This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft File: txYnuSOf6jRXzYfLk3q0x5hsrAk.mft (raw, json) Hash identifier: lSZeMMF4Rzj9X2btERaW4n9mwLWrf+5rKmUMCCzJPXE= Subject key identifier: 9B:FF:36:25:3F:0B:3F:60:57:8A:C7:E8:B5:A7:6F:D2:C9:A2:83:F4 Authority key identifier: B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09 Certificate issuer: /CN=b71627b9239fea3457cd87cb937ab4c7986cac09 Certificate serial: 019AF5779456B3F60EA0EA4F38230C6993D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft Manifest number: 0558 Signing time: Sat 06 Dec 2025 21:00:45 +0000 Manifest this update: Sat 06 Dec 2025 21:00:45 +0000 Manifest next update: Sun 07 Dec 2025 21:00:45 +0000 Files and hashes: 1: lwSr5uzjpcNzll7kxv78DQgmpLQ.roa (hash: +N2Mv9Vtx1M52yKl9lhZABcTTfTz0G5hzXqojyxLz6g=) 2: txYnuSOf6jRXzYfLk3q0x5hsrAk.crl (hash: +N4byo1zAMXOEF78FYqKrLx5Fudj6ETKiVMnC2Qdu2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:94:56:b3:f6:0e:a0:ea:4f:38:23:0c:69:93:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71627b9239fea3457cd87cb937ab4c7986cac09 Validity Not Before: Dec 6 21:00:45 2025 GMT Not After : Dec 7 21:00:45 2025 GMT Subject: CN=9bff36253f0b3f60578ac7e8b5a76fd2c9a283f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d4:48:95:4a:d2:9f:09:d6:07:83:e9:59:f9: 78:63:cc:3f:c4:16:5c:87:f2:70:cc:d0:8a:a2:e2: b6:d1:2f:4a:97:8b:01:81:a2:d9:76:37:7b:21:7e: 0a:77:11:1f:41:0c:3d:6d:28:9e:8d:b2:bc:27:5c: 9f:14:02:39:db:61:c2:01:2e:f1:5e:a0:d1:f4:13: 48:13:de:7f:ac:a1:72:0e:3f:92:87:30:0d:9b:14: 9d:6c:d3:aa:eb:a0:b8:6a:62:35:6a:bb:60:45:2e: b3:90:9e:55:ac:da:f8:ee:dc:d8:37:0c:64:b4:3c: d8:67:15:e7:8b:69:1b:82:8a:8a:9e:9e:3d:91:d0: cb:02:d8:13:7d:23:c3:17:62:22:71:8b:81:a9:31: ee:ea:cb:3d:5b:ca:27:0c:f6:5a:48:74:c6:22:70: ff:61:e0:1c:78:84:6c:5e:62:f2:15:f0:ba:0d:18: 2e:10:86:41:61:b2:5e:3f:36:e2:17:fa:c9:9d:60: 4e:0a:30:ea:8d:be:e1:09:1b:b5:b5:25:a1:17:03: ca:61:13:eb:85:ff:85:e3:61:cd:46:d1:65:57:fd: 58:ed:be:d8:e7:52:d8:3a:68:7f:b6:0c:de:c9:41: 7b:46:04:e9:88:e7:98:e9:2e:87:3c:45:d4:da:a1: 37:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:FF:36:25:3F:0B:3F:60:57:8A:C7:E8:B5:A7:6F:D2:C9:A2:83:F4 X509v3 Authority Key Identifier: keyid:B7:16:27:B9:23:9F:EA:34:57:CD:87:CB:93:7A:B4:C7:98:6C:AC:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txYnuSOf6jRXzYfLk3q0x5hsrAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/5e46c1-f43b-4e12-bb7d-a5feb3973512/1/txYnuSOf6jRXzYfLk3q0x5hsrAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:48:9c:d9:06:8d:80:2b:29:e3:7e:3f:81:7d:48:66:35:14: cc:4c:0d:bf:b1:fd:03:63:e8:e8:67:d3:9f:d3:7d:fa:3a:1d: c6:18:75:33:11:7d:ab:b4:1a:2d:4d:4f:bb:62:5e:76:ee:16: 17:a8:af:4e:e4:b4:e9:4d:30:41:89:59:f8:98:ad:88:23:83: ba:53:f7:89:0c:45:98:7e:91:5c:ec:d1:35:a9:ee:8d:8e:ba: e0:c1:e2:07:9a:f6:c7:e9:12:01:e5:52:3d:b7:b2:31:b5:86: 35:f7:ea:69:95:d9:a9:dd:f8:2f:86:20:c2:47:74:81:a1:a5: e3:d9:69:91:37:a3:d7:3a:9e:55:a2:08:ee:ae:8e:07:7e:da: 57:4e:c2:f3:d8:22:23:53:5d:fc:32:35:8c:3b:52:50:2b:1a: 0d:db:f9:ac:90:12:e8:22:ac:27:42:bd:c4:37:bb:57:54:0d: b2:48:43:fb:1e:8c:3d:a2:27:97:ae:e3:cc:17:14:79:13:f0: 92:e2:dd:0c:4d:13:7f:db:f1:af:ad:6a:62:11:ed:a4:d8:7f: c6:0c:46:08:1c:e7:c8:3c:39:53:d3:fb:ca:4b:37:ba:9f:cf: 38:c9:60:fc:0c:c1:03:dc:15:87:52:75:8d:67:0e:58:d8:5e: 24:10:01:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d5RWs/YOoOpPOCMMaZPQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTYyN2I5MjM5ZmVhMzQ1N2NkODdjYjkzN2FiNGM3OTg2 Y2FjMDkwHhcNMjUxMjA2MjEwMDQ1WhcNMjUxMjA3MjEwMDQ1WjAzMTEwLwYDVQQD Eyg5YmZmMzYyNTNmMGIzZjYwNTc4YWM3ZThiNWE3NmZkMmM5YTI4M2Y0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydRIlUrSnwnWB4PpWfl4Y8w/xBZc h/JwzNCKouK20S9Kl4sBgaLZdjd7IX4KdxEfQQw9bSiejbK8J1yfFAI522HCAS7x XqDR9BNIE95/rKFyDj+ShzANmxSdbNOq66C4amI1artgRS6zkJ5VrNr47tzYNwxk tDzYZxXni2kbgoqKnp49kdDLAtgTfSPDF2IicYuBqTHu6ss9W8onDPZaSHTGInD/ YeAceIRsXmLyFfC6DRguEIZBYbJePzbiF/rJnWBOCjDqjb7hCRu1tSWhFwPKYRPr hf+F42HNRtFlV/1Y7b7Y51LYOmh/tgzeyUF7RgTpiOeY6S6HPEXU2qE3DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJv/NiU/Cz9gV4rH6LWnb9LJooP0MB8GA1UdIwQY MBaAFLcWJ7kjn+o0V82Hy5N6tMeYbKwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhZbnVTT2Y2alJYellmTGszcTB4NWhzckFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy81ZTQ2YzEtZjQzYi00ZTEyLWJiN2Qt YTVmZWIzOTczNTEyLzEvdHhZbnVTT2Y2alJYellmTGszcTB4NWhzckFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy81ZTQ2YzEtZjQzYi00ZTEyLWJiN2QtYTVmZWIzOTczNTEy LzEvdHhZbnVTT2Y2alJYellmTGszcTB4NWhzckFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUic2QaN gCsp434/gX1IZjUUzEwNv7H9A2Po6GfTn9N9+jodxhh1MxF9q7QaLU1Pu2Jedu4W F6ivTuS06U0wQYlZ+JitiCODulP3iQxFmH6RXOzRNanujY664MHiB5r2x+kSAeVS PbeyMbWGNffqaZXZqd34L4Ygwkd0gaGl49lpkTej1zqeVaII7q6OB37aV07C89gi I1Nd/DI1jDtSUCsaDdv5rJAS6CKsJ0K9xDe7V1QNskhD+x6MPaInl67jzBcUeRPw kuLdDE0Tf9vxr61qYhHtpNh/xgxGCBznyDw5U9P7yks3up/POMlg/AzBA9wVh1J1 jWcOWNheJBABBg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:07:49 2025 by rpki-client