This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft File: tu1iBVpRkcAuxREulRgaiawGDOs.mft (raw, json) Hash identifier: xpqr5EOOrmhtsFQP0sEP9C1rgpPwFwxIMwjIl2J7wDw= Subject key identifier: 72:62:B0:E0:8B:DB:AC:CC:70:3A:8E:54:0D:7D:1B:88:67:78:BF:21 Authority key identifier: B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB Certificate issuer: /CN=b6ed62055a5191c02ec5112e95181a89ac060ceb Certificate serial: 019AF16459722324CB9F3FBBBE0E50244775 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft Manifest number: 0CBB Signing time: Sat 06 Dec 2025 02:01:16 +0000 Manifest this update: Sat 06 Dec 2025 02:01:16 +0000 Manifest next update: Sun 07 Dec 2025 02:01:16 +0000 Files and hashes: 1: iOo8WZeBs16BOwEjC7IsPMOtPO0.roa (hash: FC5R1Hrtvnbfsyec/XOyQavDbuFW5mY0wSOTHI+QutE=) 2: tu1iBVpRkcAuxREulRgaiawGDOs.crl (hash: C8WT+Siqh2gfcuLC/oC3g/NNd/Uh9EN+w5QJZPbCAxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:59:72:23:24:cb:9f:3f:bb:be:0e:50:24:47:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6ed62055a5191c02ec5112e95181a89ac060ceb Validity Not Before: Dec 6 02:01:16 2025 GMT Not After : Dec 7 02:01:16 2025 GMT Subject: CN=7262b0e08bdbaccc703a8e540d7d1b886778bf21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:69:5f:76:80:e7:ce:c4:6e:4e:14:53:ed:35: 2e:c5:b1:10:d8:33:3e:24:27:fe:d7:a0:29:6d:d7: 0a:04:b2:7d:70:ea:37:14:db:19:ac:8a:b0:43:6d: 29:94:7a:8e:d9:06:a9:9f:23:65:a2:de:95:70:34: d8:83:f2:1f:6a:ed:2c:8b:84:4a:58:d0:80:87:7a: e3:43:00:be:e3:6e:f2:50:b9:bd:00:e0:37:a8:ac: 87:8b:3c:e4:ca:89:d1:6c:92:b8:e7:9e:94:74:b3: dc:09:14:c0:5d:c2:63:a9:6c:fa:9a:2d:8f:5d:e0: 47:ba:12:d3:61:34:f8:df:4d:a4:ac:de:ad:56:0a: e9:f1:cb:91:94:e8:9d:74:70:c5:2a:83:2c:4a:41: a4:15:9f:ec:3f:a3:b3:25:81:e7:39:15:4a:c2:81: 67:5a:83:db:2e:08:71:f3:48:6a:39:e4:40:83:de: bd:f2:53:6d:0a:6a:b0:92:aa:6d:7d:57:5c:0b:86: 73:82:39:92:a1:59:88:88:10:82:b3:43:d3:29:52: e6:91:f8:c4:2a:85:c4:79:04:77:a3:64:f8:0a:1b: 57:61:46:6e:58:ba:37:fc:39:12:5d:80:6d:74:19: 7f:86:c4:99:c8:47:f5:e4:a6:a0:7e:5e:97:1b:2a: 09:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:62:B0:E0:8B:DB:AC:CC:70:3A:8E:54:0D:7D:1B:88:67:78:BF:21 X509v3 Authority Key Identifier: keyid:B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:33:8e:f4:a6:63:9e:50:79:e6:3f:d6:3b:77:dc:c2:e5:97: d0:e1:8d:9e:20:95:ff:76:c5:c2:46:5c:5b:59:40:99:6d:d7: 1b:10:c4:f1:1b:54:ae:ab:e5:7d:26:df:75:3c:29:b2:4a:56: 12:26:22:8d:59:5b:00:78:6d:97:f1:de:81:93:d9:0c:bf:21: b9:01:fc:9b:72:53:6d:89:35:a6:54:a8:35:82:c8:c4:68:5d: a4:14:dc:0d:48:0f:d7:5d:3a:e6:46:01:9d:66:9c:90:87:15: ba:73:02:82:ca:3f:05:97:4d:2e:dd:27:9b:0c:a8:f6:6c:77: 4f:da:24:32:ea:4b:d8:ee:bd:e0:d2:1c:0f:6c:8a:6c:13:6c: ca:0c:65:3e:d7:32:8f:2e:34:e5:7a:a2:00:44:18:4e:f8:a2: de:95:df:2b:b4:ec:7f:ce:11:03:13:bc:db:3b:ed:35:11:2b: f3:d6:e6:34:fc:e0:34:16:c6:cd:0b:de:b9:65:54:cf:35:3b: 90:2f:2e:e0:5a:7f:2c:82:bb:95:83:20:60:1c:04:ba:ed:b2: 31:43:b6:de:f3:b2:19:99:89:2e:8f:e2:70:41:d2:ed:42:d0: b3:09:23:6d:17:f1:32:6e:e2:17:41:77:75:ab:98:6d:54:58: 8b:9e:45:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFlyIyTLnz+7vg5QJEd1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZWQ2MjA1NWE1MTkxYzAyZWM1MTEyZTk1MTgxYTg5YWMw NjBjZWIwHhcNMjUxMjA2MDIwMTE2WhcNMjUxMjA3MDIwMTE2WjAzMTEwLwYDVQQD Eyg3MjYyYjBlMDhiZGJhY2NjNzAzYThlNTQwZDdkMWI4ODY3NzhiZjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmlfdoDnzsRuThRT7TUuxbEQ2DM+ JCf+16ApbdcKBLJ9cOo3FNsZrIqwQ20plHqO2QapnyNlot6VcDTYg/Ifau0si4RK WNCAh3rjQwC+427yULm9AOA3qKyHizzkyonRbJK4556UdLPcCRTAXcJjqWz6mi2P XeBHuhLTYTT4302krN6tVgrp8cuRlOiddHDFKoMsSkGkFZ/sP6OzJYHnORVKwoFn WoPbLghx80hqOeRAg9698lNtCmqwkqptfVdcC4ZzgjmSoVmIiBCCs0PTKVLmkfjE KoXEeQR3o2T4ChtXYUZuWLo3/DkSXYBtdBl/hsSZyEf15Kagfl6XGyoJRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJisOCL26zMcDqOVA19G4hneL8hMB8GA1UdIwQY MBaAFLbtYgVaUZHALsURLpUYGomsBgzrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHUxaUJWcFJrY0F1eFJFdWxSZ2FpYXdHRE9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kYzEzYzEtZGU1Ni00NDlmLTljMjkt YzgxMjY2YjdjNDllLzEvdHUxaUJWcFJrY0F1eFJFdWxSZ2FpYXdHRE9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kYzEzYzEtZGU1Ni00NDlmLTljMjktYzgxMjY2YjdjNDll LzEvdHUxaUJWcFJrY0F1eFJFdWxSZ2FpYXdHRE9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArDOO9KZj nlB55j/WO3fcwuWX0OGNniCV/3bFwkZcW1lAmW3XGxDE8RtUrqvlfSbfdTwpskpW EiYijVlbAHhtl/HegZPZDL8huQH8m3JTbYk1plSoNYLIxGhdpBTcDUgP11065kYB nWackIcVunMCgso/BZdNLt0nmwyo9mx3T9okMupL2O694NIcD2yKbBNsygxlPtcy jy405XqiAEQYTvii3pXfK7Tsf84RAxO82zvtNREr89bmNPzgNBbGzQveuWVUzzU7 kC8u4Fp/LIK7lYMgYBwEuu2yMUO23vOyGZmJLo/icEHS7ULQswkjbRfxMm7iF0F3 dauYbVRYi55F4A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:51 2025 by rpki-client