This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft File: TxSbhH0xKT9wHhz5ndjKDruwtb0.mft (raw, json) Hash identifier: 201pDquyYeNpTF5yNPoggcnntY8HgAhSx+HSghUssf8= Subject key identifier: D8:BD:E8:D1:32:C0:2E:69:49:33:38:5B:FC:80:B5:4D:BE:5A:1B:0B Authority key identifier: 4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD Certificate issuer: /CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd Certificate serial: 019B52CF285F843F0227D62FB1536D42FDDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft Manifest number: 10F2 Signing time: Thu 25 Dec 2025 00:01:06 +0000 Manifest this update: Thu 25 Dec 2025 00:01:06 +0000 Manifest next update: Fri 26 Dec 2025 00:01:06 +0000 Files and hashes: 1: 1-8PWi0SMDd437wmtrPXDU2L2y8.roa (hash: lqjj+2Pg6NE1AKwkB32aM31VK1YKbfIzkQX1Na8VNyo=) 2: J1zgEgJNOK21C_O4-pZ4EqzLmWM.roa (hash: YSC7a3+VBBEQHWDb44/eZIaulrvqLsD1OGkXr3ZMN04=) 3: TxSbhH0xKT9wHhz5ndjKDruwtb0.crl (hash: nDPB7051ex4tM5A1S1KGJP0zFHJ0yDqlfw9FRknEC+o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:cf:28:5f:84:3f:02:27:d6:2f:b1:53:6d:42:fd:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f149b847d31293f701e1cf99dd8ca0ebbb0b5bd Validity Not Before: Dec 25 00:01:06 2025 GMT Not After : Dec 26 00:01:06 2025 GMT Subject: CN=d8bde8d132c02e694933385bfc80b54dbe5a1b0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d7:e6:f5:d5:a3:28:ee:a2:e0:cd:91:d9:62: c7:70:40:62:77:c4:93:85:2d:ad:a7:86:0c:98:d6: b6:d9:3d:f4:65:1e:28:74:7b:6a:6c:a3:a8:a1:73: d5:b1:c7:b2:f6:4b:09:17:34:10:46:dd:4c:cd:8d: ea:46:e2:a9:ef:12:61:24:7a:19:8f:26:b7:2b:85: d4:8a:27:b0:7a:9e:b6:5f:c5:b1:52:dd:62:69:02: 48:6c:0d:af:36:01:6c:14:32:0b:5c:04:b5:4d:f7: 6a:c6:6b:85:05:e9:bb:78:2a:71:27:ec:ce:12:b5: a8:4b:e1:e2:bc:e1:2c:67:1d:da:3f:a9:64:78:d7: 5e:ce:2a:f5:40:75:12:1f:ee:d1:76:5d:51:07:a2: 5f:d2:dd:2f:d2:9c:ea:e0:49:17:09:43:5e:34:ae: c6:88:93:78:96:d2:14:a2:04:53:de:8f:f7:79:ba: 8a:6a:e5:e9:df:f1:16:a3:17:a8:7f:4d:f0:2b:f0: 20:74:6f:76:bf:7e:e1:ef:5e:25:d5:dc:af:dd:23: fe:f9:fd:4a:b8:b4:39:c0:03:14:f1:0d:61:0e:9c: c3:36:92:d1:73:b1:a9:8f:a2:ab:b0:cd:a0:c8:0e: 3e:69:f0:54:6f:83:d4:6e:d9:97:31:5a:3b:f2:67: 53:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BD:E8:D1:32:C0:2E:69:49:33:38:5B:FC:80:B5:4D:BE:5A:1B:0B X509v3 Authority Key Identifier: keyid:4F:14:9B:84:7D:31:29:3F:70:1E:1C:F9:9D:D8:CA:0E:BB:B0:B5:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxSbhH0xKT9wHhz5ndjKDruwtb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/731f82-b18f-4d5c-b122-452badfd5a6d/1/TxSbhH0xKT9wHhz5ndjKDruwtb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:aa:02:00:cf:1e:9d:e6:ba:6a:92:c8:77:61:97:3f:0f:43: 42:3e:07:a2:0d:11:e1:04:46:34:a4:e1:61:3c:ab:b4:44:3f: 0d:a4:65:7d:55:c7:a6:4a:44:e1:b5:5b:25:eb:10:86:9d:70: d0:a0:a7:3b:ef:19:da:33:32:de:25:f6:d7:57:5a:1b:93:f5: 23:4a:d9:46:83:a7:90:31:68:19:25:07:ba:32:a7:8b:52:0d: 7b:28:fc:89:be:55:30:72:4f:01:6e:98:3c:de:1b:fc:f6:18: 02:3e:a0:db:4f:e5:09:86:2e:15:0d:5e:69:65:f3:74:80:6b: 39:c5:9e:3a:cb:f2:cf:aa:57:a0:19:ea:c4:a4:59:0c:27:2f: 43:66:95:33:6c:3b:81:88:96:62:4c:8c:a8:e5:fd:3b:dc:d3: e5:00:ea:64:37:f2:2b:14:c0:f0:25:5c:76:6f:bb:7c:08:4e: 09:f1:1e:08:32:60:98:e8:ba:ef:32:35:a8:4d:72:ce:5a:cc: c6:d8:66:62:9a:8f:3c:cb:7b:de:8c:b3:56:58:0d:38:3f:aa: 5b:4b:5e:42:2c:04:99:99:24:60:92:75:77:52:3f:eb:19:65: 82:9d:01:f6:f8:0e:2a:fa:82:97:09:b4:79:cc:4b:e3:9d:35: 3b:75:7f:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzyhfhD8CJ9YvsVNtQv3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQ5Yjg0N2QzMTI5M2Y3MDFlMWNmOTlkZDhjYTBlYmJi MGI1YmQwHhcNMjUxMjI1MDAwMTA2WhcNMjUxMjI2MDAwMTA2WjAzMTEwLwYDVQQD EyhkOGJkZThkMTMyYzAyZTY5NDkzMzM4NWJmYzgwYjU0ZGJlNWExYjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNfm9dWjKO6i4M2R2WLHcEBid8ST hS2tp4YMmNa22T30ZR4odHtqbKOooXPVscey9ksJFzQQRt1MzY3qRuKp7xJhJHoZ jya3K4XUiiewep62X8WxUt1iaQJIbA2vNgFsFDILXAS1TfdqxmuFBem7eCpxJ+zO ErWoS+HivOEsZx3aP6lkeNdezir1QHUSH+7Rdl1RB6Jf0t0v0pzq4EkXCUNeNK7G iJN4ltIUogRT3o/3ebqKauXp3/EWoxeof03wK/AgdG92v37h714l1dyv3SP++f1K uLQ5wAMU8Q1hDpzDNpLRc7Gpj6KrsM2gyA4+afBUb4PUbtmXMVo78mdT5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNi96NEywC5pSTM4W/yAtU2+WhsLMB8GA1UdIwQY MBaAFE8Um4R9MSk/cB4c+Z3Yyg67sLW9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83MzFmODItYjE4Zi00ZDVjLWIxMjIt NDUyYmFkZmQ1YTZkLzEvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy83MzFmODItYjE4Zi00ZDVjLWIxMjItNDUyYmFkZmQ1YTZk LzEvVHhTYmhIMHhLVDl3SGh6NW5kaktEcnV3dGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABqoCAM8e nea6apLId2GXPw9DQj4Hog0R4QRGNKThYTyrtEQ/DaRlfVXHpkpE4bVbJesQhp1w 0KCnO+8Z2jMy3iX211daG5P1I0rZRoOnkDFoGSUHujKni1INeyj8ib5VMHJPAW6Y PN4b/PYYAj6g20/lCYYuFQ1eaWXzdIBrOcWeOsvyz6pXoBnqxKRZDCcvQ2aVM2w7 gYiWYkyMqOX9O9zT5QDqZDfyKxTA8CVcdm+7fAhOCfEeCDJgmOi67zI1qE1yzlrM xthmYpqPPMt73oyzVlgNOD+qW0teQiwEmZkkYJJ1d1I/6xllgp0B9vgOKvqClwm0 ecxL4501O3V/qw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:00:30 2025 by rpki-client