This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft File: txC5vh4ts3SC4fjyWzX9pTgNMsY.mft (raw, json) Hash identifier: AsE63xxK4PDgKMdn1Ilmx+u8qUAYCtiFsK3M4WL5i3M= Subject key identifier: D3:4A:E8:2F:BE:A6:73:1A:C6:8B:02:FD:CE:A7:20:52:08:56:57:96 Authority key identifier: B7:10:B9:BE:1E:2D:B3:74:82:E1:F8:F2:5B:35:FD:A5:38:0D:32:C6 Certificate issuer: /CN=b710b9be1e2db37482e1f8f25b35fda5380d32c6 Certificate serial: 019AF12E1923CC50C5A16DAEB7BCAA5CF4D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft Manifest number: 142B Signing time: Sat 06 Dec 2025 01:02:01 +0000 Manifest this update: Sat 06 Dec 2025 01:02:01 +0000 Manifest next update: Sun 07 Dec 2025 01:02:01 +0000 Files and hashes: 1: txC5vh4ts3SC4fjyWzX9pTgNMsY.crl (hash: G1dWY+peyAG1P2xnm2hi9g9I5r0phjX12lfg1gVCvvg=) 2: y7dJRRp79aTyhXJq7SLE893fmyk.roa (hash: QjKSW2+AFDFFoGHFdC8m0Zba5598T5O0nbfB4lqoZ3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.crl rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:19:23:cc:50:c5:a1:6d:ae:b7:bc:aa:5c:f4:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b710b9be1e2db37482e1f8f25b35fda5380d32c6 Validity Not Before: Dec 6 01:02:01 2025 GMT Not After : Dec 7 01:02:01 2025 GMT Subject: CN=d34ae82fbea6731ac68b02fdcea7205208565796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1a:59:e7:58:a3:6a:ca:ab:ff:aa:37:e3:ca: cb:76:bd:b2:2d:b1:f3:6e:f0:ff:ea:90:17:20:bc: c9:14:7d:39:22:af:0f:d3:7e:87:3d:2d:39:c8:18: 9b:46:6d:9c:30:0b:e0:e5:0e:62:0d:8f:99:fc:0f: 18:05:3a:60:9c:a8:47:7f:76:7f:0d:08:c5:13:50: 9d:c4:b1:3f:14:86:ba:78:8b:d3:c0:50:c7:7e:d4: a1:ab:6d:bc:8e:7d:79:02:07:70:ea:40:ac:13:1a: 00:9f:31:62:22:07:15:21:3a:07:6d:1b:81:16:f6: fe:0f:71:c4:04:a2:e4:62:91:3b:2d:38:7d:0a:a4: 65:8b:f2:7c:cc:64:3e:83:9e:83:57:24:41:0a:e2: a4:c2:2c:a7:08:d2:97:07:77:f5:db:09:94:ed:8a: 53:f1:34:59:6b:46:f3:a5:42:d9:11:02:ac:a1:a9: 30:1f:71:e4:7f:19:52:9a:c6:22:fa:21:ea:74:1c: 0f:44:a7:3e:13:03:bc:4e:a7:ed:d9:94:69:1d:b3: 54:74:c7:1a:ff:3a:bb:49:08:34:ba:47:a6:59:35: cc:1b:bd:dc:57:d3:0b:25:29:76:0a:cc:4f:db:4a: 63:c1:f6:38:12:12:c8:fe:f0:4f:28:32:b1:05:cb: a3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4A:E8:2F:BE:A6:73:1A:C6:8B:02:FD:CE:A7:20:52:08:56:57:96 X509v3 Authority Key Identifier: keyid:B7:10:B9:BE:1E:2D:B3:74:82:E1:F8:F2:5B:35:FD:A5:38:0D:32:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txC5vh4ts3SC4fjyWzX9pTgNMsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/578788-250f-47f2-bd3e-272ccc17dfea/1/txC5vh4ts3SC4fjyWzX9pTgNMsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:81:77:87:d9:63:26:30:47:0a:b1:67:06:02:ea:c9:3b:a1: 09:26:62:74:cc:12:31:38:73:ba:88:93:09:fd:27:d6:f7:cd: 0a:bf:f4:94:ae:79:6b:eb:2b:c9:37:1c:4d:b2:10:9f:85:f7: 6a:92:72:20:30:32:b2:45:17:9e:ac:a8:b4:b6:bd:49:db:f4: 25:28:c8:e4:06:b3:4c:f6:6c:65:97:2a:e8:d5:e0:1e:e5:28: 11:72:55:ee:d6:9c:ac:66:ce:33:dd:14:c3:35:a3:67:82:18: 62:08:78:45:f3:13:8d:df:7b:f9:e4:ae:69:4f:0d:9b:5b:8b: 37:94:a4:9c:ca:2a:8f:b0:c6:81:39:d7:a8:3f:d8:84:e7:fb: 86:b1:60:15:61:9b:f7:7a:a1:63:15:1e:60:d2:de:4b:f8:cc: d2:77:13:a0:c2:f1:cd:f3:bc:a7:77:4d:7d:46:7a:b2:6b:38: 4f:f7:46:05:06:a3:86:7a:ca:e2:1d:91:87:df:01:28:25:4f: 44:8a:43:f6:e6:9b:d7:55:ee:91:0a:d6:bb:6a:9e:60:d3:74: 0c:01:c0:ed:8b:72:ea:e8:26:3a:f4:5e:45:7f:23:60:21:c7: 17:c9:00:e0:68:ae:dd:96:52:b8:db:58:8a:ce:66:b7:08:4b: 59:97:51:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhkjzFDFoW2ut7yqXPTSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTBiOWJlMWUyZGIzNzQ4MmUxZjhmMjViMzVmZGE1Mzgw ZDMyYzYwHhcNMjUxMjA2MDEwMjAxWhcNMjUxMjA3MDEwMjAxWjAzMTEwLwYDVQQD EyhkMzRhZTgyZmJlYTY3MzFhYzY4YjAyZmRjZWE3MjA1MjA4NTY1Nzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRpZ51ijasqr/6o348rLdr2yLbHz bvD/6pAXILzJFH05Iq8P036HPS05yBibRm2cMAvg5Q5iDY+Z/A8YBTpgnKhHf3Z/ DQjFE1CdxLE/FIa6eIvTwFDHftShq228jn15Agdw6kCsExoAnzFiIgcVIToHbRuB Fvb+D3HEBKLkYpE7LTh9CqRli/J8zGQ+g56DVyRBCuKkwiynCNKXB3f12wmU7YpT 8TRZa0bzpULZEQKsoakwH3HkfxlSmsYi+iHqdBwPRKc+EwO8Tqft2ZRpHbNUdMca /zq7SQg0ukemWTXMG73cV9MLJSl2CsxP20pjwfY4EhLI/vBPKDKxBcujLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNK6C++pnMaxosC/c6nIFIIVleWMB8GA1UdIwQY MBaAFLcQub4eLbN0guH48ls1/aU4DTLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhDNXZoNHRzM1NDNGZqeVd6WDlwVGdOTXNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi81Nzg3ODgtMjUwZi00N2YyLWJkM2Ut MjcyY2NjMTdkZmVhLzEvdHhDNXZoNHRzM1NDNGZqeVd6WDlwVGdOTXNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi81Nzg3ODgtMjUwZi00N2YyLWJkM2UtMjcyY2NjMTdkZmVh LzEvdHhDNXZoNHRzM1NDNGZqeVd6WDlwVGdOTXNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw4F3h9lj JjBHCrFnBgLqyTuhCSZidMwSMThzuoiTCf0n1vfNCr/0lK55a+sryTccTbIQn4X3 apJyIDAyskUXnqyotLa9Sdv0JSjI5AazTPZsZZcq6NXgHuUoEXJV7tacrGbOM90U wzWjZ4IYYgh4RfMTjd97+eSuaU8Nm1uLN5SknMoqj7DGgTnXqD/YhOf7hrFgFWGb 93qhYxUeYNLeS/jM0ncToMLxzfO8p3dNfUZ6sms4T/dGBQajhnrK4h2Rh98BKCVP RIpD9uab11XukQrWu2qeYNN0DAHA7Yty6ugmOvReRX8jYCHHF8kA4Giu3ZZSuNtY is5mtwhLWZdRbw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:10 2025 by rpki-client