This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft File: tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json) Hash identifier: d9P9HBumWAsW5JH4ZqxMVQqIwCKpBZPCWn02pM8HuwY= Subject key identifier: 7C:F3:B7:B1:A3:D2:6F:F9:1A:02:BC:37:8F:C7:62:4C:9E:92:A9:B4 Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec Certificate serial: 019B59E369A88F9202067D63B2A5BB1980B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft Manifest number: 0480 Signing time: Fri 26 Dec 2025 09:00:34 +0000 Manifest this update: Fri 26 Dec 2025 09:00:34 +0000 Manifest next update: Sat 27 Dec 2025 09:00:34 +0000 Files and hashes: 1: LeVi2Dl27pBMRUz8pmXZ3SnuX2A.roa (hash: LxI9ZJlsAuyHn6pxrNHJlN790aDbGyBNqZLVE/LhQDs=) 2: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: ied+K0DEE2PX8+U8UIlZIup4paROOwN97ccRm/a8iRY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:69:a8:8f:92:02:06:7d:63:b2:a5:bb:19:80:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec Validity Not Before: Dec 26 09:00:34 2025 GMT Not After : Dec 27 09:00:34 2025 GMT Subject: CN=7cf3b7b1a3d26ff91a02bc378fc7624c9e92a9b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:96:ba:10:cf:04:18:25:ea:41:b9:3e:64:f4: 0a:83:f5:d8:30:dd:0d:9d:07:16:37:f2:af:7b:d4: 94:e7:6c:53:13:2d:f9:b9:69:29:b1:36:e0:2f:27: e6:4d:bf:e0:77:b2:f7:ae:5c:05:6b:46:7f:77:de: 91:ac:6d:58:58:0a:72:8b:a9:6d:bf:e4:85:3c:a0: 5f:cf:f0:60:fb:9f:54:2b:94:68:a0:fb:81:51:65: 97:04:84:a0:10:78:47:92:13:cb:9c:8d:fc:f5:c1: 50:94:48:cf:f2:8b:01:2a:2a:c6:58:1e:f7:9d:f9: 52:86:b4:54:e2:31:9d:11:5c:19:7f:dd:a1:1c:14: d6:c1:1f:de:68:3e:7c:a8:f5:c1:26:6d:f8:21:f7: 3b:f8:40:5d:91:7e:16:cb:1b:e2:5d:98:c1:9b:7d: 17:1d:d0:db:1d:c6:c5:1b:ab:41:3b:1a:04:ab:79: 13:ff:96:88:68:51:4b:a4:f7:ea:3d:96:c2:9c:79: f0:ea:54:91:44:04:f5:19:ec:df:e5:a6:71:2b:0a: d9:d1:98:e5:e2:62:70:86:7d:e7:81:d7:91:62:73: c4:a7:f8:ca:71:0b:5b:8a:a8:f6:5c:60:c7:cf:8a: e6:31:29:61:37:0a:be:3f:3c:4d:b9:63:81:f6:c0: 18:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F3:B7:B1:A3:D2:6F:F9:1A:02:BC:37:8F:C7:62:4C:9E:92:A9:B4 X509v3 Authority Key Identifier: keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:2c:d5:68:8b:94:4d:a3:f1:d5:2d:2c:07:c3:92:26:71:93: 12:65:10:4d:68:c7:f8:57:eb:49:ad:59:ad:39:cb:1c:67:6d: d6:a8:85:4a:c8:f9:85:3b:a6:30:48:23:94:78:1d:1d:59:aa: 49:8f:b7:45:67:e3:ad:7e:e5:3f:cc:69:73:83:2c:02:64:bc: 41:06:08:ce:c1:71:5f:ce:e1:5d:bb:0c:37:57:7f:7d:4c:ff: f5:02:3e:45:9a:ff:8b:9b:77:0a:4a:68:25:bc:b6:7e:77:23: 4c:42:f2:99:03:81:88:d6:e7:4f:20:b8:25:d5:06:cf:28:f1: 84:31:9c:77:fc:b7:93:db:22:5c:02:58:af:0c:25:50:59:b5: 4a:f4:dc:41:38:72:95:48:a5:5a:cb:e6:35:20:86:eb:4e:a6: 65:83:16:47:18:6e:a7:da:89:9d:39:e9:b7:63:bc:fa:dc:df: 57:65:cf:f9:ea:89:0b:57:55:ac:25:95:7f:92:f9:9d:fb:9c: 9c:ee:a9:34:c7:57:48:dc:d6:27:b4:bb:84:25:92:c8:61:b3: 5d:b2:c1:24:27:c8:e8:1d:c8:b0:bf:ba:a1:9b:b8:a2:b2:a2: e5:03:dc:58:b0:27:de:af:01:e4:1a:fa:84:44:d9:ad:bf:8f: d6:f3:a4:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ42moj5ICBn1jsqW7GYC5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MWY0ODY4YmQ0MDkyOTJiNTY5NTlmMzVhNGMxNGZjYzI1 NDcyZWMwHhcNMjUxMjI2MDkwMDM0WhcNMjUxMjI3MDkwMDM0WjAzMTEwLwYDVQQD Eyg3Y2YzYjdiMWEzZDI2ZmY5MWEwMmJjMzc4ZmM3NjI0YzllOTJhOWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJa6EM8EGCXqQbk+ZPQKg/XYMN0N nQcWN/Kve9SU52xTEy35uWkpsTbgLyfmTb/gd7L3rlwFa0Z/d96RrG1YWApyi6lt v+SFPKBfz/Bg+59UK5RooPuBUWWXBISgEHhHkhPLnI389cFQlEjP8osBKirGWB73 nflShrRU4jGdEVwZf92hHBTWwR/eaD58qPXBJm34Ifc7+EBdkX4WyxviXZjBm30X HdDbHcbFG6tBOxoEq3kT/5aIaFFLpPfqPZbCnHnw6lSRRAT1Gezf5aZxKwrZ0Zjl 4mJwhn3ngdeRYnPEp/jKcQtbiqj2XGDHz4rmMSlhNwq+PzxNuWOB9sAYCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzzt7Gj0m/5GgK8N4/HYkyekqm0MB8GA1UdIwQY MBaAFLcfSGi9QJKStWlZ81pMFPzCVHLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMDA5MTktZDk1MS00YTZlLTlmMGMt N2NjYTNhMmU3NDkwLzEvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8xMDA5MTktZDk1MS00YTZlLTlmMGMtN2NjYTNhMmU3NDkw LzEvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAASzVaIuU TaPx1S0sB8OSJnGTEmUQTWjH+FfrSa1ZrTnLHGdt1qiFSsj5hTumMEgjlHgdHVmq SY+3RWfjrX7lP8xpc4MsAmS8QQYIzsFxX87hXbsMN1d/fUz/9QI+RZr/i5t3Ckpo Jby2fncjTELymQOBiNbnTyC4JdUGzyjxhDGcd/y3k9siXAJYrwwlUFm1SvTcQThy lUilWsvmNSCG606mZYMWRxhup9qJnTnpt2O8+tzfV2XP+eqJC1dVrCWVf5L5nfuc nO6pNMdXSNzWJ7S7hCWSyGGzXbLBJCfI6B3IsL+6oZu4orKi5QPcWLAn3q8B5Br6 hETZrb+P1vOk8A== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:22 2025 by rpki-client