This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft File: txU9FR23r-6-BDvkXy1v1Af8XdQ.mft (raw, json) Hash identifier: UdT46FeHTW99k5vi8a4y6EQgiI85iBtLzWq0C+B3mY4= Subject key identifier: 20:22:FD:8F:01:16:CC:A2:46:FE:22:05:63:83:F6:DD:72:B3:FC:2A Authority key identifier: B7:15:3D:15:1D:B7:AF:EE:BE:04:3B:E4:5F:2D:6F:D4:07:FC:5D:D4 Certificate issuer: /CN=b7153d151db7afeebe043be45f2d6fd407fc5dd4 Certificate serial: 019B59AD20EE40070F7DFD590D6C22E7665A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txU9FR23r-6-BDvkXy1v1Af8XdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft Manifest number: 8E Signing time: Fri 26 Dec 2025 08:01:16 +0000 Manifest this update: Fri 26 Dec 2025 08:01:16 +0000 Manifest next update: Sat 27 Dec 2025 08:01:16 +0000 Files and hashes: 1: txU9FR23r-6-BDvkXy1v1Af8XdQ.crl (hash: e6Hs44ipw46AVi8uTS3p9pby42asyDnDne2IM0RG+mI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/txU9FR23r-6-BDvkXy1v1Af8XdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 08:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ad:20:ee:40:07:0f:7d:fd:59:0d:6c:22:e7:66:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7153d151db7afeebe043be45f2d6fd407fc5dd4 Validity Not Before: Dec 26 08:01:16 2025 GMT Not After : Dec 27 08:01:16 2025 GMT Subject: CN=2022fd8f0116cca246fe22056383f6dd72b3fc2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:68:a7:0b:9b:ab:1e:46:f2:a1:e5:31:d1: ee:0d:19:9f:30:05:88:9d:e2:7a:09:9a:34:2e:fb: 41:93:9d:25:e9:fb:9f:d8:86:0d:c0:0e:f2:1b:3f: 85:7c:7c:78:50:20:4e:3a:09:5b:e4:e9:34:57:78: 3d:95:5d:ed:42:06:dc:d6:92:eb:e0:cd:5c:07:21: 09:0f:1a:c0:5f:8d:7d:25:b9:20:fc:34:44:c3:7d: 9f:ba:09:71:d4:1b:c5:f5:1b:6a:d2:c2:26:41:f9: b7:06:17:4e:8c:42:29:89:9f:ee:7e:d2:f5:0c:3b: b5:35:93:af:a7:3a:d7:d1:3e:8d:4a:03:6a:e3:68: 9c:4f:e0:d8:ab:12:e6:7e:b8:37:71:2c:7d:23:5b: 44:a4:72:72:33:d3:ba:87:89:60:6a:14:f4:eb:9f: a0:60:80:12:0d:12:b7:df:f5:5b:08:c4:54:6c:c9: 17:73:0f:3a:32:c8:90:83:bc:b8:bf:54:a9:6f:e3: 0f:c0:cf:3b:04:86:20:d5:c1:2c:6d:b9:9c:a7:56: f4:d3:c5:38:ec:e3:43:44:4b:28:f1:13:bc:5a:a1: ad:9c:b9:e9:63:a8:33:ba:66:bf:68:58:a5:a6:55: 13:be:4f:52:09:b8:2d:39:63:37:c2:77:5c:c4:3e: 53:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:22:FD:8F:01:16:CC:A2:46:FE:22:05:63:83:F6:DD:72:B3:FC:2A X509v3 Authority Key Identifier: keyid:B7:15:3D:15:1D:B7:AF:EE:BE:04:3B:E4:5F:2D:6F:D4:07:FC:5D:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txU9FR23r-6-BDvkXy1v1Af8XdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/718c1f-f8c9-4d89-b907-531fb91e383b/1/txU9FR23r-6-BDvkXy1v1Af8XdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:cd:ae:89:e6:eb:07:5e:ed:83:f9:52:1f:0a:ad:f1:07:c3: c5:f6:4a:05:1d:32:b9:c8:73:9f:4e:8e:67:e5:4a:ff:95:6f: 5d:83:3f:0a:f5:40:a0:53:53:5f:9b:9b:76:ac:d5:f4:df:b8: 1e:f2:31:57:30:1b:9e:7e:a9:66:d2:5b:5e:59:db:16:7b:7e: 27:d3:b4:d0:8c:fc:7b:23:64:61:3d:5a:06:99:45:ed:9b:cd: bb:ca:24:fe:e9:fb:8a:4e:e6:60:4c:54:ee:dc:e3:a0:89:86: af:75:7d:06:fd:32:5d:9c:66:2d:95:d9:d8:51:a8:92:d6:ae: a3:e0:24:70:62:58:5f:66:56:c9:22:37:de:c6:ac:83:89:f7: 62:ae:af:c1:3b:65:e6:75:85:bf:a8:63:ed:f2:6d:a3:e9:d6: 2a:05:fe:72:b0:91:42:bf:77:a9:21:0d:9f:c0:8f:f4:28:27: 3e:e3:6d:bf:11:c2:4a:69:70:67:13:84:f1:46:be:5b:20:8c: 94:ec:d2:78:7e:03:0b:8a:b3:ba:09:00:db:fd:41:0d:6e:a3: bb:0e:7a:ae:8c:87:61:05:71:8e:fc:80:f8:67:ff:97:b9:c2: 15:38:b8:70:5f:98:a0:cd:78:8e:ce:51:b3:ec:45:b0:d4:d3: b8:18:2b:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrSDuQAcPff1ZDWwi52ZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTUzZDE1MWRiN2FmZWViZTA0M2JlNDVmMmQ2ZmQ0MDdm YzVkZDQwHhcNMjUxMjI2MDgwMTE2WhcNMjUxMjI3MDgwMTE2WjAzMTEwLwYDVQQD EygyMDIyZmQ4ZjAxMTZjY2EyNDZmZTIyMDU2MzgzZjZkZDcyYjNmYzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyRopwubqx5G8qHlMdHuDRmfMAWI neJ6CZo0LvtBk50l6fuf2IYNwA7yGz+FfHx4UCBOOglb5Ok0V3g9lV3tQgbc1pLr 4M1cByEJDxrAX419Jbkg/DREw32fuglx1BvF9Rtq0sImQfm3BhdOjEIpiZ/uftL1 DDu1NZOvpzrX0T6NSgNq42icT+DYqxLmfrg3cSx9I1tEpHJyM9O6h4lgahT065+g YIASDRK33/VbCMRUbMkXcw86MsiQg7y4v1Spb+MPwM87BIYg1cEsbbmcp1b008U4 7ONDREso8RO8WqGtnLnpY6gzuma/aFilplUTvk9SCbgtOWM3wndcxD5TVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAi/Y8BFsyiRv4iBWOD9t1ys/wqMB8GA1UdIwQY MBaAFLcVPRUdt6/uvgQ75F8tb9QH/F3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhVOUZSMjNyLTYtQkR2a1h5MXYxQWY4WGRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MThjMWYtZjhjOS00ZDg5LWI5MDct NTMxZmI5MWUzODNiLzEvdHhVOUZSMjNyLTYtQkR2a1h5MXYxQWY4WGRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC83MThjMWYtZjhjOS00ZDg5LWI5MDctNTMxZmI5MWUzODNi LzEvdHhVOUZSMjNyLTYtQkR2a1h5MXYxQWY4WGRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVs2uiebr B17tg/lSHwqt8QfDxfZKBR0yuchzn06OZ+VK/5VvXYM/CvVAoFNTX5ubdqzV9N+4 HvIxVzAbnn6pZtJbXlnbFnt+J9O00Iz8eyNkYT1aBplF7ZvNu8ok/un7ik7mYExU 7tzjoImGr3V9Bv0yXZxmLZXZ2FGoktauo+AkcGJYX2ZWySI33sasg4n3Yq6vwTtl 5nWFv6hj7fJto+nWKgX+crCRQr93qSENn8CP9CgnPuNtvxHCSmlwZxOE8Ua+WyCM lOzSeH4DC4qzugkA2/1BDW6juw56royHYQVxjvyA+Gf/l7nCFTi4cF+YoM14js5R s+xFsNTTuBgrRQ== -----END CERTIFICATE-----Generated at Fri Dec 26 17:44:11 2025 by rpki-client