This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft File: txiFnUEvm1hypYl3Mg0tCDvXoEs.mft (raw, json) Hash identifier: j7mELcAJM1zd1msQgh6Y66+P2yuinkmlq5+4m/0zDLw= Subject key identifier: B1:BE:FA:C0:DB:0B:29:5C:94:AB:6C:72:F2:B6:05:C8:21:A6:46:50 Authority key identifier: B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B Certificate issuer: /CN=b718859d412f9b5872a58977320d2d083bd7a04b Certificate serial: 019B4BF2D820B3A1E8A5248ED9BF88F734A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft Manifest number: 1179 Signing time: Tue 23 Dec 2025 16:02:44 +0000 Manifest this update: Tue 23 Dec 2025 16:02:44 +0000 Manifest next update: Wed 24 Dec 2025 16:02:44 +0000 Files and hashes: 1: txiFnUEvm1hypYl3Mg0tCDvXoEs.crl (hash: sem5Z+QErmQ/NreYaAWIFlfbLmakEWUKOjYUD60y6SQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:d8:20:b3:a1:e8:a5:24:8e:d9:bf:88:f7:34:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b718859d412f9b5872a58977320d2d083bd7a04b Validity Not Before: Dec 23 16:02:44 2025 GMT Not After : Dec 24 16:02:44 2025 GMT Subject: CN=b1befac0db0b295c94ab6c72f2b605c821a64650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:47:4f:67:57:e0:dc:8f:35:59:53:eb:cd:19: 64:ad:bd:ba:97:38:fa:5f:3b:af:b8:4f:38:d8:8a: c5:e6:6f:e8:12:20:4c:fd:1e:c6:fd:a4:d8:71:6e: 72:97:2f:fc:e9:7f:cd:47:c2:15:ee:b9:35:8e:7f: a8:aa:cf:57:48:0c:20:2b:2d:22:77:e0:31:6d:bc: d3:c0:74:c9:70:bf:67:36:cc:d4:b9:db:b7:b4:eb: 2f:47:eb:f2:1e:09:ba:92:8a:3c:e0:08:61:7d:dd: 3a:80:3c:87:25:ab:81:65:57:b4:56:38:99:92:d6: ed:05:bf:c2:76:cd:2f:d3:1e:81:43:67:72:08:bd: 1b:89:29:20:c8:84:9b:42:b2:9c:2c:20:16:b9:a5: 73:f9:0f:c0:65:cc:65:00:46:d1:ac:17:79:8b:95: f2:91:b0:c2:eb:b0:31:5f:3c:59:95:15:ff:c3:19: 7f:78:cf:5a:53:5a:74:1b:4b:a0:6a:c2:ad:02:ce: 25:e0:64:46:1b:0a:11:21:a4:85:4d:aa:f0:27:08: 57:8b:9f:6c:7d:93:e7:c6:f2:48:13:d6:4a:f9:a0: 6e:a2:ca:9c:25:3f:c8:82:59:d3:97:72:1b:75:2e: 2e:fe:ed:3c:c7:64:48:70:de:1d:cd:01:1b:af:c5: 49:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BE:FA:C0:DB:0B:29:5C:94:AB:6C:72:F2:B6:05:C8:21:A6:46:50 X509v3 Authority Key Identifier: keyid:B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b5:22:81:88:f4:57:22:9a:b6:be:17:b8:6e:0c:ce:7f:2f: 8b:db:87:45:88:0c:6e:12:ca:5b:e5:7e:ce:ed:4f:98:a8:8b: 6a:b5:a3:f2:47:9f:09:80:7f:8c:e8:04:07:dd:45:0f:46:51: ea:b2:68:68:bb:bf:e4:03:7b:9c:37:ad:d0:38:5a:f2:83:d2: cc:a8:a4:f4:35:0f:02:08:f4:03:2e:96:aa:ba:32:72:ec:10: 68:65:95:90:52:dc:46:2b:b5:1f:a2:c2:9b:ea:91:4e:fe:eb: 28:c7:c0:6f:b7:cc:00:52:db:40:a8:b5:41:3c:bf:02:11:0a: 09:79:82:c7:d9:d2:b9:85:ce:be:4a:70:ed:8b:6e:2a:7d:85: 0a:39:b5:57:2a:57:44:73:3c:47:83:f0:2f:be:cc:16:5b:b4: ac:29:ef:d7:6a:e5:69:57:24:5f:8d:40:c3:cf:3c:bf:a0:e7: 6a:b3:96:96:5e:50:d6:de:b9:22:5d:8c:05:b6:00:37:59:63: c1:7d:77:07:01:ee:0f:f0:69:49:b7:5d:a4:2b:5f:d8:ee:06: 20:94:3f:e7:8a:75:50:47:8a:74:ed:0f:d1:36:1a:ab:6e:ca: 79:b7:fb:15:bf:77:88:45:a3:e8:79:ec:43:86:49:e4:37:78: 76:e4:40:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8tggs6HopSSO2b+I9zSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTg4NTlkNDEyZjliNTg3MmE1ODk3NzMyMGQyZDA4M2Jk N2EwNGIwHhcNMjUxMjIzMTYwMjQ0WhcNMjUxMjI0MTYwMjQ0WjAzMTEwLwYDVQQD EyhiMWJlZmFjMGRiMGIyOTVjOTRhYjZjNzJmMmI2MDVjODIxYTY0NjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkdPZ1fg3I81WVPrzRlkrb26lzj6 XzuvuE842IrF5m/oEiBM/R7G/aTYcW5yly/86X/NR8IV7rk1jn+oqs9XSAwgKy0i d+AxbbzTwHTJcL9nNszUudu3tOsvR+vyHgm6koo84Ahhfd06gDyHJauBZVe0VjiZ ktbtBb/Cds0v0x6BQ2dyCL0biSkgyISbQrKcLCAWuaVz+Q/AZcxlAEbRrBd5i5Xy kbDC67AxXzxZlRX/wxl/eM9aU1p0G0ugasKtAs4l4GRGGwoRIaSFTarwJwhXi59s fZPnxvJIE9ZK+aBuosqcJT/IglnTl3IbdS4u/u08x2RIcN4dzQEbr8VJRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLG++sDbCylclKtscvK2BcghpkZQMB8GA1UdIwQY MBaAFLcYhZ1BL5tYcqWJdzINLQg716BLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhpRm5VRXZtMWh5cFlsM01nMHRDRHZYb0VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82ZWYxNGEtOTkxNC00MzE4LTlhNTEt ZDdiY2VkYzYwNTc5LzEvdHhpRm5VRXZtMWh5cFlsM01nMHRDRHZYb0VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS82ZWYxNGEtOTkxNC00MzE4LTlhNTEtZDdiY2VkYzYwNTc5 LzEvdHhpRm5VRXZtMWh5cFlsM01nMHRDRHZYb0VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATbUigYj0 VyKatr4XuG4Mzn8vi9uHRYgMbhLKW+V+zu1PmKiLarWj8kefCYB/jOgEB91FD0ZR 6rJoaLu/5AN7nDet0Dha8oPSzKik9DUPAgj0Ay6WqroycuwQaGWVkFLcRiu1H6LC m+qRTv7rKMfAb7fMAFLbQKi1QTy/AhEKCXmCx9nSuYXOvkpw7YtuKn2FCjm1VypX RHM8R4PwL77MFlu0rCnv12rlaVckX41Aw888v6DnarOWll5Q1t65Il2MBbYAN1lj wX13BwHuD/BpSbddpCtf2O4GIJQ/54p1UEeKdO0P0TYaq27Kebf7Fb93iEWj6Hns Q4ZJ5Dd4duRA5g== -----END CERTIFICATE-----Generated at Tue Dec 23 20:39:34 2025 by rpki-client