This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft File: txiFnUEvm1hypYl3Mg0tCDvXoEs.mft (raw, json) Hash identifier: ocdquihqfi6gg9AXOj4bFynVvpxQruOghbpjlysiBQI= Subject key identifier: 42:74:76:ED:77:02:99:09:18:23:0D:BC:39:73:E8:A4:2E:B4:20:B9 Authority key identifier: B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B Certificate issuer: /CN=b718859d412f9b5872a58977320d2d083bd7a04b Certificate serial: 019BB24BE9C927BE16E603D85471BBDC2189 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft Manifest number: 11AE Signing time: Mon 12 Jan 2026 13:01:18 +0000 Manifest this update: Mon 12 Jan 2026 13:01:18 +0000 Manifest next update: Tue 13 Jan 2026 13:01:18 +0000 Files and hashes: 1: txiFnUEvm1hypYl3Mg0tCDvXoEs.crl (hash: yWr9Ld6hPBjcRMHdMMdoE9Egy6xrSq5N30QfyOJKoRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:4b:e9:c9:27:be:16:e6:03:d8:54:71:bb:dc:21:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b718859d412f9b5872a58977320d2d083bd7a04b Validity Not Before: Jan 12 13:01:18 2026 GMT Not After : Jan 13 13:01:18 2026 GMT Subject: CN=427476ed7702990918230dbc3973e8a42eb420b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6a:ae:65:2f:da:26:c0:8b:01:d9:06:af:af: 69:03:fb:2c:bf:32:0a:24:33:b9:1b:04:50:85:32: fb:82:f5:02:4f:f0:8a:d9:c5:50:07:01:f0:65:80: 38:7e:43:5a:f2:51:5e:f4:90:50:92:68:36:aa:15: 05:94:28:b0:fa:b3:c6:01:2c:7b:26:a3:5a:78:ee: b8:68:1d:f6:e7:f9:74:55:b2:3e:4e:7a:da:8c:2b: 1d:c0:63:94:e8:65:50:ef:72:53:c3:53:b7:84:94: c8:69:35:08:a2:86:8e:19:ed:69:70:3b:14:52:26: b2:e7:b5:60:cc:1b:c3:1a:89:e7:a4:c0:7f:d0:99: c5:64:10:91:d3:7d:ae:02:50:e9:17:10:a0:0e:98: 1f:ac:59:ca:e6:b5:75:09:a5:53:63:f8:7b:f8:34: 1b:7b:7c:bb:6c:e4:ac:29:67:2c:81:40:e3:f8:c2: f2:e2:bf:62:3f:67:e8:02:c3:eb:c0:44:7e:9f:0f: 63:78:5c:74:cc:1f:c0:9b:c6:5d:1e:15:8e:39:2e: f3:2d:fa:c1:e3:81:a2:6b:f4:26:cf:d2:a5:4e:b9: e7:22:95:1c:4d:90:a3:f1:8f:e7:4e:1f:8d:93:f7: 3e:ee:da:a0:7f:51:1a:8c:af:cf:77:de:f5:4e:95: 56:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:74:76:ED:77:02:99:09:18:23:0D:BC:39:73:E8:A4:2E:B4:20:B9 X509v3 Authority Key Identifier: keyid:B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:bf:0e:25:7f:35:1a:fa:ed:0b:24:cb:69:8c:15:c4:dd:53: 40:b1:a9:ba:7b:60:ce:26:0c:91:de:2d:0c:e6:bb:fa:22:25: d3:1d:8a:b9:a7:b6:bd:1f:19:d4:09:f3:1b:ca:36:b8:73:91: f4:c8:c8:b1:b4:e9:45:47:ce:fa:59:d3:5c:e6:32:9e:bf:51: fd:f7:54:0a:5a:fa:97:15:f1:2c:7a:47:45:f3:41:e7:75:82: d1:c6:a2:fe:8e:7d:fa:55:a3:24:3b:c1:7f:77:66:4c:ad:f3: b7:6d:e3:d7:54:f0:f6:4f:79:53:ef:20:a8:06:fc:dc:8d:8c: 64:f9:c2:f8:2f:2c:10:d6:17:6b:ad:e7:04:7c:92:52:f4:fd: c3:5d:bd:1d:40:28:41:98:bb:c4:72:23:a5:12:14:81:aa:e3: f0:e9:6c:c6:f3:e1:0c:4c:ee:84:f0:e7:49:f8:f2:ea:9d:45: a1:31:11:7a:35:08:b7:14:57:ce:5f:3e:f0:e8:54:ec:ce:6a: f3:ad:1d:8a:12:99:64:82:f1:82:35:1a:d6:75:d2:7b:d4:ea: 86:94:e7:4d:40:1b:1c:76:a1:51:c6:33:b5:79:8b:5d:25:dd: 51:d1:18:93:dc:36:4d:32:65:2f:38:63:da:12:52:f4:75:88: 56:0f:39:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuyS+nJJ74W5gPYVHG73CGJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTg4NTlkNDEyZjliNTg3MmE1ODk3NzMyMGQyZDA4M2Jk N2EwNGIwHhcNMjYwMTEyMTMwMTE4WhcNMjYwMTEzMTMwMTE4WjAzMTEwLwYDVQQD Eyg0Mjc0NzZlZDc3MDI5OTA5MTgyMzBkYmMzOTczZThhNDJlYjQyMGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GquZS/aJsCLAdkGr69pA/ssvzIK JDO5GwRQhTL7gvUCT/CK2cVQBwHwZYA4fkNa8lFe9JBQkmg2qhUFlCiw+rPGASx7 JqNaeO64aB325/l0VbI+TnrajCsdwGOU6GVQ73JTw1O3hJTIaTUIooaOGe1pcDsU Uiay57VgzBvDGonnpMB/0JnFZBCR032uAlDpFxCgDpgfrFnK5rV1CaVTY/h7+DQb e3y7bOSsKWcsgUDj+MLy4r9iP2foAsPrwER+nw9jeFx0zB/Am8ZdHhWOOS7zLfrB 44Gia/Qmz9KlTrnnIpUcTZCj8Y/nTh+Nk/c+7tqgf1EajK/Pd971TpVWZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJ0du13ApkJGCMNvDlz6KQutCC5MB8GA1UdIwQY MBaAFLcYhZ1BL5tYcqWJdzINLQg716BLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhpRm5VRXZtMWh5cFlsM01nMHRDRHZYb0VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82ZWYxNGEtOTkxNC00MzE4LTlhNTEt ZDdiY2VkYzYwNTc5LzEvdHhpRm5VRXZtMWh5cFlsM01nMHRDRHZYb0VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS82ZWYxNGEtOTkxNC00MzE4LTlhNTEtZDdiY2VkYzYwNTc5 LzEvdHhpRm5VRXZtMWh5cFlsM01nMHRDRHZYb0VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo78OJX81 GvrtCyTLaYwVxN1TQLGpuntgziYMkd4tDOa7+iIl0x2Kuae2vR8Z1AnzG8o2uHOR 9MjIsbTpRUfO+lnTXOYynr9R/fdUClr6lxXxLHpHRfNB53WC0cai/o59+lWjJDvB f3dmTK3zt23j11Tw9k95U+8gqAb83I2MZPnC+C8sENYXa63nBHySUvT9w129HUAo QZi7xHIjpRIUgarj8OlsxvPhDEzuhPDnSfjy6p1FoTERejUItxRXzl8+8OhU7M5q 860dihKZZILxgjUa1nXSe9TqhpTnTUAbHHahUcYztXmLXSXdUdEYk9w2TTJlLzhj 2hJS9HWIVg85Dw== -----END CERTIFICATE-----Generated at Mon Jan 12 22:58:47 2026 by rpki-client