This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft File: Tx097mN940sTx0umz7TSBb5VYn4.mft (raw, json) Hash identifier: 7BdMeStW/s+LUhtgkbLU73HaOPOvat12DbDrjQ9KizM= Subject key identifier: 57:C5:69:94:C5:85:29:5A:A0:23:08:B9:47:B5:4F:D7:7C:71:40:DB Authority key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E Certificate issuer: /CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e Certificate serial: 019B5A51855C338FC0EAA5AFA407FFC4D354 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft Manifest number: 1793 Signing time: Fri 26 Dec 2025 11:00:50 +0000 Manifest this update: Fri 26 Dec 2025 11:00:50 +0000 Manifest next update: Sat 27 Dec 2025 11:00:50 +0000 Files and hashes: 1: Tx097mN940sTx0umz7TSBb5VYn4.crl (hash: /1t0LWpRZ4uoJfhQwgZjkZj62ODUmiusFoHoEsJMaH4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:85:5c:33:8f:c0:ea:a5:af:a4:07:ff:c4:d3:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e Validity Not Before: Dec 26 11:00:50 2025 GMT Not After : Dec 27 11:00:50 2025 GMT Subject: CN=57c56994c585295aa02308b947b54fd77c7140db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:01:44:00:56:57:a3:3b:7c:c2:1b:d2:29:44: d9:a5:3d:7c:71:10:65:b9:fd:78:1d:41:9a:fd:e7: d4:01:12:00:3f:25:44:58:2c:f6:3f:e6:66:89:6d: d0:11:a9:7d:57:a2:f0:b6:c1:37:b0:45:f3:a8:09: 3d:73:dd:3e:12:e2:55:79:a0:31:ae:c5:f0:33:d4: d3:b2:43:bb:be:ce:1d:cb:bf:44:5f:b5:a6:4f:ea: 77:3b:d8:ff:9e:98:16:87:67:5b:1e:cc:87:85:5c: 8a:5e:c7:03:84:16:ea:28:5c:98:4e:e0:cc:3f:42: 57:28:0f:47:6a:ac:43:6b:a9:4e:fa:6a:ea:ef:3b: fc:9b:52:bd:6a:f8:d2:67:dd:ee:28:46:0b:55:25: ac:bc:2a:89:f5:6b:89:65:91:ae:06:fd:01:5c:28: ff:62:6a:21:ce:b8:ae:3f:18:5b:87:e5:00:cb:47: 61:64:69:87:06:43:fd:0b:99:02:6e:15:b6:0f:51: 66:6a:d8:e0:4e:9e:45:f9:27:bb:72:32:b3:dc:8a: 4e:60:5c:5d:83:fd:4a:d1:e1:36:c9:ef:fb:23:c6: 85:8e:6a:16:98:78:11:b9:b5:a4:c3:a8:15:47:41: 12:c4:db:28:cf:46:50:5b:d8:fc:bb:aa:44:1f:07: d1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C5:69:94:C5:85:29:5A:A0:23:08:B9:47:B5:4F:D7:7C:71:40:DB X509v3 Authority Key Identifier: keyid:4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:09:fb:4e:8c:4f:0b:39:2a:49:9c:14:f5:a2:46:4b:6b:94: e6:05:97:0c:1b:d1:ed:0d:04:a9:b7:9c:23:05:3f:e3:46:e1: 36:59:ad:0b:7b:00:3e:12:85:42:68:4d:16:ac:11:a7:8d:cd: 6c:e6:e4:10:fb:ba:38:1c:49:b8:b3:61:87:87:b8:6b:ef:45: 01:f2:48:2b:11:75:9f:8c:f0:ea:d4:4b:35:98:19:cf:bd:ec: 16:99:4d:40:0b:29:c2:a1:df:a3:4f:5d:9b:51:72:23:40:14: 78:3d:56:12:77:82:0e:fa:1a:61:13:2e:05:da:78:c1:ca:05: f8:f9:a9:2c:ef:8f:bf:57:b6:58:85:31:b9:35:7a:8e:d4:8f: df:74:7d:d3:ce:ee:34:1d:ff:a8:47:66:fc:92:ca:6d:c5:d2: 59:d7:13:2a:69:c4:b0:61:c4:b1:81:33:51:a6:a1:a9:37:a9: 61:2e:87:3d:8c:10:99:68:8c:63:df:76:55:f5:54:5f:a1:c7: 51:4b:6c:4c:df:11:da:65:3f:db:ab:87:26:c7:3a:74:dd:c3: d9:ce:23:ec:6a:02:ae:a8:2d:4f:5c:04:e2:1b:6e:f3:55:69: bf:81:d2:1f:ec:55:e8:ce:c7:05:65:6a:f5:98:21:38:11:a1: 32:57:af:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUYVcM4/A6qWvpAf/xNNUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWQzZGVlNjM3ZGUzNGIxM2M3NGJhNmNmYjRkMjA1YmU1 NTYyN2UwHhcNMjUxMjI2MTEwMDUwWhcNMjUxMjI3MTEwMDUwWjAzMTEwLwYDVQQD Eyg1N2M1Njk5NGM1ODUyOTVhYTAyMzA4Yjk0N2I1NGZkNzdjNzE0MGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQFEAFZXozt8whvSKUTZpT18cRBl uf14HUGa/efUARIAPyVEWCz2P+ZmiW3QEal9V6LwtsE3sEXzqAk9c90+EuJVeaAx rsXwM9TTskO7vs4dy79EX7WmT+p3O9j/npgWh2dbHsyHhVyKXscDhBbqKFyYTuDM P0JXKA9HaqxDa6lO+mrq7zv8m1K9avjSZ93uKEYLVSWsvCqJ9WuJZZGuBv0BXCj/ YmohzriuPxhbh+UAy0dhZGmHBkP9C5kCbhW2D1FmatjgTp5F+Se7cjKz3IpOYFxd g/1K0eE2ye/7I8aFjmoWmHgRubWkw6gVR0ESxNsoz0ZQW9j8u6pEHwfRHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfFaZTFhSlaoCMIuUe1T9d8cUDbMB8GA1UdIwQY MBaAFE8dPe5jfeNLE8dLps+00gW+VWJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHgwOTdtTjk0MHNUeDB1bXo3VFNCYjVWWW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMWFkZjUtNzY0Mi00ZTkwLWEwN2Ut MWYxYjI0MTE4ZDg1LzEvVHgwOTdtTjk0MHNUeDB1bXo3VFNCYjVWWW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMWFkZjUtNzY0Mi00ZTkwLWEwN2UtMWYxYjI0MTE4ZDg1 LzEvVHgwOTdtTjk0MHNUeDB1bXo3VFNCYjVWWW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgn7ToxP CzkqSZwU9aJGS2uU5gWXDBvR7Q0EqbecIwU/40bhNlmtC3sAPhKFQmhNFqwRp43N bObkEPu6OBxJuLNhh4e4a+9FAfJIKxF1n4zw6tRLNZgZz73sFplNQAspwqHfo09d m1FyI0AUeD1WEneCDvoaYRMuBdp4wcoF+PmpLO+Pv1e2WIUxuTV6jtSP33R9087u NB3/qEdm/JLKbcXSWdcTKmnEsGHEsYEzUaahqTepYS6HPYwQmWiMY992VfVUX6HH UUtsTN8R2mU/26uHJsc6dN3D2c4j7GoCrqgtT1wE4htu81Vpv4HSH+xV6M7HBWVq 9ZghOBGhMlevKg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:47 2025 by rpki-client