This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft File: TXPZQBmjwjWHffa8GynHagtkydA.mft (raw, json) Hash identifier: SU1EC7IeAXmYbENF049FiMg9dpAYUWaxNLx9FMgiY3o= Subject key identifier: FD:10:8C:C9:95:D6:A9:49:58:8C:D8:F8:38:AD:01:41:97:18:C8:59 Authority key identifier: 4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0 Certificate issuer: /CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0 Certificate serial: 019AF208F49FA2623DA7A1686E746EC02CDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft Manifest number: 0DB9 Signing time: Sat 06 Dec 2025 05:01:04 +0000 Manifest this update: Sat 06 Dec 2025 05:01:04 +0000 Manifest next update: Sun 07 Dec 2025 05:01:04 +0000 Files and hashes: 1: TXPZQBmjwjWHffa8GynHagtkydA.crl (hash: FkcehGJL4OxCVZJ+M0w5LcfB8oQ+VP0I7/7DsDLTaKE=) 2: UFlaQCFJ4CLhOuiIqohu_AVKpLY.roa (hash: QMm4BiW8chALfiHKzYbt92A3p1kXxu/myJMcDRlryRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f4:9f:a2:62:3d:a7:a1:68:6e:74:6e:c0:2c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d73d94019a3c235877df6bc1b29c76a0b64c9d0 Validity Not Before: Dec 6 05:01:04 2025 GMT Not After : Dec 7 05:01:04 2025 GMT Subject: CN=fd108cc995d6a949588cd8f838ad01419718c859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:03:bb:fb:d8:3a:9d:95:ae:67:bb:ef:68:9c: b8:56:3e:ef:02:65:1a:53:83:18:d6:b5:8c:1b:ef: db:71:8c:84:ac:10:80:8a:1f:e5:24:9e:9d:95:64: 96:86:a7:a1:78:12:3f:99:58:dd:cf:d9:5a:a5:30: f0:13:ff:d4:d0:56:c9:31:37:52:bd:c3:0d:55:31: 63:90:44:c9:1a:dc:bc:56:c0:1a:47:72:39:dc:f0: eb:92:ec:9e:d9:7a:d1:b0:ab:e1:0f:8c:51:9f:c1: b9:75:ba:0a:54:90:85:27:9f:2e:6a:c0:fe:ef:c1: 66:85:3f:90:d8:07:7a:ba:a6:14:88:10:4b:9f:c4: 2d:c3:a8:be:9c:e3:e3:b9:84:b7:58:50:f9:b8:18: 4a:72:08:93:8a:d9:ea:86:7c:e0:94:81:58:fc:16: f3:be:9c:81:7a:b9:d4:e0:fa:4b:be:dd:92:2f:f9: 63:75:07:95:9f:d2:a4:1e:2b:4f:86:2b:6d:17:99: bf:ac:b3:5d:34:0f:e7:5e:44:40:7d:5b:df:9e:68: 8b:11:99:5e:a8:65:ef:8c:54:f3:3e:13:bb:dc:c8: 5a:45:6f:d9:2e:33:30:47:75:ac:6d:fd:35:fc:76: a4:8b:02:21:f9:04:af:71:48:c9:bc:5d:7d:fa:cd: 8d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:10:8C:C9:95:D6:A9:49:58:8C:D8:F8:38:AD:01:41:97:18:C8:59 X509v3 Authority Key Identifier: keyid:4D:73:D9:40:19:A3:C2:35:87:7D:F6:BC:1B:29:C7:6A:0B:64:C9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXPZQBmjwjWHffa8GynHagtkydA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/09482b-4d2a-4893-828d-96dc5ea0cc83/1/TXPZQBmjwjWHffa8GynHagtkydA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:15:78:de:98:38:79:cc:58:7c:7f:da:0f:48:ab:94:85:b3: 88:8d:76:08:b0:de:e9:45:87:96:5d:11:9b:23:59:b0:ad:a9: 7f:f9:2b:dc:e0:44:8d:f8:bb:ad:5e:11:be:67:37:9f:8e:10: 06:96:a7:94:64:ed:43:ff:c3:4e:c9:d2:02:c8:f2:98:34:c7: 23:8d:17:71:33:0b:a9:fa:e7:17:e4:28:32:69:1e:34:d5:9c: bf:b6:c7:93:fb:7e:ec:1b:8a:92:33:70:a3:5f:00:90:54:81: 7c:a5:fd:e8:ae:2c:0e:81:ed:44:8f:cf:84:d1:5c:56:e6:43: 4a:88:eb:07:d2:0d:80:4e:60:f7:7f:a7:ce:6e:6b:9e:ed:0c: af:4a:b0:5a:ff:d3:3c:71:b8:eb:4f:be:f3:27:f7:6e:c9:d6: 09:67:89:43:28:c5:a0:24:ef:93:0a:74:84:4a:29:5b:98:2c: 49:9e:7b:d6:63:b7:17:3c:a6:79:dc:db:38:c6:6f:0c:9d:d6: cf:82:56:3d:43:8b:bb:6b:b9:56:1f:6f:a4:1a:61:10:25:df: f2:61:9c:fb:0c:2d:79:e8:d9:ac:0d:aa:2e:03:33:38:16:16: cb:90:fc:27:72:c9:a6:01:a6:97:51:45:99:dd:23:75:f4:fc: b1:4b:ac:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPSfomI9p6FobnRuwCzfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkNzNkOTQwMTlhM2MyMzU4NzdkZjZiYzFiMjljNzZhMGI2 NGM5ZDAwHhcNMjUxMjA2MDUwMTA0WhcNMjUxMjA3MDUwMTA0WjAzMTEwLwYDVQQD EyhmZDEwOGNjOTk1ZDZhOTQ5NTg4Y2Q4ZjgzOGFkMDE0MTk3MThjODU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQO7+9g6nZWuZ7vvaJy4Vj7vAmUa U4MY1rWMG+/bcYyErBCAih/lJJ6dlWSWhqeheBI/mVjdz9lapTDwE//U0FbJMTdS vcMNVTFjkETJGty8VsAaR3I53PDrkuye2XrRsKvhD4xRn8G5dboKVJCFJ58uasD+ 78FmhT+Q2Ad6uqYUiBBLn8Qtw6i+nOPjuYS3WFD5uBhKcgiTitnqhnzglIFY/Bbz vpyBernU4PpLvt2SL/ljdQeVn9KkHitPhittF5m/rLNdNA/nXkRAfVvfnmiLEZle qGXvjFTzPhO73MhaRW/ZLjMwR3Wsbf01/HakiwIh+QSvcUjJvF19+s2NGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0QjMmV1qlJWIzY+DitAUGXGMhZMB8GA1UdIwQY MBaAFE1z2UAZo8I1h332vBspx2oLZMnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVFhQWlFCbWp3aldIZmZhOEd5bkhhZ3RreWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wOTQ4MmItNGQyYS00ODkzLTgyOGQt OTZkYzVlYTBjYzgzLzEvVFhQWlFCbWp3aldIZmZhOEd5bkhhZ3RreWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8wOTQ4MmItNGQyYS00ODkzLTgyOGQtOTZkYzVlYTBjYzgz LzEvVFhQWlFCbWp3aldIZmZhOEd5bkhhZ3RreWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRV43pg4 ecxYfH/aD0irlIWziI12CLDe6UWHll0RmyNZsK2pf/kr3OBEjfi7rV4Rvmc3n44Q BpanlGTtQ//DTsnSAsjymDTHI40XcTMLqfrnF+QoMmkeNNWcv7bHk/t+7BuKkjNw o18AkFSBfKX96K4sDoHtRI/PhNFcVuZDSojrB9INgE5g93+nzm5rnu0Mr0qwWv/T PHG460++8yf3bsnWCWeJQyjFoCTvkwp0hEopW5gsSZ571mO3FzymedzbOMZvDJ3W z4JWPUOLu2u5Vh9vpBphECXf8mGc+wwteejZrA2qLgMzOBYWy5D8J3LJpgGml1FF md0jdfT8sUusxw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:03 2025 by rpki-client