This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft File: 40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json) Hash identifier: 9ivydZyNetnxw+oW71Pq0lp1QcSEuZE9f8zzDE3hANg= Subject key identifier: AE:2E:15:F2:2A:26:33:FF:1E:B4:5B:0C:AA:54:AA:F3:DB:0C:00:E3 Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4 Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4 Certificate serial: 019B39464082CD45B23BF6EFC340E80D0614 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft Manifest number: 1011 Signing time: Sat 20 Dec 2025 01:01:03 +0000 Manifest this update: Sat 20 Dec 2025 01:01:03 +0000 Manifest next update: Sun 21 Dec 2025 01:01:03 +0000 Files and hashes: 1: 13zsYUD0hA67z1BODvjquGKoT_E.roa (hash: MKw8FhdsNVau1tjrdAX7ReUxGObo82luQsljT5owYXc=) 2: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: Rzq7JE/RIJhbd2ES6phtyiF5MMXpYmjKHP8RZojr1hU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:40:82:cd:45:b2:3b:f6:ef:c3:40:e8:0d:06:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4 Validity Not Before: Dec 20 01:01:03 2025 GMT Not After : Dec 21 01:01:03 2025 GMT Subject: CN=ae2e15f22a2633ff1eb45b0caa54aaf3db0c00e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fe:4a:2f:44:b0:2d:fb:ac:21:ad:43:06:fc: ba:91:fd:cb:42:99:5d:d6:b7:b3:ae:f0:55:7f:87: 05:1d:45:38:e3:2f:26:41:eb:64:2a:fa:cb:db:d9: 97:f7:65:92:b0:64:3e:eb:ff:d3:e5:98:03:bb:25: 09:f6:ad:4a:67:75:bf:af:6c:df:7e:ae:b1:c0:b8: ab:59:02:2f:dd:33:6b:75:ce:ac:f2:0f:85:d8:c7: ae:f5:0b:a3:3f:91:bc:95:e2:58:ce:07:01:9a:c1: 94:d3:0b:dd:55:a7:a5:0d:b4:4f:21:61:a5:71:6b: 21:f7:0a:35:25:cf:6b:2f:f8:3c:3c:5f:a1:cb:02: 32:4f:96:d4:b8:71:15:58:fe:69:3e:11:bd:9a:93: 28:56:6a:7e:df:4c:dd:8e:88:e4:7a:35:3d:ee:a1: 1f:f2:33:cb:07:f3:58:d2:82:7a:44:59:42:44:82: af:94:cf:2e:73:1f:6b:15:19:24:18:f8:33:a6:83: 58:dd:50:f0:8a:4a:d6:3d:93:ec:a1:70:9c:57:28: e9:c6:bb:ba:98:eb:d9:18:a4:1e:59:e2:91:c5:6a: 89:22:0b:58:6d:04:f9:2d:07:72:c1:08:af:55:0a: e8:30:43:99:67:a1:40:c9:6e:7e:13:3a:08:cb:fb: c2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:2E:15:F2:2A:26:33:FF:1E:B4:5B:0C:AA:54:AA:F3:DB:0C:00:E3 X509v3 Authority Key Identifier: keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:6e:d0:3f:60:0d:12:05:d4:e1:0b:9a:53:ff:ec:93:4e:13: 9a:2b:0a:bc:53:08:d9:1f:6b:68:33:16:34:05:57:36:46:33: 78:d2:ef:2e:89:7c:18:80:95:c9:07:c3:2c:12:99:31:cc:ef: 53:f1:20:88:e9:30:a5:42:8b:6a:3b:bb:b3:1c:8a:41:fb:0d: ea:fa:ae:f4:5c:b3:c2:95:7c:81:1d:66:0a:b0:69:a1:8c:2f: 30:97:09:60:bc:e6:1f:d7:12:a2:60:b3:32:88:55:ce:80:db: b3:bf:27:09:38:29:26:6e:95:4c:aa:9f:0e:0f:3f:8d:40:6c: e7:dd:71:8b:88:96:7c:37:ee:fe:0b:cd:a2:5e:f5:f6:38:61: 52:47:50:d7:2d:b4:fd:ff:de:8c:d6:96:77:1d:d6:79:97:8b: 95:50:12:cf:9e:02:b0:ee:bf:a9:44:ab:38:d5:a4:cd:f6:b2: b0:ac:38:60:d2:f3:1c:bc:6d:a2:9d:bb:6b:df:75:82:09:97: 5a:b7:f4:f4:9b:75:5b:32:f7:d2:37:f3:ee:30:af:59:71:d4: e3:71:bd:92:09:5c:d7:c6:bc:c2:a4:97:36:c7:06:6f:e2:4c: 30:35:7e:e7:71:28:bf:af:03:4b:dd:72:41:63:4a:99:b7:8c: e4:76:72:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RkCCzUWyO/bvw0DoDQYUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNGExN2MzNWRjMTdlNDNlNzc0ZjgyMzc1YWZkNTBmMzNj NTM2YTQwHhcNMjUxMjIwMDEwMTAzWhcNMjUxMjIxMDEwMTAzWjAzMTEwLwYDVQQD EyhhZTJlMTVmMjJhMjYzM2ZmMWViNDViMGNhYTU0YWFmM2RiMGMwMGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf5KL0SwLfusIa1DBvy6kf3LQpld 1rezrvBVf4cFHUU44y8mQetkKvrL29mX92WSsGQ+6//T5ZgDuyUJ9q1KZ3W/r2zf fq6xwLirWQIv3TNrdc6s8g+F2Meu9QujP5G8leJYzgcBmsGU0wvdVaelDbRPIWGl cWsh9wo1Jc9rL/g8PF+hywIyT5bUuHEVWP5pPhG9mpMoVmp+30zdjojkejU97qEf 8jPLB/NY0oJ6RFlCRIKvlM8ucx9rFRkkGPgzpoNY3VDwikrWPZPsoXCcVyjpxru6 mOvZGKQeWeKRxWqJIgtYbQT5LQdywQivVQroMEOZZ6FAyW5+EzoIy/vClQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4uFfIqJjP/HrRbDKpUqvPbDADjMB8GA1UdIwQY MBaAFONKF8NdwX5D53T4I3Wv1Q8zxTakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQt ZTBmMDc4ZTc2NDNkLzEvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQtZTBmMDc4ZTc2NDNk LzEvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO27QP2AN EgXU4QuaU//sk04TmisKvFMI2R9raDMWNAVXNkYzeNLvLol8GICVyQfDLBKZMczv U/EgiOkwpUKLaju7sxyKQfsN6vqu9FyzwpV8gR1mCrBpoYwvMJcJYLzmH9cSomCz MohVzoDbs78nCTgpJm6VTKqfDg8/jUBs591xi4iWfDfu/gvNol719jhhUkdQ1y20 /f/ejNaWdx3WeZeLlVASz54CsO6/qUSrONWkzfaysKw4YNLzHLxtop27a991ggmX Wrf09Jt1WzL30jfz7jCvWXHU43G9kglc18a8wqSXNscGb+JMMDV+53Eov68DS91y QWNKmbeM5HZyQw== -----END CERTIFICATE-----Generated at Sat Dec 20 09:11:49 2025 by rpki-client