This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft File: txRZXFDDUZIbDemldUChXlwcYYo.mft (raw, json) Hash identifier: JrkI1exM62G1q8BY24ts5H4vpxzdv4lmv9BVcX1cHJs= Subject key identifier: 49:B8:51:60:46:D4:75:DB:F9:D8:BA:1F:35:64:B9:20:E6:3A:D2:D8 Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A Certificate issuer: /CN=b714595c50c351921b0de9a57540a15e5c1c618a Certificate serial: 019AF5E5667AE2E92C0D0B78651CB26A9CDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft Manifest number: 11C5 Signing time: Sat 06 Dec 2025 23:00:43 +0000 Manifest this update: Sat 06 Dec 2025 23:00:43 +0000 Manifest next update: Sun 07 Dec 2025 23:00:43 +0000 Files and hashes: 1: 2m5iIAK03n8_QUvPwXckjr2TMEU.roa (hash: ZU7+W8vWoLJfyvrECJJAIJpcDrdAhqoCYTZBjsh+l9c=) 2: txRZXFDDUZIbDemldUChXlwcYYo.crl (hash: v5bHE69C55Im8gSRpyC3SC0U9HaqkrIYXFu3BqAVMtU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:66:7a:e2:e9:2c:0d:0b:78:65:1c:b2:6a:9c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a Validity Not Before: Dec 6 23:00:43 2025 GMT Not After : Dec 7 23:00:43 2025 GMT Subject: CN=49b8516046d475dbf9d8ba1f3564b920e63ad2d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7b:0b:4f:69:ed:b3:f0:d9:35:79:a2:a4:dc: 43:9a:e2:be:7f:cd:c8:66:39:e7:20:9f:31:3d:15: 81:39:72:60:8e:81:48:ba:4b:db:12:95:22:4d:fa: 04:23:f8:23:c5:77:79:ba:af:1a:5d:8a:9b:07:68: f2:c7:9d:05:f7:eb:3b:20:a5:31:8e:7c:d1:d7:20: cc:2f:20:7c:70:dc:41:3f:07:72:41:a4:ca:9e:0d: 57:ee:e2:68:c1:6d:38:05:8e:ba:8b:f4:8e:b6:68: c9:bd:59:67:6d:af:04:55:c3:a6:a6:97:b2:a4:ee: 75:c2:2b:42:e1:a9:36:2c:49:19:1c:02:b8:8d:3f: 4a:2e:5f:8e:36:41:b0:4e:2c:fa:d0:83:18:cd:ad: 45:b9:8c:e4:c0:b2:b3:c3:e2:40:20:59:0b:06:19: 44:58:a7:a8:46:6b:81:c4:54:7c:14:1f:8f:9c:d3: 2e:63:95:a3:a2:28:ce:02:51:9f:3b:42:7a:71:3c: 7f:03:c2:36:e6:ca:5c:9c:6c:2a:38:91:4f:c6:b9: f0:11:5a:1c:62:98:e4:c1:f3:ba:91:68:c7:e0:65: 6f:d0:54:3f:26:b5:73:c1:62:5d:7d:a5:99:4c:f5: 0d:e2:c6:73:ee:1b:5a:96:d9:f7:af:54:66:ce:2f: a0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B8:51:60:46:D4:75:DB:F9:D8:BA:1F:35:64:B9:20:E6:3A:D2:D8 X509v3 Authority Key Identifier: keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:bd:4a:47:13:12:6d:b8:b9:3e:5d:f4:70:66:42:82:75:fe: cc:34:bd:ec:30:78:26:f7:5d:08:99:67:40:2a:18:e8:fb:a5: be:20:eb:ca:6d:26:78:57:52:86:be:e0:33:14:23:06:1a:2a: ef:dc:ba:f2:c1:b3:ab:0f:de:b9:7c:27:68:3e:e9:e6:5a:2b: 66:80:d5:8b:7b:59:3a:bf:47:6d:01:7c:2d:9c:44:8a:04:cd: 27:9c:c1:2e:e0:41:4d:d6:7d:4d:c1:e5:94:0a:0f:d0:fb:74: d4:3b:8c:a3:b1:fe:cf:85:5b:8b:fb:88:73:1e:1c:f9:96:b0: 85:cd:3c:4e:4b:d4:2d:5b:d3:80:6b:4c:5d:b7:a4:f5:04:c8: 36:d0:c8:3d:c0:4f:7a:a9:73:b8:42:a0:eb:1e:d7:07:87:3c: 58:9b:a0:d0:cd:9c:ea:bf:ec:ff:c4:69:ce:51:65:31:34:ec: c4:28:6d:13:18:68:30:37:ea:46:8f:6f:5a:fd:db:cd:6d:dd: 2b:b4:11:e2:a2:2f:6e:0c:24:4c:3f:50:02:99:1f:59:7a:59: 4f:6d:83:77:ab:29:a7:10:55:8f:f6:3a:d5:0b:61:92:b4:1b: 46:8f:9c:6b:7b:76:4a:df:f2:08:51:34:26:d3:eb:6b:28:ab: ed:a8:08:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15WZ64uksDQt4ZRyyapzbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTQ1OTVjNTBjMzUxOTIxYjBkZTlhNTc1NDBhMTVlNWMx YzYxOGEwHhcNMjUxMjA2MjMwMDQzWhcNMjUxMjA3MjMwMDQzWjAzMTEwLwYDVQQD Eyg0OWI4NTE2MDQ2ZDQ3NWRiZjlkOGJhMWYzNTY0YjkyMGU2M2FkMmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXsLT2nts/DZNXmipNxDmuK+f83I ZjnnIJ8xPRWBOXJgjoFIukvbEpUiTfoEI/gjxXd5uq8aXYqbB2jyx50F9+s7IKUx jnzR1yDMLyB8cNxBPwdyQaTKng1X7uJowW04BY66i/SOtmjJvVlnba8EVcOmppey pO51witC4ak2LEkZHAK4jT9KLl+ONkGwTiz60IMYza1FuYzkwLKzw+JAIFkLBhlE WKeoRmuBxFR8FB+PnNMuY5WjoijOAlGfO0J6cTx/A8I25spcnGwqOJFPxrnwEVoc YpjkwfO6kWjH4GVv0FQ/JrVzwWJdfaWZTPUN4sZz7htaltn3r1Rmzi+gxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEm4UWBG1HXb+di6HzVkuSDmOtLYMB8GA1UdIwQY MBaAFLcUWVxQw1GSGw3ppXVAoV5cHGGKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhSWlhGRERVWkliRGVtbGRVQ2hYbHdjWVlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yYTQyMGQtOWQwZS00ZWE4LTk1YmMt ZjUzZDllMzZlOTVhLzEvdHhSWlhGRERVWkliRGVtbGRVQ2hYbHdjWVlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8yYTQyMGQtOWQwZS00ZWE4LTk1YmMtZjUzZDllMzZlOTVh LzEvdHhSWlhGRERVWkliRGVtbGRVQ2hYbHdjWVlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY71KRxMS bbi5Pl30cGZCgnX+zDS97DB4JvddCJlnQCoY6PulviDrym0meFdShr7gMxQjBhoq 79y68sGzqw/euXwnaD7p5lorZoDVi3tZOr9HbQF8LZxEigTNJ5zBLuBBTdZ9TcHl lAoP0Pt01DuMo7H+z4Vbi/uIcx4c+Zawhc08TkvULVvTgGtMXbek9QTINtDIPcBP eqlzuEKg6x7XB4c8WJug0M2c6r/s/8RpzlFlMTTsxChtExhoMDfqRo9vWv3bzW3d K7QR4qIvbgwkTD9QApkfWXpZT22Dd6sppxBVj/Y61QthkrQbRo+ca3t2St/yCFE0 JtPrayir7agIUQ== -----END CERTIFICATE-----Generated at Sun Dec 7 02:15:59 2025 by rpki-client