This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft File: TxI-JI5uwDaOBxI0X3JtcfYPgms.mft (raw, json) Hash identifier: uls8OvkY+uUKavZzd6JiPtqNKL5clj3HSSCOYHk+3Ks= Subject key identifier: FE:68:A1:42:6E:CB:90:AC:1E:9D:95:0F:0A:69:41:EA:29:64:66:EF Authority key identifier: 4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B Certificate issuer: /CN=4f123e248e6ec0368e0712345f726d71f60f826b Certificate serial: 019AF2094A23A2E9DFBD93CBAB0E79826B74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:26 +0000 Manifest this update: Sat 06 Dec 2025 05:01:26 +0000 Manifest next update: Sun 07 Dec 2025 05:01:26 +0000 Files and hashes: 1: TxI-JI5uwDaOBxI0X3JtcfYPgms.crl (hash: hEp4rLif0ddvRzvc4+KHtWnaprTKdrVU+Bpb0xg3XZs=) 2: txevIB_6jhleI8mehx3u1ubhM4E.roa (hash: ttQSgL5wxWdGk+Bs6UGV09lAGc4vxzIOxHjXzQQIn4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:4a:23:a2:e9:df:bd:93:cb:ab:0e:79:82:6b:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f123e248e6ec0368e0712345f726d71f60f826b Validity Not Before: Dec 6 05:01:26 2025 GMT Not After : Dec 7 05:01:26 2025 GMT Subject: CN=fe68a1426ecb90ac1e9d950f0a6941ea296466ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:39:8d:89:09:7e:82:c6:60:09:da:e3:39: 6f:6d:b4:2d:93:2c:e3:b8:73:14:07:e7:c2:7e:7d: 93:3b:a4:7f:2f:50:e8:17:5e:06:eb:97:4d:f8:2f: ee:c8:70:bc:8f:40:9c:62:b5:ab:bd:ac:e1:54:51: 61:c7:0a:c4:06:fa:02:41:94:ae:f4:5c:a8:64:e7: c3:86:09:ce:5c:1a:8a:42:c1:bc:13:20:e9:92:bf: a8:44:dc:c2:af:46:b5:27:55:7c:15:22:5a:06:5b: 25:9b:14:ca:95:49:d3:8a:b6:a0:fd:e3:ab:7d:8a: 21:5b:f2:73:c3:2b:ef:5f:ce:0f:56:e0:f0:7e:38: ec:f1:b9:ce:38:95:0d:07:af:68:04:5d:7f:da:f3: 18:09:f9:5a:03:66:6d:40:7d:8e:e6:d9:e6:64:a9: c3:43:fd:04:ab:4e:46:ff:e5:11:40:c3:1f:45:ae: 94:d0:31:88:b9:91:8a:00:a5:b4:1e:f6:96:52:0b: 24:54:1c:94:3e:1c:df:88:03:d4:5a:e5:93:14:11: cf:d0:7d:47:4e:b9:a1:30:2b:d0:8a:d0:c9:2f:6a: f3:46:82:7a:40:94:1a:34:fd:c5:30:8c:c1:29:7c: 35:5e:69:74:13:fe:a2:96:a3:d5:48:b5:ea:69:3b: 8d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:68:A1:42:6E:CB:90:AC:1E:9D:95:0F:0A:69:41:EA:29:64:66:EF X509v3 Authority Key Identifier: keyid:4F:12:3E:24:8E:6E:C0:36:8E:07:12:34:5F:72:6D:71:F6:0F:82:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxI-JI5uwDaOBxI0X3JtcfYPgms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6d9ce2-6d88-4977-ae06-c1e941e59c14/1/TxI-JI5uwDaOBxI0X3JtcfYPgms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:80:78:9b:59:14:db:cd:da:ab:cc:97:74:d3:ba:58:78:ac: 3c:4c:97:c1:e7:d7:37:25:d2:cf:d4:ee:72:87:9b:2e:97:7a: c8:66:20:9f:e9:d7:84:91:91:c9:9a:a2:09:05:2f:03:af:a5: 05:4f:ea:11:4b:a4:ba:fe:01:91:27:46:3e:ff:b8:86:19:f1: 90:b0:ef:b8:03:2b:5a:27:64:5a:a8:fb:bf:8b:e9:6b:19:06: 40:64:30:5c:91:fd:b9:cf:49:d4:8d:a4:e0:b4:f5:bc:69:da: fc:f1:cb:bc:ba:19:3f:10:3f:ce:39:0e:0b:91:16:49:fc:dc: bc:b6:eb:04:f8:54:5e:39:89:9c:2a:e3:4c:78:50:62:52:b7: f7:28:32:8c:ab:70:14:62:cc:f8:23:0b:90:c1:ad:a5:f2:aa: 13:3b:f3:55:f6:18:c8:8d:aa:d6:69:69:06:98:4a:08:2a:ff: bd:01:18:16:31:34:4a:41:85:c2:37:5d:c1:df:31:c2:2c:e8: e1:8b:f2:4b:42:b2:59:16:2e:f2:f3:d3:1b:64:90:8a:69:04: 28:94:b2:82:ce:be:f8:5d:0b:36:7f:1d:44:b4:c4:9a:56:4c: c9:ae:97:3e:8f:19:a9:e4:c9:9a:c5:13:6d:fc:90:50:b3:36: 05:50:b6:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUojounfvZPLqw55gmt0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTIzZTI0OGU2ZWMwMzY4ZTA3MTIzNDVmNzI2ZDcxZjYw ZjgyNmIwHhcNMjUxMjA2MDUwMTI2WhcNMjUxMjA3MDUwMTI2WjAzMTEwLwYDVQQD EyhmZTY4YTE0MjZlY2I5MGFjMWU5ZDk1MGYwYTY5NDFlYTI5NjQ2NmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlw5jYkJfoLGYAna4zlvbbQtkyzj uHMUB+fCfn2TO6R/L1DoF14G65dN+C/uyHC8j0CcYrWrvazhVFFhxwrEBvoCQZSu 9FyoZOfDhgnOXBqKQsG8EyDpkr+oRNzCr0a1J1V8FSJaBlslmxTKlUnTirag/eOr fYohW/JzwyvvX84PVuDwfjjs8bnOOJUNB69oBF1/2vMYCflaA2ZtQH2O5tnmZKnD Q/0Eq05G/+URQMMfRa6U0DGIuZGKAKW0HvaWUgskVByUPhzfiAPUWuWTFBHP0H1H TrmhMCvQitDJL2rzRoJ6QJQaNP3FMIzBKXw1Xml0E/6ilqPVSLXqaTuNwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5ooUJuy5CsHp2VDwppQeopZGbvMB8GA1UdIwQY MBaAFE8SPiSObsA2jgcSNF9ybXH2D4JrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhJLUpJNXV3RGFPQnhJMFgzSnRjZllQZ21zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82ZDljZTItNmQ4OC00OTc3LWFlMDYt YzFlOTQxZTU5YzE0LzEvVHhJLUpJNXV3RGFPQnhJMFgzSnRjZllQZ21zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82ZDljZTItNmQ4OC00OTc3LWFlMDYtYzFlOTQxZTU5YzE0 LzEvVHhJLUpJNXV3RGFPQnhJMFgzSnRjZllQZ21zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIB4m1kU 283aq8yXdNO6WHisPEyXwefXNyXSz9TucoebLpd6yGYgn+nXhJGRyZqiCQUvA6+l BU/qEUukuv4BkSdGPv+4hhnxkLDvuAMrWidkWqj7v4vpaxkGQGQwXJH9uc9J1I2k 4LT1vGna/PHLvLoZPxA/zjkOC5EWSfzcvLbrBPhUXjmJnCrjTHhQYlK39ygyjKtw FGLM+CMLkMGtpfKqEzvzVfYYyI2q1mlpBphKCCr/vQEYFjE0SkGFwjddwd8xwizo 4YvyS0KyWRYu8vPTG2SQimkEKJSygs6++F0LNn8dRLTEmlZMya6XPo8ZqeTJmsUT bfyQULM2BVC24Q== -----END CERTIFICATE-----Generated at Sat Dec 6 10:37:44 2025 by rpki-client