This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft File: v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json) Hash identifier: smkYxD7jBcNdPMiZXDk18AyJAUTBKtcQKC52ENnNDaY= Subject key identifier: 40:E7:83:3D:16:F0:33:B2:20:DD:17:92:24:80:89:63:C7:F5:E4:FD Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97 Certificate issuer: /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97 Certificate serial: 019AF72ED124E3113E3E0803250B39B6DA48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft Manifest number: 05FA Signing time: Sun 07 Dec 2025 05:00:31 +0000 Manifest this update: Sun 07 Dec 2025 05:00:31 +0000 Manifest next update: Mon 08 Dec 2025 05:00:31 +0000 Files and hashes: 1: 2XDoWT6vqRxMHQPV7KWd6BUwSSk.roa (hash: 0NMEPsyPsfD94IuuxhO23wYkcwhlu/DvJeg9y5zCzro=) 2: CKaIKBYIzCcPY90H81mUnrr8ieM.roa (hash: zGQhWm6ZoMgG5VPOqkXUgqVBvbX75YOW4WFE51m4zok=) 3: RaKLAB2smn45UsK3_N7EvTP4-a8.roa (hash: UNiaEX5/m7HFBIb1U1qvg3duo49HjTZsPkXySBHPnoA=) 4: kJTqxuBl-Q6syRY_DacCTAczGBU.roa (hash: 6et1FxTpD/+A6Pbq4fE+qn0f8s2ncSLUCy+g6P+v7sg=) 5: pYkXhi8dISdm8J5V6Ump4-4cOFU.roa (hash: EouhCVKO7/yt//jgu0i4ZZyGPzW9rnR1WQJxIMHssJE=) 6: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: ThGra5kggGsYcH45pMqNCYToT0Fjk9vOiFu7bi1+EKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 05:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:2e:d1:24:e3:11:3e:3e:08:03:25:0b:39:b6:da:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97 Validity Not Before: Dec 7 05:00:31 2025 GMT Not After : Dec 8 05:00:31 2025 GMT Subject: CN=40e7833d16f033b220dd179224808963c7f5e4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:24:52:14:34:16:ba:17:bc:04:56:af:a4:37: 79:c8:01:c4:f7:bc:e5:be:54:ba:41:50:5e:75:15: 1c:da:10:72:e6:15:4e:ca:6c:c7:ab:47:29:4e:be: b3:0d:5c:6b:5c:e0:96:79:67:c1:14:14:27:b1:0b: 01:a2:77:72:2a:45:2c:22:b2:b0:f6:27:79:83:74: b2:12:4b:84:69:ce:aa:65:5c:b8:0d:a3:ab:83:dc: 41:16:94:a0:63:46:d3:97:83:b7:9d:5b:87:3b:8c: 93:5a:16:1b:f6:87:d6:78:e5:4d:17:d9:32:ac:2d: d2:c9:86:48:a0:3e:e2:6a:25:f9:1d:ea:52:ae:aa: e9:02:0a:40:36:79:4b:f8:0a:8c:5a:b8:f6:7c:d7: 89:a7:18:a4:f1:d3:07:08:cf:2c:13:d9:18:26:29: a9:53:73:79:5d:de:8b:3a:12:96:0e:11:bc:ee:b2: fe:d6:ce:09:d0:26:2a:b1:dc:92:a8:5c:57:03:68: cc:df:6c:b2:a6:7c:f4:c5:77:04:c4:d5:02:d1:59: 60:63:4e:01:cb:ac:2b:a7:05:fc:cd:20:06:95:4b: b2:42:2d:06:ab:7f:63:72:0c:7b:1d:b4:77:7c:f6: 8a:ca:86:45:49:46:f6:70:ae:65:fa:aa:48:01:b1: b2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E7:83:3D:16:F0:33:B2:20:DD:17:92:24:80:89:63:C7:F5:E4:FD X509v3 Authority Key Identifier: keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:de:fa:22:29:d2:8c:a2:7c:7c:c9:40:e4:c5:a7:db:1b:f8: bd:b6:79:d9:ca:7f:8f:53:2a:d1:f2:48:e4:bc:c0:b8:aa:6a: 65:99:ee:10:07:da:1d:9a:f2:9a:7f:f0:24:14:cf:0b:aa:5d: 0b:50:1c:b5:20:32:b7:6c:ca:0e:ba:c3:ad:26:5a:d4:6c:d6: 16:f3:f1:cf:21:54:36:15:9e:9f:ff:2a:eb:d4:93:0e:26:a2: fd:1b:ef:53:a4:cc:0b:55:21:22:3f:92:70:06:45:0a:6b:9c: 9b:4a:a5:7e:ad:4f:16:a7:b5:8a:89:00:e2:f5:be:83:8f:af: 30:6a:91:1b:06:ec:3e:d7:e5:16:71:d8:6a:83:e6:a6:90:69: f8:b7:2b:b9:15:83:88:31:e0:54:b5:c4:71:bf:8d:dd:29:18: 9e:b7:eb:d9:c3:a4:d4:90:d4:95:ca:19:c3:10:32:71:20:86: 3a:ef:74:30:be:47:1a:a0:b2:fa:de:61:34:52:d5:78:28:c0: 44:3f:f1:2a:a0:43:c0:c9:f1:e0:a6:5b:15:80:02:0b:81:3e: 5d:36:af:02:a0:4d:b4:0f:ab:11:3f:0f:33:e4:17:ae:30:13: 21:4c:b0:55:72:f7:d5:3b:ab:c0:a8:53:31:17:94:91:72:fa: e5:b3:b2:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3LtEk4xE+PggDJQs5ttpIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNDFhZGRjOWE0ZWVhMjQ2ZDQyZjk4YzdjNzJiMzBiNjhk NjdhOTcwHhcNMjUxMjA3MDUwMDMxWhcNMjUxMjA4MDUwMDMxWjAzMTEwLwYDVQQD Eyg0MGU3ODMzZDE2ZjAzM2IyMjBkZDE3OTIyNDgwODk2M2M3ZjVlNGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yRSFDQWuhe8BFavpDd5yAHE97zl vlS6QVBedRUc2hBy5hVOymzHq0cpTr6zDVxrXOCWeWfBFBQnsQsBondyKkUsIrKw 9id5g3SyEkuEac6qZVy4DaOrg9xBFpSgY0bTl4O3nVuHO4yTWhYb9ofWeOVNF9ky rC3SyYZIoD7iaiX5HepSrqrpAgpANnlL+AqMWrj2fNeJpxik8dMHCM8sE9kYJimp U3N5Xd6LOhKWDhG87rL+1s4J0CYqsdySqFxXA2jM32yypnz0xXcExNUC0VlgY04B y6wrpwX8zSAGlUuyQi0Gq39jcgx7HbR3fPaKyoZFSUb2cK5l+qpIAbGyeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDngz0W8DOyIN0XkiSAiWPH9eT9MB8GA1UdIwQY MBaAFL9BrdyaTuokbUL5jHxyswto1nqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEt ZWVhZDUwOGJlNGVlLzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEtZWVhZDUwOGJlNGVl LzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGd76IinS jKJ8fMlA5MWn2xv4vbZ52cp/j1Mq0fJI5LzAuKpqZZnuEAfaHZrymn/wJBTPC6pd C1ActSAyt2zKDrrDrSZa1GzWFvPxzyFUNhWen/8q69STDiai/RvvU6TMC1UhIj+S cAZFCmucm0qlfq1PFqe1iokA4vW+g4+vMGqRGwbsPtflFnHYaoPmppBp+LcruRWD iDHgVLXEcb+N3SkYnrfr2cOk1JDUlcoZwxAycSCGOu90ML5HGqCy+t5hNFLVeCjA RD/xKqBDwMnx4KZbFYACC4E+XTavAqBNtA+rET8PM+QXrjATIUywVXL31TurwKhT MReUkXL65bOydA== -----END CERTIFICATE-----Generated at Sun Dec 7 11:14:21 2025 by rpki-client