This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft File: txRZXFDDUZIbDemldUChXlwcYYo.mft (raw, json) Hash identifier: 8ImqcbcK1GuncZNHhrkIQ9aRgf8y+bjy8bgKJ3Lowl0= Subject key identifier: 8D:F6:8E:59:40:4E:62:5C:E2:BA:95:68:3B:71:2B:61:74:95:37:11 Authority key identifier: B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A Certificate issuer: /CN=b714595c50c351921b0de9a57540a15e5c1c618a Certificate serial: 019B2FD4BF5796A5962DB081364AD7CAAE92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft Manifest number: 11E3 Signing time: Thu 18 Dec 2025 05:00:30 +0000 Manifest this update: Thu 18 Dec 2025 05:00:30 +0000 Manifest next update: Fri 19 Dec 2025 05:00:30 +0000 Files and hashes: 1: 2m5iIAK03n8_QUvPwXckjr2TMEU.roa (hash: ZU7+W8vWoLJfyvrECJJAIJpcDrdAhqoCYTZBjsh+l9c=) 2: txRZXFDDUZIbDemldUChXlwcYYo.crl (hash: 8JY7D85eyRm8piSe0cE3Y7ngIoK/X7c43CLMxV+aAW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:d4:bf:57:96:a5:96:2d:b0:81:36:4a:d7:ca:ae:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b714595c50c351921b0de9a57540a15e5c1c618a Validity Not Before: Dec 18 05:00:30 2025 GMT Not After : Dec 19 05:00:30 2025 GMT Subject: CN=8df68e59404e625ce2ba95683b712b6174953711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:87:ce:89:f1:7b:8a:c1:e8:3b:8c:e6:9f:16: 0e:30:c0:51:95:0b:83:a1:ac:5d:95:0f:b8:15:58: 05:b4:7a:27:98:28:ef:90:24:f1:d5:26:1b:72:2d: d5:46:ab:fc:f3:8e:d0:d6:d3:70:27:6c:bf:4d:d7: cb:cc:7e:15:d0:e1:78:c0:c1:ca:56:6a:ac:28:70: e1:28:fd:34:f6:cf:aa:cd:36:df:03:16:24:77:25: 58:df:e0:af:a1:76:d1:80:4a:c7:7a:ca:c0:17:74: 94:e7:29:75:05:3c:af:7a:b4:f6:aa:84:b9:9e:b3: b8:3f:8b:1c:a5:f5:b1:74:a8:88:13:bf:60:31:47: b3:4c:66:0b:ce:bb:25:c4:1e:23:05:99:9f:da:5c: 18:73:c6:df:89:4c:44:0c:53:51:30:0c:f2:02:f5: 64:65:2c:86:5b:e8:e1:d7:36:07:10:11:c3:53:58: 65:24:a3:8b:22:fe:43:21:f6:a8:4d:b7:30:01:b0: f5:c3:af:06:c9:1d:5f:ed:92:50:28:ca:3b:73:ee: 35:c6:d1:4e:33:c9:79:0b:ed:cc:5f:82:93:fb:91: f1:12:da:03:77:7d:7d:54:96:df:79:b7:2d:3b:c6: 80:29:cd:53:08:86:79:f4:8d:11:6b:aa:ba:7f:50: ae:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:F6:8E:59:40:4E:62:5C:E2:BA:95:68:3B:71:2B:61:74:95:37:11 X509v3 Authority Key Identifier: keyid:B7:14:59:5C:50:C3:51:92:1B:0D:E9:A5:75:40:A1:5E:5C:1C:61:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txRZXFDDUZIbDemldUChXlwcYYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2a420d-9d0e-4ea8-95bc-f53d9e36e95a/1/txRZXFDDUZIbDemldUChXlwcYYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:77:41:63:2a:6d:76:b8:00:1f:e9:a0:9f:a0:91:65:67:b9: b0:e4:07:ac:72:76:c2:cb:e8:e8:84:ca:52:18:11:16:e5:57: 48:d7:8f:94:10:f3:a2:6c:94:fc:73:5c:9d:b0:26:89:c1:e1: 58:9e:f3:1d:48:3f:12:23:ed:c7:a1:ea:e6:bf:ee:11:52:4e: 84:cb:47:32:70:39:f2:70:11:65:11:e7:2a:d8:c0:64:3e:23: ff:32:31:1a:d3:d4:08:03:f6:61:e7:cc:2a:49:10:df:04:99: c8:3a:7b:d3:ea:5c:4a:ec:e0:3c:cf:69:92:80:7b:f4:6c:6c: 73:73:e7:a2:c7:1c:57:50:30:7f:99:30:ea:af:2e:5f:84:8f: b8:8e:eb:b6:ad:d2:ce:79:80:aa:8b:e0:26:75:2f:83:0e:7f: 0e:a3:68:a1:25:94:63:cb:1a:03:a0:d9:3e:1b:3d:21:8c:a7: af:fb:18:7a:bf:24:fb:da:0f:42:36:8e:81:bf:46:b7:0b:e8: f3:97:13:64:ca:e8:9e:69:c0:2a:48:f5:ac:3c:52:a5:1b:05: f0:c1:72:0d:4e:d1:87:0a:01:87:95:3d:9e:88:ec:f0:d3:b2: 06:1a:dc:63:62:4c:19:e2:de:18:7e:79:3a:dc:a9:d0:25:6d: 4c:70:11:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsv1L9XlqWWLbCBNkrXyq6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTQ1OTVjNTBjMzUxOTIxYjBkZTlhNTc1NDBhMTVlNWMx YzYxOGEwHhcNMjUxMjE4MDUwMDMwWhcNMjUxMjE5MDUwMDMwWjAzMTEwLwYDVQQD Eyg4ZGY2OGU1OTQwNGU2MjVjZTJiYTk1NjgzYjcxMmI2MTc0OTUzNzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4fOifF7isHoO4zmnxYOMMBRlQuD oaxdlQ+4FVgFtHonmCjvkCTx1SYbci3VRqv8847Q1tNwJ2y/TdfLzH4V0OF4wMHK VmqsKHDhKP009s+qzTbfAxYkdyVY3+CvoXbRgErHesrAF3SU5yl1BTyverT2qoS5 nrO4P4scpfWxdKiIE79gMUezTGYLzrslxB4jBZmf2lwYc8bfiUxEDFNRMAzyAvVk ZSyGW+jh1zYHEBHDU1hlJKOLIv5DIfaoTbcwAbD1w68GyR1f7ZJQKMo7c+41xtFO M8l5C+3MX4KT+5HxEtoDd319VJbfebctO8aAKc1TCIZ59I0Ra6q6f1Cu1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI32jllATmJc4rqVaDtxK2F0lTcRMB8GA1UdIwQY MBaAFLcUWVxQw1GSGw3ppXVAoV5cHGGKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhSWlhGRERVWkliRGVtbGRVQ2hYbHdjWVlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8yYTQyMGQtOWQwZS00ZWE4LTk1YmMt ZjUzZDllMzZlOTVhLzEvdHhSWlhGRERVWkliRGVtbGRVQ2hYbHdjWVlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8yYTQyMGQtOWQwZS00ZWE4LTk1YmMtZjUzZDllMzZlOTVh LzEvdHhSWlhGRERVWkliRGVtbGRVQ2hYbHdjWVlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAXdBYypt drgAH+mgn6CRZWe5sOQHrHJ2wsvo6ITKUhgRFuVXSNePlBDzomyU/HNcnbAmicHh WJ7zHUg/EiPtx6Hq5r/uEVJOhMtHMnA58nARZRHnKtjAZD4j/zIxGtPUCAP2YefM KkkQ3wSZyDp70+pcSuzgPM9pkoB79Gxsc3PnosccV1Awf5kw6q8uX4SPuI7rtq3S znmAqovgJnUvgw5/DqNooSWUY8saA6DZPhs9IYynr/sYer8k+9oPQjaOgb9Gtwvo 85cTZMronmnAKkj1rDxSpRsF8MFyDU7RhwoBh5U9nojs8NOyBhrcY2JMGeLeGH55 Otyp0CVtTHARaQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:11:51 2025 by rpki-client