This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft File: TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft (raw, json) Hash identifier: 7xts9kBu9tHZ/1xSeP0dslklp5URLShbALicV1AzJM0= Subject key identifier: 03:AF:01:4F:BD:22:1C:EB:BA:A2:92:7F:73:42:BF:7D:B7:C3:5A:E5 Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B Certificate issuer: /CN=4f14397e3021beff3b5fd30daaab62514cfa166b Certificate serial: 019B37C5610506EA3F102BFB8BE99216DC80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft Manifest number: 1785 Signing time: Fri 19 Dec 2025 18:00:40 +0000 Manifest this update: Fri 19 Dec 2025 18:00:40 +0000 Manifest next update: Sat 20 Dec 2025 18:00:40 +0000 Files and hashes: 1: TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl (hash: zm1C2yPyqrGDml8IfSxUs/5ZglSXGAjKAkO/OJWJS0A=) 2: _QkywIQ5MYjLQgAq3HIEi0yS3ts.roa (hash: XOazSSRb7RPjyPPcCQsskJ3rE/egTw8zpZ2LPq6cndM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:61:05:06:ea:3f:10:2b:fb:8b:e9:92:16:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b Validity Not Before: Dec 19 18:00:40 2025 GMT Not After : Dec 20 18:00:40 2025 GMT Subject: CN=03af014fbd221cebbaa2927f7342bf7db7c35ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5a:82:f9:e1:b6:ec:5f:06:7b:41:f8:f9:f5: d0:ea:47:22:bc:74:1c:c9:52:b6:c2:51:23:83:be: cb:5c:65:e5:35:2a:70:35:dd:4b:ac:0c:30:a9:59: c9:b2:0f:67:3e:f1:bf:1f:57:bc:33:47:3b:81:d4: 02:9d:eb:36:a5:57:80:b4:00:bf:8e:8a:06:0b:9c: 3d:cb:d4:35:73:cc:95:1c:fc:73:bc:4c:07:a8:07: 8b:97:47:20:9d:bd:04:41:74:2d:b8:1e:18:d1:d1: cf:53:43:08:31:68:e2:c8:d0:96:f9:67:a5:dc:12: 6c:e5:cf:ec:c4:2b:32:41:cc:5c:8e:a5:b2:4f:94: 94:ba:df:b4:7f:ed:60:28:1f:89:30:e3:ed:fb:b7: 5b:c3:fa:1c:1e:89:b8:66:fe:b7:b1:3c:66:29:9f: bd:a9:25:e3:11:4c:a5:14:0c:3b:e3:36:bd:dd:c8: 1e:73:ae:e5:a2:77:1e:d5:c5:9e:26:59:09:96:79: 38:92:14:68:6c:39:09:00:61:bf:e3:8f:ba:5d:67: ce:fa:f1:92:8a:6d:a4:63:c4:f0:c2:cb:f1:1e:ef: eb:54:9a:21:2c:34:5c:ed:b4:6c:4c:22:09:dc:13: fb:80:95:10:61:8b:7a:3a:a7:a2:08:a1:ad:0f:0f: 5e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:AF:01:4F:BD:22:1C:EB:BA:A2:92:7F:73:42:BF:7D:B7:C3:5A:E5 X509v3 Authority Key Identifier: keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:82:01:a6:fb:c0:8a:09:d9:23:7d:2c:ec:ad:d4:cb:c8:73: 8e:ae:80:27:9f:9e:05:45:e2:a5:49:a8:90:b7:a5:95:3f:59: 7c:03:ce:78:35:6e:e7:81:5a:8d:db:68:71:57:47:8e:13:ad: 07:eb:19:5a:e6:e6:b4:31:92:d0:e1:dd:9c:37:d1:62:9f:e7: ec:e9:b7:03:2d:95:d1:00:fd:d3:d7:e9:81:ba:73:a0:28:47: 12:f5:d5:82:fe:a1:b2:a3:f1:e0:aa:fe:ec:25:f1:f8:d6:ca: 1b:8b:93:0f:f6:b2:c7:12:25:e8:04:04:fc:3c:bb:e0:09:6e: e1:f1:88:1f:6e:9b:72:f0:6b:ce:35:56:07:4d:fc:f7:b7:66: 30:e6:dc:49:9d:86:f0:b4:56:3f:ee:c1:45:11:82:0c:07:8f: 93:ef:e9:1f:04:b8:07:cc:c1:82:66:c2:dd:60:d6:b5:fa:fa: 9d:92:a8:4a:17:bb:c3:7c:55:fe:54:9c:2d:9b:6b:41:20:b0: b3:06:83:74:d3:44:87:43:b3:be:ab:b9:c7:01:ad:eb:7c:a3: e3:b4:bf:6a:0a:98:96:29:a4:29:01:51:6b:5d:82:2c:d9:c9: b2:33:7a:79:51:56:6f:db:ed:3e:7a:41:ec:b0:a2:c0:5a:e7: 6c:45:6a:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xWEFBuo/ECv7i+mSFtyAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQzOTdlMzAyMWJlZmYzYjVmZDMwZGFhYWI2MjUxNGNm YTE2NmIwHhcNMjUxMjE5MTgwMDQwWhcNMjUxMjIwMTgwMDQwWjAzMTEwLwYDVQQD EygwM2FmMDE0ZmJkMjIxY2ViYmFhMjkyN2Y3MzQyYmY3ZGI3YzM1YWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VqC+eG27F8Ge0H4+fXQ6kcivHQc yVK2wlEjg77LXGXlNSpwNd1LrAwwqVnJsg9nPvG/H1e8M0c7gdQCnes2pVeAtAC/ jooGC5w9y9Q1c8yVHPxzvEwHqAeLl0cgnb0EQXQtuB4Y0dHPU0MIMWjiyNCW+Wel 3BJs5c/sxCsyQcxcjqWyT5SUut+0f+1gKB+JMOPt+7dbw/ocHom4Zv63sTxmKZ+9 qSXjEUylFAw74za93cgec67lonce1cWeJlkJlnk4khRobDkJAGG/44+6XWfO+vGS im2kY8TwwsvxHu/rVJohLDRc7bRsTCIJ3BP7gJUQYYt6OqeiCKGtDw9esQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAOvAU+9IhzruqKSf3NCv323w1rlMB8GA1UdIwQY MBaAFE8UOX4wIb7/O1/TDaqrYlFM+hZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRNWZqQWh2djg3WDlNTnFxdGlVVXo2Rm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZWVkNmMtZmI1YS00ODAyLWFlNTAt YTJmNzI4YmRjMjc1LzEvVHhRNWZqQWh2djg3WDlNTnFxdGlVVXo2Rm1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZWVkNmMtZmI1YS00ODAyLWFlNTAtYTJmNzI4YmRjMjc1 LzEvVHhRNWZqQWh2djg3WDlNTnFxdGlVVXo2Rm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAYIBpvvA ignZI30s7K3Uy8hzjq6AJ5+eBUXipUmokLellT9ZfAPOeDVu54FajdtocVdHjhOt B+sZWubmtDGS0OHdnDfRYp/n7Om3Ay2V0QD909fpgbpzoChHEvXVgv6hsqPx4Kr+ 7CXx+NbKG4uTD/ayxxIl6AQE/Dy74Alu4fGIH26bcvBrzjVWB03897dmMObcSZ2G 8LRWP+7BRRGCDAePk+/pHwS4B8zBgmbC3WDWtfr6nZKoShe7w3xV/lScLZtrQSCw swaDdNNEh0Ozvqu5xwGt63yj47S/agqYlimkKQFRa12CLNnJsjN6eVFWb9vtPnpB 7LCiwFrnbEVqOw== -----END CERTIFICATE-----Generated at Fri Dec 19 20:29:31 2025 by rpki-client