This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft File: tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft (raw, json) Hash identifier: vMYCUMJsiOgDxqptNk6UO7s7WmT+emNh25hEKRsj0Kg= Subject key identifier: 20:C8:A8:0A:BB:A5:E3:D4:AD:7C:31:25:B0:35:50:36:94:BB:00:72 Authority key identifier: B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE Certificate issuer: /CN=b57c8ac055c574d8cf13522b964b92314d211eae Certificate serial: 019B717E0C768BE10A54F69A96B204110BE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft Manifest number: 14F0 Signing time: Tue 30 Dec 2025 23:00:44 +0000 Manifest this update: Tue 30 Dec 2025 23:00:44 +0000 Manifest next update: Wed 31 Dec 2025 23:00:44 +0000 Files and hashes: 1: tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl (hash: /R39AyLHg+uwH1KbEpxiU46LuP97gwtofeKRTuHE4GQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:7e:0c:76:8b:e1:0a:54:f6:9a:96:b2:04:11:0b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b57c8ac055c574d8cf13522b964b92314d211eae Validity Not Before: Dec 30 23:00:44 2025 GMT Not After : Dec 31 23:00:44 2025 GMT Subject: CN=20c8a80abba5e3d4ad7c3125b035503694bb0072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:58:85:55:ce:e1:48:f7:06:d9:be:4d:8d:b7: 69:88:ef:b8:cb:14:b0:d0:fb:e2:4a:7b:9a:fe:ec: f5:11:cc:f8:46:e8:27:08:f2:50:7d:8a:3f:1a:fd: 2b:0e:cd:8b:10:ee:60:26:41:68:c4:d1:1f:99:6f: e5:e1:5b:c0:72:42:6d:ad:9e:1c:e8:39:e1:27:06: fa:d5:07:6d:25:54:a0:4d:67:74:c3:58:ce:c5:4b: 5f:87:36:df:5b:2b:17:50:c2:d1:50:de:7b:fa:bb: 34:92:06:56:24:07:ab:6b:6c:f6:bf:73:54:f3:50: 05:f0:de:cd:a1:a3:56:a5:41:55:c6:9a:63:9c:2f: 5c:03:13:93:58:1d:50:f2:47:9d:47:ae:c0:ee:0a: fc:4c:78:c3:98:54:7c:0e:86:c0:9d:36:6c:6b:8f: c5:60:03:1f:23:cd:06:00:03:e5:be:b0:c9:c8:fe: 95:6c:2d:4e:f2:99:38:6d:6f:66:ea:b7:93:25:ae: fd:27:b2:a7:ca:c4:f3:fc:14:7a:32:e7:6e:88:14: 67:86:7d:a9:43:5a:e3:ee:f3:fe:ce:62:60:d9:ca: 17:e5:7b:56:91:26:e6:08:c9:eb:ab:09:11:c4:26: ec:ce:a3:db:67:28:d3:9a:ad:ec:48:76:7e:80:d0: af:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C8:A8:0A:BB:A5:E3:D4:AD:7C:31:25:B0:35:50:36:94:BB:00:72 X509v3 Authority Key Identifier: keyid:B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:7f:30:7d:37:48:49:d2:03:7b:ba:2e:8f:e0:ff:16:45:9c: 14:71:cb:73:ef:d1:98:ec:69:06:d4:fd:6f:27:e1:7e:9f:c9: 2c:ef:25:0c:41:10:d9:88:76:84:7a:3f:06:01:08:0c:61:7a: 21:cc:9a:f3:a6:72:39:68:ec:5a:b9:4c:15:7b:37:b9:11:2e: 4b:32:c2:05:15:e2:c6:46:1e:5b:85:c0:05:ee:88:82:76:8a: 64:a1:2e:b2:99:92:5e:6d:2a:c6:9c:25:81:87:e9:2a:eb:ff: de:f9:2f:13:0c:f1:21:f5:a8:f6:76:ba:71:58:0d:ae:78:7b: 4e:00:9d:e1:85:89:4a:21:c2:09:65:04:30:63:f8:14:6d:b2: 54:0c:15:9f:57:72:8a:dd:8c:8e:09:67:79:de:63:c8:2b:08: ee:6e:f6:e7:86:8c:1a:c5:28:40:08:8a:db:bf:b2:41:e4:fc: 8c:f5:e1:03:dd:12:05:2b:71:d6:88:11:4a:e9:15:c8:97:e0: ce:17:2d:16:bc:44:c6:5f:c7:5f:5a:79:fa:a8:7e:35:f7:98: 65:71:bb:1d:37:e0:eb:ac:36:0a:ed:65:5b:74:59:33:b1:2c: 64:30:2f:e1:57:e7:10:9c:52:d4:a8:63:1c:f3:d0:db:68:fa: f3:87:fb:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxfgx2i+EKVPaalrIEEQvhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1N2M4YWMwNTVjNTc0ZDhjZjEzNTIyYjk2NGI5MjMxNGQy MTFlYWUwHhcNMjUxMjMwMjMwMDQ0WhcNMjUxMjMxMjMwMDQ0WjAzMTEwLwYDVQQD EygyMGM4YTgwYWJiYTVlM2Q0YWQ3YzMxMjViMDM1NTAzNjk0YmIwMDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhliFVc7hSPcG2b5NjbdpiO+4yxSw 0PviSnua/uz1Ecz4RugnCPJQfYo/Gv0rDs2LEO5gJkFoxNEfmW/l4VvAckJtrZ4c 6DnhJwb61QdtJVSgTWd0w1jOxUtfhzbfWysXUMLRUN57+rs0kgZWJAera2z2v3NU 81AF8N7NoaNWpUFVxppjnC9cAxOTWB1Q8kedR67A7gr8THjDmFR8DobAnTZsa4/F YAMfI80GAAPlvrDJyP6VbC1O8pk4bW9m6reTJa79J7KnysTz/BR6MuduiBRnhn2p Q1rj7vP+zmJg2coX5XtWkSbmCMnrqwkRxCbszqPbZyjTmq3sSHZ+gNCvBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDIqAq7pePUrXwxJbA1UDaUuwByMB8GA1UdIwQY MBaAFLV8isBVxXTYzxNSK5ZLkjFNIR6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFh5S3dGWEZkTmpQRTFJcmxrdVNNVTBoSHE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8yODlmNDAtYTIzMy00YzYzLWI5M2Ut OGU0YzdjN2I2NTA0LzEvdFh5S3dGWEZkTmpQRTFJcmxrdVNNVTBoSHE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi8yODlmNDAtYTIzMy00YzYzLWI5M2UtOGU0YzdjN2I2NTA0 LzEvdFh5S3dGWEZkTmpQRTFJcmxrdVNNVTBoSHE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaX8wfTdI SdIDe7ouj+D/FkWcFHHLc+/RmOxpBtT9byfhfp/JLO8lDEEQ2Yh2hHo/BgEIDGF6 Icya86ZyOWjsWrlMFXs3uREuSzLCBRXixkYeW4XABe6IgnaKZKEuspmSXm0qxpwl gYfpKuv/3vkvEwzxIfWo9na6cVgNrnh7TgCd4YWJSiHCCWUEMGP4FG2yVAwVn1dy it2Mjglned5jyCsI7m7254aMGsUoQAiK27+yQeT8jPXhA90SBStx1ogRSukVyJfg zhctFrxExl/HX1p5+qh+NfeYZXG7HTfg66w2Cu1lW3RZM7EsZDAv4VfnEJxS1Khj HPPQ22j684f7vg== -----END CERTIFICATE-----Generated at Wed Dec 31 03:43:41 2025 by rpki-client