This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft File: TxI-JI5uwDaOBxI0X3JtcfYPgms.mft (raw, json) Hash identifier: TMrm7RmjNJG7Wp98S72Va6PmF1Qfg8APz+XoGlfoZQQ= Subject key identifier: 9D:B8:C3:7D:95:92:79:10:5F:8E:4A:F3:C0:7A:6B:8F:FC:2A:76:16 Authority key identifier: 4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B Certificate issuer: /CN=4f123e248e6ec0368e0712345f726d71f60f826b Certificate serial: 019B5A522165281FBCC582D9D80BFEA4C905 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft Manifest number: 1798 Signing time: Fri 26 Dec 2025 11:01:30 +0000 Manifest this update: Fri 26 Dec 2025 11:01:30 +0000 Manifest next update: Sat 27 Dec 2025 11:01:30 +0000 Files and hashes: 1: TxI-JI5uwDaOBxI0X3JtcfYPgms.crl (hash: 1tq6JGGqE+ZDIvDZxKzk80wTkC0u5kZ7V+xJB6H+lfY=) 2: txevIB_6jhleI8mehx3u1ubhM4E.roa (hash: ttQSgL5wxWdGk+Bs6UGV09lAGc4vxzIOxHjXzQQIn4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:21:65:28:1f:bc:c5:82:d9:d8:0b:fe:a4:c9:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f123e248e6ec0368e0712345f726d71f60f826b Validity Not Before: Dec 26 11:01:30 2025 GMT Not After : Dec 27 11:01:30 2025 GMT Subject: CN=9db8c37d959279105f8e4af3c07a6b8ffc2a7616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:55:2e:c9:22:c9:89:4c:89:7c:67:2a:ae:c4: e5:be:98:dd:2d:53:7b:4e:5e:70:b6:06:4c:20:f1: d5:f4:98:54:0f:94:01:3d:e0:30:18:0c:d3:1b:fb: 36:5a:9c:7c:51:71:cf:19:5f:88:e9:2a:9f:3a:12: 4d:9d:8e:24:a3:73:12:e9:a2:67:75:45:0a:d9:76: 84:b8:33:01:03:4d:c6:01:6f:30:b9:9c:30:d9:96: 5a:44:b2:9d:b7:6a:98:13:93:fb:b0:9e:0a:2d:3c: d0:cf:1c:d6:20:42:9f:f3:7e:4b:30:35:85:b5:ef: a2:98:99:59:40:26:c9:eb:c6:4d:23:cf:1e:47:ac: 01:00:39:c1:9b:8b:05:9a:d6:4e:0a:66:2b:7f:ef: ef:b4:85:03:07:54:27:da:94:5d:94:58:b7:c3:3c: 6d:aa:6c:84:a3:51:4b:a2:e2:57:9b:74:bc:82:13: 16:f0:22:51:36:d3:98:e9:20:88:a8:75:de:e8:36: 6a:2f:57:6c:6c:1a:a9:b5:96:16:3c:9f:f2:e3:e8: 90:ce:e5:eb:5d:52:70:a7:2a:52:c5:64:65:12:cd: 03:88:e4:3b:2a:d3:3f:0e:82:e4:be:ff:2a:9e:27: cd:c2:04:fb:c7:84:80:b2:ce:6b:b1:ae:47:4e:d5: ef:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B8:C3:7D:95:92:79:10:5F:8E:4A:F3:C0:7A:6B:8F:FC:2A:76:16 X509v3 Authority Key Identifier: keyid:4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:51:b2:0a:aa:1f:81:34:d0:1b:47:7a:ff:37:7d:57:2c:be: 0d:11:00:45:3d:2e:7f:7e:4a:82:22:3c:61:2d:88:ac:7b:30: 3d:8d:b1:24:32:00:b0:74:f2:e0:6a:c6:76:89:57:c5:09:4b: e2:cd:6d:4a:5b:d1:82:43:a3:3a:d2:e8:17:cb:8b:27:da:b4: 3e:3d:c0:c9:45:59:99:a0:55:01:f5:88:96:68:7c:ec:d1:88: 82:fe:9b:52:ca:8d:4f:cf:fc:70:94:1c:0b:99:2d:23:33:95: a5:9c:36:16:ce:fd:81:99:f8:cd:6e:61:e7:ab:42:4b:ad:ac: ef:21:2a:b1:e3:1e:94:b3:80:ea:97:48:2d:af:6a:7d:90:63: 6c:33:b1:41:31:9f:18:d7:95:f9:9d:d6:0b:86:46:a6:4a:7a: 45:de:35:ad:c4:a9:f3:36:57:10:c3:e8:28:e5:eb:91:01:11: 9e:5d:b8:65:e5:db:21:93:0f:09:58:cf:00:64:d6:29:96:95: b1:74:5a:dd:50:83:72:a8:57:d4:30:4c:cc:44:bb:21:34:10: 90:78:a6:80:05:e4:47:58:d8:e9:eb:93:32:99:3a:a0:cc:3d: 12:39:11:83:32:79:25:88:73:e3:4f:a6:2d:d5:e2:75:28:d1: 66:25:2a:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUiFlKB+8xYLZ2Av+pMkFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTIzZTI0OGU2ZWMwMzY4ZTA3MTIzNDVmNzI2ZDcxZjYw ZjgyNmIwHhcNMjUxMjI2MTEwMTMwWhcNMjUxMjI3MTEwMTMwWjAzMTEwLwYDVQQD Eyg5ZGI4YzM3ZDk1OTI3OTEwNWY4ZTRhZjNjMDdhNmI4ZmZjMmE3NjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVUuySLJiUyJfGcqrsTlvpjdLVN7 Tl5wtgZMIPHV9JhUD5QBPeAwGAzTG/s2Wpx8UXHPGV+I6SqfOhJNnY4ko3MS6aJn dUUK2XaEuDMBA03GAW8wuZww2ZZaRLKdt2qYE5P7sJ4KLTzQzxzWIEKf835LMDWF te+imJlZQCbJ68ZNI88eR6wBADnBm4sFmtZOCmYrf+/vtIUDB1Qn2pRdlFi3wzxt qmyEo1FLouJXm3S8ghMW8CJRNtOY6SCIqHXe6DZqL1dsbBqptZYWPJ/y4+iQzuXr XVJwpypSxWRlEs0DiOQ7KtM/DoLkvv8qnifNwgT7x4SAss5rsa5HTtXvXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ24w32VknkQX45K88B6a4/8KnYWMB8GA1UdIwQY MBaAFE8SPiSObsA2jgcSNF9ybXH2D4JrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhJLUpJNXV3RGFPQnhJMFgzSnRjZllQZ21zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82ZDljZTItNmQ4OC00OTc3LWFlMDYt YzFlOTQxZTU5YzE0LzEvVHhJLUpJNXV3RGFPQnhJMFgzSnRjZllQZ21zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82ZDljZTItNmQ4OC00OTc3LWFlMDYtYzFlOTQxZTU5YzE0 LzEvVHhJLUpJNXV3RGFPQnhJMFgzSnRjZllQZ21zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb1GyCqof gTTQG0d6/zd9Vyy+DREART0uf35KgiI8YS2IrHswPY2xJDIAsHTy4GrGdolXxQlL 4s1tSlvRgkOjOtLoF8uLJ9q0Pj3AyUVZmaBVAfWIlmh87NGIgv6bUsqNT8/8cJQc C5ktIzOVpZw2Fs79gZn4zW5h56tCS62s7yEqseMelLOA6pdILa9qfZBjbDOxQTGf GNeV+Z3WC4ZGpkp6Rd41rcSp8zZXEMPoKOXrkQERnl24ZeXbIZMPCVjPAGTWKZaV sXRa3VCDcqhX1DBMzES7ITQQkHimgAXkR1jY6euTMpk6oMw9EjkRgzJ5JYhz40+m LdXidSjRZiUqQQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:17 2025 by rpki-client