This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft File: txRZXFDDUZIbDemldUChXlwcYYo.mft (raw, json) Hash identifier: tAMtu6LiNxPiKtFe+66pS1k9zWr//wyMmofS/0duzbk= Subject key identifier: EE:05:13:E7:3E:C8:20:E1:4C:E9:19:81:EF:D2:F6:FE:DE:C3:74:D7 Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A Certificate issuer: /CN=b714595c50c351921b0de9a57540a15e5c1c618a Certificate serial: 019B1A97A48BA2204AC03EEA9F53B6730E5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft Manifest number: 11D8 Signing time: Sun 14 Dec 2025 02:01:44 +0000 Manifest this update: Sun 14 Dec 2025 02:01:44 +0000 Manifest next update: Mon 15 Dec 2025 02:01:44 +0000 Files and hashes: 1: 2m5iIAK03n8_QUvPwXckjr2TMEU.roa (hash: ZU7+W8vWoLJfyvrECJJAIJpcDrdAhqoCYTZBjsh+l9c=) 2: txRZXFDDUZIbDemldUChXlwcYYo.crl (hash: XJVEOMRmO49u7Z6Z2/LsUbQALoIQAQgbcgpOJkid5XU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:97:a4:8b:a2:20:4a:c0:3e:ea:9f:53:b6:73:0e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a Validity Not Before: Dec 14 02:01:44 2025 GMT Not After : Dec 15 02:01:44 2025 GMT Subject: CN=ee0513e73ec820e14ce91981efd2f6fedec374d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8f:d7:d3:0c:af:80:ee:b7:8e:44:53:f3:4e: df:ea:3a:4b:b6:9c:15:18:e1:3e:ea:6f:1b:2e:19: 6c:17:4c:80:e0:d3:57:59:5c:f6:48:32:c8:fe:c4: 0b:ce:ae:ef:d8:0a:38:03:39:38:7e:5d:a3:5b:4b: 6e:4f:a7:e7:98:40:6b:5b:3c:5c:3b:f6:a6:10:90: d0:2d:27:2c:8b:97:2b:ff:63:2a:ec:16:ed:52:7d: 8a:8d:71:06:15:ff:4b:80:cc:d9:03:6e:d7:86:7e: 42:4c:f0:10:0a:6d:99:2b:3e:32:c3:12:98:0f:ca: 63:92:2a:f3:f4:8f:8c:5a:4e:26:7a:30:7d:37:69: 83:8d:94:92:46:b0:4f:ad:5c:3c:6f:7f:fc:08:c7: 29:ce:d6:40:76:ee:1a:4a:b7:6f:f0:00:91:9e:9c: a6:12:e0:f6:93:4a:82:94:68:60:17:d5:b2:b2:ad: c4:20:9d:e5:7d:81:0c:df:6c:f3:58:8f:25:2a:89: f6:46:00:d8:86:e1:ed:f8:f0:dc:9a:be:0d:35:2c: 23:71:ad:13:10:b1:5d:74:6d:4b:27:88:34:69:c6: 58:55:ed:ff:4b:0c:ed:9e:6f:9f:0d:1a:47:bd:9a: d3:a8:a9:c8:5b:0a:ff:0f:84:4d:45:42:13:29:56: e5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:05:13:E7:3E:C8:20:E1:4C:E9:19:81:EF:D2:F6:FE:DE:C3:74:D7 X509v3 Authority Key Identifier: keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:cf:aa:59:a0:d7:d8:76:d6:35:73:5b:2e:bc:22:a3:91:de: bd:3d:0b:4e:0d:cc:02:7a:c5:47:03:79:bb:f4:cb:7b:69:1d: 8a:20:c3:60:0c:0f:3b:dd:bf:67:00:45:fb:af:c0:2a:54:aa: 68:b7:ca:e6:45:7d:b5:1c:62:28:1e:38:f4:71:95:f0:9a:27: 89:87:58:7b:3f:d3:e8:35:11:b9:c1:5e:db:e9:68:c1:09:77: d8:f6:72:d1:92:80:2f:25:c5:40:9c:a4:4a:24:61:64:d6:74: 1c:d6:37:8a:90:53:f6:16:f1:02:c5:a5:b0:dc:cd:bc:eb:84: 5e:9c:a7:3a:ca:e5:e5:f3:5f:a7:2f:a1:b9:6f:d0:37:c8:bf: 62:a7:45:21:f1:bf:2c:4d:b3:47:0d:e3:85:5d:ef:2a:81:ce: 90:16:00:a3:92:e9:43:86:d6:0f:f4:df:32:f1:24:96:e5:6b: 21:85:1c:72:e6:68:7e:ea:55:07:f9:d3:74:bf:97:b1:88:b4: 9e:e3:b8:2d:3f:87:a6:d7:a0:57:9b:8e:51:31:a4:c4:6b:b1: 05:ca:16:d5:63:eb:2d:31:17:8f:4c:51:61:69:ed:ae:3d:86: 07:76:2b:af:e3:b4:81:5e:8a:78:9b:87:b4:9b:78:9e:26:64: 7e:2a:a0:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsal6SLoiBKwD7qn1O2cw5cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTQ1OTVjNTBjMzUxOTIxYjBkZTlhNTc1NDBhMTVlNWMx YzYxOGEwHhcNMjUxMjE0MDIwMTQ0WhcNMjUxMjE1MDIwMTQ0WjAzMTEwLwYDVQQD EyhlZTA1MTNlNzNlYzgyMGUxNGNlOTE5ODFlZmQyZjZmZWRlYzM3NGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Y/X0wyvgO63jkRT807f6jpLtpwV GOE+6m8bLhlsF0yA4NNXWVz2SDLI/sQLzq7v2Ao4Azk4fl2jW0tuT6fnmEBrWzxc O/amEJDQLScsi5cr/2Mq7BbtUn2KjXEGFf9LgMzZA27Xhn5CTPAQCm2ZKz4ywxKY D8pjkirz9I+MWk4mejB9N2mDjZSSRrBPrVw8b3/8CMcpztZAdu4aSrdv8ACRnpym EuD2k0qClGhgF9Wysq3EIJ3lfYEM32zzWI8lKon2RgDYhuHt+PDcmr4NNSwjca0T ELFddG1LJ4g0acZYVe3/Swztnm+fDRpHvZrTqKnIWwr/D4RNRUITKVblgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4FE+c+yCDhTOkZge/S9v7ew3TXMB8GA1UdIwQY MBaAFLcUWVxQw1GSGw3ppXVAoV5cHGGKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhSWlhGRERVWkliRGVtbGRVQ2hYbHdjWVlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yYTQyMGQtOWQwZS00ZWE4LTk1YmMt ZjUzZDllMzZlOTVhLzEvdHhSWlhGRERVWkliRGVtbGRVQ2hYbHdjWVlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8yYTQyMGQtOWQwZS00ZWE4LTk1YmMtZjUzZDllMzZlOTVh LzEvdHhSWlhGRERVWkliRGVtbGRVQ2hYbHdjWVlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR8+qWaDX 2HbWNXNbLrwio5HevT0LTg3MAnrFRwN5u/TLe2kdiiDDYAwPO92/ZwBF+6/AKlSq aLfK5kV9tRxiKB449HGV8JoniYdYez/T6DURucFe2+lowQl32PZy0ZKALyXFQJyk SiRhZNZ0HNY3ipBT9hbxAsWlsNzNvOuEXpynOsrl5fNfpy+huW/QN8i/YqdFIfG/ LE2zRw3jhV3vKoHOkBYAo5LpQ4bWD/TfMvEkluVrIYUccuZofupVB/nTdL+XsYi0 nuO4LT+HptegV5uOUTGkxGuxBcoW1WPrLTEXj0xRYWntrj2GB3Yrr+O0gV6KeJuH tJt4niZkfiqguQ== -----END CERTIFICATE-----Generated at Sun Dec 14 11:46:42 2025 by rpki-client