This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft File: TXPZQBmjwjWHffa8GynHagtkydA.mft (raw, json) Hash identifier: w7Oha90UGN+le6UZkIN5mLEemJXkPTt2pQDH8GStRQA= Subject key identifier: 41:9D:BB:06:6E:4A:A1:DE:8E:0F:2A:27:C1:3D:2F:F8:83:DA:2A:21 Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0 Certificate issuer: /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0 Certificate serial: 019B5A51C0FF2B29C9A24D5D1CB8DCF260A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft Manifest number: 0DEF Signing time: Fri 26 Dec 2025 11:01:05 +0000 Manifest this update: Fri 26 Dec 2025 11:01:05 +0000 Manifest next update: Sat 27 Dec 2025 11:01:05 +0000 Files and hashes: 1: TXPZQBmjwjWHffa8GynHagtkydA.crl (hash: fKwlyohfhcsp3LFwlJ42a+8lovye9DPRyrWUBqU0I04=) 2: UFlaQCFJ4CLhOuiIqohu_AVKpLY.roa (hash: QMm4BiW8chALfiHKzYbt92A3p1kXxu/myJMcDRlryRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:c0:ff:2b:29:c9:a2:4d:5d:1c:b8:dc:f2:60:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0 Validity Not Before: Dec 26 11:01:05 2025 GMT Not After : Dec 27 11:01:05 2025 GMT Subject: CN=419dbb066e4aa1de8e0f2a27c13d2ff883da2a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e1:1d:77:71:ee:0b:cb:6e:26:2e:cb:91:db: 5b:31:19:a5:20:cc:47:22:77:09:c8:1c:df:c5:7c: dd:6e:de:2c:17:ef:2b:66:99:59:77:8c:4b:ac:a3: 55:80:18:92:a1:c6:4c:95:1a:a1:6c:8f:b0:76:ab: dc:5b:54:45:69:ab:2f:45:76:22:84:c1:25:a5:e9: 9d:0d:4a:32:a6:88:6a:3f:2f:71:78:ab:32:46:8f: 22:39:fa:d1:d7:85:14:05:10:d0:27:04:7c:02:cc: 4a:b9:fe:7b:b3:50:52:fd:bc:d9:00:b1:3e:b2:e4: 1a:ca:9a:a0:73:7b:f0:5f:fa:de:c9:72:a5:24:69: af:e8:7d:cd:aa:6e:d2:1a:35:3a:a2:4c:04:76:a1: e5:9e:ec:e6:1e:7b:13:01:b5:92:1c:e6:ce:e0:27: ee:fa:ab:e0:ba:87:24:4e:98:df:f4:cf:95:d5:07: a6:74:49:4b:ec:50:92:89:ab:a5:fe:0e:7e:e0:67: 19:67:76:8a:20:e7:8e:b2:3f:4e:82:dc:e8:44:b9: 9f:39:30:f0:96:7b:2d:49:f4:de:1b:8d:eb:80:8f: 5e:0c:ca:69:75:3b:99:d3:3c:eb:40:8a:aa:ed:14: 3f:70:7e:e8:48:3c:c2:24:f1:4d:48:bb:16:9f:c4: b0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9D:BB:06:6E:4A:A1:DE:8E:0F:2A:27:C1:3D:2F:F8:83:DA:2A:21 X509v3 Authority Key Identifier: keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:7e:09:fb:ca:b4:81:1d:7d:57:35:b8:81:7c:ec:05:19:d7: 3b:d7:f1:7e:67:9d:e2:42:ad:ec:56:d0:bf:0a:92:f5:2a:07: a2:e8:7b:9b:11:52:7f:07:6a:2e:77:bb:cc:05:c9:97:81:4b: 0d:f3:b4:20:5e:c4:17:f6:60:0c:3b:41:25:50:11:d2:6a:38: c5:3a:43:e1:3d:6a:87:6c:e2:cf:33:7c:12:56:66:ba:d3:da: dc:7d:31:b4:6e:cb:3f:90:05:9a:7a:0f:9a:7c:a4:ec:80:00: ad:8c:97:1c:cc:fd:36:12:ad:27:f9:06:b0:6f:1c:42:4e:03: b1:20:f1:50:c0:41:b5:d5:d0:5c:5f:6f:c8:2c:19:21:d1:f4: 70:8e:e7:e4:cb:30:ec:b2:42:00:24:24:93:4d:fc:0d:dd:2f: 54:81:b0:89:6e:5d:05:25:44:bc:c7:41:47:02:af:c5:aa:44: 01:ad:01:c7:1e:07:9a:31:4e:0a:64:59:47:49:22:58:82:27: c2:50:6a:ae:0d:67:ca:b9:44:c5:61:99:05:b0:97:58:b7:8f: 8a:60:e4:d7:a7:05:8e:f7:a3:33:6a:e5:81:e8:c8:75:ee:ef: db:7e:a7:15:da:66:43:7c:e9:7f:47:d4:c4:9b:78:5f:ec:76: 08:f3:79:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUcD/KynJok1dHLjc8mCgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNzNkOTQwMTlhM2MyMzU4NzdkZjZiYzFiMjljNzZhMGI2 NGM5ZDAwHhcNMjUxMjI2MTEwMTA1WhcNMjUxMjI3MTEwMTA1WjAzMTEwLwYDVQQD Eyg0MTlkYmIwNjZlNGFhMWRlOGUwZjJhMjdjMTNkMmZmODgzZGEyYTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOEdd3HuC8tuJi7LkdtbMRmlIMxH IncJyBzfxXzdbt4sF+8rZplZd4xLrKNVgBiSocZMlRqhbI+wdqvcW1RFaasvRXYi hMElpemdDUoypohqPy9xeKsyRo8iOfrR14UUBRDQJwR8AsxKuf57s1BS/bzZALE+ suQaypqgc3vwX/reyXKlJGmv6H3Nqm7SGjU6okwEdqHlnuzmHnsTAbWSHObO4Cfu +qvguockTpjf9M+V1QemdElL7FCSiaul/g5+4GcZZ3aKIOeOsj9OgtzoRLmfOTDw lnstSfTeG43rgI9eDMppdTuZ0zzrQIqq7RQ/cH7oSDzCJPFNSLsWn8SwbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGduwZuSqHejg8qJ8E9L/iD2iohMB8GA1UdIwQY MBaAFE1z2UAZo8I1h332vBspx2oLZMnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFhQWlFCbWp3aldIZmZhOEd5bkhhZ3RreWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wOTQ4MmItNGQyYS00ODkzLTgyOGQt OTZkYzVlYTBjYzgzLzEvVFhQWlFCbWp3aldIZmZhOEd5bkhhZ3RreWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wOTQ4MmItNGQyYS00ODkzLTgyOGQtOTZkYzVlYTBjYzgz LzEvVFhQWlFCbWp3aldIZmZhOEd5bkhhZ3RreWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqH4J+8q0 gR19VzW4gXzsBRnXO9fxfmed4kKt7FbQvwqS9SoHouh7mxFSfwdqLne7zAXJl4FL DfO0IF7EF/ZgDDtBJVAR0mo4xTpD4T1qh2zizzN8ElZmutPa3H0xtG7LP5AFmnoP mnyk7IAArYyXHMz9NhKtJ/kGsG8cQk4DsSDxUMBBtdXQXF9vyCwZIdH0cI7n5Msw 7LJCACQkk038Dd0vVIGwiW5dBSVEvMdBRwKvxapEAa0Bxx4HmjFOCmRZR0kiWIIn wlBqrg1nyrlExWGZBbCXWLePimDk16cFjvejM2rlgejIde7v236nFdpmQ3zpf0fU xJt4X+x2CPN5sw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:00:26 2025 by rpki-client