This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft File: TxI-JI5uwDaOBxI0X3JtcfYPgms.mft (raw, json) Hash identifier: aiL9hqonQhZdVaWe7l/Oci38KcIPzP4Wdt0R9sMC914= Subject key identifier: 15:C6:2A:65:BE:FE:46:99:DA:DD:2B:DF:70:19:4F:F4:4D:69:B0:4E Authority key identifier: 4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B Certificate issuer: /CN=4f123e248e6ec0368e0712345f726d71f60f826b Certificate serial: 019B601D3FAA3900E9E05E57AFED0B42BA5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft Manifest number: 179B Signing time: Sat 27 Dec 2025 14:01:28 +0000 Manifest this update: Sat 27 Dec 2025 14:01:28 +0000 Manifest next update: Sun 28 Dec 2025 14:01:28 +0000 Files and hashes: 1: TxI-JI5uwDaOBxI0X3JtcfYPgms.crl (hash: k9s9CrCCrzuEMP+i3QhcNFD/mMltTyjybVtUXGRujOY=) 2: txevIB_6jhleI8mehx3u1ubhM4E.roa (hash: ttQSgL5wxWdGk+Bs6UGV09lAGc4vxzIOxHjXzQQIn4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 14:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:1d:3f:aa:39:00:e9:e0:5e:57:af:ed:0b:42:ba:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f123e248e6ec0368e0712345f726d71f60f826b Validity Not Before: Dec 27 14:01:28 2025 GMT Not After : Dec 28 14:01:28 2025 GMT Subject: CN=15c62a65befe4699dadd2bdf70194ff44d69b04e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d3:e8:41:ee:f1:12:6f:73:22:68:f6:64:b3: 8e:4a:5d:c8:68:a6:27:51:75:a4:75:75:a5:57:75: 75:95:2d:6a:d2:35:e2:b9:b0:f8:21:9a:b5:61:be: 44:41:b6:91:70:9c:9b:de:ff:4a:1d:9f:70:8e:f0: 7a:05:d4:1e:c9:5f:44:66:ea:7f:48:2f:5a:5d:ce: 53:38:03:c7:b3:36:ce:2a:2f:51:87:0f:c5:4f:79: 84:83:67:7f:c6:07:fc:4d:1c:95:eb:1e:4f:47:fc: b7:85:31:53:b5:29:e7:33:c2:a0:a2:01:89:1f:77: d7:15:f0:9c:fc:f1:7a:67:9a:b1:b7:bd:b2:d2:3c: ed:fe:09:68:5f:c5:a3:9f:c8:6a:e5:d9:9e:d0:10: 65:71:48:a9:6d:21:d3:ee:89:dc:56:30:da:bb:15: cc:83:47:64:c8:4f:a4:fd:2a:56:a2:c0:9a:51:9e: b3:b8:97:8c:75:2e:42:15:c0:0f:11:84:99:ad:06: 34:70:cd:29:f9:ad:7b:78:4a:e7:6e:5a:ba:f7:bf: ad:ef:c1:1e:af:47:c2:3e:98:85:a8:96:19:d1:82: 36:a2:fd:00:da:4d:8b:34:62:b0:9a:b6:1d:64:44: d5:b2:70:c9:9c:f1:15:8f:ea:03:c7:83:a8:50:c0: 40:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C6:2A:65:BE:FE:46:99:DA:DD:2B:DF:70:19:4F:F4:4D:69:B0:4E X509v3 Authority Key Identifier: keyid:4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:4c:0d:a8:79:63:80:22:40:76:7d:e4:38:13:94:38:8a:e7: b8:44:88:84:b2:04:72:78:4a:6e:ca:20:f6:61:52:9c:4e:70: 89:1f:a1:97:06:d5:68:b8:00:de:a1:6a:4d:fe:cc:b6:74:49: 25:c2:2b:06:55:c2:d6:af:91:6b:a1:9f:de:f5:ac:9a:f2:21: 49:9c:a6:6e:9a:58:00:7f:e9:20:04:e9:13:ed:95:a2:9c:b3: 25:36:20:1c:89:6b:63:5d:1c:96:3a:4f:98:26:bf:0a:c5:c0: bc:9e:fe:3a:ed:e4:94:bd:d3:f6:1d:5b:3b:c3:bb:97:6d:33: e3:7e:69:09:a3:f5:d5:68:0a:77:9c:73:75:8d:3b:55:41:fa: 14:e2:73:cc:9d:5c:d5:26:3a:9a:fb:3c:c4:dc:88:a1:31:76: 2f:0e:f5:4c:d4:b5:87:60:90:ef:50:8f:36:08:2d:58:67:5c: e8:49:5b:5e:e3:cb:95:8a:82:5a:fc:b4:05:07:5c:08:5d:93: c4:63:b6:01:bd:32:1b:8b:71:4a:96:c3:28:0a:11:78:fa:df: fc:5a:66:76:08:0d:49:f3:32:18:3d:0c:03:2e:e9:15:23:d6: 0c:93:52:13:c5:ec:ce:e4:39:10:bf:03:12:ef:3c:8c:70:06: 47:5e:f4:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgHT+qOQDp4F5Xr+0LQrpaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTIzZTI0OGU2ZWMwMzY4ZTA3MTIzNDVmNzI2ZDcxZjYw ZjgyNmIwHhcNMjUxMjI3MTQwMTI4WhcNMjUxMjI4MTQwMTI4WjAzMTEwLwYDVQQD EygxNWM2MmE2NWJlZmU0Njk5ZGFkZDJiZGY3MDE5NGZmNDRkNjliMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydPoQe7xEm9zImj2ZLOOSl3IaKYn UXWkdXWlV3V1lS1q0jXiubD4IZq1Yb5EQbaRcJyb3v9KHZ9wjvB6BdQeyV9EZup/ SC9aXc5TOAPHszbOKi9Rhw/FT3mEg2d/xgf8TRyV6x5PR/y3hTFTtSnnM8KgogGJ H3fXFfCc/PF6Z5qxt72y0jzt/gloX8Wjn8hq5dme0BBlcUipbSHT7oncVjDauxXM g0dkyE+k/SpWosCaUZ6zuJeMdS5CFcAPEYSZrQY0cM0p+a17eErnblq697+t78Ee r0fCPpiFqJYZ0YI2ov0A2k2LNGKwmrYdZETVsnDJnPEVj+oDx4OoUMBAxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXGKmW+/kaZ2t0r33AZT/RNabBOMB8GA1UdIwQY MBaAFE8SPiSObsA2jgcSNF9ybXH2D4JrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhJLUpJNXV3RGFPQnhJMFgzSnRjZllQZ21zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82ZDljZTItNmQ4OC00OTc3LWFlMDYt YzFlOTQxZTU5YzE0LzEvVHhJLUpJNXV3RGFPQnhJMFgzSnRjZllQZ21zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82ZDljZTItNmQ4OC00OTc3LWFlMDYtYzFlOTQxZTU5YzE0 LzEvVHhJLUpJNXV3RGFPQnhJMFgzSnRjZllQZ21zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUwNqHlj gCJAdn3kOBOUOIrnuESIhLIEcnhKbsog9mFSnE5wiR+hlwbVaLgA3qFqTf7MtnRJ JcIrBlXC1q+Ra6Gf3vWsmvIhSZymbppYAH/pIATpE+2VopyzJTYgHIlrY10cljpP mCa/CsXAvJ7+Ou3klL3T9h1bO8O7l20z435pCaP11WgKd5xzdY07VUH6FOJzzJ1c 1SY6mvs8xNyIoTF2Lw71TNS1h2CQ71CPNggtWGdc6ElbXuPLlYqCWvy0BQdcCF2T xGO2Ab0yG4txSpbDKAoRePrf/FpmdggNSfMyGD0MAy7pFSPWDJNSE8XszuQ5EL8D Eu88jHAGR170UA== -----END CERTIFICATE-----Generated at Sat Dec 27 21:02:13 2025 by rpki-client