This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft File: txDNRHGj-M3NhE0_NmFIlAlStOc.mft (raw, json) Hash identifier: DLfMxNyEX5wMHDCLEwlNiBL9yDTpuekltYvDcoHCR4o= Subject key identifier: 4E:CD:A4:AB:24:AF:E2:40:90:F1:43:23:51:AC:85:4D:DF:13:D1:1C Authority key identifier: B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7 Certificate issuer: /CN=b710cd4471a3f8cdcd844d3f366148940952b4e7 Certificate serial: 019AF12D2699A100D7A779FEB3C29B4970A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 01:00:59 +0000 Manifest this update: Sat 06 Dec 2025 01:00:59 +0000 Manifest next update: Sun 07 Dec 2025 01:00:59 +0000 Files and hashes: 1: 6x14Tr1KvbGHug5B88Kt5ILNIuQ.roa (hash: TGutJ2mIJk6NG98vs/RUqYq5wAmvywBgw3u1JfM1+58=) 2: txDNRHGj-M3NhE0_NmFIlAlStOc.crl (hash: chphiCAYyFYayKeoXNpKuCvBylzq8WNCTmnhBTRp2XA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:26:99:a1:00:d7:a7:79:fe:b3:c2:9b:49:70:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b710cd4471a3f8cdcd844d3f366148940952b4e7 Validity Not Before: Dec 6 01:00:59 2025 GMT Not After : Dec 7 01:00:59 2025 GMT Subject: CN=4ecda4ab24afe24090f1432351ac854ddf13d11c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f7:4d:5c:29:f7:48:c9:63:1e:e2:8b:ed:06: d3:59:96:8e:87:45:96:b8:11:26:f7:99:c8:df:83: 9e:0c:2a:42:28:4e:65:ed:b4:4c:33:e4:e5:cc:0e: 70:5a:08:9d:56:03:f8:94:6c:10:85:ba:cc:a2:b2: 82:3a:c9:2e:95:01:fe:a5:de:5f:45:78:ee:6a:5c: 15:39:b4:be:3a:65:3f:09:ff:8e:91:33:f5:80:d4: fc:05:0c:eb:b0:33:0b:18:aa:50:42:b5:f5:8f:21: 4b:cd:5d:0e:f1:56:31:43:02:60:fb:bd:21:33:75: 2c:95:69:31:a0:83:6b:a9:ab:41:3b:7d:3c:1a:8b: 49:7b:d9:fa:13:c4:5d:2b:91:66:11:51:eb:be:42: d0:97:e0:5a:68:72:0f:e7:f8:4b:d7:48:fa:ed:26: 23:96:24:27:22:28:f8:eb:d5:a3:28:3e:04:f6:7a: 12:92:0e:71:b3:3c:83:cd:dd:ff:02:bb:9f:5d:e5: b6:b2:93:d2:d2:2c:39:46:16:56:07:32:25:45:50: fe:04:28:b3:5b:f8:1f:dc:08:14:b2:d1:e0:78:4a: 17:7c:c4:d2:eb:6a:98:f3:af:6d:3e:6f:61:c7:9b: ea:1c:14:a1:d9:6b:5d:81:98:4a:00:42:ac:cd:5c: cb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:CD:A4:AB:24:AF:E2:40:90:F1:43:23:51:AC:85:4D:DF:13:D1:1C X509v3 Authority Key Identifier: keyid:B7:10:CD:44:71:A3:F8:CD:CD:84:4D:3F:36:61:48:94:09:52:B4:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txDNRHGj-M3NhE0_NmFIlAlStOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5268dd-56ee-4b9a-8050-232fbdaf5c1a/1/txDNRHGj-M3NhE0_NmFIlAlStOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5d:37:c8:53:48:11:a6:6c:70:64:af:4a:63:72:72:a2:fe: 4a:90:da:b8:9b:3f:23:c0:53:30:e2:b8:a6:79:bd:13:b9:41: 2b:ac:04:ef:52:33:30:1e:64:3e:6f:8a:a0:44:4b:7f:0e:39: 78:e9:ad:c5:55:f2:51:f7:13:f1:cc:e1:c0:f4:b0:51:d7:7c: cb:00:89:68:9e:04:18:3e:8d:5f:eb:ce:24:64:83:6f:03:83: 19:44:a8:cd:18:d8:dc:7b:a2:b0:c9:63:88:c1:8e:4b:61:80: ea:52:cc:7e:da:4e:aa:f6:f3:f4:d5:87:39:cf:0f:6f:16:83: 61:74:20:37:da:b7:a5:a3:a5:c9:ef:6d:74:03:b2:72:db:9f: 6e:d8:98:df:39:d2:aa:27:02:48:1c:dd:d9:8c:e1:da:3c:c9: 72:a3:2a:d6:5f:5a:1f:13:a4:de:10:bf:ae:23:06:0e:8d:08: 35:5e:49:7e:cb:d6:b6:4b:c3:15:88:bb:2a:0c:8f:9a:25:aa: 7f:5a:4e:fd:ba:e9:5c:b6:1f:33:d2:aa:19:21:c3:4c:f0:79: b4:9e:86:9e:31:72:ac:73:f9:88:5c:20:51:a0:fc:af:e1:d9: 51:96:df:26:37:01:ea:d8:65:e0:26:ff:b9:4f:6f:2d:77:18: 32:05:a5:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSaZoQDXp3n+s8KbSXCjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTBjZDQ0NzFhM2Y4Y2RjZDg0NGQzZjM2NjE0ODk0MDk1 MmI0ZTcwHhcNMjUxMjA2MDEwMDU5WhcNMjUxMjA3MDEwMDU5WjAzMTEwLwYDVQQD Eyg0ZWNkYTRhYjI0YWZlMjQwOTBmMTQzMjM1MWFjODU0ZGRmMTNkMTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPdNXCn3SMljHuKL7QbTWZaOh0WW uBEm95nI34OeDCpCKE5l7bRMM+TlzA5wWgidVgP4lGwQhbrMorKCOskulQH+pd5f RXjualwVObS+OmU/Cf+OkTP1gNT8BQzrsDMLGKpQQrX1jyFLzV0O8VYxQwJg+70h M3UslWkxoINrqatBO308GotJe9n6E8RdK5FmEVHrvkLQl+BaaHIP5/hL10j67SYj liQnIij469WjKD4E9noSkg5xszyDzd3/ArufXeW2spPS0iw5RhZWBzIlRVD+BCiz W/gf3AgUstHgeEoXfMTS62qY869tPm9hx5vqHBSh2WtdgZhKAEKszVzLxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7NpKskr+JAkPFDI1GshU3fE9EcMB8GA1UdIwQY MBaAFLcQzURxo/jNzYRNPzZhSJQJUrTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MjY4ZGQtNTZlZS00YjlhLTgwNTAt MjMyZmJkYWY1YzFhLzEvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81MjY4ZGQtNTZlZS00YjlhLTgwNTAtMjMyZmJkYWY1YzFh LzEvdHhETlJIR2otTTNOaEUwX05tRklsQWxTdE9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf103yFNI EaZscGSvSmNycqL+SpDauJs/I8BTMOK4pnm9E7lBK6wE71IzMB5kPm+KoERLfw45 eOmtxVXyUfcT8czhwPSwUdd8ywCJaJ4EGD6NX+vOJGSDbwODGUSozRjY3HuisMlj iMGOS2GA6lLMftpOqvbz9NWHOc8PbxaDYXQgN9q3paOlye9tdAOyctufbtiY3znS qicCSBzd2Yzh2jzJcqMq1l9aHxOk3hC/riMGDo0INV5JfsvWtkvDFYi7KgyPmiWq f1pO/brpXLYfM9KqGSHDTPB5tJ6GnjFyrHP5iFwgUaD8r+HZUZbfJjcB6thl4Cb/ uU9vLXcYMgWlhA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:51 2025 by rpki-client