This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft File: 39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json) Hash identifier: KWxSIfE6uCZTLc9DkM+z32k66VAXoUde1hs1NoWv4oM= Subject key identifier: 65:2E:5D:63:52:1C:75:0D:D7:F1:48:7C:1B:FF:2E:B2:C3:7B:3E:EC Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30 Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030 Certificate serial: 019B1ACE20251D57C8ACEF343867D33062C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft Manifest number: 064F Signing time: Sun 14 Dec 2025 03:01:14 +0000 Manifest this update: Sun 14 Dec 2025 03:01:14 +0000 Manifest next update: Mon 15 Dec 2025 03:01:14 +0000 Files and hashes: 1: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: W2INZ6SbsRqwIglmkRcAg/X1GLebqZW6mUlasodhv0E=) 2: tfQVIf0zNMfuGd1tpip3CLYwCts.roa (hash: +gDGXslGsdNWpAD47LvCZk6SPybHtwdwVZQN5l58KIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:ce:20:25:1d:57:c8:ac:ef:34:38:67:d3:30:62:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030 Validity Not Before: Dec 14 03:01:14 2025 GMT Not After : Dec 15 03:01:14 2025 GMT Subject: CN=652e5d63521c750dd7f1487c1bff2eb2c37b3eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:53:e4:4d:47:e7:43:1c:9e:58:9b:02:d6:d3: 3d:5d:08:11:73:e9:56:94:e7:65:95:e6:e0:0b:68: 8f:55:b9:12:f1:73:b8:92:ff:77:a0:c8:38:79:33: 0e:80:97:3f:3a:a2:ec:b8:fa:f0:15:82:56:5d:f3: 14:6e:c1:9f:98:43:f7:9b:d5:14:3b:07:01:55:39: 94:f9:1b:2c:91:ab:77:4c:90:a7:e5:aa:ae:09:8a: 04:10:b7:9c:9f:cb:18:0b:3e:35:92:ed:14:8a:eb: df:30:a5:a3:a2:d8:88:f4:23:6d:4e:80:ff:e7:82: fb:76:c4:61:f7:89:a5:f7:65:7d:b0:07:1c:d6:20: e2:16:51:43:60:60:f7:4b:25:79:c4:20:4c:4e:35: 5b:20:15:e7:1c:6d:90:02:b7:a0:07:6a:93:a7:68: d2:4f:bc:35:1a:aa:8f:cc:43:69:23:23:41:b4:e2: 59:dd:f3:b0:c0:85:e9:09:a4:d8:a6:7c:76:a5:4c: 47:f7:21:3f:28:a2:c9:cb:e6:b0:fb:fd:bf:33:4d: 2b:2d:f6:71:62:ec:36:ae:97:0b:28:0c:fa:d3:dc: 46:33:94:df:2f:c7:5a:82:0f:79:94:1c:77:8d:05: 21:86:7b:2b:79:c9:10:fd:a7:7c:f2:ca:f5:e9:39: 8c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2E:5D:63:52:1C:75:0D:D7:F1:48:7C:1B:FF:2E:B2:C3:7B:3E:EC X509v3 Authority Key Identifier: keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ac:fe:6a:f2:06:99:87:57:87:fb:54:b4:06:c9:5d:ea:64: 61:ae:90:32:bf:96:3c:ed:83:43:f0:43:d3:23:5b:3f:b9:3f: fb:0b:f1:6d:ae:0c:12:90:de:dc:2e:e7:76:38:bf:75:74:02: c5:e3:06:e3:ba:05:37:fc:d1:8f:1f:06:23:22:3b:7b:2c:aa: 81:35:94:0e:91:03:55:59:0d:7f:e8:2c:7f:87:b9:23:e5:c5: 33:9e:07:f4:32:54:a7:51:7a:b5:d0:94:6e:8d:ab:bd:8e:85: 3f:ae:50:57:cd:4f:fc:02:aa:81:bd:e1:73:8b:5c:87:00:62: 6a:21:f9:41:d6:dc:76:74:95:55:4b:50:df:ae:14:4a:94:48: b0:fe:a3:90:e9:50:c7:d3:54:94:26:bc:e0:f6:61:19:b8:1e: 57:54:14:2a:b8:fd:89:be:00:ce:6a:02:a1:42:a9:3e:3d:3c: 23:4e:66:43:dd:b8:02:f7:9d:ba:fd:21:cb:4e:9b:d9:ba:05: a0:43:64:76:7f:a0:ad:f5:b4:8c:52:e7:69:b6:80:64:cd:7e: 21:bb:85:e1:91:80:d7:52:7e:0d:ff:3f:b8:f6:6c:1f:a6:65: d4:d2:a7:dd:33:dc:af:11:f4:52:0f:31:04:f9:f6:f4:ff:36: 5e:bc:f6:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaziAlHVfIrO80OGfTMGLIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZDA0NmFmNWVkYzExOTY0MDk2ZGMyMGY2YWYxZGU1NWQ5 YzkwMzAwHhcNMjUxMjE0MDMwMTE0WhcNMjUxMjE1MDMwMTE0WjAzMTEwLwYDVQQD Eyg2NTJlNWQ2MzUyMWM3NTBkZDdmMTQ4N2MxYmZmMmViMmMzN2IzZWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVPkTUfnQxyeWJsC1tM9XQgRc+lW lOdllebgC2iPVbkS8XO4kv93oMg4eTMOgJc/OqLsuPrwFYJWXfMUbsGfmEP3m9UU OwcBVTmU+Rsskat3TJCn5aquCYoEELecn8sYCz41ku0UiuvfMKWjotiI9CNtToD/ 54L7dsRh94ml92V9sAcc1iDiFlFDYGD3SyV5xCBMTjVbIBXnHG2QAregB2qTp2jS T7w1GqqPzENpIyNBtOJZ3fOwwIXpCaTYpnx2pUxH9yE/KKLJy+aw+/2/M00rLfZx Yuw2rpcLKAz609xGM5TfL8dagg95lBx3jQUhhnsreckQ/ad88sr16TmMMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUuXWNSHHUN1/FIfBv/LrLDez7sMB8GA1UdIwQY MBaAFN/QRq9e3BGWQJbcIPavHeVdnJAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzlCR3IxN2NFWlpBbHR3ZzlxOGQ1VjJja0RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iZmQwZmYtODQ1ZS00ZTEyLWFjN2Mt NTg4ZTBkOTIzYzE1LzEvMzlCR3IxN2NFWlpBbHR3ZzlxOGQ1VjJja0RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iZmQwZmYtODQ1ZS00ZTEyLWFjN2MtNTg4ZTBkOTIzYzE1 LzEvMzlCR3IxN2NFWlpBbHR3ZzlxOGQ1VjJja0RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvKz+avIG mYdXh/tUtAbJXepkYa6QMr+WPO2DQ/BD0yNbP7k/+wvxba4MEpDe3C7ndji/dXQC xeMG47oFN/zRjx8GIyI7eyyqgTWUDpEDVVkNf+gsf4e5I+XFM54H9DJUp1F6tdCU bo2rvY6FP65QV81P/AKqgb3hc4tchwBiaiH5QdbcdnSVVUtQ364USpRIsP6jkOlQ x9NUlCa84PZhGbgeV1QUKrj9ib4AzmoCoUKpPj08I05mQ924Aveduv0hy06b2boF oENkdn+grfW0jFLnabaAZM1+IbuF4ZGA11J+Df8/uPZsH6Zl1NKn3TPcrxH0Ug8x BPn29P82Xrz2iA== -----END CERTIFICATE-----Generated at Sun Dec 14 08:41:27 2025 by rpki-client