This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft File: 250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json) Hash identifier: mmdU0rYUwqzUU27tYUz5TE1O2n8MtXLnLN845NzEGec= Subject key identifier: B8:9E:57:84:58:6F:68:01:41:E9:94:0F:EF:8E:F3:33:D8:45:CC:11 Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42 Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042 Certificate serial: 019B3533272EF5A3E4CBFBED7DD1C3BB3EE4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft Manifest number: 134C Signing time: Fri 19 Dec 2025 06:01:43 +0000 Manifest this update: Fri 19 Dec 2025 06:01:43 +0000 Manifest next update: Sat 20 Dec 2025 06:01:43 +0000 Files and hashes: 1: 0c-KKappZ1t73aXjS8mz1x-xTGc.roa (hash: MAa3tSzCnjrh/og+z4XVJnuDQ4AqmSQvPQCYBTfEoDQ=) 2: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: bAkY1XHwaP6EQS9O20L44k64zuWB43w1rG8tWMBTXEg=) 3: 3sv6NKDpba_DUykmu28n6vWbI8U.roa (hash: gUh8eARhI2X9S3x1fvxAhLVuOISp5wl4VqYYPGnDg8Y=) 4: 4rupNMtZnDN0QSWru1RNhLDuJIo.roa (hash: z4IbiN1+w7zdJy/d9hWZDYM0E9ZzQh9TzT+f2XEsa+o=) 5: 67A2CgJxemu3UONyMlCVAtsKdlY.roa (hash: xvBw7mNRlOl8XFOFSPthYphIDW4EGlwFC4zOhUwlCv8=) 6: E2YGCkvl1qJmLxaFsCR58I4gibo.roa (hash: xheLTw+nhNWSmWNkdWISArZADpVzS+Ca89hGltJJMno=) 7: Sp4iVd_pOq560eUzaVqvX_2Gqas.roa (hash: JgPqfPTZcwMnjOQsf/Q1+96TPKUck5H6ntnLpmTpKbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:33:27:2e:f5:a3:e4:cb:fb:ed:7d:d1:c3:bb:3e:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042 Validity Not Before: Dec 19 06:01:43 2025 GMT Not After : Dec 20 06:01:43 2025 GMT Subject: CN=b89e5784586f680141e9940fef8ef333d845cc11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:18:df:04:e0:8c:8c:20:52:92:f8:75:1c:42: 9f:f7:2e:2b:11:c6:9b:52:9a:b9:87:b6:d4:c1:cf: 9e:d5:5e:a8:76:79:94:68:14:5f:b9:95:a1:29:80: 6c:0e:f6:a6:70:b2:80:53:d5:fb:ec:4c:be:26:66: 37:80:93:32:74:04:ab:f1:92:25:31:bb:ff:0f:c0: 5e:e1:4f:47:86:47:fe:d0:76:2c:16:1e:ed:00:4c: 65:06:04:7d:02:56:6e:f4:2b:73:5c:4d:c2:09:2e: 40:77:c6:db:87:3f:64:00:a4:6d:4d:d3:9c:5a:60: b1:d2:3f:26:88:66:67:07:7d:c8:74:e3:ba:6d:92: 6a:1b:31:67:d5:c9:a8:df:c7:b0:72:06:ca:c0:ce: 8a:b7:88:8d:67:d4:28:6d:a1:55:87:73:08:b9:25: 47:de:09:f1:4b:b3:db:a2:64:1f:89:f2:fb:bf:cf: 61:32:2b:d9:12:e7:75:cd:ca:be:e2:fd:52:1e:da: 26:0b:aa:68:42:a6:4a:e8:26:d9:c9:ae:6a:34:c8: b3:06:29:3d:84:58:d7:4a:8c:85:da:0c:f4:94:30: ff:a2:ca:62:6a:2c:aa:9c:e4:af:ee:f4:fd:7a:a1: bf:a3:cc:2d:d1:74:1e:76:b1:06:2a:09:b5:04:66: 07:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9E:57:84:58:6F:68:01:41:E9:94:0F:EF:8E:F3:33:D8:45:CC:11 X509v3 Authority Key Identifier: keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b0:80:68:41:fa:64:84:36:99:87:5e:13:dc:82:8f:75:eb: eb:25:b0:f8:be:f5:c8:ca:23:30:d0:a4:7d:7d:5c:c8:a2:e8: 0d:68:f6:5f:83:d1:8f:e7:a0:67:6c:45:f2:08:39:df:34:8f: 6b:9c:61:2f:0b:96:77:be:91:75:95:83:4c:b1:cf:85:2c:a5: 37:25:ee:ef:b2:e2:30:18:56:a4:af:3e:6f:22:28:dc:06:78: 3c:36:be:c5:13:d0:b8:c0:e0:2e:9d:6c:3c:b1:0e:63:b2:48: ad:30:2d:2a:ef:39:ef:50:ec:d4:05:97:70:06:9c:9e:ca:c9: 69:13:cf:b8:75:4a:5e:cb:63:81:c7:b8:3f:ef:f9:a1:44:f1: 0d:5f:9c:ba:48:6e:e4:83:c0:a2:23:73:73:37:2e:b4:2b:fc: 14:ef:15:12:2d:a5:8d:6f:2a:34:4b:77:92:5e:03:1e:9a:1e: 32:47:96:46:8d:ef:ad:14:4a:10:f5:b1:14:ff:f4:0d:c1:a9: e5:1c:79:25:6b:f0:c1:91:8c:6b:ea:98:d8:74:3c:94:92:9a: a5:2d:88:96:20:19:ac:f8:1d:72:d7:bb:fa:8c:9c:f4:b1:fd: e5:60:ed:14:d3:3b:c4:95:cb:9f:3a:c1:d3:2b:c5:59:44:c7: 69:ef:8e:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mycu9aPky/vtfdHDuz7kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWQxOTdmYmJlZTJhMWRjY2I0ZjU1NzIyYTgyMTBkMzEw NWIwNDIwHhcNMjUxMjE5MDYwMTQzWhcNMjUxMjIwMDYwMTQzWjAzMTEwLwYDVQQD EyhiODllNTc4NDU4NmY2ODAxNDFlOTk0MGZlZjhlZjMzM2Q4NDVjYzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxjfBOCMjCBSkvh1HEKf9y4rEcab Upq5h7bUwc+e1V6odnmUaBRfuZWhKYBsDvamcLKAU9X77Ey+JmY3gJMydASr8ZIl Mbv/D8Be4U9Hhkf+0HYsFh7tAExlBgR9AlZu9CtzXE3CCS5Ad8bbhz9kAKRtTdOc WmCx0j8miGZnB33IdOO6bZJqGzFn1cmo38ewcgbKwM6Kt4iNZ9QobaFVh3MIuSVH 3gnxS7PbomQfifL7v89hMivZEud1zcq+4v1SHtomC6poQqZK6CbZya5qNMizBik9 hFjXSoyF2gz0lDD/ospiaiyqnOSv7vT9eqG/o8wt0XQedrEGKgm1BGYHBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLieV4RYb2gBQemUD++O8zPYRcwRMB8GA1UdIwQY MBaAFNudGX+77iodzLT1VyKoIQ0xBbBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMt NGIyMzk1NmZiZDg2LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMtNGIyMzk1NmZiZDg2 LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhrCAaEH6 ZIQ2mYdeE9yCj3Xr6yWw+L71yMojMNCkfX1cyKLoDWj2X4PRj+egZ2xF8gg53zSP a5xhLwuWd76RdZWDTLHPhSylNyXu77LiMBhWpK8+byIo3AZ4PDa+xRPQuMDgLp1s PLEOY7JIrTAtKu8571Ds1AWXcAacnsrJaRPPuHVKXstjgce4P+/5oUTxDV+cukhu 5IPAoiNzczcutCv8FO8VEi2ljW8qNEt3kl4DHpoeMkeWRo3vrRRKEPWxFP/0DcGp 5Rx5JWvwwZGMa+qY2HQ8lJKapS2IliAZrPgdcte7+oyc9LH95WDtFNM7xJXLnzrB 0yvFWUTHae+OPw== -----END CERTIFICATE-----Generated at Fri Dec 19 14:38:36 2025 by rpki-client