This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft File: 39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json) Hash identifier: O4RVaw7GdghWON8Qf6aD6xkyljUl229nC2LgpsICyz8= Subject key identifier: 59:61:AF:8C:A8:0F:15:24:82:71:0B:B2:36:DB:D2:02:83:87:37:34 Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30 Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030 Certificate serial: 019AF61C867A9634139ACE9D9D7E65554F89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft Manifest number: 063C Signing time: Sun 07 Dec 2025 00:00:55 +0000 Manifest this update: Sun 07 Dec 2025 00:00:55 +0000 Manifest next update: Mon 08 Dec 2025 00:00:55 +0000 Files and hashes: 1: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: I2k8ZIzcrTICiQiBDFFHDYEocIg7IGJwBBJE2QXzL98=) 2: tfQVIf0zNMfuGd1tpip3CLYwCts.roa (hash: +gDGXslGsdNWpAD47LvCZk6SPybHtwdwVZQN5l58KIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:86:7a:96:34:13:9a:ce:9d:9d:7e:65:55:4f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030 Validity Not Before: Dec 7 00:00:55 2025 GMT Not After : Dec 8 00:00:55 2025 GMT Subject: CN=5961af8ca80f152482710bb236dbd20283873734 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a4:93:33:08:23:19:ec:76:3c:46:ad:67:dd: 11:bc:93:17:a4:dd:bc:ba:57:96:66:33:8f:94:82: e6:1e:d7:80:a1:ca:71:9e:0d:6b:be:aa:2a:2c:4c: b7:63:31:bc:fb:74:9d:97:36:72:11:23:85:bc:72: 77:9a:3a:e2:a5:b1:bb:53:17:59:35:52:1d:a9:83: 2a:2c:bb:71:d8:96:00:0a:81:89:cb:e3:2a:cf:64: 4d:16:ff:94:ed:e3:e9:e4:e4:db:bb:5d:35:56:9f: af:8e:7f:d2:a1:b1:54:3d:0c:ce:ef:df:50:0c:e7: 83:8d:a6:0d:80:f6:52:2d:d0:7a:01:90:c3:a0:08: cd:3d:b3:a3:53:ae:22:65:4f:74:bf:2e:13:ab:8f: 6e:d7:fd:b2:f3:7a:5c:8c:8d:75:69:d6:97:61:8c: bc:3e:0d:9b:30:88:70:1f:24:87:6f:cf:13:1b:51: 34:85:be:c8:23:ad:60:c4:53:9e:b1:c6:c4:3d:47: 86:23:c8:9b:ac:89:24:2d:b9:de:e9:89:a0:23:fd: 2f:7a:84:07:09:e9:28:34:45:47:b6:65:98:7a:7d: cb:67:e6:1c:47:57:65:05:65:5f:cb:90:1b:49:4c: 16:23:98:a8:0c:ba:47:1c:bd:3f:b4:23:59:0a:23: 17:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:61:AF:8C:A8:0F:15:24:82:71:0B:B2:36:DB:D2:02:83:87:37:34 X509v3 Authority Key Identifier: keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:64:53:f0:95:86:cc:35:7c:50:11:96:06:4d:ae:6f:87:e2: 95:b4:28:d0:af:0d:f7:68:25:18:c7:82:59:e4:6e:8d:4c:6a: 33:fc:26:66:3b:78:b2:16:99:c7:ae:d4:aa:91:a7:1e:a3:15: 7e:75:c2:cf:75:74:5d:27:2b:57:df:ec:b5:da:c7:9d:b3:43: 10:08:b9:57:9d:bf:cb:05:96:d8:58:f0:1c:09:33:c3:3d:d8: f8:44:15:7c:69:3e:78:bd:55:8a:77:2a:e3:03:2d:11:d5:7b: 7e:ea:bb:36:1b:03:d8:4f:c1:19:0b:76:a1:0e:b2:86:e1:3d: 78:4a:9c:53:3e:f8:f3:fd:9c:8a:7b:a6:66:d3:85:02:83:ca: 5b:b0:59:7a:7c:b5:f2:17:ce:55:07:3e:a4:d5:d2:d5:47:b1: 84:6d:2c:c6:56:60:c5:18:90:49:85:4e:92:fa:55:76:37:3d: fb:6e:d5:ef:33:c0:a1:d3:b5:21:19:3b:ee:89:65:66:11:e5: f4:0b:f9:d8:c0:21:10:7e:f6:67:89:53:5d:73:fd:dd:97:f6: 8e:fe:a6:68:45:ca:18:43:09:f7:c2:74:9e:ad:6a:9a:15:a3: 9b:29:e3:9d:37:04:dd:7c:dd:38:6c:0b:58:c8:10:8a:50:a8: 58:f0:0b:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HIZ6ljQTms6dnX5lVU+JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZDA0NmFmNWVkYzExOTY0MDk2ZGMyMGY2YWYxZGU1NWQ5 YzkwMzAwHhcNMjUxMjA3MDAwMDU1WhcNMjUxMjA4MDAwMDU1WjAzMTEwLwYDVQQD Eyg1OTYxYWY4Y2E4MGYxNTI0ODI3MTBiYjIzNmRiZDIwMjgzODczNzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaSTMwgjGex2PEatZ90RvJMXpN28 uleWZjOPlILmHteAocpxng1rvqoqLEy3YzG8+3SdlzZyESOFvHJ3mjripbG7UxdZ NVIdqYMqLLtx2JYACoGJy+Mqz2RNFv+U7ePp5OTbu101Vp+vjn/SobFUPQzO799Q DOeDjaYNgPZSLdB6AZDDoAjNPbOjU64iZU90vy4Tq49u1/2y83pcjI11adaXYYy8 Pg2bMIhwHySHb88TG1E0hb7II61gxFOescbEPUeGI8ibrIkkLbne6YmgI/0veoQH CekoNEVHtmWYen3LZ+YcR1dlBWVfy5AbSUwWI5ioDLpHHL0/tCNZCiMXvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFlhr4yoDxUkgnELsjbb0gKDhzc0MB8GA1UdIwQY MBaAFN/QRq9e3BGWQJbcIPavHeVdnJAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzlCR3IxN2NFWlpBbHR3ZzlxOGQ1VjJja0RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iZmQwZmYtODQ1ZS00ZTEyLWFjN2Mt NTg4ZTBkOTIzYzE1LzEvMzlCR3IxN2NFWlpBbHR3ZzlxOGQ1VjJja0RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iZmQwZmYtODQ1ZS00ZTEyLWFjN2MtNTg4ZTBkOTIzYzE1 LzEvMzlCR3IxN2NFWlpBbHR3ZzlxOGQ1VjJja0RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWRT8JWG zDV8UBGWBk2ub4filbQo0K8N92glGMeCWeRujUxqM/wmZjt4shaZx67UqpGnHqMV fnXCz3V0XScrV9/stdrHnbNDEAi5V52/ywWW2FjwHAkzwz3Y+EQVfGk+eL1Vincq 4wMtEdV7fuq7NhsD2E/BGQt2oQ6yhuE9eEqcUz748/2cinumZtOFAoPKW7BZeny1 8hfOVQc+pNXS1UexhG0sxlZgxRiQSYVOkvpVdjc9+27V7zPAodO1IRk77ollZhHl 9Av52MAhEH72Z4lTXXP93Zf2jv6maEXKGEMJ98J0nq1qmhWjmynjnTcE3XzdOGwL WMgQilCoWPALNw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:26:52 2025 by rpki-client