This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft File: Tx097mN940sTx0umz7TSBb5VYn4.mft (raw, json) Hash identifier: zA9uEgJuQJ7vQes/kNIugPv8lmniW6ZJMGMEf25OmwY= Subject key identifier: 52:52:67:A8:0C:BF:76:B3:D4:58:12:7F:DF:8F:F0:CE:B8:F7:8E:CD Authority key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E Certificate issuer: /CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e Certificate serial: 019B52982C5CCDA7BF9091C66B5055F0CAAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft Manifest number: 178F Signing time: Wed 24 Dec 2025 23:01:03 +0000 Manifest this update: Wed 24 Dec 2025 23:01:03 +0000 Manifest next update: Thu 25 Dec 2025 23:01:03 +0000 Files and hashes: 1: Tx097mN940sTx0umz7TSBb5VYn4.crl (hash: EYwqzy3jaLKttM+eF8m+BRTj1DfT9WFCB8MzRJTtDDQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:2c:5c:cd:a7:bf:90:91:c6:6b:50:55:f0:ca:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e Validity Not Before: Dec 24 23:01:03 2025 GMT Not After : Dec 25 23:01:03 2025 GMT Subject: CN=525267a80cbf76b3d458127fdf8ff0ceb8f78ecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:eb:dc:28:66:03:76:22:ae:7b:8e:38:60:fa: 53:56:fc:fb:ba:69:21:a2:c2:5a:51:b0:ef:33:ee: 0f:90:fb:93:91:55:dc:0c:54:64:ed:19:8c:c9:b1: c7:49:f4:8b:ce:63:03:1d:05:df:f9:64:3a:54:43: 55:f6:dc:58:9e:32:41:c9:07:db:c5:76:1b:0d:02: 69:92:73:11:8d:3c:4e:4b:83:1d:b9:74:10:7c:92: 38:8f:27:34:19:16:e6:f2:a0:a7:2c:55:b5:49:54: ed:e0:09:1b:37:d1:af:d6:8b:60:6b:e2:5f:ee:5d: fc:f7:d6:28:bd:1e:32:15:13:13:a2:fe:0b:1e:32: 02:31:63:82:8f:34:51:1d:16:80:04:46:1a:36:12: 44:39:0c:24:fc:9c:76:40:de:66:71:20:d9:8e:51: 2d:26:52:24:22:15:eb:e1:49:8c:53:32:5b:71:a8: 85:6f:92:bf:42:f3:35:ff:9f:8a:f0:c9:56:8c:4a: be:3a:e4:05:51:ca:ab:71:8c:a6:9f:51:6d:5e:40: 3e:28:59:df:03:67:22:05:4c:da:81:a6:c1:70:a7: 6b:38:f6:e0:78:cb:e6:86:5f:6a:24:8d:31:27:99: 12:09:13:40:fb:34:4d:ab:b9:af:76:b3:98:a6:3a: f4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:52:67:A8:0C:BF:76:B3:D4:58:12:7F:DF:8F:F0:CE:B8:F7:8E:CD X509v3 Authority Key Identifier: keyid:4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:e5:4d:8c:53:d1:8b:56:a7:a9:16:52:e1:1d:bf:d6:5a:e0: a1:25:ad:84:45:75:24:08:0c:fc:49:e2:1c:c6:99:07:b6:dc: 8c:52:ae:ab:84:e7:d2:44:84:5f:3e:5f:99:ad:9e:71:93:8c: 72:16:ac:c1:06:57:78:63:83:e8:55:b1:5d:b7:e6:c3:be:ba: b9:70:2f:32:56:f8:8f:e8:0e:1e:76:b5:9b:c8:81:46:32:ef: 1b:6d:2b:ee:a4:c4:01:57:32:b4:e9:b6:50:c3:61:fa:98:12: c7:1d:61:e7:e3:7e:8a:49:d5:d4:30:35:b3:16:84:31:75:08: 03:c1:fb:2f:e0:ec:1b:44:13:1d:bf:03:1f:f4:c7:f9:5e:23: 33:ac:dc:e0:8a:32:1e:18:ee:34:ce:b2:2c:75:6f:a4:4c:f8: cf:49:a4:99:c8:7c:8f:df:89:ac:54:05:a0:cd:37:c2:cc:f3: 17:e8:2d:4e:b4:50:3a:2c:78:03:87:16:d9:2a:9a:b8:31:05: c2:b8:6f:76:30:fc:e9:24:a3:e6:df:a4:e6:bd:29:fb:ab:a9: 66:90:61:2c:13:48:e1:9e:83:cf:cd:ee:32:96:d3:35:ed:04: d3:07:15:81:64:4d:7f:d4:1d:71:48:bc:ec:bf:18:e7:87:2e: 82:1b:7b:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmCxczae/kJHGa1BV8MqrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWQzZGVlNjM3ZGUzNGIxM2M3NGJhNmNmYjRkMjA1YmU1 NTYyN2UwHhcNMjUxMjI0MjMwMTAzWhcNMjUxMjI1MjMwMTAzWjAzMTEwLwYDVQQD Eyg1MjUyNjdhODBjYmY3NmIzZDQ1ODEyN2ZkZjhmZjBjZWI4Zjc4ZWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuvcKGYDdiKue444YPpTVvz7umkh osJaUbDvM+4PkPuTkVXcDFRk7RmMybHHSfSLzmMDHQXf+WQ6VENV9txYnjJByQfb xXYbDQJpknMRjTxOS4MduXQQfJI4jyc0GRbm8qCnLFW1SVTt4AkbN9Gv1otga+Jf 7l3899YovR4yFRMTov4LHjICMWOCjzRRHRaABEYaNhJEOQwk/Jx2QN5mcSDZjlEt JlIkIhXr4UmMUzJbcaiFb5K/QvM1/5+K8MlWjEq+OuQFUcqrcYymn1FtXkA+KFnf A2ciBUzagabBcKdrOPbgeMvmhl9qJI0xJ5kSCRNA+zRNq7mvdrOYpjr00QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJSZ6gMv3az1FgSf9+P8M64947NMB8GA1UdIwQY MBaAFE8dPe5jfeNLE8dLps+00gW+VWJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHgwOTdtTjk0MHNUeDB1bXo3VFNCYjVWWW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMWFkZjUtNzY0Mi00ZTkwLWEwN2Ut MWYxYjI0MTE4ZDg1LzEvVHgwOTdtTjk0MHNUeDB1bXo3VFNCYjVWWW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMWFkZjUtNzY0Mi00ZTkwLWEwN2UtMWYxYjI0MTE4ZDg1 LzEvVHgwOTdtTjk0MHNUeDB1bXo3VFNCYjVWWW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAteVNjFPR i1anqRZS4R2/1lrgoSWthEV1JAgM/EniHMaZB7bcjFKuq4Tn0kSEXz5fma2ecZOM chaswQZXeGOD6FWxXbfmw766uXAvMlb4j+gOHna1m8iBRjLvG20r7qTEAVcytOm2 UMNh+pgSxx1h5+N+iknV1DA1sxaEMXUIA8H7L+DsG0QTHb8DH/TH+V4jM6zc4Ioy HhjuNM6yLHVvpEz4z0mkmch8j9+JrFQFoM03wszzF+gtTrRQOix4A4cW2SqauDEF wrhvdjD86SSj5t+k5r0p+6upZpBhLBNI4Z6Dz83uMpbTNe0E0wcVgWRNf9QdcUi8 7L8Y54cught7Cg== -----END CERTIFICATE-----Generated at Thu Dec 25 01:22:18 2025 by rpki-client