This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft File: txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json) Hash identifier: IkLqcntLC6eum5/HsINL8c91ci3ivaDaoCzYM0DHnNY= Subject key identifier: 25:75:68:98:0B:5A:0B:75:10:70:A2:72:25:BD:0B:CE:DF:A5:1A:6E Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7 Certificate issuer: /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7 Certificate serial: 019B4DE055F6E5D90D7567450770C1D5A101 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft Manifest number: 178F Signing time: Wed 24 Dec 2025 01:01:46 +0000 Manifest this update: Wed 24 Dec 2025 01:01:46 +0000 Manifest next update: Thu 25 Dec 2025 01:01:46 +0000 Files and hashes: 1: 6x14Tr1KvbGHug5B88Kt5ILNIuQ.roa (hash: TGutJ2mIJk6NG98vs/RUqYq5wAmvywBgw3u1JfM1+58=) 2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: 8MEuFG8hdiT2mdqBEjbo0KPEdL4UW8WB+PvRzB7dTUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:55:f6:e5:d9:0d:75:67:45:07:70:c1:d5:a1:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7 Validity Not Before: Dec 24 01:01:46 2025 GMT Not After : Dec 25 01:01:46 2025 GMT Subject: CN=257568980b5a0b751070a27225bd0bcedfa51a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:3d:95:83:3a:e7:5c:00:3b:ef:f6:93:23:d3: 17:9c:2d:48:d8:14:ce:b0:81:dd:db:ee:32:01:56: 45:a8:73:75:84:23:5e:85:cb:5a:6e:0e:c5:1f:f7: 27:18:f2:7a:d4:d4:13:cb:1d:cc:a9:a7:39:a3:fd: e9:7d:90:10:9b:4d:f0:83:38:8f:4d:d3:9e:30:6b: 36:3a:20:36:73:a2:6d:55:5c:0f:ed:e0:4c:14:da: 0f:b7:07:5c:0f:02:bc:8e:ab:b1:99:c5:ac:76:26: d3:0f:e6:0e:14:fe:b8:37:4e:44:82:ce:fa:a0:07: 9c:bc:0e:10:0a:fe:eb:6c:67:ff:71:60:20:ba:60: 6d:5a:e3:38:44:b4:07:3c:a0:95:92:a9:86:81:d0: 7b:4c:e6:2d:43:99:7b:e7:da:4e:be:ed:6d:aa:68: c5:d8:4f:da:e9:ae:ac:06:2a:dd:2f:f1:e0:a9:77: 2d:fe:03:3e:3d:da:78:22:cb:e7:62:83:8c:b7:32: 95:f9:53:ab:be:aa:36:50:3d:1f:c8:42:d8:26:fc: 6b:15:6d:49:e2:46:78:5e:aa:62:91:4e:57:be:79: 38:bb:62:98:d7:88:43:7c:44:74:e5:d8:71:b9:7a: 17:16:4a:0e:0f:ef:da:d3:27:2c:d0:83:5c:ae:c8: de:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:75:68:98:0B:5A:0B:75:10:70:A2:72:25:BD:0B:CE:DF:A5:1A:6E X509v3 Authority Key Identifier: keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:d5:20:5e:86:9f:2f:e0:e7:fd:3d:b9:b6:e6:f1:d0:92:ad: 01:cb:37:30:03:0a:54:d6:57:42:32:d8:6c:77:76:f2:b9:16: 3b:b7:92:cc:d1:9e:21:4d:e0:d0:af:69:e2:c8:be:85:24:00: 68:1d:ed:33:3f:71:85:b2:98:12:e6:4b:35:1c:af:9a:f9:16: 41:23:73:a3:e1:1d:e8:10:39:d6:16:9b:0b:bf:68:a0:2c:44: 9e:2f:15:a9:45:73:12:ee:c7:3b:92:c3:be:d9:15:92:c3:44: b5:a6:d8:9b:3f:b6:45:d8:ee:cd:85:bb:65:32:0d:d5:2b:f6: 1e:eb:46:ca:58:14:67:02:75:bb:44:3c:9c:a3:eb:ff:c9:9c: f4:07:58:d1:b6:ef:bc:1e:75:b8:81:e2:96:be:33:a2:83:ae: c0:3c:30:bd:57:4c:80:6a:a5:f5:49:00:dd:85:e8:c7:a7:d2: a1:a2:95:8a:e6:a8:44:36:7d:e1:63:74:82:70:a7:3f:b0:e4: 53:a6:55:a4:91:b3:5c:57:7f:fb:a0:41:82:14:d6:b8:e0:f3: 70:d8:5e:a4:2a:19:a5:f9:ee:43:a1:d7:47:38:c1:4a:01:6d: cd:7d:9e:22:84:ea:6f:81:ca:20:6b:b6:ca:f1:72:b0:46:56: 45:a6:e9:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4FX25dkNdWdFB3DB1aEBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTBjZDQ0NzFhM2Y4Y2RjZDg0NGQzZjM2NjE0ODk0MDk1 MmI0ZTcwHhcNMjUxMjI0MDEwMTQ2WhcNMjUxMjI1MDEwMTQ2WjAzMTEwLwYDVQQD EygyNTc1Njg5ODBiNWEwYjc1MTA3MGEyNzIyNWJkMGJjZWRmYTUxYTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgT2VgzrnXAA77/aTI9MXnC1I2BTO sIHd2+4yAVZFqHN1hCNehctabg7FH/cnGPJ61NQTyx3Mqac5o/3pfZAQm03wgziP TdOeMGs2OiA2c6JtVVwP7eBMFNoPtwdcDwK8jquxmcWsdibTD+YOFP64N05Egs76 oAecvA4QCv7rbGf/cWAgumBtWuM4RLQHPKCVkqmGgdB7TOYtQ5l759pOvu1tqmjF 2E/a6a6sBirdL/HgqXct/gM+Pdp4IsvnYoOMtzKV+VOrvqo2UD0fyELYJvxrFW1J 4kZ4XqpikU5Xvnk4u2KY14hDfER05dhxuXoXFkoOD+/a0ycs0INcrsjetwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCV1aJgLWgt1EHCiciW9C87fpRpuMB8GA1UdIwQY MBaAFLcQzURxo/jNzYRNPzZhSJQJUrTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MjY4ZGQtNTZlZS00YjlhLTgwNTAt MjMyZmJkYWY1YzFhLzEvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81MjY4ZGQtNTZlZS00YjlhLTgwNTAtMjMyZmJkYWY1YzFh LzEvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARNUgXoaf L+Dn/T25tubx0JKtAcs3MAMKVNZXQjLYbHd28rkWO7eSzNGeIU3g0K9p4si+hSQA aB3tMz9xhbKYEuZLNRyvmvkWQSNzo+Ed6BA51habC79ooCxEni8VqUVzEu7HO5LD vtkVksNEtabYmz+2RdjuzYW7ZTIN1Sv2HutGylgUZwJ1u0Q8nKPr/8mc9AdY0bbv vB51uIHilr4zooOuwDwwvVdMgGql9UkA3YXox6fSoaKViuaoRDZ94WN0gnCnP7Dk U6ZVpJGzXFd/+6BBghTWuODzcNhepCoZpfnuQ6HXRzjBSgFtzX2eIoTqb4HKIGu2 yvFysEZWRabpuA== -----END CERTIFICATE-----Generated at Wed Dec 24 04:45:12 2025 by rpki-client