This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft File: TxUpALDTI9NtlFEKsLAck_RRfIk.mft (raw, json) Hash identifier: y2RrYnDpNXY704xtO5HD3iV1KigXtYZxgYn7Kbbu908= Subject key identifier: 28:B1:4E:F1:49:B8:9C:08:D8:94:86:4D:C8:34:6A:04:6D:8F:AB:95 Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89 Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89 Certificate serial: 019AF051252C634A6BC820DB9A94946E0573 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 21:00:41 +0000 Manifest this update: Fri 05 Dec 2025 21:00:41 +0000 Manifest next update: Sat 06 Dec 2025 21:00:41 +0000 Files and hashes: 1: 8Zjvv60lC8NGP14VoQ8RNeofQIM.roa (hash: P7KtzcRE9odqg/BTLMYwDj7fh0a6LBnncSFvQDv5Bp0=) 2: FpKKPofiudOty7FxUMr6flRZ1Yw.roa (hash: 19qYKj9K4I/iMwutyl2SfY76xgKtvj/68+BwpIEN2Kg=) 3: TxUpALDTI9NtlFEKsLAck_RRfIk.crl (hash: IgYgF2nKN6qyFoPenng49woutj5HOvwn8HVZaJsKdLc=) 4: yOx4nY5h71UsEVGCdqce7EnVtbw.roa (hash: pblfkKrPcMJNUK4hgNwzxNA61gyD6ePezh9yKZ6o3M4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:25:2c:63:4a:6b:c8:20:db:9a:94:94:6e:05:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89 Validity Not Before: Dec 5 21:00:41 2025 GMT Not After : Dec 6 21:00:41 2025 GMT Subject: CN=28b14ef149b89c08d894864dc8346a046d8fab95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0c:cf:91:85:cd:9d:5b:eb:4a:04:3f:60:fd: f2:26:8b:e9:6e:5a:82:26:1a:84:23:13:6c:87:55: e1:83:b3:94:83:7c:88:4b:4e:7c:89:bb:e2:69:f3: ea:56:70:9c:46:b5:f6:e2:8e:2f:a2:40:a8:67:40: 79:9d:8f:b8:ad:dd:6f:62:5d:69:44:ca:df:e7:5a: a5:23:1f:7e:ec:55:4a:b2:12:1b:b5:e7:cd:af:2f: 9f:b5:dd:a9:51:8b:3f:e8:ff:d5:f6:03:f0:ef:5e: 49:67:7b:c1:74:f9:3e:04:2a:a7:eb:20:c7:16:4a: fd:b2:57:21:da:51:58:fe:3a:d2:c2:c6:81:94:c5: 78:33:1f:d9:00:3f:ab:df:84:e0:b4:ae:d1:e3:e9: 6b:b1:b4:d8:cd:8d:a0:23:1e:3d:45:d2:b8:5b:1b: 26:76:2a:0c:64:f9:80:48:4c:27:2a:b2:1b:be:89: c0:4a:f5:59:32:2e:9d:49:cb:00:64:70:44:00:6b: 07:60:da:ee:32:9b:4e:ca:a7:a3:40:d0:38:c9:bd: 16:09:f0:2c:a7:1f:09:bd:47:73:35:54:8a:5b:92: f3:97:48:d8:a7:b0:f4:14:c9:38:e0:ff:f4:61:83: dd:68:43:e1:3f:64:af:10:bf:86:41:d1:77:e1:65: 7c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B1:4E:F1:49:B8:9C:08:D8:94:86:4D:C8:34:6A:04:6D:8F:AB:95 X509v3 Authority Key Identifier: keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:22:40:94:54:15:f3:ac:73:6e:cb:0b:56:d9:4d:46:45:43: b2:fa:ec:cc:c9:3a:3b:a9:72:f1:31:81:0c:1f:63:02:82:04: 79:d3:84:8b:44:95:b2:07:99:14:8d:0f:74:28:56:9b:b8:03: 60:22:c7:23:98:25:86:33:f6:5c:bf:a8:9d:a2:ea:1b:20:ff: 14:c9:28:9d:ab:56:06:97:cb:5c:78:b7:44:c2:fd:db:1e:4c: 99:de:ac:c6:3c:e4:30:a0:c6:c6:71:af:a3:f8:de:26:c1:e9: 98:c0:c7:0b:85:4c:ef:83:75:ab:ed:ac:01:fe:13:a9:74:18: 92:50:07:05:cd:18:99:72:f1:cd:7b:aa:4e:c9:e8:75:e9:d4: 9c:be:a3:78:08:34:b6:7a:af:a7:38:85:c4:a7:32:dd:4c:7e: 40:a4:18:ff:41:a2:bb:33:a0:4b:bb:a6:05:dd:f2:7f:18:44: 6a:83:60:a0:2d:ee:41:a0:1e:be:ae:d6:0b:33:bd:c2:1c:a9: 8d:1f:64:1a:cd:7a:0e:9a:67:bb:ef:d5:94:7d:0e:7c:a2:ee: 7c:a6:7f:2f:de:56:4a:1a:d4:d1:27:98:30:8a:17:bb:b6:dc: 2a:bc:98:5c:54:b8:80:d1:46:bc:69:28:e0:85:84:77:00:c3: 61:f9:5d:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUSUsY0pryCDbmpSUbgVzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTUyOTAwYjBkMzIzZDM2ZDk0NTEwYWIwYjAxYzkzZjQ1 MTdjODkwHhcNMjUxMjA1MjEwMDQxWhcNMjUxMjA2MjEwMDQxWjAzMTEwLwYDVQQD EygyOGIxNGVmMTQ5Yjg5YzA4ZDg5NDg2NGRjODM0NmEwNDZkOGZhYjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQzPkYXNnVvrSgQ/YP3yJovpblqC JhqEIxNsh1Xhg7OUg3yIS058ibviafPqVnCcRrX24o4vokCoZ0B5nY+4rd1vYl1p RMrf51qlIx9+7FVKshIbtefNry+ftd2pUYs/6P/V9gPw715JZ3vBdPk+BCqn6yDH Fkr9slch2lFY/jrSwsaBlMV4Mx/ZAD+r34TgtK7R4+lrsbTYzY2gIx49RdK4Wxsm dioMZPmASEwnKrIbvonASvVZMi6dScsAZHBEAGsHYNruMptOyqejQNA4yb0WCfAs px8JvUdzNVSKW5Lzl0jYp7D0FMk44P/0YYPdaEPhP2SvEL+GQdF34WV8HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCixTvFJuJwI2JSGTcg0agRtj6uVMB8GA1UdIwQY MBaAFE8VKQCw0yPTbZRRCrCwHJP0UXyJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhVcEFMRFRJOU50bEZFS3NMQWNrX1JSZklrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC84OWZmM2ItMTI2My00Y2RkLTljYWQt MjNkZjhkZGRmOTc4LzEvVHhVcEFMRFRJOU50bEZFS3NMQWNrX1JSZklrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC84OWZmM2ItMTI2My00Y2RkLTljYWQtMjNkZjhkZGRmOTc4 LzEvVHhVcEFMRFRJOU50bEZFS3NMQWNrX1JSZklrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCJAlFQV 86xzbssLVtlNRkVDsvrszMk6O6ly8TGBDB9jAoIEedOEi0SVsgeZFI0PdChWm7gD YCLHI5glhjP2XL+onaLqGyD/FMkonatWBpfLXHi3RML92x5Mmd6sxjzkMKDGxnGv o/jeJsHpmMDHC4VM74N1q+2sAf4TqXQYklAHBc0YmXLxzXuqTsnodenUnL6jeAg0 tnqvpziFxKcy3Ux+QKQY/0GiuzOgS7umBd3yfxhEaoNgoC3uQaAevq7WCzO9whyp jR9kGs16Dppnu+/VlH0OfKLufKZ/L95WShrU0SeYMIoXu7bcKryYXFS4gNFGvGko 4IWEdwDDYfld6w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:14:04 2025 by rpki-client