This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft File: 250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json) Hash identifier: bnmpg1BqD7ZnmtAhRE9ARIcLj6FpzMYVM7rwoHOnFAw= Subject key identifier: A7:43:02:6F:29:B0:7A:02:C3:B8:66:DC:E4:14:BC:21:88:CC:86:FA Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42 Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042 Certificate serial: 019B0E93623E2AD4FFEADC09F536D193CDE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft Manifest number: 1338 Signing time: Thu 11 Dec 2025 18:01:38 +0000 Manifest this update: Thu 11 Dec 2025 18:01:38 +0000 Manifest next update: Fri 12 Dec 2025 18:01:38 +0000 Files and hashes: 1: 0c-KKappZ1t73aXjS8mz1x-xTGc.roa (hash: MAa3tSzCnjrh/og+z4XVJnuDQ4AqmSQvPQCYBTfEoDQ=) 2: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: VNioCuRrPcx26FtQY30cqsTfNqWrqXuXG0SZPxHeyFo=) 3: 3sv6NKDpba_DUykmu28n6vWbI8U.roa (hash: gUh8eARhI2X9S3x1fvxAhLVuOISp5wl4VqYYPGnDg8Y=) 4: 4rupNMtZnDN0QSWru1RNhLDuJIo.roa (hash: z4IbiN1+w7zdJy/d9hWZDYM0E9ZzQh9TzT+f2XEsa+o=) 5: 67A2CgJxemu3UONyMlCVAtsKdlY.roa (hash: xvBw7mNRlOl8XFOFSPthYphIDW4EGlwFC4zOhUwlCv8=) 6: E2YGCkvl1qJmLxaFsCR58I4gibo.roa (hash: xheLTw+nhNWSmWNkdWISArZADpVzS+Ca89hGltJJMno=) 7: Sp4iVd_pOq560eUzaVqvX_2Gqas.roa (hash: JgPqfPTZcwMnjOQsf/Q1+96TPKUck5H6ntnLpmTpKbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:62:3e:2a:d4:ff:ea:dc:09:f5:36:d1:93:cd:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042 Validity Not Before: Dec 11 18:01:38 2025 GMT Not After : Dec 12 18:01:38 2025 GMT Subject: CN=a743026f29b07a02c3b866dce414bc2188cc86fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d1:a4:5c:3c:21:97:ae:b6:fb:b9:bd:18:0f: d3:08:51:1a:81:c2:fc:40:27:cf:b0:1f:70:fa:ac: b6:c1:e8:09:83:54:6e:d4:3e:f2:a0:ad:46:44:40: fb:22:51:a8:4a:0e:32:c9:42:b8:d6:11:57:a9:1e: 02:f7:57:4f:29:b4:ef:d4:0a:11:3f:bb:d0:18:ad: 2f:db:b7:f3:20:db:76:02:c4:4f:45:d3:0c:b3:66: da:8b:b2:b4:a2:2b:55:73:c7:82:1b:2e:20:03:97: b9:21:e1:0a:92:65:95:b3:fe:b6:18:49:98:1b:78: 80:c5:ff:cf:d1:f5:3f:8b:0f:c4:10:dd:15:3d:d7: 22:e0:db:75:84:19:88:b8:2f:eb:ae:c2:6c:06:e4: 1d:80:21:f6:3b:45:8b:10:ff:fc:cc:6d:e0:00:a7: d3:f8:b4:1c:f7:cb:8d:8b:0e:4a:5d:39:4d:9a:a1: 82:6e:c3:d7:dc:b1:cf:01:29:a9:48:f1:25:fc:19: 5e:e0:92:b4:5a:bb:a4:83:61:af:94:0f:8a:03:cb: 45:74:ed:17:06:35:68:fc:39:5d:2c:73:fb:a5:cf: 5b:b8:4f:e2:4a:dd:d6:90:6a:1a:83:23:53:8e:d1: dd:63:83:0e:b2:92:32:0d:54:b4:30:af:12:f8:c1: 2a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:43:02:6F:29:B0:7A:02:C3:B8:66:DC:E4:14:BC:21:88:CC:86:FA X509v3 Authority Key Identifier: keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:b0:fe:92:71:71:4a:93:26:fe:0b:40:4d:85:97:56:34:3f: b0:ae:c9:44:64:20:81:04:44:0e:3a:a8:7d:0c:10:20:3e:81: 62:5e:96:0e:ce:dc:98:d2:5b:7b:65:94:5f:85:b1:66:0c:e0: 55:22:9b:5f:33:01:0c:6f:9d:b9:01:77:4b:15:17:9f:2c:88: 43:ca:e5:8c:67:78:51:51:9c:c6:06:c9:d3:19:e9:51:bd:0d: 65:b6:4b:03:ac:2c:97:50:30:13:20:28:20:b2:50:07:9a:99: 57:2e:05:bb:68:4b:fd:52:24:40:15:fb:ec:a4:d6:c6:ec:cc: 93:07:77:76:aa:40:bc:b4:fa:e8:19:df:eb:87:a9:ee:4f:6d: b1:19:73:9b:b5:e5:35:0e:29:e8:b4:58:ab:2b:31:ad:6b:3b: ed:3b:22:59:ba:91:96:22:f0:49:bc:70:5c:dc:18:06:f8:4d: 54:95:72:88:f7:e4:63:02:fd:5e:a5:8e:1d:f1:ce:95:57:ee: 3e:96:0b:5b:19:fe:c8:54:b7:2e:17:51:4e:f5:83:85:92:d1: 73:76:7d:a6:b9:52:6b:f5:01:08:93:92:ed:05:b5:be:26:d0: 5b:28:2f:f6:30:b1:83:b1:f7:33:39:4a:cf:d0:e5:e7:0f:a2: 1e:70:c0:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk2I+KtT/6twJ9TbRk83mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWQxOTdmYmJlZTJhMWRjY2I0ZjU1NzIyYTgyMTBkMzEw NWIwNDIwHhcNMjUxMjExMTgwMTM4WhcNMjUxMjEyMTgwMTM4WjAzMTEwLwYDVQQD EyhhNzQzMDI2ZjI5YjA3YTAyYzNiODY2ZGNlNDE0YmMyMTg4Y2M4NmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodGkXDwhl662+7m9GA/TCFEagcL8 QCfPsB9w+qy2wegJg1Ru1D7yoK1GRED7IlGoSg4yyUK41hFXqR4C91dPKbTv1AoR P7vQGK0v27fzINt2AsRPRdMMs2bai7K0oitVc8eCGy4gA5e5IeEKkmWVs/62GEmY G3iAxf/P0fU/iw/EEN0VPdci4Nt1hBmIuC/rrsJsBuQdgCH2O0WLEP/8zG3gAKfT +LQc98uNiw5KXTlNmqGCbsPX3LHPASmpSPEl/Ble4JK0Wrukg2GvlA+KA8tFdO0X BjVo/DldLHP7pc9buE/iSt3WkGoagyNTjtHdY4MOspIyDVS0MK8S+MEq+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKdDAm8psHoCw7hm3OQUvCGIzIb6MB8GA1UdIwQY MBaAFNudGX+77iodzLT1VyKoIQ0xBbBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMt NGIyMzk1NmZiZDg2LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMtNGIyMzk1NmZiZDg2 LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbD+knFx SpMm/gtATYWXVjQ/sK7JRGQggQREDjqofQwQID6BYl6WDs7cmNJbe2WUX4WxZgzg VSKbXzMBDG+duQF3SxUXnyyIQ8rljGd4UVGcxgbJ0xnpUb0NZbZLA6wsl1AwEyAo ILJQB5qZVy4Fu2hL/VIkQBX77KTWxuzMkwd3dqpAvLT66Bnf64ep7k9tsRlzm7Xl NQ4p6LRYqysxrWs77TsiWbqRliLwSbxwXNwYBvhNVJVyiPfkYwL9XqWOHfHOlVfu PpYLWxn+yFS3LhdRTvWDhZLRc3Z9prlSa/UBCJOS7QW1vibQWygv9jCxg7H3MzlK z9Dl5w+iHnDAdA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:57:23 2025 by rpki-client