This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft File: tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft (raw, json) Hash identifier: WdsW7DrsvIasrkWECMgB1jjulxllQK+P/Tk46egUIxo= Subject key identifier: 9C:9A:1E:40:D6:E9:93:6E:BF:60:3D:E3:3D:35:8F:2C:CC:00:F9:4C Authority key identifier: B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81 Certificate issuer: /CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081 Certificate serial: 019AF276AB18F98629C8FCB4A1D3DC10E685 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft Manifest number: 0D4E Signing time: Sat 06 Dec 2025 07:00:54 +0000 Manifest this update: Sat 06 Dec 2025 07:00:54 +0000 Manifest next update: Sun 07 Dec 2025 07:00:54 +0000 Files and hashes: 1: Y7rbDno7w__NNU8_Y1vybLh8QhU.roa (hash: JcJWoK6XwWQ+PAZZ9rS/dpHArel2kscu87IT6w7P4BM=) 2: tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl (hash: PGDvAXBnW3inDrOtYp41pURw+1MXfazqk2sEeQIV9F0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:ab:18:f9:86:29:c8:fc:b4:a1:d3:dc:10:e6:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b542bc0d8cc28f558615ed3fae53cace4a6ef081 Validity Not Before: Dec 6 07:00:54 2025 GMT Not After : Dec 7 07:00:54 2025 GMT Subject: CN=9c9a1e40d6e9936ebf603de33d358f2ccc00f94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:13:71:6c:c1:ba:fe:22:37:07:95:5e:55: 78:79:e7:00:d3:4b:6c:2a:ce:44:10:f1:c3:1d:9c: 7c:ae:7e:1c:2a:d3:01:22:f0:03:7c:83:ee:1b:8b: 74:b2:b4:a1:b0:60:0e:18:95:0a:1f:f5:3c:89:43: 17:9a:20:67:94:fb:79:5e:70:50:1f:96:43:89:37: bc:a4:06:c7:03:b0:9f:6a:e1:9c:26:33:d6:35:16: 3b:46:1a:57:22:87:ca:15:7a:0a:34:f2:e7:c4:59: d6:e5:65:e7:5a:93:ac:de:b4:e1:76:bb:2c:48:03: 33:59:65:71:0d:6a:33:61:5d:9d:9c:6d:2d:8c:68: 87:86:73:a8:01:7a:1d:0d:74:1d:e8:82:8a:28:9c: d2:6e:96:5b:15:9f:fc:0f:bd:b2:18:bd:d0:f7:d2: 04:2b:ac:43:b5:8c:5b:86:30:33:72:11:b7:7f:19: 20:bd:03:75:29:28:88:9f:9e:47:e8:cd:ec:91:bd: 79:ed:be:dc:31:f7:6a:17:2b:50:09:5e:e5:66:42: 5f:e2:ed:2c:b7:03:9e:60:42:09:7c:b6:f2:0f:84: 93:7a:76:32:d1:6e:d1:e8:43:84:bb:b8:4b:6a:e6: 7a:e6:9a:23:c2:96:c6:1d:76:17:a2:c8:62:12:7e: 1e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9A:1E:40:D6:E9:93:6E:BF:60:3D:E3:3D:35:8F:2C:CC:00:F9:4C X509v3 Authority Key Identifier: keyid:B5:42:BC:0D:8C:C2:8F:55:86:15:ED:3F:AE:53:CA:CE:4A:6E:F0:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUK8DYzCj1WGFe0_rlPKzkpu8IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b1e0ff-9696-4b61-bd5e-7f6e4930f25a/1/tUK8DYzCj1WGFe0_rlPKzkpu8IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:56:23:03:40:49:5e:cb:a7:52:fe:c5:b8:75:6c:de:77:a4: 01:06:f9:ea:51:f0:a4:fb:a0:b6:d4:61:98:76:b0:24:d9:38: d1:3f:29:ac:d5:bf:e0:97:a5:90:3d:e8:9e:e9:33:c8:07:56: 69:fc:92:8f:7b:e6:26:bd:a6:e3:66:b8:da:24:bd:95:a0:b8: 2a:71:b4:aa:55:62:08:2d:a6:16:2a:1c:8a:85:2b:9c:26:ae: 9c:c1:73:df:7e:e6:e7:af:0f:33:1e:9c:08:4b:1c:12:84:86: 56:70:e8:88:0d:77:1d:ec:ea:2b:a2:91:f8:15:00:ee:a9:45: bc:2b:38:4c:6b:ae:7b:10:28:72:e9:22:9d:c1:69:32:60:5b: a2:83:3f:ec:b9:d2:79:60:3f:9a:0d:9a:16:56:a8:06:e4:31: 5a:5d:3e:47:46:f8:c2:9e:31:ca:3f:c3:b4:78:79:b4:9b:8e: 91:6f:66:b3:32:92:47:ce:5a:04:06:49:d5:1c:7d:6f:d3:dc: d3:19:db:ea:52:5b:64:93:55:07:fc:d5:db:dc:a5:9a:a6:52: f2:1e:19:61:55:06:03:ee:7b:01:1e:ce:ff:cb:cd:ea:28:88: c5:35:5d:16:0c:e8:9c:6f:a1:56:6d:d6:7f:c6:f5:ac:18:93: 33:a7:dc:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqsY+YYpyPy0odPcEOaFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDJiYzBkOGNjMjhmNTU4NjE1ZWQzZmFlNTNjYWNlNGE2 ZWYwODEwHhcNMjUxMjA2MDcwMDU0WhcNMjUxMjA3MDcwMDU0WjAzMTEwLwYDVQQD Eyg5YzlhMWU0MGQ2ZTk5MzZlYmY2MDNkZTMzZDM1OGYyY2NjMDBmOTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6ITcWzBuv4iNweVXlV4eecA00ts Ks5EEPHDHZx8rn4cKtMBIvADfIPuG4t0srShsGAOGJUKH/U8iUMXmiBnlPt5XnBQ H5ZDiTe8pAbHA7CfauGcJjPWNRY7RhpXIofKFXoKNPLnxFnW5WXnWpOs3rThdrss SAMzWWVxDWozYV2dnG0tjGiHhnOoAXodDXQd6IKKKJzSbpZbFZ/8D72yGL3Q99IE K6xDtYxbhjAzchG3fxkgvQN1KSiIn55H6M3skb157b7cMfdqFytQCV7lZkJf4u0s twOeYEIJfLbyD4STenYy0W7R6EOEu7hLauZ65pojwpbGHXYXoshiEn4eOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyaHkDW6ZNuv2A94z01jyzMAPlMMB8GA1UdIwQY MBaAFLVCvA2Mwo9VhhXtP65Tys5KbvCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVLOERZekNqMVdHRmUwX3JsUEt6a3B1OElFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMWUwZmYtOTY5Ni00YjYxLWJkNWUt N2Y2ZTQ5MzBmMjVhLzEvdFVLOERZekNqMVdHRmUwX3JsUEt6a3B1OElFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9iMWUwZmYtOTY5Ni00YjYxLWJkNWUtN2Y2ZTQ5MzBmMjVh LzEvdFVLOERZekNqMVdHRmUwX3JsUEt6a3B1OElFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPlYjA0BJ XsunUv7FuHVs3nekAQb56lHwpPugttRhmHawJNk40T8prNW/4JelkD3onukzyAdW afySj3vmJr2m42a42iS9laC4KnG0qlViCC2mFiocioUrnCaunMFz337m568PMx6c CEscEoSGVnDoiA13HezqK6KR+BUA7qlFvCs4TGuuexAocukincFpMmBbooM/7LnS eWA/mg2aFlaoBuQxWl0+R0b4wp4xyj/DtHh5tJuOkW9mszKSR85aBAZJ1Rx9b9Pc 0xnb6lJbZJNVB/zV29ylmqZS8h4ZYVUGA+57AR7O/8vN6iiIxTVdFgzonG+hVm3W f8b1rBiTM6fcIw== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:12 2025 by rpki-client