This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft File: TXfM16lEFd_GjMyodOlMLowiIC0.mft (raw, json) Hash identifier: fRALYfYGVXlclZE3OONzZfyNtQ9ypaURvhRhkupt/RM= Subject key identifier: A0:2C:7E:FF:20:D0:FD:0B:4B:E7:18:ED:E9:0F:15:27:92:62:B3:7A Authority key identifier: 4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D Certificate issuer: /CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d Certificate serial: 019B3CB55F7697293B6EC851FCF818160414 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 17:01:17 +0000 Manifest this update: Sat 20 Dec 2025 17:01:17 +0000 Manifest next update: Sun 21 Dec 2025 17:01:17 +0000 Files and hashes: 1: JgzpPohbfVvMIcKTpIBaDGYyTbE.roa (hash: G+qmeF9FhBKU4LJ3ZbSw7iLKTabN9a1acVHHKbI2D6M=) 2: TXfM16lEFd_GjMyodOlMLowiIC0.crl (hash: pZXgFbhxbZhYCKWw+FNRIVTuyGRarzvwKbjUqWCBQpU=) 3: WlzyMJALtky3UfCL3LeynZJn274.roa (hash: cFugyqePAm3Z5xloXfQbWqCEPWkm4mnJFuRR8A9Tn3Q=) 4: mn0eBW57NQIPiKHlN3VjBOCrBwM.roa (hash: Q9KukE1TFuxZdPyKM+3q4VKMJP4x9GkCYDXI40jMHbY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:5f:76:97:29:3b:6e:c8:51:fc:f8:18:16:04:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d Validity Not Before: Dec 20 17:01:17 2025 GMT Not After : Dec 21 17:01:17 2025 GMT Subject: CN=a02c7eff20d0fd0b4be718ede90f15279262b37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:df:3f:94:66:2d:e6:96:a5:4b:4a:b4:73:bb: bc:ff:d2:74:7c:bb:af:4e:77:8f:af:aa:22:4e:43: 22:3a:06:c7:0e:ff:61:df:4e:cd:1c:81:72:a3:8a: d1:15:1d:77:0b:08:ba:1c:aa:e6:2b:65:cb:63:96: 8a:6e:9b:f4:62:43:02:55:4b:8b:04:50:d4:9b:78: bc:67:82:2c:a1:24:43:6b:83:68:14:ea:6c:87:c4: b9:77:6a:1f:42:c8:fc:2e:a3:c1:40:cc:7b:fb:81: 06:09:22:c8:00:6d:d1:26:93:31:e6:bb:4d:d9:43: 2b:3b:b9:83:63:8f:b5:26:1e:8d:d1:53:ba:a5:71: 99:3c:c4:4f:e1:a5:9d:16:eb:81:0f:75:7b:70:0e: 74:88:cc:df:03:99:9f:14:c1:d2:9d:03:9f:70:36: 16:13:4f:2c:34:b6:ea:28:b8:81:01:c3:84:b3:de: 27:de:2d:5d:b7:84:50:75:22:4d:dd:2d:ff:f8:36: 17:49:ed:b2:1b:ce:a6:37:78:f2:c6:7b:bf:a3:09: 32:5f:8f:e0:92:8b:eb:89:2d:a3:eb:75:73:3c:31: 34:d3:57:61:b4:f0:7c:80:dc:29:c8:4a:f8:d7:10: c8:bf:f2:3d:44:cd:20:b4:47:50:31:55:20:83:4e: f4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2C:7E:FF:20:D0:FD:0B:4B:E7:18:ED:E9:0F:15:27:92:62:B3:7A X509v3 Authority Key Identifier: keyid:4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:30:87:6f:5c:b6:64:3b:3b:1e:86:9f:54:16:6a:d4:da:8e: 63:4c:cb:d5:b2:b1:1a:db:7b:a6:38:dd:3c:cd:af:71:46:76: bf:13:ca:b9:83:58:65:11:ca:4e:b6:55:fb:c7:cf:78:46:f8: ca:90:fb:b5:fe:59:8e:e7:79:24:60:04:7b:c2:b1:1b:b4:a5: b9:ba:7a:37:f3:e3:d3:68:0a:46:59:a9:2c:cc:60:bb:84:19: 85:be:c1:df:cc:b3:69:46:f3:8d:f5:ac:04:8e:25:77:98:18: 9b:0c:fe:eb:10:b7:d0:8e:90:1f:1f:bd:00:76:1f:b0:56:ad: df:e5:77:61:fc:64:41:c9:a3:07:f3:91:84:ec:2a:45:8f:5c: 04:b0:50:5b:14:b0:31:dd:69:ab:b7:27:e7:3d:a4:76:be:eb: fe:ac:3b:b9:ab:61:f2:b9:5e:e7:b9:79:8c:3a:1a:b9:6d:4f: ab:08:8f:9c:35:97:67:75:e8:da:b6:be:65:39:41:15:c1:9f: ba:12:18:5f:fd:16:ee:2c:d0:4c:d0:ea:65:47:17:cc:03:0a: 29:79:a7:35:33:ad:e1:55:3b:a2:a5:ad:e4:e4:64:6d:5a:34: 1a:08:27:df:08:fc:ff:ba:4e:d6:da:f7:68:59:28:31:1d:0c: 30:27:17:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tV92lyk7bshR/PgYFgQUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNzdjY2Q3YTk0NDE1ZGZjNjhjY2NhODc0ZTk0YzJlOGMy MjIwMmQwHhcNMjUxMjIwMTcwMTE3WhcNMjUxMjIxMTcwMTE3WjAzMTEwLwYDVQQD EyhhMDJjN2VmZjIwZDBmZDBiNGJlNzE4ZWRlOTBmMTUyNzkyNjJiMzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA098/lGYt5palS0q0c7u8/9J0fLuv TnePr6oiTkMiOgbHDv9h307NHIFyo4rRFR13Cwi6HKrmK2XLY5aKbpv0YkMCVUuL BFDUm3i8Z4IsoSRDa4NoFOpsh8S5d2ofQsj8LqPBQMx7+4EGCSLIAG3RJpMx5rtN 2UMrO7mDY4+1Jh6N0VO6pXGZPMRP4aWdFuuBD3V7cA50iMzfA5mfFMHSnQOfcDYW E08sNLbqKLiBAcOEs94n3i1dt4RQdSJN3S3/+DYXSe2yG86mN3jyxnu/owkyX4/g kovriS2j63VzPDE001dhtPB8gNwpyEr41xDIv/I9RM0gtEdQMVUgg070ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAsfv8g0P0LS+cY7ekPFSeSYrN6MB8GA1UdIwQY MBaAFE13zNepRBXfxozMqHTpTC6MIiAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFhmTTE2bEVGZF9Hak15b2RPbE1Mb3dpSUMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kNjA4YjgtNTAxZi00OTFmLWEyZjIt MTBlNTdmNTZhMTdhLzEvVFhmTTE2bEVGZF9Hak15b2RPbE1Mb3dpSUMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9kNjA4YjgtNTAxZi00OTFmLWEyZjItMTBlNTdmNTZhMTdh LzEvVFhmTTE2bEVGZF9Hak15b2RPbE1Mb3dpSUMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvjCHb1y2 ZDs7HoafVBZq1NqOY0zL1bKxGtt7pjjdPM2vcUZ2vxPKuYNYZRHKTrZV+8fPeEb4 ypD7tf5Zjud5JGAEe8KxG7Slubp6N/Pj02gKRlmpLMxgu4QZhb7B38yzaUbzjfWs BI4ld5gYmwz+6xC30I6QHx+9AHYfsFat3+V3YfxkQcmjB/ORhOwqRY9cBLBQWxSw Md1pq7cn5z2kdr7r/qw7uath8rle57l5jDoauW1PqwiPnDWXZ3Xo2ra+ZTlBFcGf uhIYX/0W7izQTNDqZUcXzAMKKXmnNTOt4VU7oqWt5ORkbVo0Gggn3wj8/7pO1tr3 aFkoMR0MMCcXjw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:47:53 2025 by rpki-client