This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft File: 40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json) Hash identifier: gIGM7W85K9sKdXuSuXvRpp9wB23vv5VPyaEtfb+vCGo= Subject key identifier: AA:D2:99:02:3B:E5:A6:B3:3F:98:F0:66:0B:B8:0F:11:27:00:48:97 Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4 Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4 Certificate serial: 019B25F6032CBF6CE6C7BE29F3C0CF8D2499 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft Manifest number: 1007 Signing time: Tue 16 Dec 2025 07:00:38 +0000 Manifest this update: Tue 16 Dec 2025 07:00:38 +0000 Manifest next update: Wed 17 Dec 2025 07:00:38 +0000 Files and hashes: 1: 13zsYUD0hA67z1BODvjquGKoT_E.roa (hash: MKw8FhdsNVau1tjrdAX7ReUxGObo82luQsljT5owYXc=) 2: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: 17A+VO5Psy8XMrVpGWU/08URFIVFVl0fx3kyNya+eMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:03:2c:bf:6c:e6:c7:be:29:f3:c0:cf:8d:24:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4 Validity Not Before: Dec 16 07:00:38 2025 GMT Not After : Dec 17 07:00:38 2025 GMT Subject: CN=aad299023be5a6b33f98f0660bb80f1127004897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:96:43:ff:df:6f:10:20:7b:88:72:49:ea:2b: 6f:6f:e3:09:a8:63:17:02:da:8b:bb:70:6c:68:4f: 47:a6:62:58:ce:42:e1:0f:32:2e:8f:cc:bf:c7:1b: 47:ac:76:8c:84:dc:7e:76:cd:ab:9a:11:83:bc:ed: d9:65:74:12:30:c2:95:b3:e7:6c:a2:24:5c:ed:5e: d6:71:93:46:75:85:ce:d3:f4:19:80:4c:3a:96:90: 3f:c7:30:11:45:e2:d4:e4:1f:b1:9a:93:80:9e:01: 86:a6:98:9b:92:93:31:bc:78:8a:d5:88:21:52:b7: 24:80:c1:88:d4:06:ae:44:ca:da:51:f3:a4:44:78: 19:cd:cd:71:8f:bf:5c:48:b6:e5:82:3f:d2:ca:d5: 6a:2e:6d:67:92:64:57:3f:59:39:77:49:9e:d2:82: 07:61:ba:8b:13:e9:ea:2f:27:a7:8c:86:4f:77:cd: a6:c1:b5:12:c9:a3:59:44:18:a4:af:49:c8:2e:6c: 64:4c:e4:6c:24:6b:5e:78:c6:02:fc:72:69:5f:38: 43:e4:eb:04:d0:21:9e:59:4e:bc:87:cb:b4:a7:45: 97:8c:b3:c6:2c:f3:38:8f:01:6a:e6:1f:b0:85:be: 4d:9e:f4:8d:31:dc:41:71:fa:de:dd:fa:d7:9b:ea: b2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D2:99:02:3B:E5:A6:B3:3F:98:F0:66:0B:B8:0F:11:27:00:48:97 X509v3 Authority Key Identifier: keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:68:19:13:a4:fb:2d:b1:06:da:2b:60:45:01:6b:d9:45:dc: fa:3e:5a:cd:66:d4:c2:07:16:2c:25:56:0f:04:24:7c:47:7c: 27:8e:48:89:49:e8:7f:70:09:8b:a8:df:ba:b7:39:2c:22:a0: 1c:b9:fd:04:b8:46:46:8c:b2:ec:30:6d:aa:db:b9:b8:8a:18: 35:73:f5:d9:70:07:16:14:bc:be:d0:c5:6e:2f:48:48:66:c6: 99:fe:d5:54:70:2a:45:54:37:58:0b:30:5b:a7:ff:6f:47:57: d1:d6:c3:b7:05:2a:94:2c:90:21:37:58:fe:58:fb:67:1a:f6: f4:6b:1e:37:28:a9:84:01:4c:46:a4:48:33:4e:f7:d5:96:dd: 8e:a6:a6:75:d5:89:15:b6:af:7f:8f:09:4e:52:86:40:a3:fb: 88:ca:3e:d2:4d:e4:bf:7a:5c:79:47:29:f8:40:ac:86:b8:c0: 6b:99:ed:d7:36:46:b1:0d:f6:3d:82:6e:ac:c3:39:03:91:c5: 48:4e:b6:5c:af:71:b9:09:9f:7c:d0:42:d0:79:20:2a:b3:32: 22:c3:6f:4c:21:65:e1:cb:7b:1f:90:d3:21:39:7d:08:53:54: 65:9d:e0:ce:42:5c:c3:9a:33:ca:bf:3d:e1:1a:0f:91:7f:0c: c1:96:08:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9gMsv2zmx74p88DPjSSZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNGExN2MzNWRjMTdlNDNlNzc0ZjgyMzc1YWZkNTBmMzNj NTM2YTQwHhcNMjUxMjE2MDcwMDM4WhcNMjUxMjE3MDcwMDM4WjAzMTEwLwYDVQQD EyhhYWQyOTkwMjNiZTVhNmIzM2Y5OGYwNjYwYmI4MGYxMTI3MDA0ODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxpZD/99vECB7iHJJ6itvb+MJqGMX AtqLu3BsaE9HpmJYzkLhDzIuj8y/xxtHrHaMhNx+ds2rmhGDvO3ZZXQSMMKVs+ds oiRc7V7WcZNGdYXO0/QZgEw6lpA/xzARReLU5B+xmpOAngGGppibkpMxvHiK1Ygh UrckgMGI1AauRMraUfOkRHgZzc1xj79cSLblgj/SytVqLm1nkmRXP1k5d0me0oIH YbqLE+nqLyenjIZPd82mwbUSyaNZRBikr0nILmxkTORsJGteeMYC/HJpXzhD5OsE 0CGeWU68h8u0p0WXjLPGLPM4jwFq5h+whb5NnvSNMdxBcfre3frXm+qyYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKrSmQI75aazP5jwZgu4DxEnAEiXMB8GA1UdIwQY MBaAFONKF8NdwX5D53T4I3Wv1Q8zxTakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQt ZTBmMDc4ZTc2NDNkLzEvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQtZTBmMDc4ZTc2NDNk LzEvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmgZE6T7 LbEG2itgRQFr2UXc+j5azWbUwgcWLCVWDwQkfEd8J45IiUnof3AJi6jfurc5LCKg HLn9BLhGRoyy7DBtqtu5uIoYNXP12XAHFhS8vtDFbi9ISGbGmf7VVHAqRVQ3WAsw W6f/b0dX0dbDtwUqlCyQITdY/lj7Zxr29GseNyiphAFMRqRIM0731ZbdjqamddWJ Fbavf48JTlKGQKP7iMo+0k3kv3pceUcp+ECshrjAa5nt1zZGsQ32PYJurMM5A5HF SE62XK9xuQmffNBC0HkgKrMyIsNvTCFl4ct7H5DTITl9CFNUZZ3gzkJcw5ozyr89 4RoPkX8MwZYIvA== -----END CERTIFICATE-----Generated at Tue Dec 16 10:43:23 2025 by rpki-client