This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft File: Tx097mN940sTx0umz7TSBb5VYn4.mft (raw, json) Hash identifier: XIWRJboS4Evxm7/o10zpx3SEwjJO8PHr9CLGzFiGAIA= Subject key identifier: B8:F7:A5:49:2B:CD:AF:D1:A5:26:08:9C:4B:9D:C1:AE:2C:07:74:BC Authority key identifier: 4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E Certificate issuer: /CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e Certificate serial: 019AF2090267695482D4F8B03020E67575DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft Manifest number: 175D Signing time: Sat 06 Dec 2025 05:01:07 +0000 Manifest this update: Sat 06 Dec 2025 05:01:07 +0000 Manifest next update: Sun 07 Dec 2025 05:01:07 +0000 Files and hashes: 1: Tx097mN940sTx0umz7TSBb5VYn4.crl (hash: X8VZJI309fqFXU1HbUp7CX9FnMRlYUug0/GXgo0++I8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:02:67:69:54:82:d4:f8:b0:30:20:e6:75:75:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1d3dee637de34b13c74ba6cfb4d205be55627e Validity Not Before: Dec 6 05:01:07 2025 GMT Not After : Dec 7 05:01:07 2025 GMT Subject: CN=b8f7a5492bcdafd1a526089c4b9dc1ae2c0774bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d9:97:cd:4e:d9:97:02:02:6e:e4:3a:7f:8a: db:d7:c5:55:9e:90:e0:a7:24:ed:b2:2b:cf:9e:97: 74:d2:2b:17:2f:96:5a:30:39:d2:0a:c2:f4:33:20: 50:36:22:23:77:ff:48:6e:82:d5:f3:c6:86:03:68: e7:b6:31:84:8d:ff:78:2b:a6:eb:22:95:36:f0:2f: b7:9b:9e:e6:f2:07:f9:dd:e6:a7:16:0e:c9:e6:04: 7a:10:9a:1f:ba:ed:c0:8f:df:c9:c5:5f:61:f8:98: 18:22:14:f1:1e:1b:e2:e6:3a:ef:bb:51:b4:b2:ec: f2:b5:a3:c1:79:4a:cc:57:ac:db:23:10:88:54:8e: c3:40:1a:e5:bb:4e:25:07:a7:13:60:ca:a1:94:11: c8:b4:09:d9:1d:38:6d:95:89:d9:87:20:63:4b:01: a9:aa:c1:65:19:67:5d:ba:86:b8:6e:e0:8e:20:67: 9d:a9:0d:48:2a:91:a8:83:c2:eb:a3:f1:83:89:ff: 31:d2:2c:f3:b8:86:fa:ee:8e:aa:88:4f:64:cf:4d: 04:2f:3a:e1:87:f9:08:81:0d:81:e3:03:f1:f0:53: a1:d6:3a:45:b8:cf:37:c7:60:29:40:42:9a:5b:76: 70:ad:8b:3a:f3:cf:35:30:2b:23:16:b3:22:eb:7a: 62:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F7:A5:49:2B:CD:AF:D1:A5:26:08:9C:4B:9D:C1:AE:2C:07:74:BC X509v3 Authority Key Identifier: keyid:4F:1D:3D:EE:63:7D:E3:4B:13:C7:4B:A6:CF:B4:D2:05:BE:55:62:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tx097mN940sTx0umz7TSBb5VYn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a1adf5-7642-4e90-a07e-1f1b24118d85/1/Tx097mN940sTx0umz7TSBb5VYn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:57:13:bc:ce:96:cb:67:f8:bd:4d:2f:75:84:27:e6:fd:72: af:16:16:94:a2:73:c7:f3:9d:d0:9c:b1:2c:2c:4d:39:2b:e6: 44:cd:ab:2a:13:39:58:d2:ed:bf:ca:0f:47:d8:ac:db:fd:eb: bf:45:8b:33:7f:2b:5a:f1:83:f2:9b:14:6e:c8:de:03:35:79: ee:70:5b:91:0a:1c:6d:c0:a6:dc:bb:fc:e1:af:98:2e:e7:52: 46:35:36:1e:5d:ff:07:9a:a5:72:03:61:53:c7:b2:c9:a2:0d: 7d:d9:5c:8d:5f:c9:c0:29:76:eb:7e:8c:ae:99:de:57:5e:11: cd:8f:63:7c:06:ff:4e:26:d8:0f:c9:72:78:20:93:9a:fe:c4: ae:08:ee:1c:89:89:59:07:57:57:86:ab:fa:55:82:0d:ee:6e: 17:d6:77:e6:e4:a0:22:23:66:fc:bd:9f:84:52:47:61:be:bf: a2:47:7e:c5:28:4b:a2:e4:84:0f:da:bc:c2:6f:7e:66:25:7d: 8e:ce:b0:7c:c3:22:4d:ce:09:d4:c1:6a:3b:1e:bc:4f:7e:78: a4:b4:51:d4:39:fc:c8:45:e4:ad:e3:7f:e9:77:e7:bc:dc:c7: 2b:b7:30:d5:7c:ba:e8:11:8a:50:7c:2f:28:66:b1:7a:2c:88: e3:33:1a:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQJnaVSC1PiwMCDmdXXcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWQzZGVlNjM3ZGUzNGIxM2M3NGJhNmNmYjRkMjA1YmU1 NTYyN2UwHhcNMjUxMjA2MDUwMTA3WhcNMjUxMjA3MDUwMTA3WjAzMTEwLwYDVQQD EyhiOGY3YTU0OTJiY2RhZmQxYTUyNjA4OWM0YjlkYzFhZTJjMDc3NGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69mXzU7ZlwICbuQ6f4rb18VVnpDg pyTtsivPnpd00isXL5ZaMDnSCsL0MyBQNiIjd/9IboLV88aGA2jntjGEjf94K6br IpU28C+3m57m8gf53eanFg7J5gR6EJofuu3Aj9/JxV9h+JgYIhTxHhvi5jrvu1G0 suzytaPBeUrMV6zbIxCIVI7DQBrlu04lB6cTYMqhlBHItAnZHThtlYnZhyBjSwGp qsFlGWdduoa4buCOIGedqQ1IKpGog8Lro/GDif8x0izzuIb67o6qiE9kz00ELzrh h/kIgQ2B4wPx8FOh1jpFuM83x2ApQEKaW3ZwrYs68881MCsjFrMi63piUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLj3pUkrza/RpSYInEudwa4sB3S8MB8GA1UdIwQY MBaAFE8dPe5jfeNLE8dLps+00gW+VWJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHgwOTdtTjk0MHNUeDB1bXo3VFNCYjVWWW40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMWFkZjUtNzY0Mi00ZTkwLWEwN2Ut MWYxYjI0MTE4ZDg1LzEvVHgwOTdtTjk0MHNUeDB1bXo3VFNCYjVWWW40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMWFkZjUtNzY0Mi00ZTkwLWEwN2UtMWYxYjI0MTE4ZDg1 LzEvVHgwOTdtTjk0MHNUeDB1bXo3VFNCYjVWWW40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFcTvM6W y2f4vU0vdYQn5v1yrxYWlKJzx/Od0JyxLCxNOSvmRM2rKhM5WNLtv8oPR9is2/3r v0WLM38rWvGD8psUbsjeAzV57nBbkQocbcCm3Lv84a+YLudSRjU2Hl3/B5qlcgNh U8eyyaINfdlcjV/JwCl2636MrpneV14RzY9jfAb/TibYD8lyeCCTmv7ErgjuHImJ WQdXV4ar+lWCDe5uF9Z35uSgIiNm/L2fhFJHYb6/okd+xShLouSED9q8wm9+ZiV9 js6wfMMiTc4J1MFqOx68T354pLRR1Dn8yEXkreN/6XfnvNzHK7cw1Xy66BGKUHwv KGaxeiyI4zMarA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:02:47 2025 by rpki-client