This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft File: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft (raw, json) Hash identifier: y6v53Gwlqs5/as1wJdfafrFRp7jI9sRvluIzMuBsqME= Subject key identifier: F1:C4:E7:47:61:8E:6C:0B:E4:1A:68:8F:CF:D7:27:07:8B:87:89:88 Authority key identifier: 4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C Certificate issuer: /CN=4eee86b22c24bca7713071de95d6822c339cfd1c Certificate serial: 019AF3893AE266BC69311EFF036C280E7398 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft Manifest number: 1487 Signing time: Sat 06 Dec 2025 12:00:48 +0000 Manifest this update: Sat 06 Dec 2025 12:00:48 +0000 Manifest next update: Sun 07 Dec 2025 12:00:48 +0000 Files and hashes: 1: DAiAlkKu2uIH3tPrZHXW35UovoY.roa (hash: ii+y3ES147W1gYE6b/JQu7S5U4fp3robU9GiKGcJGDs=) 2: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl (hash: q7e6gzP87u/bdgTy9Dfbh3MfDru+Rrdi3YGTSVmJ1SM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:3a:e2:66:bc:69:31:1e:ff:03:6c:28:0e:73:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eee86b22c24bca7713071de95d6822c339cfd1c Validity Not Before: Dec 6 12:00:48 2025 GMT Not After : Dec 7 12:00:48 2025 GMT Subject: CN=f1c4e747618e6c0be41a688fcfd727078b878988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:8a:a4:3e:12:43:a0:2b:10:1a:99:30:c0:2f: ef:89:25:d4:be:62:c4:97:1c:98:7a:fe:b9:e7:9b: 22:c9:71:cb:67:7e:db:66:6c:5b:1d:52:67:71:46: 76:f6:2e:0c:d6:a5:cb:0c:59:53:79:2e:ae:f1:46: ab:cc:62:5b:3e:6a:1d:6d:c6:91:18:62:0c:e4:bf: b0:10:7d:65:1c:11:dd:9b:eb:66:e1:c2:2f:99:e7: b9:62:c0:95:d1:44:2b:ce:58:c4:a5:b2:9f:dc:06: 1f:9a:c2:fb:af:88:83:7d:f7:38:60:57:67:76:76: f4:3c:5b:9b:3d:2d:4c:e1:0a:be:fd:50:77:da:26: f9:84:b5:3c:44:3b:96:a0:60:05:2a:ac:72:ff:26: aa:44:84:21:e0:07:3d:19:5c:15:77:b6:e3:e1:07: 28:1e:fa:88:dc:05:0e:bc:41:a9:86:40:d0:c4:ef: 4b:ce:ed:11:fe:7a:5b:37:73:f0:31:02:47:f1:a9: 5e:08:51:9d:65:54:b4:00:c7:ea:24:3c:1b:7b:d6: 53:3b:a5:51:de:0e:e0:72:e7:1a:7a:db:81:8e:d8: 6f:d4:b8:a2:97:82:8b:98:60:d7:e4:c4:55:e6:70: 28:86:96:44:66:9c:fb:05:db:75:66:0d:d0:96:b3: 02:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:C4:E7:47:61:8E:6C:0B:E4:1A:68:8F:CF:D7:27:07:8B:87:89:88 X509v3 Authority Key Identifier: keyid:4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:6b:3d:70:3d:8a:a3:b4:b0:ee:25:ca:28:92:3b:32:95:51: 6a:4b:4a:87:88:e1:93:56:ee:da:05:2a:84:5d:aa:6f:13:b4: 91:fc:58:49:19:7e:9f:9b:24:48:7d:af:e4:0f:ac:da:6b:27: 36:3a:5b:83:3c:0b:ec:67:b7:d4:c2:6d:58:8c:f8:2b:f7:39: cd:8b:2b:49:99:4f:f8:2f:0c:90:29:26:6f:11:f6:57:53:05: e1:af:d9:59:36:9a:5e:6b:75:92:d6:f7:c8:cc:08:4d:a6:66: ed:89:2f:b1:c2:2c:18:0f:ad:ec:5a:ce:27:68:c2:f5:9e:e6: 87:10:a3:c4:4c:a5:fe:1f:a8:0d:61:7b:92:82:8b:d7:f9:ed: 13:e2:4a:3e:fb:79:28:d4:cf:b8:85:7c:b6:c7:ed:4c:b4:81: b8:87:33:25:3a:36:15:d1:f1:01:ba:8d:a4:45:87:10:bd:be: bc:c7:2c:ed:3b:53:4e:6e:b3:df:89:6d:e4:da:c3:4c:2c:35: f5:9f:65:9d:36:54:46:94:9a:f4:df:31:85:c8:94:94:22:57: 5f:43:e6:72:da:80:11:d4:2b:5b:e7:a3:89:63:3a:56:53:fd: 1d:5c:f5:6d:e2:22:34:d1:ba:2b:ff:fc:58:1c:d2:a5:70:1b: 3e:3a:7a:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziTriZrxpMR7/A2woDnOYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWU4NmIyMmMyNGJjYTc3MTMwNzFkZTk1ZDY4MjJjMzM5 Y2ZkMWMwHhcNMjUxMjA2MTIwMDQ4WhcNMjUxMjA3MTIwMDQ4WjAzMTEwLwYDVQQD EyhmMWM0ZTc0NzYxOGU2YzBiZTQxYTY4OGZjZmQ3MjcwNzhiODc4OTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIqkPhJDoCsQGpkwwC/viSXUvmLE lxyYev6555siyXHLZ37bZmxbHVJncUZ29i4M1qXLDFlTeS6u8UarzGJbPmodbcaR GGIM5L+wEH1lHBHdm+tm4cIvmee5YsCV0UQrzljEpbKf3AYfmsL7r4iDffc4YFdn dnb0PFubPS1M4Qq+/VB32ib5hLU8RDuWoGAFKqxy/yaqRIQh4Ac9GVwVd7bj4Qco HvqI3AUOvEGphkDQxO9Lzu0R/npbN3PwMQJH8aleCFGdZVS0AMfqJDwbe9ZTO6VR 3g7gcucaetuBjthv1Liil4KLmGDX5MRV5nAohpZEZpz7Bdt1Zg3QlrMCiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHE50dhjmwL5Bpoj8/XJweLh4mIMB8GA1UdIwQY MBaAFE7uhrIsJLyncTBx3pXWgiwznP0cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHU2R3Npd2t2S2R4TUhIZWxkYUNMRE9jX1J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jNjhiZDEtOGE5OC00MWIyLWIzNmIt Mzg2ZWVhOGQ4ZGQ2LzEvVHU2R3Npd2t2S2R4TUhIZWxkYUNMRE9jX1J3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9jNjhiZDEtOGE5OC00MWIyLWIzNmItMzg2ZWVhOGQ4ZGQ2 LzEvVHU2R3Npd2t2S2R4TUhIZWxkYUNMRE9jX1J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKWs9cD2K o7Sw7iXKKJI7MpVRaktKh4jhk1bu2gUqhF2qbxO0kfxYSRl+n5skSH2v5A+s2msn NjpbgzwL7Ge31MJtWIz4K/c5zYsrSZlP+C8MkCkmbxH2V1MF4a/ZWTaaXmt1ktb3 yMwITaZm7YkvscIsGA+t7FrOJ2jC9Z7mhxCjxEyl/h+oDWF7koKL1/ntE+JKPvt5 KNTPuIV8tsftTLSBuIczJTo2FdHxAbqNpEWHEL2+vMcs7TtTTm6z34lt5NrDTCw1 9Z9lnTZURpSa9N8xhciUlCJXX0PmctqAEdQrW+ejiWM6VlP9HVz1beIiNNG6K//8 WBzSpXAbPjp6nQ== -----END CERTIFICATE-----Generated at Sat Dec 6 20:53:59 2025 by rpki-client