2flakguZrLCjw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:11 2025 by rpki-client