This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json) Hash identifier: WOMpccRg+S1azAJvEiES3AhgxcZmqlAf/vJ2P2QS89U= Subject key identifier: D0:82:8F:7D:36:92:EE:B5:15:CF:35:38:88:13:79:7B:83:82:FE:3E Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a Certificate serial: 019B34C5797B6EDAEF90233C52C68E8A6814 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft Manifest number: 145C Signing time: Fri 19 Dec 2025 04:01:55 +0000 Manifest this update: Fri 19 Dec 2025 04:01:55 +0000 Manifest next update: Sat 20 Dec 2025 04:01:55 +0000 Files and hashes: 1: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: EnRwIL0x27sM/0ndzWcm71fQrfdOUgdPQ0vz1GVDofs=) 2: EAKe9346ONHQ_VuM_WxVCj_cv4Y.roa (hash: 5H5/ZpQAnmY/nM8N1VtyRS6/84qLoSsU0G+AmpT2T/k=) 3: RBJ-L0gnLCM7Rv9f1a6uxn7Yu-0.roa (hash: 4xHToao8czKd/Xx3uSwWIpAVRfAfaES7tBaw71UFRvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:79:7b:6e:da:ef:90:23:3c:52:c6:8e:8a:68:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a Validity Not Before: Dec 19 04:01:55 2025 GMT Not After : Dec 20 04:01:55 2025 GMT Subject: CN=d0828f7d3692eeb515cf35388813797b8382fe3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3b:64:6d:64:dd:37:4f:2b:2c:73:4c:d7:07: 8b:35:ef:70:31:c4:98:f3:19:c9:2e:36:51:84:64: 50:aa:a4:51:9a:50:10:06:47:0c:a4:3f:c5:92:79: 65:b8:70:cf:93:55:6d:16:e8:7a:4e:79:2f:0e:18: 40:bd:4c:fc:74:dd:78:c9:ea:a7:39:16:1d:b0:41: 30:21:37:16:ed:73:e4:d2:84:d4:a9:83:4f:a7:fc: 37:df:14:7a:07:dd:e8:e2:5c:a3:05:c7:e6:eb:42: 73:1e:48:13:64:a1:3f:30:52:2f:d9:ad:f2:e3:7f: 7b:93:22:fa:b0:f8:c7:f7:21:0c:cc:3c:11:9f:54: 54:72:5f:73:71:0d:aa:3a:ad:f2:c5:9f:c7:42:20: 24:57:4f:a2:8a:85:47:48:2c:06:21:81:5c:88:f1: ec:41:2b:f9:42:0f:47:c1:de:94:46:52:c9:93:c6: bf:c9:a9:90:26:1c:12:ea:01:49:82:c8:c6:36:93: 63:e3:f8:db:55:a6:01:d2:37:9c:2e:11:5e:23:87: 9d:cc:5b:b1:56:ad:d0:f4:09:85:a4:7f:ae:4a:bd: 4f:b4:b2:8a:29:ee:40:f4:b8:89:e9:69:d6:87:f3: 1d:d6:d2:ed:f1:20:97:bf:75:e6:67:47:c4:33:32: 4e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:82:8F:7D:36:92:EE:B5:15:CF:35:38:88:13:79:7B:83:82:FE:3E X509v3 Authority Key Identifier: keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:23:55:f4:a1:5c:23:16:d5:2c:b3:6b:31:38:86:59:e7:f8: 90:c2:97:79:b4:56:ff:27:b5:30:df:2e:a6:42:94:55:44:86: e9:de:5c:43:0f:8c:58:e8:fe:4b:29:ec:da:f9:8f:ed:c7:43: 99:32:64:97:75:1c:1d:30:8d:20:0c:37:ac:e1:e6:9b:80:56: 08:4e:ac:43:87:bc:72:b4:cc:71:46:e5:d1:e6:9e:41:e4:93: 0c:68:be:e0:80:43:72:85:18:0f:d9:cc:64:5f:82:88:b4:dd: f8:2c:c8:9b:c7:e6:ac:4a:7c:fe:c8:28:ec:2e:97:74:f5:f1: 81:2a:7f:e3:51:83:78:53:99:db:ad:fc:9c:c7:5a:f8:14:1d: 4b:16:be:59:14:6f:5d:24:64:3c:6a:a4:3d:02:74:1a:06:49: 4f:0d:c6:ca:68:d2:99:24:80:03:3a:f6:b8:81:12:38:b9:c8: ae:c2:48:be:df:95:d1:2f:ad:8c:59:3c:d6:9b:89:13:e3:63: 7c:ab:fc:35:ba:00:eb:a8:29:56:ce:21:e4:33:3d:a1:d9:7b: 84:51:87:97:cc:1b:88:b3:89:31:b9:68:79:cd:3d:ff:d3:7e: 33:ba:1e:59:a5:7a:0e:43:56:07:09:3b:24:79:14:02:9c:ac: 2d:5c:9d:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xXl7btrvkCM8UsaOimgUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOGQwOGVkYzQzOTNhODY3MTI5NmY4ZWFjYmJlY2Y5NGQ3 NjU2MmEwHhcNMjUxMjE5MDQwMTU1WhcNMjUxMjIwMDQwMTU1WjAzMTEwLwYDVQQD EyhkMDgyOGY3ZDM2OTJlZWI1MTVjZjM1Mzg4ODEzNzk3YjgzODJmZTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDtkbWTdN08rLHNM1weLNe9wMcSY 8xnJLjZRhGRQqqRRmlAQBkcMpD/FknlluHDPk1VtFuh6TnkvDhhAvUz8dN14yeqn ORYdsEEwITcW7XPk0oTUqYNPp/w33xR6B93o4lyjBcfm60JzHkgTZKE/MFIv2a3y 4397kyL6sPjH9yEMzDwRn1RUcl9zcQ2qOq3yxZ/HQiAkV0+iioVHSCwGIYFciPHs QSv5Qg9Hwd6URlLJk8a/yamQJhwS6gFJgsjGNpNj4/jbVaYB0jecLhFeI4edzFux Vq3Q9AmFpH+uSr1PtLKKKe5A9LiJ6WnWh/Md1tLt8SCXv3XmZ0fEMzJOdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCCj302ku61Fc81OIgTeXuDgv4+MB8GA1UdIwQY MBaAFNuNCO3EOTqGcSlvjqy77PlNdlYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEt YzYzNDlkYjk0OTliLzEvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEtYzYzNDlkYjk0OTli LzEvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyNV9KFc IxbVLLNrMTiGWef4kMKXebRW/ye1MN8upkKUVUSG6d5cQw+MWOj+Syns2vmP7cdD mTJkl3UcHTCNIAw3rOHmm4BWCE6sQ4e8crTMcUbl0eaeQeSTDGi+4IBDcoUYD9nM ZF+CiLTd+CzIm8fmrEp8/sgo7C6XdPXxgSp/41GDeFOZ2638nMda+BQdSxa+WRRv XSRkPGqkPQJ0GgZJTw3GymjSmSSAAzr2uIESOLnIrsJIvt+V0S+tjFk81puJE+Nj fKv8NboA66gpVs4h5DM9odl7hFGHl8wbiLOJMbloec09/9N+M7oeWaV6DkNWBwk7 JHkUApysLVyd8A== -----END CERTIFICATE-----Generated at Fri Dec 19 11:12:21 2025 by rpki-client