This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft File: Tu24VWoM8egtjnx5BY8O-1BALKY.mft (raw, json) Hash identifier: jIPHn94lNGJv/LIbLHRt/IRiiNlmsjlHslzx+DDpwiU= Subject key identifier: 63:B5:AC:28:F3:D2:E4:16:36:C5:0E:00:36:3F:6E:71:DA:E5:4E:B7 Authority key identifier: 4E:ED:B8:55:6A:0C:F1:E8:2D:8E:7C:79:05:8F:0E:FB:50:40:2C:A6 Certificate issuer: /CN=4eedb8556a0cf1e82d8e7c79058f0efb50402ca6 Certificate serial: 019AF23FA786B81C36A31BC8F15D5AB35F91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu24VWoM8egtjnx5BY8O-1BALKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft Manifest number: DD Signing time: Sat 06 Dec 2025 06:00:49 +0000 Manifest this update: Sat 06 Dec 2025 06:00:49 +0000 Manifest next update: Sun 07 Dec 2025 06:00:49 +0000 Files and hashes: 1: Tu24VWoM8egtjnx5BY8O-1BALKY.crl (hash: uZXawas8r+eE+1QS1CmcfD4QF8xlpBGFEL1XlxX39ms=) 2: dTqGBPJdhAtYfJdhKht0AshnDHA.roa (hash: cv0gljmXyVFEUJxvPpTotnLGffpzplLUWeRT5xXyBkw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft rsync://rpki.ripe.net/repository/DEFAULT/Tu24VWoM8egtjnx5BY8O-1BALKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a7:86:b8:1c:36:a3:1b:c8:f1:5d:5a:b3:5f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eedb8556a0cf1e82d8e7c79058f0efb50402ca6 Validity Not Before: Dec 6 06:00:49 2025 GMT Not After : Dec 7 06:00:49 2025 GMT Subject: CN=63b5ac28f3d2e41636c50e00363f6e71dae54eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4a:cb:83:73:f0:3a:42:8e:53:0b:ee:66:6f: e0:c0:a6:d7:a0:f8:a6:d8:6f:6c:53:1a:d9:3b:5f: e7:29:d2:d5:41:06:ed:0d:43:cd:9f:7b:db:22:c3: 08:9f:06:28:8e:f0:02:b1:69:85:e6:70:cb:d3:7e: e6:27:81:ae:22:01:41:5d:b5:2d:1b:dd:ea:fe:99: b9:1f:38:12:04:c4:6b:88:81:de:57:12:93:be:c5: 3f:59:f5:e1:aa:95:6c:ac:8d:a2:81:24:52:6f:f9: 96:6c:fc:16:3e:09:9c:d7:e6:39:18:cc:8f:fe:87: 58:05:ef:64:6d:1a:57:7d:17:d6:bb:e5:2a:68:56: cf:60:1c:a9:d5:81:77:9a:c1:dc:af:9f:29:79:db: 13:fd:a2:c5:ec:b8:06:96:82:5a:5d:79:45:3f:b1: dc:55:fc:52:c9:f8:15:11:a5:b5:f5:d6:42:94:5e: c4:5d:91:e7:18:34:49:39:7a:3e:a3:d4:22:bb:83: 47:32:89:3b:a7:fe:71:1b:c1:ab:01:58:8d:fa:c1: de:ca:fc:b5:97:99:d7:71:fe:1c:52:0e:6a:2e:63: 40:05:51:e7:82:19:a7:cc:03:10:bc:12:3e:ef:10: 87:e2:34:9a:7d:48:2e:b8:a6:ff:87:56:23:7c:36: a9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B5:AC:28:F3:D2:E4:16:36:C5:0E:00:36:3F:6E:71:DA:E5:4E:B7 X509v3 Authority Key Identifier: keyid:4E:ED:B8:55:6A:0C:F1:E8:2D:8E:7C:79:05:8F:0E:FB:50:40:2C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu24VWoM8egtjnx5BY8O-1BALKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/884aae-2203-4f21-91a4-8f1ff3880102/1/Tu24VWoM8egtjnx5BY8O-1BALKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:47:57:63:3f:0d:45:1b:92:e4:b5:31:0c:22:d5:47:5f:b2: fe:05:3d:50:b1:37:99:2e:6d:45:4d:e9:3f:35:a1:fd:02:d0: 60:7d:ba:75:61:0b:0d:07:07:f2:42:86:cb:cd:76:c4:70:a2: a2:85:08:b8:a7:92:3d:ef:0e:8e:a6:e9:7f:73:70:e9:44:69: 13:92:bd:68:a5:c6:c7:2c:7c:ef:6b:ba:2f:5a:74:bf:24:86: 60:5b:04:0b:87:ed:6e:0a:5d:0c:15:38:e9:55:01:19:82:04: 27:7c:cc:7f:29:1f:1a:9a:a7:ee:71:eb:18:b8:5f:09:3f:ef: 06:1e:02:4c:b2:fe:2f:f8:6a:18:c6:1e:09:5a:40:9b:0d:83: a1:ca:0d:1a:67:c2:ce:e8:0a:f6:95:ee:e0:1f:25:ce:d4:a1: 44:27:f0:6d:f9:f0:92:f1:92:a8:9a:78:be:3f:ee:75:19:af: f7:a8:95:a7:a1:33:67:99:f9:19:48:ee:c4:8b:e8:84:17:11: f0:2f:73:c3:55:99:ab:1a:10:93:76:fe:da:00:a9:39:ad:ce: a8:76:2e:a8:91:f4:61:55:42:7e:06:11:c3:f3:b5:7c:44:68: 6e:44:68:1d:01:8c:18:4e:45:79:b4:68:64:9c:82:7e:87:75: ed:95:3a:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6eGuBw2oxvI8V1as1+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWRiODU1NmEwY2YxZTgyZDhlN2M3OTA1OGYwZWZiNTA0 MDJjYTYwHhcNMjUxMjA2MDYwMDQ5WhcNMjUxMjA3MDYwMDQ5WjAzMTEwLwYDVQQD Eyg2M2I1YWMyOGYzZDJlNDE2MzZjNTBlMDAzNjNmNmU3MWRhZTU0ZWI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmErLg3PwOkKOUwvuZm/gwKbXoPim 2G9sUxrZO1/nKdLVQQbtDUPNn3vbIsMInwYojvACsWmF5nDL037mJ4GuIgFBXbUt G93q/pm5HzgSBMRriIHeVxKTvsU/WfXhqpVsrI2igSRSb/mWbPwWPgmc1+Y5GMyP /odYBe9kbRpXfRfWu+UqaFbPYByp1YF3msHcr58pedsT/aLF7LgGloJaXXlFP7Hc VfxSyfgVEaW19dZClF7EXZHnGDRJOXo+o9Qiu4NHMok7p/5xG8GrAViN+sHeyvy1 l5nXcf4cUg5qLmNABVHnghmnzAMQvBI+7xCH4jSafUguuKb/h1YjfDapxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGO1rCjz0uQWNsUOADY/bnHa5U63MB8GA1UdIwQY MBaAFE7tuFVqDPHoLY58eQWPDvtQQCymMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHUyNFZXb004ZWd0am54NUJZOE8tMUJBTEtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84ODRhYWUtMjIwMy00ZjIxLTkxYTQt OGYxZmYzODgwMTAyLzEvVHUyNFZXb004ZWd0am54NUJZOE8tMUJBTEtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84ODRhYWUtMjIwMy00ZjIxLTkxYTQtOGYxZmYzODgwMTAy LzEvVHUyNFZXb004ZWd0am54NUJZOE8tMUJBTEtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0dXYz8N RRuS5LUxDCLVR1+y/gU9ULE3mS5tRU3pPzWh/QLQYH26dWELDQcH8kKGy812xHCi ooUIuKeSPe8Ojqbpf3Nw6URpE5K9aKXGxyx872u6L1p0vySGYFsEC4ftbgpdDBU4 6VUBGYIEJ3zMfykfGpqn7nHrGLhfCT/vBh4CTLL+L/hqGMYeCVpAmw2DocoNGmfC zugK9pXu4B8lztShRCfwbfnwkvGSqJp4vj/udRmv96iVp6EzZ5n5GUjuxIvohBcR 8C9zw1WZqxoQk3b+2gCpOa3OqHYuqJH0YVVCfgYRw/O1fERobkRoHQGMGE5FebRo ZJyCfod17ZU6kA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:26:00 2025 by rpki-client