This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft File: TuwmeuLxv5Xm16FCCA5d96MTlJI.mft (raw, json) Hash identifier: hWywNoygXn5wj5IKO7npF8p1Sz0bleyojbbqO50Cz2U= Subject key identifier: CA:57:9E:49:F6:82:7A:E7:A7:CD:30:D0:42:65:59:C4:5F:66:0F:6B Authority key identifier: 4E:EC:26:7A:E2:F1:BF:95:E6:D7:A1:42:08:0E:5D:F7:A3:13:94:92 Certificate issuer: /CN=4eec267ae2f1bf95e6d7a142080e5df7a3139492 Certificate serial: 019AF38919CBB432C0540184627AC2B03121 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuwmeuLxv5Xm16FCCA5d96MTlJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft Manifest number: 0C45 Signing time: Sat 06 Dec 2025 12:00:39 +0000 Manifest this update: Sat 06 Dec 2025 12:00:39 +0000 Manifest next update: Sun 07 Dec 2025 12:00:39 +0000 Files and hashes: 1: TuwmeuLxv5Xm16FCCA5d96MTlJI.crl (hash: fsT6WAbt1Ouuu7Aww/G7ny4nbMDQgl1Hcxw1PVDakSk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft rsync://rpki.ripe.net/repository/DEFAULT/TuwmeuLxv5Xm16FCCA5d96MTlJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:19:cb:b4:32:c0:54:01:84:62:7a:c2:b0:31:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eec267ae2f1bf95e6d7a142080e5df7a3139492 Validity Not Before: Dec 6 12:00:39 2025 GMT Not After : Dec 7 12:00:39 2025 GMT Subject: CN=ca579e49f6827ae7a7cd30d0426559c45f660f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:35:8e:58:0e:5f:97:ae:2f:26:1e:79:04:ef: 91:d6:97:53:01:16:1e:24:02:56:a5:4d:98:a6:a4: a7:00:ca:82:c4:10:1c:bb:50:26:e7:01:5e:f4:ed: c3:86:78:a3:e2:9a:96:45:a7:b2:d6:b6:dc:97:02: 52:57:f1:79:f1:a1:08:dd:55:b5:db:82:6a:6b:19: 57:84:d1:a0:13:f1:e5:bf:f7:33:52:a4:21:71:b4: 4a:5b:25:80:9c:b1:4b:43:54:9b:0f:4b:f0:47:2d: 9d:e5:89:77:00:84:b5:60:57:fb:09:c4:49:fd:b4: e1:79:69:12:37:7d:72:19:e8:39:22:45:30:aa:1b: 51:2e:64:a3:b4:69:29:b7:e7:c7:40:ba:61:75:97: 8c:03:d9:e1:bf:e9:46:1c:7c:e2:ec:8f:b1:79:d9: 14:9f:3a:91:33:97:88:10:d0:72:bd:f1:21:0f:f2: d7:a9:55:30:9d:d8:fa:ec:d6:7e:8c:11:c9:ba:54: 67:6e:03:84:9f:84:72:8e:d6:76:21:8d:ce:7b:15: 66:87:0a:ab:b7:a7:88:42:ae:cc:49:45:33:16:7e: da:c7:80:98:43:7a:93:af:6b:8d:89:95:a5:d7:5c: d4:95:bc:3b:34:35:7f:0e:ef:81:37:6d:8f:7e:92: 2e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:57:9E:49:F6:82:7A:E7:A7:CD:30:D0:42:65:59:C4:5F:66:0F:6B X509v3 Authority Key Identifier: keyid:4E:EC:26:7A:E2:F1:BF:95:E6:D7:A1:42:08:0E:5D:F7:A3:13:94:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuwmeuLxv5Xm16FCCA5d96MTlJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/68b464-2460-4e53-ade3-6b96c8361265/1/TuwmeuLxv5Xm16FCCA5d96MTlJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7f:d2:77:5e:14:20:39:b3:9b:98:c0:98:68:0b:8a:1a:d4: d9:0d:ab:a5:7e:4c:f3:54:0b:b2:d3:e8:a7:a0:ad:06:dc:74: ea:73:35:aa:d7:97:60:cb:13:fe:87:56:ff:c7:fc:66:82:a7: f7:e2:d1:62:1c:63:02:35:df:20:f3:36:fe:26:22:5f:89:8a: da:48:b0:d1:3e:b1:b5:1d:9c:dc:f0:1f:01:1c:2c:22:e9:fb: a3:2a:cb:a2:cf:97:1f:ed:30:70:96:a6:10:ff:30:dd:da:53: f1:75:f6:fc:ce:e9:72:7d:d5:7a:77:11:05:42:ec:5a:cf:c9: ac:21:35:2d:09:8a:8d:15:46:29:7e:c0:61:f0:be:c4:5f:a4: 13:e9:a4:58:73:3f:1c:61:53:5c:0d:4f:de:02:df:20:ec:6f: 53:77:e3:f4:4d:ec:0f:69:22:fb:88:be:8a:0f:a5:42:ea:ef: 43:cd:a5:bf:b8:c4:68:fc:fe:ce:c2:36:da:28:d5:7e:06:91: b0:4b:3e:8f:1c:e2:25:53:8f:05:c8:84:d3:3c:2e:88:91:52: a6:96:bc:a2:c7:ac:05:14:15:09:44:ad:d0:87:4d:73:b5:93: c8:e7:c6:9b:5b:8f:fe:c7:6f:2f:02:e4:29:90:d1:11:70:35: e6:78:3f:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziRnLtDLAVAGEYnrCsDEhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWMyNjdhZTJmMWJmOTVlNmQ3YTE0MjA4MGU1ZGY3YTMx Mzk0OTIwHhcNMjUxMjA2MTIwMDM5WhcNMjUxMjA3MTIwMDM5WjAzMTEwLwYDVQQD EyhjYTU3OWU0OWY2ODI3YWU3YTdjZDMwZDA0MjY1NTljNDVmNjYwZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjWOWA5fl64vJh55BO+R1pdTARYe JAJWpU2YpqSnAMqCxBAcu1Am5wFe9O3Dhnij4pqWRaey1rbclwJSV/F58aEI3VW1 24JqaxlXhNGgE/Hlv/czUqQhcbRKWyWAnLFLQ1SbD0vwRy2d5Yl3AIS1YFf7CcRJ /bTheWkSN31yGeg5IkUwqhtRLmSjtGkpt+fHQLphdZeMA9nhv+lGHHzi7I+xedkU nzqRM5eIENByvfEhD/LXqVUwndj67NZ+jBHJulRnbgOEn4RyjtZ2IY3OexVmhwqr t6eIQq7MSUUzFn7ax4CYQ3qTr2uNiZWl11zUlbw7NDV/Du+BN22PfpIu9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMpXnkn2gnrnp80w0EJlWcRfZg9rMB8GA1UdIwQY MBaAFE7sJnri8b+V5tehQggOXfejE5SSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHV3bWV1THh2NVhtMTZGQ0NBNWQ5Nk1UbEpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS82OGI0NjQtMjQ2MC00ZTUzLWFkZTMt NmI5NmM4MzYxMjY1LzEvVHV3bWV1THh2NVhtMTZGQ0NBNWQ5Nk1UbEpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS82OGI0NjQtMjQ2MC00ZTUzLWFkZTMtNmI5NmM4MzYxMjY1 LzEvVHV3bWV1THh2NVhtMTZGQ0NBNWQ5Nk1UbEpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKn/Sd14U IDmzm5jAmGgLihrU2Q2rpX5M81QLstPop6CtBtx06nM1qteXYMsT/odW/8f8ZoKn 9+LRYhxjAjXfIPM2/iYiX4mK2kiw0T6xtR2c3PAfARwsIun7oyrLos+XH+0wcJam EP8w3dpT8XX2/M7pcn3VencRBULsWs/JrCE1LQmKjRVGKX7AYfC+xF+kE+mkWHM/ HGFTXA1P3gLfIOxvU3fj9E3sD2ki+4i+ig+lQurvQ82lv7jEaPz+zsI22ijVfgaR sEs+jxziJVOPBciE0zwuiJFSppa8osesBRQVCUSt0IdNc7WTyOfGm1uP/sdvLwLk KZDREXA15ng/fg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:26:59 2025 by rpki-client