This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft File: TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft (raw, json) Hash identifier: ymZCdJLl6xpdKSqR/7g8o6x5GKPQHv9ala2l+ygCODg= Subject key identifier: D8:5F:69:CB:C9:0F:2A:A6:E6:B0:D0:C5:16:9B:BE:F1:75:EF:6E:0F Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B Certificate issuer: /CN=4f14397e3021beff3b5fd30daaab62514cfa166b Certificate serial: 019B3BA228AE40EECFF265D84769B2BB148D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 12:00:41 +0000 Manifest this update: Sat 20 Dec 2025 12:00:41 +0000 Manifest next update: Sun 21 Dec 2025 12:00:41 +0000 Files and hashes: 1: TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl (hash: Xb7GD80Pf+KE9kHDykytDM3i6KRMI0ag4NgFbpnAS5k=) 2: _QkywIQ5MYjLQgAq3HIEi0yS3ts.roa (hash: XOazSSRb7RPjyPPcCQsskJ3rE/egTw8zpZ2LPq6cndM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:28:ae:40:ee:cf:f2:65:d8:47:69:b2:bb:14:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b Validity Not Before: Dec 20 12:00:41 2025 GMT Not After : Dec 21 12:00:41 2025 GMT Subject: CN=d85f69cbc90f2aa6e6b0d0c5169bbef175ef6e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9e:06:8d:de:d3:fd:c1:9e:a0:7c:af:33:6e: a7:cc:a4:ac:7f:82:61:a8:a1:c4:a7:99:fb:19:8c: 6a:64:9b:48:6b:56:cc:3a:a4:88:24:30:78:ea:42: b2:91:be:3d:17:ea:f3:86:83:a7:01:9a:38:60:08: 4c:48:13:e9:97:a1:11:4c:1b:ed:ab:86:48:66:6c: db:aa:d5:53:31:c4:d0:3c:78:8c:76:b2:16:50:22: 18:0a:86:bd:4b:b4:75:bd:f8:42:35:0b:b1:a8:64: 7a:0b:fd:e1:7b:2a:a0:9b:a7:89:46:63:d1:3c:c2: ef:85:16:e3:b5:99:6f:f7:78:04:1d:13:e1:8c:18: be:99:d3:c9:b6:7b:20:d7:58:f3:94:69:eb:21:4b: 90:0b:f2:cf:cd:cb:b7:9b:b7:a4:fb:48:99:4f:22: 8a:80:46:f6:fb:74:f5:9a:35:fc:4c:1f:c1:b3:0d: 26:c3:a8:42:c4:16:ef:7d:5c:f4:39:1d:bc:c6:33: 74:b0:e0:f2:e9:a7:59:9e:36:30:a5:c2:2a:c4:05: 18:56:80:68:b0:b8:8a:f0:74:1a:9a:78:38:bf:9a: 43:6e:c6:cf:5b:05:d9:24:6c:44:5c:b1:f7:48:6d: 9b:97:28:ed:a7:76:80:73:29:1b:b9:eb:c3:d5:eb: 8f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5F:69:CB:C9:0F:2A:A6:E6:B0:D0:C5:16:9B:BE:F1:75:EF:6E:0F X509v3 Authority Key Identifier: keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:45:f0:c1:7c:fd:e6:ac:6d:58:db:d4:83:ca:15:88:17:63: 4f:87:15:64:1e:c8:81:2b:f3:06:88:a1:36:4e:4f:46:32:c4: c9:5b:3f:78:57:6c:60:f6:7b:c3:21:64:91:d4:ce:86:19:f1: 36:df:cb:c1:ea:a3:dd:9e:93:6a:57:78:00:bd:11:c8:4d:69: 6a:08:25:61:1f:c6:cd:06:7f:9f:6d:70:6d:33:87:dc:73:ed: 1e:68:ee:43:4e:c6:f7:45:15:3c:7d:11:6c:f4:b9:83:82:8b: 66:3b:fa:e8:72:e8:9d:91:f7:0a:b7:5c:c5:7e:df:02:f6:23: 9c:31:42:38:b0:2b:5d:03:99:a3:19:8a:0a:f5:e2:27:bd:a3: 86:6d:d6:af:23:a2:69:f2:ff:d2:9d:f6:1b:58:08:fa:e4:89: 83:ea:31:7d:05:2b:a0:41:b1:7d:3e:07:f8:38:77:17:38:27: d9:0f:85:1c:a0:73:67:b9:42:90:1c:14:af:87:88:96:ae:2a: ee:63:0c:55:a4:14:f6:76:c4:91:a6:3a:5b:b6:3d:3d:b8:64: a7:9e:a1:1c:d7:a9:a0:c6:90:36:50:d7:08:aa:1f:1d:02:1a: 81:bb:0d:9c:0e:1d:5c:2b:ba:85:c3:a7:1f:6e:db:d5:68:c7: 91:b3:dc:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oiiuQO7P8mXYR2myuxSNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQzOTdlMzAyMWJlZmYzYjVmZDMwZGFhYWI2MjUxNGNm YTE2NmIwHhcNMjUxMjIwMTIwMDQxWhcNMjUxMjIxMTIwMDQxWjAzMTEwLwYDVQQD EyhkODVmNjljYmM5MGYyYWE2ZTZiMGQwYzUxNjliYmVmMTc1ZWY2ZTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs54Gjd7T/cGeoHyvM26nzKSsf4Jh qKHEp5n7GYxqZJtIa1bMOqSIJDB46kKykb49F+rzhoOnAZo4YAhMSBPpl6ERTBvt q4ZIZmzbqtVTMcTQPHiMdrIWUCIYCoa9S7R1vfhCNQuxqGR6C/3heyqgm6eJRmPR PMLvhRbjtZlv93gEHRPhjBi+mdPJtnsg11jzlGnrIUuQC/LPzcu3m7ek+0iZTyKK gEb2+3T1mjX8TB/Bsw0mw6hCxBbvfVz0OR28xjN0sODy6adZnjYwpcIqxAUYVoBo sLiK8HQamng4v5pDbsbPWwXZJGxEXLH3SG2blyjtp3aAcykbuevD1euPaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhfacvJDyqm5rDQxRabvvF1724PMB8GA1UdIwQY MBaAFE8UOX4wIb7/O1/TDaqrYlFM+hZrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRNWZqQWh2djg3WDlNTnFxdGlVVXo2Rm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZWVkNmMtZmI1YS00ODAyLWFlNTAt YTJmNzI4YmRjMjc1LzEvVHhRNWZqQWh2djg3WDlNTnFxdGlVVXo2Rm1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZWVkNmMtZmI1YS00ODAyLWFlNTAtYTJmNzI4YmRjMjc1 LzEvVHhRNWZqQWh2djg3WDlNTnFxdGlVVXo2Rm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0XwwXz9 5qxtWNvUg8oViBdjT4cVZB7IgSvzBoihNk5PRjLEyVs/eFdsYPZ7wyFkkdTOhhnx Nt/Lweqj3Z6Tald4AL0RyE1pagglYR/GzQZ/n21wbTOH3HPtHmjuQ07G90UVPH0R bPS5g4KLZjv66HLonZH3CrdcxX7fAvYjnDFCOLArXQOZoxmKCvXiJ72jhm3WryOi afL/0p32G1gI+uSJg+oxfQUroEGxfT4H+Dh3Fzgn2Q+FHKBzZ7lCkBwUr4eIlq4q 7mMMVaQU9nbEkaY6W7Y9Pbhkp56hHNepoMaQNlDXCKofHQIagbsNnA4dXCu6hcOn H27b1WjHkbPcpQ== -----END CERTIFICATE-----Generated at Sat Dec 20 21:09:04 2025 by rpki-client