This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft File: tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft (raw, json) Hash identifier: FPlnxE4D+rK+lf6EUHdgVPW6wuOzD8mEbbNkTQL5s9s= Subject key identifier: 74:46:C5:27:A6:7B:20:A2:E5:9A:CA:73:C1:6B:FD:75:1A:48:7F:B7 Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A Certificate issuer: /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a Certificate serial: 019AF2ADD1C8281737B9496D3DB5168E1A76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 08:01:08 +0000 Manifest this update: Sat 06 Dec 2025 08:01:08 +0000 Manifest next update: Sun 07 Dec 2025 08:01:08 +0000 Files and hashes: 1: AwMEJfGD-_TNRZ72c5x-9dIRsd4.roa (hash: 6UVDM1JqxHmjbnJ4pDDIOsD2r8EQyy1bF6KNp9ocKGg=) 2: VJtvXDXYtAcS9C4LIbmlaqXh4Co.roa (hash: THcKGdc9aA5a+OjJYNnV65xxowh1d3kb8KQrHqiCPq4=) 3: fUXrv6-AqG-Sdl9xICl4cQAU7yA.roa (hash: jv2v4x0octz1D9witRg3iiWbwIrgi4wxjje3xLewI+U=) 4: tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl (hash: Hls15WHtD/cbVgFn5X3jtgMwUIYJyS7vRZUorNcHnG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:d1:c8:28:17:37:b9:49:6d:3d:b5:16:8e:1a:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a Validity Not Before: Dec 6 08:01:08 2025 GMT Not After : Dec 7 08:01:08 2025 GMT Subject: CN=7446c527a67b20a2e59aca73c16bfd751a487fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:14:50:29:af:7a:1f:22:43:f6:04:1c:96:0a: b7:d0:89:ea:85:ed:31:d3:13:90:2b:55:c9:e3:1a: 91:d0:1d:69:67:be:d0:98:d5:fd:87:21:0d:53:48: ce:25:d9:61:8b:2c:2e:8e:28:c5:14:34:c6:5d:4f: 90:09:5f:74:4e:98:8d:6a:2d:64:a0:96:09:5e:ee: 40:5f:26:04:78:e8:20:42:91:4b:bd:cb:84:9f:42: dd:54:93:30:7d:a4:50:a8:15:9d:41:80:93:76:e6: d2:f1:09:ec:0c:03:2c:00:66:06:7a:d4:0a:c2:29: d9:5e:28:62:2e:53:b7:28:67:77:75:8d:e6:ff:54: 84:92:b5:8a:44:c6:05:d7:33:80:d2:dc:8a:a2:a8: ec:2f:f6:91:aa:7e:77:51:59:9f:27:9f:3d:97:95: 88:11:7a:fd:51:ac:cb:4d:83:d1:bf:ec:00:df:6b: 7e:7a:b2:f7:b0:21:94:35:2e:66:62:51:6a:19:e5: 14:59:18:86:36:a0:b5:43:24:29:77:aa:f5:d1:29: a4:c9:55:0e:d2:b0:30:c5:7d:1e:70:ab:ca:19:54: fc:ed:a4:f1:1b:35:d9:17:5e:33:46:4d:31:35:d0: b9:6b:4d:d3:7d:6a:9f:a9:6c:87:80:f5:64:fd:e5: 25:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:46:C5:27:A6:7B:20:A2:E5:9A:CA:73:C1:6B:FD:75:1A:48:7F:B7 X509v3 Authority Key Identifier: keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:70:ea:b4:b0:16:9d:9a:f2:d8:9e:ce:b4:e0:92:f7:79:5f: 27:01:ce:9a:c9:46:b4:98:b8:6f:de:92:21:21:4e:f3:84:4a: 2b:d3:ae:12:97:67:85:cd:3f:d6:8e:49:7d:08:88:40:61:e6: bc:4e:15:04:5a:9b:27:07:69:79:de:a2:fc:b6:d0:6d:e3:12: ad:9c:07:80:4a:79:eb:b5:42:98:ab:d5:8d:ca:2e:d1:e3:85: 81:75:73:70:64:c3:1f:5c:e4:0c:8b:4f:3b:61:9c:fa:91:ea: 02:38:4a:96:83:cf:63:f8:ff:72:c6:14:28:b6:87:29:28:99: c3:c4:35:51:e9:40:4e:25:1f:f3:ff:c2:04:a8:4e:16:d6:3d: 06:91:84:0a:57:16:74:32:77:1a:93:ae:86:9e:fe:15:b4:d3: 67:e6:94:22:5d:3f:d2:30:60:0d:bc:aa:80:b8:ff:0a:36:72: ed:f8:6d:a7:59:42:4f:47:1c:27:b2:e0:1f:24:6b:32:a7:40: d6:d4:c1:a1:d8:8a:be:c9:0c:3d:51:37:94:9c:86:21:d5:d0: 11:af:88:bf:34:fe:5e:09:d3:57:f2:83:c8:c1:57:c7:e7:41: 11:9b:d1:01:23:42:de:e3:15:a0:91:84:85:16:0b:a2:c0:72: df:f5:35:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdHIKBc3uUltPbUWjhp2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDI3ZWE0OWY5NzJkMTljNTYzOTNhNjg5ZTdjYmViOTkw ZDVkN2EwHhcNMjUxMjA2MDgwMTA4WhcNMjUxMjA3MDgwMTA4WjAzMTEwLwYDVQQD Eyg3NDQ2YzUyN2E2N2IyMGEyZTU5YWNhNzNjMTZiZmQ3NTFhNDg3ZmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBRQKa96HyJD9gQclgq30Inqhe0x 0xOQK1XJ4xqR0B1pZ77QmNX9hyENU0jOJdlhiywujijFFDTGXU+QCV90TpiNai1k oJYJXu5AXyYEeOggQpFLvcuEn0LdVJMwfaRQqBWdQYCTdubS8QnsDAMsAGYGetQK winZXihiLlO3KGd3dY3m/1SEkrWKRMYF1zOA0tyKoqjsL/aRqn53UVmfJ589l5WI EXr9UazLTYPRv+wA32t+erL3sCGUNS5mYlFqGeUUWRiGNqC1QyQpd6r10SmkyVUO 0rAwxX0ecKvKGVT87aTxGzXZF14zRk0xNdC5a03TfWqfqWyHgPVk/eUlCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRGxSemeyCi5ZrKc8Fr/XUaSH+3MB8GA1UdIwQY MBaAFLVCfqSfly0ZxWOTponny+uZDV16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVKLXBKLVhMUm5GWTVPbWllZkw2NWtOWFhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9kMmJiNjgtOWJjNy00NzkxLTg1Mjgt MGM0OTU0NzdjYTEwLzEvdFVKLXBKLVhMUm5GWTVPbWllZkw2NWtOWFhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9kMmJiNjgtOWJjNy00NzkxLTg1MjgtMGM0OTU0NzdjYTEw LzEvdFVKLXBKLVhMUm5GWTVPbWllZkw2NWtOWFhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnDqtLAW nZry2J7OtOCS93lfJwHOmslGtJi4b96SISFO84RKK9OuEpdnhc0/1o5JfQiIQGHm vE4VBFqbJwdped6i/LbQbeMSrZwHgEp567VCmKvVjcou0eOFgXVzcGTDH1zkDItP O2Gc+pHqAjhKloPPY/j/csYUKLaHKSiZw8Q1UelATiUf8//CBKhOFtY9BpGEClcW dDJ3GpOuhp7+FbTTZ+aUIl0/0jBgDbyqgLj/CjZy7fhtp1lCT0ccJ7LgHyRrMqdA 1tTBodiKvskMPVE3lJyGIdXQEa+IvzT+XgnTV/KDyMFXx+dBEZvRASNC3uMVoJGE hRYLosBy3/U1mw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:08:20 2025 by rpki-client