This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json) Hash identifier: QJRmBQzXGhFQsR/6+euXB3UVA7aYE7s96Woa5Pl97sQ= Subject key identifier: 43:09:E6:D9:14:87:BA:61:92:EF:68:47:E0:97:A3:80:90:EB:F9:D5 Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a Certificate serial: 019AF12EA89CBC96139E3EBBBBA237FFB562 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft Manifest number: 1439 Signing time: Sat 06 Dec 2025 01:02:38 +0000 Manifest this update: Sat 06 Dec 2025 01:02:38 +0000 Manifest next update: Sun 07 Dec 2025 01:02:38 +0000 Files and hashes: 1: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: eANUuseYmh5HUmSBr05xCoG1Z6MKFVmueRNW+hRaIDc=) 2: EAKe9346ONHQ_VuM_WxVCj_cv4Y.roa (hash: 5H5/ZpQAnmY/nM8N1VtyRS6/84qLoSsU0G+AmpT2T/k=) 3: RBJ-L0gnLCM7Rv9f1a6uxn7Yu-0.roa (hash: 4xHToao8czKd/Xx3uSwWIpAVRfAfaES7tBaw71UFRvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a8:9c:bc:96:13:9e:3e:bb:bb:a2:37:ff:b5:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a Validity Not Before: Dec 6 01:02:38 2025 GMT Not After : Dec 7 01:02:38 2025 GMT Subject: CN=4309e6d91487ba6192ef6847e097a38090ebf9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:65:04:9a:b4:5b:71:95:38:b9:9a:5c:2d:40: cc:3a:6d:fe:93:9e:a5:b8:8b:b0:a8:f7:a7:b8:b8: 8e:f3:40:18:1f:96:f0:7a:68:00:52:d2:4b:86:b7: ec:d4:f9:87:12:ab:86:6e:af:8e:8d:ad:37:87:4e: d5:62:57:23:2e:82:1b:1e:b2:7b:1f:a2:99:2a:30: 15:e3:4e:38:c6:0d:c3:6b:50:32:2c:72:81:dd:46: 60:39:6a:a4:70:90:d0:49:db:97:f5:70:f1:b6:ff: f6:58:63:7e:7c:99:8d:32:6a:c7:57:6e:04:cc:c9: c5:96:78:f0:7a:e8:83:15:f0:0f:34:ac:9a:7e:b6: 1b:49:dd:b0:84:52:e6:81:9e:7a:4a:08:4b:8b:89: ec:fe:de:11:ac:bc:65:78:1b:26:e9:fa:83:88:ed: 02:68:92:c0:9a:3f:d4:cf:5d:67:69:1e:7f:ad:6e: e0:26:06:77:c1:43:60:d8:c1:bc:9d:2e:85:b8:f5: bc:e1:db:66:26:d4:be:79:d0:cf:c4:21:8f:e2:f3: 4a:cc:f4:04:cc:93:74:d1:f4:9d:71:15:4f:a8:61: ad:97:fb:fd:d8:1e:63:9c:17:37:6e:54:75:f2:85: f6:87:2d:3d:86:1c:94:15:f4:94:aa:c1:07:60:5c: e4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:09:E6:D9:14:87:BA:61:92:EF:68:47:E0:97:A3:80:90:EB:F9:D5 X509v3 Authority Key Identifier: keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:01:af:ba:12:4a:a9:13:9b:39:be:81:83:af:10:69:8f:e3: 0f:55:43:13:06:6a:f1:89:d1:e3:e8:d1:49:86:6d:7e:3e:5c: b1:4c:93:17:e5:e8:3e:88:eb:6e:36:64:7c:e2:e9:df:ea:89: 9a:a3:1c:07:08:3d:84:8f:dd:a7:ed:a5:77:6b:2a:f4:cc:8c: cc:5d:3b:9f:a6:17:b0:5b:ef:77:23:6b:b4:33:58:6d:ca:42: 8e:53:13:c8:2a:3c:45:48:e3:29:65:50:92:d4:e4:c4:33:83: 41:96:b6:d1:a2:12:72:42:73:47:bd:0b:e9:2a:98:7b:52:3f: 7e:d7:a7:99:f8:0b:19:4f:c0:1d:75:cf:45:e2:91:23:2c:fd: f7:bc:78:44:4d:c8:20:0a:ef:68:c2:67:c1:d0:b2:33:b1:32: cc:a9:1f:07:c0:3a:bb:72:9d:8b:36:72:cc:b4:35:50:25:c6: 7a:eb:4a:df:47:94:ac:69:f0:ef:39:ff:3b:5c:02:01:e0:8d: 24:2c:f9:7d:39:d2:88:21:f0:11:92:18:04:0f:41:fd:6f:6f: 64:d7:34:26:fa:7e:37:a8:bb:db:40:14:6e:36:ab:9c:11:f2: 16:ef:5a:c3:27:0d:fb:a2:48:40:a3:a3:6f:2f:bf:e6:51:6d: 51:59:d8:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqicvJYTnj67u6I3/7ViMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOGQwOGVkYzQzOTNhODY3MTI5NmY4ZWFjYmJlY2Y5NGQ3 NjU2MmEwHhcNMjUxMjA2MDEwMjM4WhcNMjUxMjA3MDEwMjM4WjAzMTEwLwYDVQQD Eyg0MzA5ZTZkOTE0ODdiYTYxOTJlZjY4NDdlMDk3YTM4MDkwZWJmOWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2UEmrRbcZU4uZpcLUDMOm3+k56l uIuwqPenuLiO80AYH5bwemgAUtJLhrfs1PmHEquGbq+Oja03h07VYlcjLoIbHrJ7 H6KZKjAV4044xg3Da1AyLHKB3UZgOWqkcJDQSduX9XDxtv/2WGN+fJmNMmrHV24E zMnFlnjweuiDFfAPNKyafrYbSd2whFLmgZ56SghLi4ns/t4RrLxleBsm6fqDiO0C aJLAmj/Uz11naR5/rW7gJgZ3wUNg2MG8nS6FuPW84dtmJtS+edDPxCGP4vNKzPQE zJN00fSdcRVPqGGtl/v92B5jnBc3blR18oX2hy09hhyUFfSUqsEHYFzkIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMJ5tkUh7phku9oR+CXo4CQ6/nVMB8GA1UdIwQY MBaAFNuNCO3EOTqGcSlvjqy77PlNdlYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEt YzYzNDlkYjk0OTliLzEvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEtYzYzNDlkYjk0OTli LzEvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMgGvuhJK qRObOb6Bg68QaY/jD1VDEwZq8YnR4+jRSYZtfj5csUyTF+XoPojrbjZkfOLp3+qJ mqMcBwg9hI/dp+2ld2sq9MyMzF07n6YXsFvvdyNrtDNYbcpCjlMTyCo8RUjjKWVQ ktTkxDODQZa20aISckJzR70L6SqYe1I/ftenmfgLGU/AHXXPReKRIyz997x4RE3I IArvaMJnwdCyM7EyzKkfB8A6u3KdizZyzLQ1UCXGeutK30eUrGnw7zn/O1wCAeCN JCz5fTnSiCHwEZIYBA9B/W9vZNc0Jvp+N6i720AUbjarnBHyFu9awycN+6JIQKOj by+/5lFtUVnY7A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:05 2025 by rpki-client