This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft File: TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft (raw, json) Hash identifier: wUshOHB+fzrIS6d7w4M3fiNaK57IY/vaJgwQY/nDHSY= Subject key identifier: 3E:23:21:C7:8F:A9:8F:0B:A3:75:16:FA:E9:01:D3:C4:75:63:DA:18 Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B Certificate issuer: /CN=4f14397e3021beff3b5fd30daaab62514cfa166b Certificate serial: 019B1126419AC5E9A43D56FA80F8565343CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft Manifest number: 1771 Signing time: Fri 12 Dec 2025 06:01:18 +0000 Manifest this update: Fri 12 Dec 2025 06:01:18 +0000 Manifest next update: Sat 13 Dec 2025 06:01:18 +0000 Files and hashes: 1: TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl (hash: VE4sbpdE/FfOeptky6S7vqlbli5Tjk3YiXy5AUDcxHU=) 2: _QkywIQ5MYjLQgAq3HIEi0yS3ts.roa (hash: XOazSSRb7RPjyPPcCQsskJ3rE/egTw8zpZ2LPq6cndM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:26:41:9a:c5:e9:a4:3d:56:fa:80:f8:56:53:43:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b Validity Not Before: Dec 12 06:01:18 2025 GMT Not After : Dec 13 06:01:18 2025 GMT Subject: CN=3e2321c78fa98f0ba37516fae901d3c47563da18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7f:80:99:10:0a:ce:bf:45:d2:19:5f:86:cf: 49:f9:96:23:b5:c5:ec:36:5a:41:26:5c:7b:bb:bb: e8:f9:b0:4d:ac:53:ae:2b:f5:74:80:f5:d3:7d:bf: d6:c0:3f:c5:ee:a1:f2:ae:1e:f7:04:a9:13:9b:4c: 44:05:37:32:6e:6c:b0:70:a2:ff:7b:d8:21:77:51: 47:01:f1:a7:8b:c2:b2:13:41:74:2a:0d:b2:9c:b9: d6:51:55:00:f1:14:a1:81:72:cd:2c:31:d8:f6:7a: de:e8:1d:08:fe:ad:b4:dc:8d:19:35:31:53:27:9f: 04:c1:18:52:bd:4a:e2:b8:08:b9:e0:d3:66:91:d6: 74:c1:cb:40:6a:e5:8f:77:29:58:e0:7b:be:b6:44: c2:24:16:80:e3:4c:47:1f:ca:97:90:62:cf:16:48: 5e:ef:dd:17:eb:6a:37:a0:02:d7:1d:75:ca:20:c7: 80:ad:af:31:83:63:2c:2e:be:6f:4d:19:e7:f0:7b: 5e:74:80:ef:2a:13:33:50:c5:76:91:59:12:f0:41: b8:0d:e2:46:c6:cf:65:87:35:26:77:45:5f:25:74: 4a:4f:af:a1:3e:60:f7:97:9e:36:77:66:f5:b0:c0: c8:0c:2c:73:c5:53:f0:a4:3f:43:39:6a:6d:51:13: 5c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:23:21:C7:8F:A9:8F:0B:A3:75:16:FA:E9:01:D3:C4:75:63:DA:18 X509v3 Authority Key Identifier: keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:1c:d5:82:2a:6b:99:81:eb:61:07:f1:7b:dc:3e:45:16:d8: ec:b9:6b:52:26:2a:b3:ad:cc:9a:88:90:cc:09:62:59:8e:9b: 2e:ff:63:f2:04:e2:cb:3b:c6:d7:91:d0:64:7e:5d:5c:99:b1: 4e:89:6d:ce:82:7b:60:8f:30:92:41:40:3f:1b:99:a5:9a:d8: b8:9f:e2:a1:ed:82:e1:86:8c:c9:0a:de:85:6d:3e:89:65:05: 37:28:dc:91:f1:cc:c6:48:0d:36:24:c9:ab:7e:0d:35:a7:4e: 49:84:61:73:0c:ae:f4:d4:fe:ac:48:ff:93:9f:18:8e:6c:f5: 78:d6:76:32:30:1b:1e:f7:9d:12:20:27:40:73:c5:d7:dd:21: 94:60:2a:40:87:47:b3:39:b4:87:86:27:5c:2d:9b:c3:db:5b: c5:d7:ba:cc:57:12:0b:ed:0e:f1:18:f6:72:a9:21:ce:06:66: 81:64:e8:a9:e4:b1:c9:70:7a:63:e9:86:6a:79:6d:a8:fe:52: 5d:bf:ff:ac:ad:b0:bb:46:53:0e:f0:da:05:82:03:a2:0d:10: 2f:34:be:cd:50:35:50:39:4d:a9:10:09:87:e8:cf:95:99:43: 19:ea:bd:ac:c3:fd:3a:4f:61:61:48:b0:6d:6d:b8:2d:0a:ca: d4:0f:9e:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJkGaxemkPVb6gPhWU0PKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQzOTdlMzAyMWJlZmYzYjVmZDMwZGFhYWI2MjUxNGNm YTE2NmIwHhcNMjUxMjEyMDYwMTE4WhcNMjUxMjEzMDYwMTE4WjAzMTEwLwYDVQQD EygzZTIzMjFjNzhmYTk4ZjBiYTM3NTE2ZmFlOTAxZDNjNDc1NjNkYTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH+AmRAKzr9F0hlfhs9J+ZYjtcXs NlpBJlx7u7vo+bBNrFOuK/V0gPXTfb/WwD/F7qHyrh73BKkTm0xEBTcybmywcKL/ e9ghd1FHAfGni8KyE0F0Kg2ynLnWUVUA8RShgXLNLDHY9nre6B0I/q203I0ZNTFT J58EwRhSvUriuAi54NNmkdZ0wctAauWPdylY4Hu+tkTCJBaA40xHH8qXkGLPFkhe 790X62o3oALXHXXKIMeAra8xg2MsLr5vTRnn8HtedIDvKhMzUMV2kVkS8EG4DeJG xs9lhzUmd0VfJXRKT6+hPmD3l542d2b1sMDIDCxzxVPwpD9DOWptURNcnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4jIcePqY8Lo3UW+ukB08R1Y9oYMB8GA1UdIwQY MBaAFE8UOX4wIb7/O1/TDaqrYlFM+hZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRNWZqQWh2djg3WDlNTnFxdGlVVXo2Rm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZWVkNmMtZmI1YS00ODAyLWFlNTAt YTJmNzI4YmRjMjc1LzEvVHhRNWZqQWh2djg3WDlNTnFxdGlVVXo2Rm1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZWVkNmMtZmI1YS00ODAyLWFlNTAtYTJmNzI4YmRjMjc1 LzEvVHhRNWZqQWh2djg3WDlNTnFxdGlVVXo2Rm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfBzVgipr mYHrYQfxe9w+RRbY7LlrUiYqs63MmoiQzAliWY6bLv9j8gTiyzvG15HQZH5dXJmx ToltzoJ7YI8wkkFAPxuZpZrYuJ/ioe2C4YaMyQrehW0+iWUFNyjckfHMxkgNNiTJ q34NNadOSYRhcwyu9NT+rEj/k58Yjmz1eNZ2MjAbHvedEiAnQHPF190hlGAqQIdH szm0h4YnXC2bw9tbxde6zFcSC+0O8Rj2cqkhzgZmgWToqeSxyXB6Y+mGanltqP5S Xb//rK2wu0ZTDvDaBYIDog0QLzS+zVA1UDlNqRAJh+jPlZlDGeq9rMP9Ok9hYUiw bW24LQrK1A+eSg== -----END CERTIFICATE-----Generated at Fri Dec 12 08:46:27 2025 by rpki-client