This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft File: tuD-D69oRJiK8vdE1RbtucXf5xw.mft (raw, json) Hash identifier: vHtaHFevh1smhinDgfQ9UsqNbCMnNTPVVQUafN2gYR4= Subject key identifier: 34:50:13:22:A7:16:87:14:31:CB:A9:7F:1B:1D:A7:B4:FD:87:97:96 Authority key identifier: B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C Certificate issuer: /CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c Certificate serial: 019AF2AD5F8DA64254D518C3B708DC5C3F61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft Manifest number: 0EE9 Signing time: Sat 06 Dec 2025 08:00:39 +0000 Manifest this update: Sat 06 Dec 2025 08:00:39 +0000 Manifest next update: Sun 07 Dec 2025 08:00:39 +0000 Files and hashes: 1: a_PNkPnx5ou35JrpXNK2_iqC5Yc.roa (hash: iMkdGKK1MTR9CDFy5rjVtC+a2w/5myXmTmA9XTMLkJo=) 2: tuD-D69oRJiK8vdE1RbtucXf5xw.crl (hash: WCHDcsgvddmfRJLp0YuhiGfuIOPm8VnF9u5BDvzpc/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:5f:8d:a6:42:54:d5:18:c3:b7:08:dc:5c:3f:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c Validity Not Before: Dec 6 08:00:39 2025 GMT Not After : Dec 7 08:00:39 2025 GMT Subject: CN=34501322a716871431cba97f1b1da7b4fd879796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:44:92:ec:e4:47:9f:ac:04:c0:f2:8a:ce:5f: b8:a1:14:e0:84:f1:64:50:94:74:22:a8:2c:ed:8a: cd:2a:3f:0f:aa:ee:ed:c9:14:8d:ca:32:17:8d:b6: 38:71:95:1a:31:60:e3:e4:81:22:b7:9b:c6:a9:d7: d6:21:a5:32:aa:38:ae:c4:3f:bb:3c:c5:b3:a9:ee: 4f:a6:da:50:37:e8:a7:c6:2d:ad:c8:4a:7f:f4:05: 18:94:f6:b6:d8:6f:f9:29:00:8f:b1:0b:b7:53:14: 38:68:f3:d3:fe:18:81:b4:23:4f:b4:a2:42:bc:3b: eb:46:3b:36:43:52:c5:96:63:15:98:e3:74:7e:d7: a0:e1:f7:af:ac:d9:e0:09:b1:6e:25:1f:af:28:89: 28:18:82:9f:ff:b6:f6:ea:17:60:46:52:33:72:c3: a8:1d:e9:6e:4c:8f:ba:f1:9a:40:ec:0f:66:8f:47: b2:47:47:43:ce:fd:71:5e:88:98:6c:5d:ac:f9:6c: 18:e9:40:62:70:c7:ec:d1:5c:9e:5e:3e:b7:c6:1d: c2:6d:98:de:cc:dc:17:8b:bb:94:62:4a:86:65:5c: f6:c6:dc:4f:a1:0a:bc:32:d3:ad:d8:f9:93:09:55: a6:a9:97:1c:13:7b:5e:85:db:9d:e2:67:27:f4:ae: 41:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:50:13:22:A7:16:87:14:31:CB:A9:7F:1B:1D:A7:B4:FD:87:97:96 X509v3 Authority Key Identifier: keyid:B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:76:e4:1e:1b:e4:ca:24:93:38:3a:ad:6d:4f:fa:74:1a:39: 52:b1:b2:88:e2:b7:12:df:40:f4:fd:08:b0:a8:1b:94:5a:a6: 1a:e3:2c:a2:0d:b2:0c:82:6d:d4:ae:01:23:d6:b1:b6:e5:52: 42:fb:26:04:fc:d4:97:3a:c7:a7:85:5c:f7:c8:67:c8:87:81: ec:c9:ce:18:98:50:75:ed:e0:93:b1:d7:da:7d:5f:bf:59:45: ec:72:c7:fb:67:4d:7f:e8:ca:a4:5b:01:c8:8d:93:aa:6e:b0: ac:dd:d6:96:1f:9b:2d:d3:36:fc:f6:3f:9b:00:97:56:3c:1c: e4:d1:18:ae:e5:b8:91:7d:f4:95:b5:d9:fc:db:6c:5e:af:2e: 95:f8:e2:19:30:ee:ab:2c:94:77:5b:f7:1c:f0:31:d3:30:90: 11:1b:34:7b:2b:86:34:5b:00:3d:47:fd:2b:29:55:69:23:e3: 75:36:04:02:c3:a6:48:19:93:1c:1f:4b:93:fe:ca:d2:0a:5e: 10:0b:8d:98:8a:59:eb:73:99:43:64:7d:bd:4f:22:c1:d3:69: 58:38:d2:cd:8f:16:be:59:07:10:a5:e5:51:dd:63:0b:f3:52: 39:b3:8d:50:fd:91:2d:38:39:d8:55:68:31:cf:10:e0:cf:47: 19:93:2d:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrV+NpkJU1RjDtwjcXD9hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZTBmZTBmYWY2ODQ0OTg4YWYyZjc0NGQ1MTZlZGI5YzVk ZmU3MWMwHhcNMjUxMjA2MDgwMDM5WhcNMjUxMjA3MDgwMDM5WjAzMTEwLwYDVQQD EygzNDUwMTMyMmE3MTY4NzE0MzFjYmE5N2YxYjFkYTdiNGZkODc5Nzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUSS7ORHn6wEwPKKzl+4oRTghPFk UJR0Iqgs7YrNKj8Pqu7tyRSNyjIXjbY4cZUaMWDj5IEit5vGqdfWIaUyqjiuxD+7 PMWzqe5PptpQN+inxi2tyEp/9AUYlPa22G/5KQCPsQu3UxQ4aPPT/hiBtCNPtKJC vDvrRjs2Q1LFlmMVmON0fteg4fevrNngCbFuJR+vKIkoGIKf/7b26hdgRlIzcsOo HeluTI+68ZpA7A9mj0eyR0dDzv1xXoiYbF2s+WwY6UBicMfs0VyeXj63xh3CbZje zNwXi7uUYkqGZVz2xtxPoQq8MtOt2PmTCVWmqZccE3tehdud4mcn9K5BAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDRQEyKnFocUMcupfxsdp7T9h5eWMB8GA1UdIwQY MBaAFLbg/g+vaESYivL3RNUW7bnF3+ccMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHVELUQ2OW9SSmlLOHZkRTFSYnR1Y1hmNXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kMmE5YmMtMTNiMS00YjMwLWI1NjMt MjA5ZTFmODQyMjRlLzEvdHVELUQ2OW9SSmlLOHZkRTFSYnR1Y1hmNXh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9kMmE5YmMtMTNiMS00YjMwLWI1NjMtMjA5ZTFmODQyMjRl LzEvdHVELUQ2OW9SSmlLOHZkRTFSYnR1Y1hmNXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3bkHhvk yiSTODqtbU/6dBo5UrGyiOK3Et9A9P0IsKgblFqmGuMsog2yDIJt1K4BI9axtuVS QvsmBPzUlzrHp4Vc98hnyIeB7MnOGJhQde3gk7HX2n1fv1lF7HLH+2dNf+jKpFsB yI2Tqm6wrN3Wlh+bLdM2/PY/mwCXVjwc5NEYruW4kX30lbXZ/NtsXq8ulfjiGTDu qyyUd1v3HPAx0zCQERs0eyuGNFsAPUf9KylVaSPjdTYEAsOmSBmTHB9Lk/7K0gpe EAuNmIpZ63OZQ2R9vU8iwdNpWDjSzY8WvlkHEKXlUd1jC/NSObONUP2RLTg52FVo Mc8Q4M9HGZMtag== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:19 2025 by rpki-client