This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft File: TxSbhH0xKT9wHhz5ndjKDruwtb0.mft (raw, json) Hash identifier: bOlcpMadbEPFwK5jsfKbN0oY5Lg86Va8JPkGx0ZayiQ= Subject key identifier: EB:EC:5F:0C:87:C9:39:17:F3:C4:36:48:29:26:85:BA:B6:55:E5:23 Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD Certificate issuer: /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd Certificate serial: 019B2098C184DEE6EF0AB62C6422851FA0CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft Manifest number: 10D8 Signing time: Mon 15 Dec 2025 06:00:40 +0000 Manifest this update: Mon 15 Dec 2025 06:00:40 +0000 Manifest next update: Tue 16 Dec 2025 06:00:40 +0000 Files and hashes: 1: 1-8PWi0SMDd437wmtrPXDU2L2y8.roa (hash: lqjj+2Pg6NE1AKwkB32aM31VK1YKbfIzkQX1Na8VNyo=) 2: J1zgEgJNOK21C_O4-pZ4EqzLmWM.roa (hash: YSC7a3+VBBEQHWDb44/eZIaulrvqLsD1OGkXr3ZMN04=) 3: TxSbhH0xKT9wHhz5ndjKDruwtb0.crl (hash: dkz3QV6+RURckr2S/Ldt5pmriOEBvAzMFThzvVRMHe4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:98:c1:84:de:e6:ef:0a:b6:2c:64:22:85:1f:a0:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd Validity Not Before: Dec 15 06:00:40 2025 GMT Not After : Dec 16 06:00:40 2025 GMT Subject: CN=ebec5f0c87c93917f3c43648292685bab655e523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5b:97:fb:77:11:5b:8a:16:ab:1e:a7:97:2f: 7d:53:b5:72:12:bb:a4:66:7e:b1:29:48:1e:56:38: 74:d6:e2:0e:49:02:e0:d4:34:0f:2e:8a:57:2e:57: 99:03:d0:81:74:f7:3b:2b:a1:d3:cc:03:7e:99:39: 39:4c:4f:48:b3:b4:4f:88:03:3e:c9:11:7e:3e:d1: 45:20:51:55:d6:f3:14:a7:01:7f:c2:08:5a:f8:40: df:76:ff:56:40:a5:3c:bd:07:c0:51:a1:71:c3:24: fb:ac:a5:77:d7:4b:ad:a2:dd:f8:c5:6a:de:1a:79: 55:06:f5:c4:f5:7f:16:3c:44:25:8c:b6:3a:5e:db: 97:7f:7f:1d:e3:4c:61:49:ce:f8:db:5c:56:ed:05: b4:65:3d:f7:f7:a8:88:df:9e:a3:32:97:5d:eb:3a: 3f:0c:5d:7f:b5:e2:0e:53:81:d0:73:83:ca:9a:2f: da:11:0e:45:d4:1f:71:fa:07:88:4e:c0:c4:1d:b4: a0:a2:c9:60:03:4f:b9:9f:69:30:6e:72:6c:37:16: 0e:1b:8c:4c:d0:7a:07:fd:f7:ed:89:f7:98:8a:fd: 41:cd:f0:2b:b5:6a:28:f0:29:00:0a:1f:ab:48:39: e9:f9:59:ad:b3:b2:80:0b:e5:9b:45:d9:26:75:5d: dc:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:EC:5F:0C:87:C9:39:17:F3:C4:36:48:29:26:85:BA:B6:55:E5:23 X509v3 Authority Key Identifier: keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:cc:c3:23:d2:6b:85:88:7c:10:09:bc:6f:c1:0d:fb:28:69: 7a:6d:58:ec:e4:98:ac:5c:35:db:62:91:9e:3c:d5:92:68:ff: 19:c6:8d:00:32:c9:8f:ab:64:2d:3c:be:ad:1d:2f:f1:7b:8c: 28:c7:b6:39:c3:50:d3:38:a6:a4:3d:73:5a:15:14:b2:97:a9: 61:0f:e6:90:e8:a0:8d:af:45:ec:a1:5f:3b:1f:55:0a:1e:02: d8:4f:82:93:74:c5:a6:9e:51:05:7e:8b:d6:be:60:bc:da:db: 17:ae:1b:4e:04:ba:aa:6b:67:98:b1:da:14:e0:d7:25:10:76: db:7f:f9:2c:6a:4d:0f:d2:be:8b:7c:80:e2:d8:75:0f:11:26: b9:0c:76:86:db:85:88:94:28:cf:5c:44:cc:c5:8b:96:65:5e: 2c:4a:30:07:f8:39:af:3e:3f:1e:d4:c1:b3:ce:b7:d0:c0:28: 46:a4:d5:ee:9c:5f:a9:03:fc:4a:0c:1e:57:98:be:85:9f:42: 87:2f:bb:bc:57:3e:d4:f3:88:1d:f2:e6:38:f0:17:24:18:1b: 8e:2c:53:aa:fa:20:4f:f7:08:1a:47:16:7d:ec:cf:0b:cd:04: e8:0c:87:82:8e:83:7a:73:49:81:f5:38:63:66:24:ad:ff:3d: b1:a7:41:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmMGE3ubvCrYsZCKFH6DOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQ5Yjg0N2QzMTI5M2Y3MDFlMWNmOTlkZDhjYTBlYmJi MGI1YmQwHhcNMjUxMjE1MDYwMDQwWhcNMjUxMjE2MDYwMDQwWjAzMTEwLwYDVQQD EyhlYmVjNWYwYzg3YzkzOTE3ZjNjNDM2NDgyOTI2ODViYWI2NTVlNTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwluX+3cRW4oWqx6nly99U7VyEruk Zn6xKUgeVjh01uIOSQLg1DQPLopXLleZA9CBdPc7K6HTzAN+mTk5TE9Is7RPiAM+ yRF+PtFFIFFV1vMUpwF/wgha+EDfdv9WQKU8vQfAUaFxwyT7rKV310utot34xWre GnlVBvXE9X8WPEQljLY6XtuXf38d40xhSc7421xW7QW0ZT3396iI356jMpdd6zo/ DF1/teIOU4HQc4PKmi/aEQ5F1B9x+geITsDEHbSgoslgA0+5n2kwbnJsNxYOG4xM 0HoH/fftifeYiv1BzfArtWoo8CkACh+rSDnp+Vmts7KAC+WbRdkmdV3c4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOvsXwyHyTkX88Q2SCkmhbq2VeUjMB8GA1UdIwQY MBaAFE8Um4R9MSk/cB4c+Z3Yyg67sLW9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83MzFmODItYjE4Zi00ZDVjLWIxMjIt NDUyYmFkZmQ1YTZkLzEvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy83MzFmODItYjE4Zi00ZDVjLWIxMjItNDUyYmFkZmQ1YTZk LzEvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHczDI9Jr hYh8EAm8b8EN+yhpem1Y7OSYrFw122KRnjzVkmj/GcaNADLJj6tkLTy+rR0v8XuM KMe2OcNQ0zimpD1zWhUUspepYQ/mkOigja9F7KFfOx9VCh4C2E+Ck3TFpp5RBX6L 1r5gvNrbF64bTgS6qmtnmLHaFODXJRB223/5LGpND9K+i3yA4th1DxEmuQx2htuF iJQoz1xEzMWLlmVeLEowB/g5rz4/HtTBs8630MAoRqTV7pxfqQP8SgweV5i+hZ9C hy+7vFc+1POIHfLmOPAXJBgbjixTqvogT/cIGkcWfezPC80E6AyHgo6DenNJgfU4 Y2Ykrf89sadBwA== -----END CERTIFICATE-----Generated at Mon Dec 15 12:14:01 2025 by rpki-client