This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft File: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft (raw, json) Hash identifier: D5MiUEINtgUcqQdbzKmxjXZNlk0Z7Zn4/8Xf9M7sRO0= Subject key identifier: 06:23:B6:5E:FE:B0:2F:7D:65:8A:1F:0C:75:87:D6:43:4F:A6:56:35 Authority key identifier: B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE Certificate issuer: /CN=b71758b085d10ef27cc3e168f490075d3e7c4efe Certificate serial: 019AF23FBB097156A9B3A3CA450BEED58111 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 06:00:54 +0000 Manifest this update: Sat 06 Dec 2025 06:00:54 +0000 Manifest next update: Sun 07 Dec 2025 06:00:54 +0000 Files and hashes: 1: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl (hash: 8A5ezyoRegOkwpo7HAoynEogzvRXp6FyOyz1xnstggQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:bb:09:71:56:a9:b3:a3:ca:45:0b:ee:d5:81:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b71758b085d10ef27cc3e168f490075d3e7c4efe Validity Not Before: Dec 6 06:00:54 2025 GMT Not After : Dec 7 06:00:54 2025 GMT Subject: CN=0623b65efeb02f7d658a1f0c7587d6434fa65635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8a:ec:0c:50:08:37:45:1a:7c:ff:ea:05:28: 18:4e:4c:9a:1d:52:41:24:8c:f8:08:d9:cb:dc:33: 33:e5:ce:ff:0d:34:a7:89:4f:35:9e:99:d8:25:1a: cd:52:db:70:9c:0c:52:2f:6d:ba:e7:17:3e:ad:b2: ba:b5:59:3c:60:39:d9:d6:7b:bd:3e:36:fa:d5:58: 86:46:90:8d:be:af:14:08:b6:e8:bd:f9:18:be:b3: a7:20:df:9a:be:e9:a9:f9:36:e2:3b:c3:8c:63:51: 47:7f:79:58:7b:6a:d9:0b:ae:9c:d8:17:bd:9f:84: 74:d9:11:e6:c3:f0:3c:0f:25:26:fc:72:14:8e:95: 9f:b0:95:93:5e:22:ec:ca:c5:02:9a:ef:cb:71:d7: 2e:47:56:48:f5:45:0f:b3:57:82:65:24:b6:fd:80: ad:bd:0e:73:ce:e1:f3:06:3f:29:17:59:67:69:2b: f0:18:68:3c:82:14:34:1d:65:83:7e:f7:5c:6a:f0: 31:95:3b:3e:eb:92:38:81:44:6f:8b:5e:4d:7e:e0: 84:db:20:c2:3b:40:57:97:52:0e:8c:73:77:33:e5: fd:56:23:a7:16:ce:79:d8:78:ea:28:fd:71:5e:18: d3:a9:0c:b7:68:eb:9d:db:29:54:e6:c2:ad:9f:87: f6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:23:B6:5E:FE:B0:2F:7D:65:8A:1F:0C:75:87:D6:43:4F:A6:56:35 X509v3 Authority Key Identifier: keyid:B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a0:f2:45:f5:ef:8a:b6:e4:c9:20:98:18:e9:46:bc:4a:ce: 8f:bf:a8:3c:8a:fd:30:a7:3c:51:cb:c6:1e:ad:af:7c:51:9c: a9:de:ae:0c:1c:00:83:6e:a4:61:73:b4:93:30:7a:18:fd:45: cf:19:52:59:22:22:ce:8e:53:61:a2:cb:30:b7:05:8f:e8:9e: e3:4f:4b:da:71:b7:24:cf:f5:a6:64:ae:91:ac:06:3b:f2:07: ff:ff:fe:fa:8a:c5:d6:5f:f0:be:36:ae:fb:5a:e9:ef:69:55: 85:bc:3b:3a:9f:69:15:f6:53:6a:5e:5d:6e:55:35:25:60:4c: c8:3c:4e:9f:62:f4:05:a0:29:b4:36:1d:f9:b9:21:17:9b:3c: 89:eb:61:a3:0f:4a:41:f6:68:b4:ee:32:2a:79:57:66:64:72: 11:67:39:9d:14:b2:80:b0:d0:e1:33:89:15:ae:51:24:af:92: 4e:ea:89:d0:da:fd:81:2d:24:5c:4f:a6:89:58:73:5b:c7:a9: 6d:9d:92:0e:a9:24:6a:fb:32:83:ee:8c:97:8c:f3:52:6f:ce: 7f:2c:49:90:cc:b4:03:0a:ca:f3:90:bb:e8:90:17:d9:f2:b4: 0e:20:1e:9d:9b:dd:9b:72:5c:ac:14:e2:fe:aa:d4:f8:6a:b0: d7:6c:28:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP7sJcVaps6PKRQvu1YERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTc1OGIwODVkMTBlZjI3Y2MzZTE2OGY0OTAwNzVkM2U3 YzRlZmUwHhcNMjUxMjA2MDYwMDU0WhcNMjUxMjA3MDYwMDU0WjAzMTEwLwYDVQQD EygwNjIzYjY1ZWZlYjAyZjdkNjU4YTFmMGM3NTg3ZDY0MzRmYTY1NjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4rsDFAIN0UafP/qBSgYTkyaHVJB JIz4CNnL3DMz5c7/DTSniU81npnYJRrNUttwnAxSL2265xc+rbK6tVk8YDnZ1nu9 Pjb61ViGRpCNvq8UCLbovfkYvrOnIN+avump+TbiO8OMY1FHf3lYe2rZC66c2Be9 n4R02RHmw/A8DyUm/HIUjpWfsJWTXiLsysUCmu/LcdcuR1ZI9UUPs1eCZSS2/YCt vQ5zzuHzBj8pF1lnaSvwGGg8ghQ0HWWDfvdcavAxlTs+65I4gURvi15NfuCE2yDC O0BXl1IOjHN3M+X9ViOnFs552HjqKP1xXhjTqQy3aOud2ylU5sKtn4f2lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYjtl7+sC99ZYofDHWH1kNPplY1MB8GA1UdIwQY MBaAFLcXWLCF0Q7yfMPhaPSQB10+fE7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhkWXNJWFJEdko4dy1GbzlKQUhYVDU4VHY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81NTIxZDgtMDljNi00ODE0LWJhYTYt YzJmMmVhMzFlMDllLzEvdHhkWXNJWFJEdko4dy1GbzlKQUhYVDU4VHY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi81NTIxZDgtMDljNi00ODE0LWJhYTYtYzJmMmVhMzFlMDll LzEvdHhkWXNJWFJEdko4dy1GbzlKQUhYVDU4VHY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnaDyRfXv irbkySCYGOlGvErOj7+oPIr9MKc8UcvGHq2vfFGcqd6uDBwAg26kYXO0kzB6GP1F zxlSWSIizo5TYaLLMLcFj+ie409L2nG3JM/1pmSukawGO/IH///++orF1l/wvjau +1rp72lVhbw7Op9pFfZTal5dblU1JWBMyDxOn2L0BaAptDYd+bkhF5s8iethow9K QfZotO4yKnlXZmRyEWc5nRSygLDQ4TOJFa5RJK+STuqJ0Nr9gS0kXE+miVhzW8ep bZ2SDqkkavsyg+6Ml4zzUm/OfyxJkMy0AwrK85C76JAX2fK0DiAenZvdm3JcrBTi /qrU+Gqw12woYw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:48 2025 by rpki-client