This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft File: tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft (raw, json) Hash identifier: xhVdrPr/RQLQFt5Fw2BaINcN1ZQ435UlGBSOoNthENc= Subject key identifier: A6:CA:C6:5A:7E:29:ED:78:CB:B7:FB:8F:2E:0C:DE:A9:2B:F5:38:D9 Authority key identifier: B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC Certificate issuer: /CN=b71f4868bd409292b56959f35a4c14fcc25472ec Certificate serial: 019B6579B701B3EC62C49EF5B92C33229FAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft Manifest number: 0486 Signing time: Sun 28 Dec 2025 15:00:34 +0000 Manifest this update: Sun 28 Dec 2025 15:00:34 +0000 Manifest next update: Mon 29 Dec 2025 15:00:34 +0000 Files and hashes: 1: LeVi2Dl27pBMRUz8pmXZ3SnuX2A.roa (hash: LxI9ZJlsAuyHn6pxrNHJlN790aDbGyBNqZLVE/LhQDs=) 2: tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl (hash: ZjMHUaBO2zanIS5BB6RuNMUrEchfJSlJf4i/mtpjKcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:79:b7:01:b3:ec:62:c4:9e:f5:b9:2c:33:22:9f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71f4868bd409292b56959f35a4c14fcc25472ec Validity Not Before: Dec 28 15:00:34 2025 GMT Not After : Dec 29 15:00:34 2025 GMT Subject: CN=a6cac65a7e29ed78cbb7fb8f2e0cdea92bf538d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d1:18:b2:11:97:aa:14:6e:22:02:1f:d9:93: 2d:d1:91:7d:c3:ae:cb:02:2e:df:f9:7c:7b:51:13: c0:d1:8d:73:45:8d:8a:d9:9d:8a:61:80:67:5b:a5: e1:30:fa:c7:ea:98:f0:75:a2:fd:a2:d8:bd:6b:e4: 63:82:93:ce:2a:16:82:04:62:da:44:18:b1:a2:01: ad:b2:64:08:12:1e:39:68:3f:d2:b1:f0:c4:d6:28: 8a:52:3c:12:3c:f9:79:6c:18:af:2b:49:12:92:62: e7:36:23:16:dc:37:79:47:df:12:2f:58:f1:f5:ab: 33:26:3f:7a:ce:32:06:9a:09:d0:7e:50:ce:d0:60: 0c:4c:ae:ad:f8:28:0d:66:07:9b:f6:0c:f4:0b:51: 76:31:81:c4:7a:24:82:24:7a:4d:f3:33:47:f9:6e: eb:27:7e:8b:dd:ca:1a:2b:d8:21:c8:6d:01:19:d7: d1:9d:27:aa:31:8f:73:07:5d:38:34:27:13:b3:1d: cf:87:d8:46:6a:7a:9c:ed:3a:3e:1b:02:1a:c7:d9: 14:fc:19:76:cc:31:28:f2:70:8f:8f:d2:47:a2:73: d6:17:70:08:c5:a1:3e:84:e5:00:03:03:01:67:36: 03:e9:7a:81:13:ae:44:e5:4d:08:90:c9:04:d5:e4: 34:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CA:C6:5A:7E:29:ED:78:CB:B7:FB:8F:2E:0C:DE:A9:2B:F5:38:D9 X509v3 Authority Key Identifier: keyid:B7:1F:48:68:BD:40:92:92:B5:69:59:F3:5A:4C:14:FC:C2:54:72:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tx9IaL1AkpK1aVnzWkwU_MJUcuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/100919-d951-4a6e-9f0c-7cca3a2e7490/1/tx9IaL1AkpK1aVnzWkwU_MJUcuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f0:8e:b2:2a:db:02:87:56:18:17:6b:bb:33:4d:a1:fd:1c: e8:fe:82:59:3d:33:1e:af:d8:57:92:3c:4b:d8:a8:0b:cc:6c: a7:09:b9:8b:2a:32:1a:fc:e0:20:1c:96:20:12:e1:a3:e5:bd: 0d:87:73:ac:a6:41:2b:38:84:bf:0e:88:72:6a:94:20:c1:9e: 4c:c3:58:22:3c:69:70:0b:52:fa:52:ce:a7:e8:17:f0:8f:05: 45:40:7c:fa:3f:a0:c6:3a:ae:4d:2a:0a:ca:76:06:b0:d0:50: ce:42:57:85:19:de:e2:e0:53:a1:a5:1d:b1:f5:2f:7e:50:b5: ed:2e:12:2c:c9:27:99:44:d5:95:07:8d:15:3c:59:4d:e6:6b: 9d:8e:24:0b:ba:ac:e0:cd:e6:af:d3:79:7a:dd:38:7a:dd:1a: 31:40:d9:e9:1e:98:69:68:ae:f6:f4:5e:aa:49:b4:51:a1:28: 50:f5:1a:f4:72:a0:d6:a4:c6:67:6a:64:3b:4c:dc:94:c7:5a: fa:ca:3a:89:bf:40:f2:0d:1e:d6:a7:91:6c:b3:e7:3a:f3:24: 2e:48:fc:c8:98:00:20:1b:22:95:09:88:a3:c9:48:86:af:d3: 95:5b:63:75:7a:fb:36:13:10:41:52:53:b1:d8:7a:e1:15:d8: 2b:b8:8b:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlebcBs+xixJ71uSwzIp+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MWY0ODY4YmQ0MDkyOTJiNTY5NTlmMzVhNGMxNGZjYzI1 NDcyZWMwHhcNMjUxMjI4MTUwMDM0WhcNMjUxMjI5MTUwMDM0WjAzMTEwLwYDVQQD EyhhNmNhYzY1YTdlMjllZDc4Y2JiN2ZiOGYyZTBjZGVhOTJiZjUzOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9EYshGXqhRuIgIf2ZMt0ZF9w67L Ai7f+Xx7URPA0Y1zRY2K2Z2KYYBnW6XhMPrH6pjwdaL9oti9a+RjgpPOKhaCBGLa RBixogGtsmQIEh45aD/SsfDE1iiKUjwSPPl5bBivK0kSkmLnNiMW3Dd5R98SL1jx 9aszJj96zjIGmgnQflDO0GAMTK6t+CgNZgeb9gz0C1F2MYHEeiSCJHpN8zNH+W7r J36L3coaK9ghyG0BGdfRnSeqMY9zB104NCcTsx3Ph9hGanqc7To+GwIax9kU/Bl2 zDEo8nCPj9JHonPWF3AIxaE+hOUAAwMBZzYD6XqBE65E5U0IkMkE1eQ0bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbKxlp+Ke14y7f7jy4M3qkr9TjZMB8GA1UdIwQY MBaAFLcfSGi9QJKStWlZ81pMFPzCVHLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMDA5MTktZDk1MS00YTZlLTlmMGMt N2NjYTNhMmU3NDkwLzEvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC8xMDA5MTktZDk1MS00YTZlLTlmMGMtN2NjYTNhMmU3NDkw LzEvdHg5SWFMMUFrcEsxYVZueldrd1VfTUpVY3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARfCOsirb AodWGBdruzNNof0c6P6CWT0zHq/YV5I8S9ioC8xspwm5iyoyGvzgIByWIBLho+W9 DYdzrKZBKziEvw6IcmqUIMGeTMNYIjxpcAtS+lLOp+gX8I8FRUB8+j+gxjquTSoK ynYGsNBQzkJXhRne4uBToaUdsfUvflC17S4SLMknmUTVlQeNFTxZTeZrnY4kC7qs 4M3mr9N5et04et0aMUDZ6R6YaWiu9vReqkm0UaEoUPUa9HKg1qTGZ2pkO0zclMda +so6ib9A8g0e1qeRbLPnOvMkLkj8yJgAIBsilQmIo8lIhq/TlVtjdXr7NhMQQVJT sdh64RXYK7iLdQ== -----END CERTIFICATE-----Generated at Sun Dec 28 23:23:16 2025 by rpki-client