This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft File: TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft (raw, json) Hash identifier: yNIQdzoD11yMF0L6ZA6m0hNrOSiWNEEhpbpBTcnhExs= Subject key identifier: 06:86:B2:DA:9E:7A:07:B6:B4:6D:D2:D7:E6:CA:DD:95:19:48:20:21 Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A Certificate issuer: /CN=4eeb86abd5374e553098209075b9afecabef333a Certificate serial: 019AF509A916EFE4AA6B68D5935AE8A5D1F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft Manifest number: 1570 Signing time: Sat 06 Dec 2025 19:00:42 +0000 Manifest this update: Sat 06 Dec 2025 19:00:42 +0000 Manifest next update: Sun 07 Dec 2025 19:00:42 +0000 Files and hashes: 1: DppKxT5ljLij19Y9kuFKbXPtInE.roa (hash: dBb9XFhPZs/yEDFIrNxXoE0ofTm7AGuxUXTTkIoqD0w=) 2: H9SO8EzcNBS2yNz1oqlQvF8nYaA.roa (hash: DHcHXu+DGDdMpd1sZPMiGOEXUFezuU4wJP51eqKaDv0=) 3: Ie5KawkP4b238jzWIkt7U1G1OH0.roa (hash: b/NOk3BaQteK7RVlxUiaRcKQ/ZGCaP84MpBuSn/nXxo=) 4: TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl (hash: 6USmT9ZBavkZZWJ8ipbK+HulQOorXSrA5gfF1UPhSD8=) 5: vHwCw7oMDPrClYvdX-A30AyKV5Q.roa (hash: rqndv/sj8Hh1XnVuBVWvDlA5Odz01ECXqpzsqO0GIsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:a9:16:ef:e4:aa:6b:68:d5:93:5a:e8:a5:d1:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a Validity Not Before: Dec 6 19:00:42 2025 GMT Not After : Dec 7 19:00:42 2025 GMT Subject: CN=0686b2da9e7a07b6b46dd2d7e6cadd9519482021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fa:46:e9:4a:4b:39:5d:4d:9c:04:c5:ed:6e: 62:b5:09:77:06:69:12:c5:47:20:77:b3:47:65:6a: 65:c6:db:bb:91:cd:2b:b8:b8:6d:41:ee:2f:49:09: b2:2b:96:fe:91:00:6a:61:bc:0f:c5:c4:c9:03:c2: 45:9b:0e:49:db:b8:bc:df:cc:ff:cd:75:32:65:e5: 67:91:2e:1e:7a:91:96:5f:67:20:f4:8c:cf:d4:ad: 13:f6:00:9c:55:30:75:74:db:7b:39:68:51:13:54: 7e:86:6e:8b:61:7c:a2:19:73:ee:46:5c:8d:ac:0b: ab:84:19:fe:43:f2:e8:eb:a0:9e:bf:6f:75:d6:26: 25:e2:57:9a:5c:65:ec:e1:0f:eb:f9:4b:e1:0b:cd: a0:98:40:cb:7c:94:36:79:94:06:ad:74:36:38:e5: f4:46:21:d0:6c:81:2c:e7:ad:f1:5e:80:bb:2c:37: 31:66:a8:cd:af:fa:c3:21:d8:c5:84:33:e4:cf:f5: 7e:30:f9:af:dd:08:3f:57:76:2f:93:c9:0c:a4:41: 39:0f:10:71:66:52:0f:7c:10:73:41:af:d3:e7:93: be:17:2f:3b:bb:77:cf:7a:38:2d:1f:be:bb:72:c6: d2:78:f6:bf:d5:73:0a:c6:09:15:e7:2e:2c:c8:77: 46:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:86:B2:DA:9E:7A:07:B6:B4:6D:D2:D7:E6:CA:DD:95:19:48:20:21 X509v3 Authority Key Identifier: keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d9:9b:ee:c0:ae:0d:5c:5e:9e:15:52:66:7f:c5:cf:eb:ff: ef:b6:dd:f9:32:5f:d0:0e:59:9d:fb:70:66:0d:a0:28:f0:83: cf:b5:98:8f:62:4d:0d:5b:70:69:3c:34:c6:87:a4:9b:15:75: 19:e9:b5:91:ec:85:e6:f0:b5:99:89:33:06:11:36:23:d3:a9: 78:df:0f:25:8e:70:aa:6c:4f:f0:ab:23:d7:15:90:b7:d1:95: 26:c5:e0:93:01:b7:ac:42:e8:2f:ee:65:3e:1f:e3:a0:b6:81: e5:e1:90:74:8e:16:ff:7f:57:78:a2:2e:e8:64:21:23:61:52: a9:af:3e:c2:b2:f1:f5:f1:5e:15:c2:9a:be:c1:c8:db:85:8b: b5:99:99:6b:5b:64:40:8b:f3:fa:77:43:6e:07:cc:6e:ec:94: 86:02:97:c5:b7:b1:eb:99:18:0a:3a:e4:9f:cd:89:aa:4c:ff: b7:d7:f3:09:f2:ed:57:be:57:fb:4a:00:a1:76:02:e7:49:f7: ee:b0:96:74:1d:e5:e7:ef:ba:05:c3:58:83:8a:f5:c6:f6:81: 4d:19:2e:c8:11:7d:69:3b:da:4f:74:8d:77:aa:10:9d:22:9b: 9f:9f:05:4c:1f:f7:a6:48:68:1f:c0:d4:0a:f7:61:f6:9f:eb: da:87:d7:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CakW7+Sqa2jVk1ropdH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWI4NmFiZDUzNzRlNTUzMDk4MjA5MDc1YjlhZmVjYWJl ZjMzM2EwHhcNMjUxMjA2MTkwMDQyWhcNMjUxMjA3MTkwMDQyWjAzMTEwLwYDVQQD EygwNjg2YjJkYTllN2EwN2I2YjQ2ZGQyZDdlNmNhZGQ5NTE5NDgyMDIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPpG6UpLOV1NnATF7W5itQl3BmkS xUcgd7NHZWplxtu7kc0ruLhtQe4vSQmyK5b+kQBqYbwPxcTJA8JFmw5J27i838z/ zXUyZeVnkS4eepGWX2cg9IzP1K0T9gCcVTB1dNt7OWhRE1R+hm6LYXyiGXPuRlyN rAurhBn+Q/Lo66Cev2911iYl4leaXGXs4Q/r+UvhC82gmEDLfJQ2eZQGrXQ2OOX0 RiHQbIEs563xXoC7LDcxZqjNr/rDIdjFhDPkz/V+MPmv3Qg/V3Yvk8kMpEE5DxBx ZlIPfBBzQa/T55O+Fy87u3fPejgtH767csbSePa/1XMKxgkV5y4syHdG1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAaGstqeege2tG3S1+bK3ZUZSCAhMB8GA1UdIwQY MBaAFE7rhqvVN05VMJggkHW5r+yr7zM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHV1R3E5VTNUbFV3bUNDUWRibXY3S3Z2TXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zZTVjOTYtN2U5NS00Nzk3LWFhNmEt YTg5NzhlM2FhZTk4LzEvVHV1R3E5VTNUbFV3bUNDUWRibXY3S3Z2TXpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8zZTVjOTYtN2U5NS00Nzk3LWFhNmEtYTg5NzhlM2FhZTk4 LzEvVHV1R3E5VTNUbFV3bUNDUWRibXY3S3Z2TXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9mb7sCu DVxenhVSZn/Fz+v/77bd+TJf0A5ZnftwZg2gKPCDz7WYj2JNDVtwaTw0xoekmxV1 Gem1keyF5vC1mYkzBhE2I9OpeN8PJY5wqmxP8Ksj1xWQt9GVJsXgkwG3rELoL+5l Ph/joLaB5eGQdI4W/39XeKIu6GQhI2FSqa8+wrLx9fFeFcKavsHI24WLtZmZa1tk QIvz+ndDbgfMbuyUhgKXxbex65kYCjrkn82Jqkz/t9fzCfLtV75X+0oAoXYC50n3 7rCWdB3l5++6BcNYg4r1xvaBTRkuyBF9aTvaT3SNd6oQnSKbn58FTB/3pkhoH8DU Cvdh9p/r2ofXgg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:01:28 2025 by rpki-client