This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json) Hash identifier: CIN/8kycV9cxUvg7uXELIb74EduHiqKtzEW4jPEZ+1g= Subject key identifier: 0A:01:0D:46:20:77:4C:C6:EE:E3:FC:03:D8:7B:EF:8C:2D:A2:39:B0 Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63 Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863 Certificate serial: 019AFC55DD26511E387E92A8072B6975DD3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft Manifest number: 1778 Signing time: Mon 08 Dec 2025 05:01:16 +0000 Manifest this update: Mon 08 Dec 2025 05:01:16 +0000 Manifest next update: Tue 09 Dec 2025 05:01:16 +0000 Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: ohHgYRgyDwjZNGFkuY85eRwzYcaV+AswBIKVyo9KHds=) 2: kS02S7ip8j2u2CZeGLzOHHL59kM.roa (hash: 2jk1V8A0mEt1rNAN366+0eQ/9s8tc4AYb6Gn/kTOhTA=) 3: me3p8QV58B-KPTyEebXHbUt57F4.roa (hash: RbcsBttE7vNIP3XYdPFTNMZZr81PhLK/Xuu/3kpgyJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fc:55:dd:26:51:1e:38:7e:92:a8:07:2b:69:75:dd:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863 Validity Not Before: Dec 8 05:01:16 2025 GMT Not After : Dec 9 05:01:16 2025 GMT Subject: CN=0a010d4620774cc6eee3fc03d87bef8c2da239b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:35:e7:15:bb:db:00:1b:35:72:82:a1:ee:d3: 48:ef:77:a1:bf:08:f3:15:70:93:16:8f:99:10:eb: 41:29:3b:b6:a2:ea:69:60:cc:1c:b4:8a:83:38:62: 63:f7:b8:d8:ba:87:16:56:ce:98:ce:f6:0e:db:ab: e1:23:80:38:e5:ff:f3:df:e8:4a:63:d7:71:04:7f: cd:6d:7f:34:4a:bc:e6:9a:13:4f:b6:46:7b:20:ad: 46:cd:ee:8f:47:79:d8:f7:99:2c:b1:39:8f:0d:ab: 0c:36:27:fd:c0:d7:1e:22:67:37:2f:80:17:d2:d5: a9:c4:c7:94:54:56:8f:70:f1:f1:37:b2:3a:1f:f2: 8c:99:fc:1d:3a:ce:e6:58:b2:a2:38:dc:e4:4c:4f: c0:63:5f:50:25:a4:93:f7:20:be:12:5e:6c:f0:da: cc:eb:a0:f9:c7:ea:ac:a5:25:60:8d:13:94:36:69: 1e:a6:dc:8e:2a:ec:ce:25:56:64:b8:3a:73:fe:b1: f5:1f:b0:bf:96:3f:80:9e:5f:4b:26:40:a8:58:46: d6:ac:1a:12:56:c2:f9:fe:9b:80:85:06:d9:9a:a1: c1:cb:50:a7:97:35:ec:18:d9:71:14:cc:04:70:84: 2d:ae:5b:a8:f5:87:34:f7:0f:50:a0:db:af:56:b4: ad:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:01:0D:46:20:77:4C:C6:EE:E3:FC:03:D8:7B:EF:8C:2D:A2:39:B0 X509v3 Authority Key Identifier: keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:2a:8c:8d:85:36:df:3f:32:df:7c:03:e5:52:a9:53:52:ff: 23:81:fc:99:46:91:90:ed:be:d5:c5:b5:04:48:b7:3b:cc:13: 1d:90:ac:96:62:fd:45:d0:5d:ba:e4:14:53:9b:c3:e9:82:96: 1d:77:fc:be:f5:8f:5f:3c:8a:c9:fe:53:3e:e0:be:b7:ea:94: 12:fd:b6:55:f0:eb:46:97:9b:09:69:74:f4:ba:05:5a:ab:a5: e0:c0:6d:de:0f:b2:36:0a:49:0b:b0:e4:0a:c9:f1:fa:f9:7f: 90:0b:b5:b8:82:90:09:05:e2:34:7a:7b:b1:00:f6:7b:21:13: c6:63:de:62:a7:17:88:b8:5f:1d:98:bf:31:5f:cf:9c:23:49: 19:86:dc:b4:33:5a:bf:9f:81:0f:e6:4a:a1:a4:28:92:f0:f1: 37:f4:26:e4:7f:d6:ae:c7:f3:d8:71:de:23:b3:25:09:b1:cd: e0:7c:90:2e:38:4d:c8:7d:8f:30:a0:44:c6:de:b4:59:64:24: b9:7c:8d:a6:35:1a:dc:4b:fd:54:a6:c3:a1:ce:59:d1:e1:8f: 3c:b7:55:ef:91:5a:19:f1:d0:27:83:3f:a8:77:db:30:6d:84: 8b:e3:a5:77:1a:57:82:48:2f:e8:83:4e:28:30:ae:ff:84:17: 44:34:9f:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr8Vd0mUR44fpKoBytpdd0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZDUyNGEwNWQ0NzdiODJmYmNhOTNlN2E1MDRhYTMxYTNh ZDY4NjMwHhcNMjUxMjA4MDUwMTE2WhcNMjUxMjA5MDUwMTE2WjAzMTEwLwYDVQQD EygwYTAxMGQ0NjIwNzc0Y2M2ZWVlM2ZjMDNkODdiZWY4YzJkYTIzOWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTXnFbvbABs1coKh7tNI73ehvwjz FXCTFo+ZEOtBKTu2ouppYMwctIqDOGJj97jYuocWVs6YzvYO26vhI4A45f/z3+hK Y9dxBH/NbX80SrzmmhNPtkZ7IK1Gze6PR3nY95kssTmPDasMNif9wNceImc3L4AX 0tWpxMeUVFaPcPHxN7I6H/KMmfwdOs7mWLKiONzkTE/AY19QJaST9yC+El5s8NrM 66D5x+qspSVgjROUNmkeptyOKuzOJVZkuDpz/rH1H7C/lj+Anl9LJkCoWEbWrBoS VsL5/puAhQbZmqHBy1CnlzXsGNlxFMwEcIQtrluo9Yc09w9QoNuvVrSttQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoBDUYgd0zG7uP8A9h774wtojmwMB8GA1UdIwQY MBaAFN/VJKBdR3uC+8qT56UEqjGjrWhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yMGMxODctMDBmZC00NTllLWFhZTQt NDY3ZjRmN2Y1ZGVkLzEvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yMGMxODctMDBmZC00NTllLWFhZTQtNDY3ZjRmN2Y1ZGVk LzEvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSqMjYU2 3z8y33wD5VKpU1L/I4H8mUaRkO2+1cW1BEi3O8wTHZCslmL9RdBduuQUU5vD6YKW HXf8vvWPXzyKyf5TPuC+t+qUEv22VfDrRpebCWl09LoFWqul4MBt3g+yNgpJC7Dk Csnx+vl/kAu1uIKQCQXiNHp7sQD2eyETxmPeYqcXiLhfHZi/MV/PnCNJGYbctDNa v5+BD+ZKoaQokvDxN/Qm5H/Wrsfz2HHeI7MlCbHN4HyQLjhNyH2PMKBExt60WWQk uXyNpjUa3Ev9VKbDoc5Z0eGPPLdV75FaGfHQJ4M/qHfbMG2Ei+OldxpXgkgv6INO KDCu/4QXRDSfhQ== -----END CERTIFICATE-----Generated at Mon Dec 8 12:16:53 2025 by rpki-client