This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft File: txiFnUEvm1hypYl3Mg0tCDvXoEs.mft (raw, json) Hash identifier: UaS8zhb2T0e152LX5fjZy+xBmERj24/2jNj0yPOg+kE= Subject key identifier: 66:A7:91:C7:FF:82:8C:94:4A:DC:86:26:33:53:4F:99:3B:CA:75:3E Authority key identifier: B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B Certificate issuer: /CN=b718859d412f9b5872a58977320d2d083bd7a04b Certificate serial: 019AF50B650D09D16AA9166E508882D4DF5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft Manifest number: 114C Signing time: Sat 06 Dec 2025 19:02:35 +0000 Manifest this update: Sat 06 Dec 2025 19:02:35 +0000 Manifest next update: Sun 07 Dec 2025 19:02:35 +0000 Files and hashes: 1: txiFnUEvm1hypYl3Mg0tCDvXoEs.crl (hash: TEk2G89K4X70ev5R9P6tVWo3caOpyh2patL/m4HIGmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:65:0d:09:d1:6a:a9:16:6e:50:88:82:d4:df:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b718859d412f9b5872a58977320d2d083bd7a04b Validity Not Before: Dec 6 19:02:35 2025 GMT Not After : Dec 7 19:02:35 2025 GMT Subject: CN=66a791c7ff828c944adc862633534f993bca753e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:ff:59:2d:09:9b:e2:a6:d9:78:da:69:a3: 16:54:20:76:a8:b6:87:b2:7d:ed:31:97:b3:82:54: ab:6c:ed:78:9c:1f:4e:38:6f:7e:80:7b:7e:69:e3: ef:a8:77:c6:3e:fe:b5:c7:31:b6:88:39:f1:72:b9: 02:2b:b2:b7:0d:b0:fa:c2:f1:88:da:f1:55:42:8d: bc:29:d1:27:14:52:86:42:ea:70:fa:a8:55:e3:d1: 4c:8d:d8:49:b0:87:80:c9:69:e9:9d:51:65:29:92: 00:37:4e:d7:46:82:e2:1a:d2:c0:e8:e0:a2:63:42: bb:29:2b:fb:fb:8b:e6:e7:83:e4:9e:ca:46:41:eb: 17:35:9d:d6:7b:ce:25:5a:5f:0e:59:75:6b:60:67: 79:0f:8c:b6:c9:5f:d5:88:0c:20:7c:4a:60:d0:35: 54:d3:5d:fd:d4:e2:91:c7:ea:4d:63:24:7f:8d:5a: 7c:94:23:17:2a:f4:ee:2c:48:29:00:e8:e0:48:4f: a9:69:a5:42:dc:0d:43:d2:ca:52:dd:e3:66:93:4e: ce:09:a0:2d:20:fc:f1:84:e9:91:ca:c4:6e:7e:84: 38:37:e7:d7:cf:3d:0d:b5:7d:61:e8:35:c1:df:b3: da:07:8a:2b:8f:73:6a:d9:95:8f:0c:e7:0f:cb:5f: fe:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:A7:91:C7:FF:82:8C:94:4A:DC:86:26:33:53:4F:99:3B:CA:75:3E X509v3 Authority Key Identifier: keyid:B7:18:85:9D:41:2F:9B:58:72:A5:89:77:32:0D:2D:08:3B:D7:A0:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txiFnUEvm1hypYl3Mg0tCDvXoEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6ef14a-9914-4318-9a51-d7bcedc60579/1/txiFnUEvm1hypYl3Mg0tCDvXoEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:2a:c5:5c:e8:b8:31:81:cc:b7:ba:ef:04:75:1e:43:c8:b2: bc:1b:0c:78:02:8d:5c:ae:c2:7e:b8:1c:fd:9e:66:5b:a6:88: 3b:da:0d:ff:60:b7:f6:43:09:df:7b:c5:fd:6e:6d:e1:c4:15: 41:e2:d8:26:f1:73:0d:f4:24:d5:cc:60:ba:36:1b:de:e7:17: 6f:2d:fa:c9:dd:4d:10:d0:b9:ec:aa:8d:d0:96:c3:ea:76:93: d5:6a:91:1b:24:57:81:be:c6:33:20:70:2c:c2:49:bc:82:09: 65:01:60:89:e3:38:cc:c3:e7:88:86:59:7e:24:97:42:bf:67: af:99:c6:8f:79:47:5b:93:45:05:3b:5c:cf:42:23:6d:e5:d4: b9:a7:a1:07:d2:22:10:45:e5:0b:b0:ce:48:1e:92:72:9b:af: f7:bc:ed:2c:28:02:23:f3:26:12:65:65:3c:6b:7f:c9:d0:f7: e7:90:1f:f0:d5:83:6c:5b:f2:87:67:0b:3a:e0:d7:a5:e0:fc: 4c:5f:b2:4f:33:69:96:b2:1c:27:61:b4:9c:eb:ba:35:25:b6: 70:0f:d8:2a:54:4c:e4:65:fc:98:3e:dc:2c:0f:d4:14:5c:ca: dd:d0:94:96:1d:34:81:1b:fc:44:be:1e:e2:cc:6d:26:e5:94: 48:ee:5b:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C2UNCdFqqRZuUIiC1N9fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTg4NTlkNDEyZjliNTg3MmE1ODk3NzMyMGQyZDA4M2Jk N2EwNGIwHhcNMjUxMjA2MTkwMjM1WhcNMjUxMjA3MTkwMjM1WjAzMTEwLwYDVQQD Eyg2NmE3OTFjN2ZmODI4Yzk0NGFkYzg2MjYzMzUzNGY5OTNiY2E3NTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXP/WS0Jm+Km2XjaaaMWVCB2qLaH sn3tMZezglSrbO14nB9OOG9+gHt+aePvqHfGPv61xzG2iDnxcrkCK7K3DbD6wvGI 2vFVQo28KdEnFFKGQupw+qhV49FMjdhJsIeAyWnpnVFlKZIAN07XRoLiGtLA6OCi Y0K7KSv7+4vm54PknspGQesXNZ3We84lWl8OWXVrYGd5D4y2yV/ViAwgfEpg0DVU 01391OKRx+pNYyR/jVp8lCMXKvTuLEgpAOjgSE+paaVC3A1D0spS3eNmk07OCaAt IPzxhOmRysRufoQ4N+fXzz0NtX1h6DXB37PaB4orj3Nq2ZWPDOcPy1/+EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGankcf/goyUStyGJjNTT5k7ynU+MB8GA1UdIwQY MBaAFLcYhZ1BL5tYcqWJdzINLQg716BLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhpRm5VRXZtMWh5cFlsM01nMHRDRHZYb0VzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82ZWYxNGEtOTkxNC00MzE4LTlhNTEt ZDdiY2VkYzYwNTc5LzEvdHhpRm5VRXZtMWh5cFlsM01nMHRDRHZYb0VzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS82ZWYxNGEtOTkxNC00MzE4LTlhNTEtZDdiY2VkYzYwNTc5 LzEvdHhpRm5VRXZtMWh5cFlsM01nMHRDRHZYb0VzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiyrFXOi4 MYHMt7rvBHUeQ8iyvBsMeAKNXK7Cfrgc/Z5mW6aIO9oN/2C39kMJ33vF/W5t4cQV QeLYJvFzDfQk1cxgujYb3ucXby36yd1NENC57KqN0JbD6naT1WqRGyRXgb7GMyBw LMJJvIIJZQFgieM4zMPniIZZfiSXQr9nr5nGj3lHW5NFBTtcz0IjbeXUuaehB9Ii EEXlC7DOSB6Scpuv97ztLCgCI/MmEmVlPGt/ydD355Af8NWDbFvyh2cLOuDXpeD8 TF+yTzNplrIcJ2G0nOu6NSW2cA/YKlRM5GX8mD7cLA/UFFzK3dCUlh00gRv8RL4e 4sxtJuWUSO5bgA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:01:37 2025 by rpki-client