This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft File: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft (raw, json) Hash identifier: emrrGrK0B/CEGj8Hs5i2aarFbaq0U0rTc3olehpUBio= Subject key identifier: 04:12:2E:66:A6:ED:B1:50:B3:E4:B2:7B:F6:6F:A5:32:0D:2C:DB:DC Authority key identifier: 4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23 Certificate issuer: /CN=4eec68f7514db22173650088294b0143b377fc23 Certificate serial: 019B2C9CF7D2FE7737AB62BD950E728302CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft Manifest number: 0802 Signing time: Wed 17 Dec 2025 14:00:43 +0000 Manifest this update: Wed 17 Dec 2025 14:00:43 +0000 Manifest next update: Thu 18 Dec 2025 14:00:43 +0000 Files and hashes: 1: I39FUsGFsmr9SUUDo-UEb6qOXN4.roa (hash: u4zl9OvdC2vc0LELt8+dwM6CALTiKOkmaqaJx/FGR/8=) 2: Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl (hash: fRHeeEN4AZ48fnr2QgXDE9nwnoI4uCectS71wHvu7cE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 14:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9c:f7:d2:fe:77:37:ab:62:bd:95:0e:72:83:02:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4eec68f7514db22173650088294b0143b377fc23 Validity Not Before: Dec 17 14:00:43 2025 GMT Not After : Dec 18 14:00:43 2025 GMT Subject: CN=04122e66a6edb150b3e4b27bf66fa5320d2cdbdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:78:f2:a5:61:15:53:1c:a0:1d:52:28:12:1d: f5:c1:69:b8:bc:83:f8:e6:83:ad:bd:26:96:eb:d8: c4:37:02:93:ef:5e:3d:4d:29:1f:24:00:61:85:95: 4d:be:e6:44:5f:d9:ef:c3:4e:59:a1:79:c6:10:c4: 04:a3:8e:80:49:2a:04:b6:9d:44:9c:27:af:2a:cc: 4b:ec:57:2e:da:58:85:56:7f:80:10:ec:ba:73:01: ae:29:17:e0:4f:cd:a4:1b:58:13:d2:2e:3d:82:38: f8:ac:af:60:a2:ed:5c:49:e9:2a:eb:92:58:4e:00: e3:69:33:ca:53:bb:ef:15:8b:d6:7c:06:d2:76:2a: 22:07:03:ad:b5:62:a2:b1:8d:44:c0:83:8a:b1:57: ec:ec:81:7b:65:35:3b:40:77:e7:a5:ed:6c:38:2d: 9b:0b:e5:af:59:7c:ce:38:78:74:56:e1:fb:a0:6a: ec:d9:8b:ad:a9:3f:d1:b7:46:3c:c5:e4:af:30:4f: dc:cb:40:4a:d6:1c:ac:f9:2e:a4:a5:dc:7b:79:17: 57:ca:6f:ca:c3:37:68:b5:c9:fb:51:44:e4:70:81: 03:87:66:90:5b:6f:0d:4d:b9:9d:60:8e:d3:27:78: 6e:93:e2:4a:80:2f:e4:f3:c2:81:ec:4c:f8:73:d9: 2d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:12:2E:66:A6:ED:B1:50:B3:E4:B2:7B:F6:6F:A5:32:0D:2C:DB:DC X509v3 Authority Key Identifier: keyid:4E:EC:68:F7:51:4D:B2:21:73:65:00:88:29:4B:01:43:B3:77:FC:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/532065-6151-4ce0-ac6b-5d34c8575bea/1/Tuxo91FNsiFzZQCIKUsBQ7N3_CM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:51:69:02:a4:46:81:72:79:4b:72:4c:bb:85:f6:d9:ed:c3: 57:0c:76:08:80:c9:22:c7:87:2f:6a:d3:78:7f:1c:f5:da:9e: 0d:9f:bd:2c:9f:57:c1:75:51:42:52:6f:46:28:aa:73:46:dd: 9d:28:b2:dc:a9:c9:6f:19:25:e3:12:e9:26:4e:bc:62:a5:d8: 57:6f:5f:d4:3c:85:7a:6b:39:5b:ae:23:50:c4:38:48:3a:13: b6:bf:8a:05:dc:e5:ce:de:ff:8a:dc:4b:36:0b:3e:6c:dd:16: 88:32:56:b0:5f:f6:48:a6:82:4f:29:b1:d1:19:af:1b:0e:1f: 07:ac:74:8a:59:c4:a4:6f:dc:bd:6d:67:4f:84:b4:d5:9e:1e: fa:05:77:d7:90:f1:f7:f5:d0:17:b9:81:bc:fd:0a:96:68:bd: 78:67:18:6d:c0:1f:86:b8:4c:33:3d:b1:50:5a:26:0e:49:41: 6e:d4:cc:60:91:27:b4:e8:7b:74:92:7f:c9:e9:ba:39:6b:1a: 07:93:05:6c:06:43:fb:e5:92:d6:90:86:93:a8:30:88:e7:03: 2c:88:fd:8f:58:a4:f8:fd:b4:57:04:59:0d:dd:9a:56:f5:ce: c5:f1:ff:ad:fa:c6:c4:38:87:bf:d5:a4:f2:a8:b1:3b:33:6e: 0a:a1:42:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnPfS/nc3q2K9lQ5ygwLLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlZWM2OGY3NTE0ZGIyMjE3MzY1MDA4ODI5NGIwMTQzYjM3 N2ZjMjMwHhcNMjUxMjE3MTQwMDQzWhcNMjUxMjE4MTQwMDQzWjAzMTEwLwYDVQQD EygwNDEyMmU2NmE2ZWRiMTUwYjNlNGIyN2JmNjZmYTUzMjBkMmNkYmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnjypWEVUxygHVIoEh31wWm4vIP4 5oOtvSaW69jENwKT7149TSkfJABhhZVNvuZEX9nvw05ZoXnGEMQEo46ASSoEtp1E nCevKsxL7Fcu2liFVn+AEOy6cwGuKRfgT82kG1gT0i49gjj4rK9gou1cSekq65JY TgDjaTPKU7vvFYvWfAbSdioiBwOttWKisY1EwIOKsVfs7IF7ZTU7QHfnpe1sOC2b C+WvWXzOOHh0VuH7oGrs2YutqT/Rt0Y8xeSvME/cy0BK1hys+S6kpdx7eRdXym/K wzdotcn7UUTkcIEDh2aQW28NTbmdYI7TJ3huk+JKgC/k88KB7Ez4c9ktxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQSLmam7bFQs+Sye/ZvpTINLNvcMB8GA1UdIwQY MBaAFE7saPdRTbIhc2UAiClLAUOzd/wjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHV4bzkxRk5zaUZ6WlFDSUtVc0JRN04zX0NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi81MzIwNjUtNjE1MS00Y2UwLWFjNmIt NWQzNGM4NTc1YmVhLzEvVHV4bzkxRk5zaUZ6WlFDSUtVc0JRN04zX0NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi81MzIwNjUtNjE1MS00Y2UwLWFjNmItNWQzNGM4NTc1YmVh LzEvVHV4bzkxRk5zaUZ6WlFDSUtVc0JRN04zX0NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVFpAqRG gXJ5S3JMu4X22e3DVwx2CIDJIseHL2rTeH8c9dqeDZ+9LJ9XwXVRQlJvRiiqc0bd nSiy3KnJbxkl4xLpJk68YqXYV29f1DyFems5W64jUMQ4SDoTtr+KBdzlzt7/itxL Ngs+bN0WiDJWsF/2SKaCTymx0RmvGw4fB6x0ilnEpG/cvW1nT4S01Z4e+gV315Dx 9/XQF7mBvP0Klmi9eGcYbcAfhrhMMz2xUFomDklBbtTMYJEntOh7dJJ/yem6OWsa B5MFbAZD++WS1pCGk6gwiOcDLIj9j1ik+P20VwRZDd2aVvXOxfH/rfrGxDiHv9Wk 8qixOzNuCqFCMA== -----END CERTIFICATE-----Generated at Wed Dec 17 23:41:21 2025 by rpki-client