This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft File: tXZXfSAIXEwi_IARyNGpP2MhHA8.mft (raw, json) Hash identifier: iVhcxfAbdjpwgf9IJ9/Fq/NkwDwxbZe427dubfBojww= Subject key identifier: 18:83:E4:8C:7B:74:33:18:C8:40:4D:6A:3A:E4:05:A4:DE:EE:EF:1F Authority key identifier: B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F Certificate issuer: /CN=b576577d20085c4c22fc8011c8d1a93f63211c0f Certificate serial: 019B10EF98FB7B857ADE0DF92A3E0349BF58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft Manifest number: 0297 Signing time: Fri 12 Dec 2025 05:01:36 +0000 Manifest this update: Fri 12 Dec 2025 05:01:36 +0000 Manifest next update: Sat 13 Dec 2025 05:01:36 +0000 Files and hashes: 1: 0NGpBZClfqdkwT-g1SQX2TG7Voo.roa (hash: SbCdNlkd4RVvBhJ9C9nlFY+4pjkHAYs+BVh1BZ1ld+c=) 2: FrJWtoZemJx4JKpSKfeY_d7A8KU.roa (hash: mn6H512YQAxp8Xgyg/tGQdGcCEfihV9UXWWT70uzA50=) 3: tXZXfSAIXEwi_IARyNGpP2MhHA8.crl (hash: oYUaDDJCP35ZCkrojyenc5JeWRHk3G/TS2cjSOCu6qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 05:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ef:98:fb:7b:85:7a:de:0d:f9:2a:3e:03:49:bf:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b576577d20085c4c22fc8011c8d1a93f63211c0f Validity Not Before: Dec 12 05:01:36 2025 GMT Not After : Dec 13 05:01:36 2025 GMT Subject: CN=1883e48c7b743318c8404d6a3ae405a4deeeef1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:ed:8b:78:a7:d7:63:ad:ab:10:30:26:44: 8d:3d:35:89:c4:80:ac:d4:d9:73:ca:93:4d:12:c1: a5:0b:6b:4e:cd:58:df:dd:2c:13:19:01:97:b0:c2: 50:03:5b:c0:b2:3f:fb:bb:58:70:12:9e:28:90:57: 98:0e:12:ca:a5:e6:3f:24:ec:be:2b:99:3d:16:d9: 5e:8e:ed:b4:b0:a6:24:b8:f6:85:d7:ce:53:40:db: 16:63:4c:de:b4:ca:28:f3:35:a3:31:53:f8:b4:0b: f9:5b:85:65:db:30:73:5c:f8:9d:78:a4:a8:59:6c: 89:35:9b:c4:5f:1f:d5:09:a4:53:cb:ff:52:06:70: 66:53:fe:84:ea:e7:df:2a:cf:7f:5d:0b:b2:d8:46: f5:07:87:19:d4:4f:76:77:27:2c:5e:f0:55:99:01: c2:e9:fa:92:2a:1e:e5:ef:8e:05:ac:92:e2:56:6a: 4a:05:d8:9d:83:46:50:6e:75:0b:5d:93:39:fa:be: 6f:84:87:77:23:50:f9:2a:9f:c1:e8:f0:5a:45:4e: 6c:df:4c:5d:6e:bf:3a:2d:86:0f:5a:3d:fe:60:c0: 38:47:55:c1:32:05:aa:c4:b3:5c:d4:5f:ed:3c:72: 96:73:80:8a:35:b2:54:8b:61:69:22:5e:c1:b4:00: f1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:83:E4:8C:7B:74:33:18:C8:40:4D:6A:3A:E4:05:A4:DE:EE:EF:1F X509v3 Authority Key Identifier: keyid:B5:76:57:7D:20:08:5C:4C:22:FC:80:11:C8:D1:A9:3F:63:21:1C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXZXfSAIXEwi_IARyNGpP2MhHA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/151705-0b0c-48bf-a40e-b7ca1fe6c184/1/tXZXfSAIXEwi_IARyNGpP2MhHA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:41:bf:70:ff:4c:65:11:0e:6c:a9:88:99:70:bd:7b:66:c6: cd:98:41:07:1c:e5:0e:a0:51:4d:1c:65:54:79:6d:ee:f3:9e: 68:ae:9a:9b:ce:28:69:6e:71:08:1c:f6:f2:ba:77:b8:b9:76: 59:3a:81:ff:f1:c7:64:0e:36:cc:b6:18:45:aa:aa:30:6c:3e: df:94:fa:8e:e5:6c:de:13:54:a1:37:de:f1:8a:7f:67:0c:7b: 87:20:00:2d:d3:43:56:fe:17:b4:b1:54:c3:ae:35:2d:71:1c: 43:99:f6:0a:e9:02:cc:4d:a7:de:83:ad:94:0a:f1:6e:4a:c0: 19:f1:2f:f8:11:d4:d8:21:c9:1e:ad:6d:33:8f:f1:63:9a:ad: 57:cc:1d:4d:f8:84:f8:cb:8c:f4:3c:f0:6d:4e:26:8f:fd:f2: 2e:8e:d8:cd:97:dc:ea:e7:e6:2a:01:6f:4f:e1:2b:c7:65:c3: f3:0d:5a:71:83:a2:8c:ab:da:48:41:21:e6:2f:aa:d1:24:2b: 64:76:3f:ab:d1:f9:0d:c3:e2:7a:1b:24:7c:24:9b:98:00:8f: ed:d4:67:4d:f2:cd:c4:10:f3:0a:a5:63:e1:78:ad:18:a5:e6: 9c:9d:d0:d2:14:21:12:4a:0e:37:ad:5c:69:f8:8d:12:f8:c9: 55:37:76:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ75j7e4V63g35Kj4DSb9YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NzY1NzdkMjAwODVjNGMyMmZjODAxMWM4ZDFhOTNmNjMy MTFjMGYwHhcNMjUxMjEyMDUwMTM2WhcNMjUxMjEzMDUwMTM2WjAzMTEwLwYDVQQD EygxODgzZTQ4YzdiNzQzMzE4Yzg0MDRkNmEzYWU0MDVhNGRlZWVlZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIvti3in12OtqxAwJkSNPTWJxICs 1NlzypNNEsGlC2tOzVjf3SwTGQGXsMJQA1vAsj/7u1hwEp4okFeYDhLKpeY/JOy+ K5k9Ftleju20sKYkuPaF185TQNsWY0zetMoo8zWjMVP4tAv5W4Vl2zBzXPideKSo WWyJNZvEXx/VCaRTy/9SBnBmU/6E6uffKs9/XQuy2Eb1B4cZ1E92dycsXvBVmQHC 6fqSKh7l744FrJLiVmpKBdidg0ZQbnULXZM5+r5vhId3I1D5Kp/B6PBaRU5s30xd br86LYYPWj3+YMA4R1XBMgWqxLNc1F/tPHKWc4CKNbJUi2FpIl7BtADx/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBiD5Ix7dDMYyEBNajrkBaTe7u8fMB8GA1UdIwQY MBaAFLV2V30gCFxMIvyAEcjRqT9jIRwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xNTE3MDUtMGIwYy00OGJmLWE0MGUt YjdjYTFmZTZjMTg0LzEvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8xNTE3MDUtMGIwYy00OGJmLWE0MGUtYjdjYTFmZTZjMTg0 LzEvdFhaWGZTQUlYRXdpX0lBUnlOR3BQMk1oSEE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEUG/cP9M ZREObKmImXC9e2bGzZhBBxzlDqBRTRxlVHlt7vOeaK6am84oaW5xCBz28rp3uLl2 WTqB//HHZA42zLYYRaqqMGw+35T6juVs3hNUoTfe8Yp/Zwx7hyAALdNDVv4XtLFU w641LXEcQ5n2CukCzE2n3oOtlArxbkrAGfEv+BHU2CHJHq1tM4/xY5qtV8wdTfiE +MuM9DzwbU4mj/3yLo7YzZfc6ufmKgFvT+Erx2XD8w1acYOijKvaSEEh5i+q0SQr ZHY/q9H5DcPiehskfCSbmACP7dRnTfLNxBDzCqVj4XitGKXmnJ3Q0hQhEkoON61c afiNEvjJVTd22g== -----END CERTIFICATE-----Generated at Fri Dec 12 12:59:18 2025 by rpki-client