This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft File: tUXkNLukc3BtqDNv2gFrsuaLNiM.mft (raw, json) Hash identifier: 9IopmB4OVl8neosyCwq/rKOxvPEGUYAxJPhIHdCKF6c= Subject key identifier: 40:57:C4:01:DC:5A:A2:83:84:A1:09:4A:36:C8:7C:F4:A9:30:2F:2B Authority key identifier: B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23 Certificate issuer: /CN=b545e434bba473706da8336fda016bb2e68b3623 Certificate serial: 019AF12F301DB31E158E0F3EE4FD783913EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 01:03:12 +0000 Manifest this update: Sat 06 Dec 2025 01:03:12 +0000 Manifest next update: Sun 07 Dec 2025 01:03:12 +0000 Files and hashes: 1: 8c1jWLNSWx4cTuK9ZEnAPJAmwwU.roa (hash: zNldb7jsDCF4ycQz0X2hLLJLeALZnhbBqN35ToOj1oI=) 2: tUXkNLukc3BtqDNv2gFrsuaLNiM.crl (hash: nMT6gZeIMEPcDt+ms5ldy2Vg5AbYZikqz2dlAKrviEY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:30:1d:b3:1e:15:8e:0f:3e:e4:fd:78:39:13:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b545e434bba473706da8336fda016bb2e68b3623 Validity Not Before: Dec 6 01:03:12 2025 GMT Not After : Dec 7 01:03:12 2025 GMT Subject: CN=4057c401dc5aa28384a1094a36c87cf4a9302f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dd:98:51:ed:a6:f8:be:01:eb:95:24:db:66: 38:9d:bf:42:6c:af:ee:8a:5e:18:b1:cb:4c:20:96: b6:57:07:01:6a:59:26:ea:7e:1f:56:89:14:ce:99: 8d:d9:6a:8c:e4:f7:7e:46:b1:78:f1:54:40:0b:22: 7b:1c:37:81:ec:c8:74:ac:de:f0:60:41:5e:2b:42: 34:ea:f6:70:41:cc:de:9b:4f:a1:71:47:1e:bd:42: 0b:83:3f:8c:eb:3f:c3:ec:9e:19:f9:11:11:cc:60: e9:11:ec:e8:68:26:da:ef:38:30:33:54:e7:48:5c: 32:8f:71:2b:e9:37:fe:0c:0a:af:59:36:0a:0f:20: bf:af:4c:ac:a5:72:09:55:4e:8f:7e:29:98:5a:21: 82:f6:bc:7b:e6:df:fe:4d:91:37:e0:f6:db:80:d9: 67:fd:74:20:dd:a9:6d:15:4d:3d:64:78:cd:22:44: 1d:c2:b8:7a:2d:a3:cb:18:fd:ad:46:71:d2:e0:c1: 4d:b6:14:a0:b5:62:d1:b1:87:77:7b:c6:d9:d2:03: a0:08:5c:d9:4e:d0:66:80:3e:08:33:4b:d4:ec:5e: b7:44:d7:7a:92:10:0d:4f:b3:94:1e:96:90:4c:19: 90:4b:61:8c:68:6a:d5:f1:b9:47:28:63:2c:38:65: ec:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:57:C4:01:DC:5A:A2:83:84:A1:09:4A:36:C8:7C:F4:A9:30:2F:2B X509v3 Authority Key Identifier: keyid:B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:d8:97:d5:f3:7f:89:9c:3f:56:83:04:c2:1c:95:5e:c2:76: 3b:87:12:aa:5c:8c:a0:58:5a:c4:36:fa:f2:3f:b1:f8:6e:f8: c6:40:39:fa:79:00:a3:93:2b:0d:3a:72:75:9e:bf:02:c8:c6: 65:9c:1b:0c:ba:1c:80:25:e7:67:ce:bf:1e:2b:7d:cf:44:3d: 54:67:fa:6c:f4:00:25:68:ae:d6:c7:6e:a3:c9:31:8c:8d:aa: d1:2a:8f:c3:0f:70:41:d1:e6:89:ab:41:31:17:c0:ef:fd:d4: 45:e4:33:46:33:17:59:2a:25:cf:08:49:d8:de:9c:ce:59:a1: 2c:66:4d:58:43:41:ee:a0:54:5d:de:b9:ef:0f:81:50:8f:c9: 4a:9c:bf:df:20:c3:37:83:4d:31:77:c7:ee:2a:89:af:fe:38: 3c:bc:90:79:f2:b3:f1:8f:7d:20:fa:09:6c:f9:f8:c4:12:65: 85:91:88:22:8b:b7:f0:4a:50:f0:fb:50:f0:5d:e6:fb:40:17: 71:82:e5:95:7f:60:b2:60:de:1b:01:40:3e:a1:9b:b7:70:54: bc:49:6f:c2:39:1a:43:06:c3:d3:4a:6f:72:b9:48:8d:ff:60: 54:25:ca:7b:40:f0:ba:b4:91:72:6c:4f:82:96:21:48:36:53: fd:4e:02:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLzAdsx4Vjg8+5P14ORPrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDVlNDM0YmJhNDczNzA2ZGE4MzM2ZmRhMDE2YmIyZTY4 YjM2MjMwHhcNMjUxMjA2MDEwMzEyWhcNMjUxMjA3MDEwMzEyWjAzMTEwLwYDVQQD Eyg0MDU3YzQwMWRjNWFhMjgzODRhMTA5NGEzNmM4N2NmNGE5MzAyZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd2YUe2m+L4B65Uk22Y4nb9CbK/u il4YsctMIJa2VwcBalkm6n4fVokUzpmN2WqM5Pd+RrF48VRACyJ7HDeB7Mh0rN7w YEFeK0I06vZwQczem0+hcUcevUILgz+M6z/D7J4Z+RERzGDpEezoaCba7zgwM1Tn SFwyj3Er6Tf+DAqvWTYKDyC/r0yspXIJVU6PfimYWiGC9rx75t/+TZE34PbbgNln /XQg3altFU09ZHjNIkQdwrh6LaPLGP2tRnHS4MFNthSgtWLRsYd3e8bZ0gOgCFzZ TtBmgD4IM0vU7F63RNd6khANT7OUHpaQTBmQS2GMaGrV8blHKGMsOGXs2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBXxAHcWqKDhKEJSjbIfPSpMC8rMB8GA1UdIwQY MBaAFLVF5DS7pHNwbagzb9oBa7LmizYjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVYa05MdWtjM0J0cUROdjJnRnJzdWFMTmlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MzM0MTYtNTE5Mi00OTQ0LWFiNTAt ODEzYzc2ZmY0MGI0LzEvdFVYa05MdWtjM0J0cUROdjJnRnJzdWFMTmlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy81MzM0MTYtNTE5Mi00OTQ0LWFiNTAtODEzYzc2ZmY0MGI0 LzEvdFVYa05MdWtjM0J0cUROdjJnRnJzdWFMTmlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidiX1fN/ iZw/VoMEwhyVXsJ2O4cSqlyMoFhaxDb68j+x+G74xkA5+nkAo5MrDTpydZ6/AsjG ZZwbDLocgCXnZ86/Hit9z0Q9VGf6bPQAJWiu1sduo8kxjI2q0SqPww9wQdHmiatB MRfA7/3UReQzRjMXWSolzwhJ2N6czlmhLGZNWENB7qBUXd657w+BUI/JSpy/3yDD N4NNMXfH7iqJr/44PLyQefKz8Y99IPoJbPn4xBJlhZGIIou38EpQ8PtQ8F3m+0AX cYLllX9gsmDeGwFAPqGbt3BUvElvwjkaQwbD00pvcrlIjf9gVCXKe0DwurSRcmxP gpYhSDZT/U4CbQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:31:05 2025 by rpki-client