This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft File: txKyWiME97pEw40Dld3y7QT1x-8.mft (raw, json) Hash identifier: Nk0ugKyRKCJ72C+LXsaGQclTvNA7yeS/is9mr0Aq6YI= Subject key identifier: C9:52:0A:E0:24:80:CF:A0:76:76:BB:62:D6:F4:E8:00:44:EB:91:C0 Authority key identifier: B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF Certificate issuer: /CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef Certificate serial: 019B3FB6447DA6A8844581E092D8004B7814 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 07:01:08 +0000 Manifest this update: Sun 21 Dec 2025 07:01:08 +0000 Manifest next update: Mon 22 Dec 2025 07:01:08 +0000 Files and hashes: 1: RachvBT8K5RrKxFdgA0E6V8Tpkk.roa (hash: vHi3hayejwDoniD0Pthlstu8q6vyCTap1RFSLihvYco=) 2: txKyWiME97pEw40Dld3y7QT1x-8.crl (hash: tg3yehl/WDpWCoHzmf3bJBPyps3oiwYDU5dyQfEgcqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:44:7d:a6:a8:84:45:81:e0:92:d8:00:4b:78:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b712b25a2304f7ba44c38d0395ddf2ed04f5c7ef Validity Not Before: Dec 21 07:01:08 2025 GMT Not After : Dec 22 07:01:08 2025 GMT Subject: CN=c9520ae02480cfa07676bb62d6f4e80044eb91c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:27:4e:4d:dd:33:bb:0c:9c:1c:2b:dc:87:49: 1c:ef:cf:31:b2:4f:68:68:b6:c9:42:b6:76:e0:22: 49:a3:29:37:4a:a6:c3:d9:12:da:d2:8e:f7:c6:62: 42:37:b7:5a:34:61:2c:fb:60:58:94:45:c5:3f:fa: 9c:00:48:54:79:b4:02:c6:c5:b4:80:84:c4:8a:55: f8:08:d3:29:7e:c2:4d:2b:6e:da:03:cd:2c:c3:1d: c7:32:0b:c3:4f:4d:fa:63:22:b8:ca:04:5a:a7:4d: f6:16:45:1b:fd:c7:43:8e:e0:5a:65:8f:57:15:de: bf:69:02:1b:4e:6b:53:96:5b:f0:db:ab:32:37:16: 46:73:d9:01:ab:fb:e0:a1:38:8c:18:c9:e4:44:27: 86:56:f9:14:85:5e:a0:f5:1d:a2:68:85:17:ce:b2: 0a:47:87:31:03:ee:8b:91:10:4b:c2:c8:06:c5:f1: b0:5d:e2:b5:d8:02:b1:1c:b4:2a:36:59:f9:09:3c: 55:4b:72:db:47:e0:e0:93:72:a8:7c:c9:ff:63:ef: 15:9f:22:41:68:97:4c:3e:b4:bd:cb:86:2f:e4:eb: 90:72:2f:74:3c:23:d9:ee:84:92:e9:f3:fe:53:ec: 33:89:21:5b:ad:4e:5d:25:33:27:cf:77:62:97:6b: d4:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:52:0A:E0:24:80:CF:A0:76:76:BB:62:D6:F4:E8:00:44:EB:91:C0 X509v3 Authority Key Identifier: keyid:B7:12:B2:5A:23:04:F7:BA:44:C3:8D:03:95:DD:F2:ED:04:F5:C7:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txKyWiME97pEw40Dld3y7QT1x-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9aeae7-df10-40a7-b933-081cb7cb88f3/1/txKyWiME97pEw40Dld3y7QT1x-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:00:91:bb:30:1f:99:5e:0a:87:07:d3:24:db:ee:ed:4e:a2: 62:2a:53:29:a5:47:ca:0a:84:41:53:59:36:45:7c:1d:fe:11: cd:1a:58:fe:f2:99:fc:f9:1e:29:d6:01:6f:40:6a:58:40:95: 86:3b:72:36:b7:4d:94:54:57:ac:53:7a:d8:97:53:9f:f5:69: ca:28:83:f1:26:0d:67:1a:c0:aa:3b:eb:1c:57:9f:e4:38:56: 90:f4:49:13:29:ae:6f:aa:47:c4:6c:8b:cf:40:7a:84:02:ed: df:44:0d:e6:34:32:85:f2:45:3c:82:e7:09:35:1e:eb:ec:b5: 70:da:b9:d7:57:15:bb:ca:fe:c2:5e:c4:4a:f7:41:54:06:a9: 9a:3b:97:d0:4f:45:20:d6:c6:64:2b:ee:4c:50:37:f1:4e:c9: fa:65:bf:a4:20:de:39:c4:78:d1:73:71:3f:91:08:02:8b:91: b4:a7:c9:49:31:78:7f:71:3d:8a:bb:02:6a:29:7f:de:ee:54: 63:3b:67:43:09:b5:87:4f:ca:68:a8:7a:8d:ad:2c:9b:84:b1: 18:ba:9b:79:fb:be:1d:5e:0d:aa:7c:37:f3:08:f9:74:07:af: 30:56:b1:7d:a4:2b:d2:20:dd:2a:84:3f:89:54:95:92:19:89: 06:52:18:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tkR9pqiERYHgktgAS3gUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTJiMjVhMjMwNGY3YmE0NGMzOGQwMzk1ZGRmMmVkMDRm NWM3ZWYwHhcNMjUxMjIxMDcwMTA4WhcNMjUxMjIyMDcwMTA4WjAzMTEwLwYDVQQD EyhjOTUyMGFlMDI0ODBjZmEwNzY3NmJiNjJkNmY0ZTgwMDQ0ZWI5MWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SdOTd0zuwycHCvch0kc788xsk9o aLbJQrZ24CJJoyk3SqbD2RLa0o73xmJCN7daNGEs+2BYlEXFP/qcAEhUebQCxsW0 gITEilX4CNMpfsJNK27aA80swx3HMgvDT036YyK4ygRap032FkUb/cdDjuBaZY9X Fd6/aQIbTmtTllvw26syNxZGc9kBq/vgoTiMGMnkRCeGVvkUhV6g9R2iaIUXzrIK R4cxA+6LkRBLwsgGxfGwXeK12AKxHLQqNln5CTxVS3LbR+Dgk3KofMn/Y+8VnyJB aJdMPrS9y4Yv5OuQci90PCPZ7oSS6fP+U+wziSFbrU5dJTMnz3dil2vUPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlSCuAkgM+gdna7Ytb06ABE65HAMB8GA1UdIwQY MBaAFLcSslojBPe6RMONA5Xd8u0E9cfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhLeVdpTUU5N3BFdzQwRGxkM3k3UVQxeC04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85YWVhZTctZGYxMC00MGE3LWI5MzMt MDgxY2I3Y2I4OGYzLzEvdHhLeVdpTUU5N3BFdzQwRGxkM3k3UVQxeC04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi85YWVhZTctZGYxMC00MGE3LWI5MzMtMDgxY2I3Y2I4OGYz LzEvdHhLeVdpTUU5N3BFdzQwRGxkM3k3UVQxeC04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPwCRuzAf mV4KhwfTJNvu7U6iYipTKaVHygqEQVNZNkV8Hf4RzRpY/vKZ/PkeKdYBb0BqWECV hjtyNrdNlFRXrFN62JdTn/VpyiiD8SYNZxrAqjvrHFef5DhWkPRJEymub6pHxGyL z0B6hALt30QN5jQyhfJFPILnCTUe6+y1cNq511cVu8r+wl7ESvdBVAapmjuX0E9F INbGZCvuTFA38U7J+mW/pCDeOcR40XNxP5EIAouRtKfJSTF4f3E9irsCail/3u5U YztnQwm1h0/KaKh6ja0sm4SxGLqbefu+HV4Nqnw38wj5dAevMFaxfaQr0iDdKoQ/ iVSVkhmJBlIYTQ== -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:57 2025 by rpki-client