This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft File: TxUpALDTI9NtlFEKsLAck_RRfIk.mft (raw, json) Hash identifier: mTJa9lIAqGXFqovA4zuocft26r4bdIL09xlHAvEWzf4= Subject key identifier: F6:1E:90:AB:9F:2D:6F:D7:CB:47:B2:A7:2C:2D:F2:06:8C:F4:A0:3D Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89 Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89 Certificate serial: 019B33E8C2DD0E04B459E6E0521CC07084E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 00:00:50 +0000 Manifest this update: Fri 19 Dec 2025 00:00:50 +0000 Manifest next update: Sat 20 Dec 2025 00:00:50 +0000 Files and hashes: 1: 8Zjvv60lC8NGP14VoQ8RNeofQIM.roa (hash: P7KtzcRE9odqg/BTLMYwDj7fh0a6LBnncSFvQDv5Bp0=) 2: FpKKPofiudOty7FxUMr6flRZ1Yw.roa (hash: 19qYKj9K4I/iMwutyl2SfY76xgKtvj/68+BwpIEN2Kg=) 3: TxUpALDTI9NtlFEKsLAck_RRfIk.crl (hash: 1Lfd3+OGax/Xv4NALxOL3ayLuZX6biGzbsJqSWfLaS4=) 4: yOx4nY5h71UsEVGCdqce7EnVtbw.roa (hash: pblfkKrPcMJNUK4hgNwzxNA61gyD6ePezh9yKZ6o3M4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:e8:c2:dd:0e:04:b4:59:e6:e0:52:1c:c0:70:84:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89 Validity Not Before: Dec 19 00:00:50 2025 GMT Not After : Dec 20 00:00:50 2025 GMT Subject: CN=f61e90ab9f2d6fd7cb47b2a72c2df2068cf4a03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:5c:b7:c9:c6:96:19:50:60:b6:4d:6d:11:b3: 35:45:32:2c:1b:01:1c:97:37:60:45:eb:9b:24:24: 09:08:36:7a:b9:b8:72:7f:4f:ef:f0:4d:af:85:de: 4c:df:6b:af:87:24:6f:fb:25:8d:ca:88:51:4d:0e: d0:f0:31:f7:37:9c:5d:71:1f:3c:d6:5b:dc:42:58: 84:eb:68:c5:18:73:f5:9a:67:7a:9a:d6:ef:c2:1c: 47:76:6e:92:83:75:14:8b:72:9e:d4:0f:06:af:22: 62:4e:14:e4:3f:90:e4:66:11:7a:e1:85:05:f9:47: 50:38:9f:08:85:ae:1c:fa:b0:f9:9f:1d:d1:77:aa: c8:4c:87:92:76:d6:88:aa:74:60:74:1b:44:92:30: 20:f3:43:16:7a:42:89:9f:ca:19:f9:b9:85:23:34: 4a:a0:0e:4c:36:b5:5d:c5:6a:ba:61:0b:ee:81:61: 14:3d:c0:ab:76:82:c6:a3:e0:33:b3:62:e3:18:65: dd:70:97:28:b5:4b:0b:a6:30:35:3f:b1:58:0a:be: d4:58:59:ea:15:e4:62:6b:cc:a9:55:83:98:6e:ef: c5:53:be:ad:e8:6b:1f:ed:ab:2a:7e:06:31:f5:ef: 3f:71:1d:14:3b:91:b2:b8:f8:32:87:53:63:03:4a: 1f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1E:90:AB:9F:2D:6F:D7:CB:47:B2:A7:2C:2D:F2:06:8C:F4:A0:3D X509v3 Authority Key Identifier: keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:3c:2f:4a:ce:d6:83:d6:cf:96:74:be:cf:70:e7:bd:54:6d: 2f:39:27:9b:23:92:54:ac:b4:36:ab:97:c6:27:84:f1:59:1d: 3f:99:54:c3:21:79:e4:17:43:15:cc:51:49:67:6b:1d:8c:55: 19:aa:e6:14:4f:c1:bd:83:61:81:be:e7:06:a9:98:0d:8b:f6: 1e:67:40:ce:b7:55:38:13:14:71:da:0b:fd:1b:ba:7e:65:38: 73:78:1a:45:72:c4:91:6a:22:e8:0f:cc:b8:c8:71:5b:cb:09: fa:6f:18:af:50:1d:bb:40:3d:d0:ed:8e:77:c8:aa:bd:a5:d8: 9c:ed:bb:b7:8e:75:7d:5b:af:10:32:dd:3d:8d:00:1c:bb:a2: 0c:82:fc:f1:f2:30:f6:c0:ee:dd:b9:05:a7:5f:2a:c4:3a:71: 3f:61:b4:7d:43:e3:6c:f4:b0:5f:9f:55:27:a5:c2:71:6f:a4: ff:c4:53:0a:d0:2d:79:9c:d3:3b:e0:2b:4b:b1:60:b6:43:38: 49:f2:48:60:8e:66:ed:19:33:11:38:35:05:06:66:e9:05:72: 03:4b:c8:90:31:99:31:7b:25:f2:bd:e7:9e:51:80:cd:c7:9e: 83:93:19:c4:fb:79:27:c8:d7:5f:eb:e0:61:0a:bd:7c:cf:e8: 2f:35:3f:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsz6MLdDgS0WebgUhzAcITlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTUyOTAwYjBkMzIzZDM2ZDk0NTEwYWIwYjAxYzkzZjQ1 MTdjODkwHhcNMjUxMjE5MDAwMDUwWhcNMjUxMjIwMDAwMDUwWjAzMTEwLwYDVQQD EyhmNjFlOTBhYjlmMmQ2ZmQ3Y2I0N2IyYTcyYzJkZjIwNjhjZjRhMDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1y3ycaWGVBgtk1tEbM1RTIsGwEc lzdgReubJCQJCDZ6ubhyf0/v8E2vhd5M32uvhyRv+yWNyohRTQ7Q8DH3N5xdcR88 1lvcQliE62jFGHP1mmd6mtbvwhxHdm6Sg3UUi3Ke1A8GryJiThTkP5DkZhF64YUF +UdQOJ8Iha4c+rD5nx3Rd6rITIeSdtaIqnRgdBtEkjAg80MWekKJn8oZ+bmFIzRK oA5MNrVdxWq6YQvugWEUPcCrdoLGo+Azs2LjGGXdcJcotUsLpjA1P7FYCr7UWFnq FeRia8ypVYOYbu/FU76t6Gsf7asqfgYx9e8/cR0UO5GyuPgyh1NjA0ofEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPYekKufLW/Xy0eypywt8gaM9KA9MB8GA1UdIwQY MBaAFE8VKQCw0yPTbZRRCrCwHJP0UXyJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhVcEFMRFRJOU50bEZFS3NMQWNrX1JSZklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84OWZmM2ItMTI2My00Y2RkLTljYWQt MjNkZjhkZGRmOTc4LzEvVHhVcEFMRFRJOU50bEZFS3NMQWNrX1JSZklrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC84OWZmM2ItMTI2My00Y2RkLTljYWQtMjNkZjhkZGRmOTc4 LzEvVHhVcEFMRFRJOU50bEZFS3NMQWNrX1JSZklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTwvSs7W g9bPlnS+z3DnvVRtLzknmyOSVKy0NquXxieE8VkdP5lUwyF55BdDFcxRSWdrHYxV GarmFE/BvYNhgb7nBqmYDYv2HmdAzrdVOBMUcdoL/Ru6fmU4c3gaRXLEkWoi6A/M uMhxW8sJ+m8Yr1Adu0A90O2Od8iqvaXYnO27t451fVuvEDLdPY0AHLuiDIL88fIw 9sDu3bkFp18qxDpxP2G0fUPjbPSwX59VJ6XCcW+k/8RTCtAteZzTO+ArS7FgtkM4 SfJIYI5m7RkzETg1BQZm6QVyA0vIkDGZMXsl8r3nnlGAzceeg5MZxPt5J8jXX+vg YQq9fM/oLzU/Mw== -----END CERTIFICATE-----Generated at Fri Dec 19 02:02:05 2025 by rpki-client