This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft File: v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft (raw, json) Hash identifier: 3YrDV7FrCvQcjO4xKt30lCQVhglcOwz8i322uuekd2U= Subject key identifier: 22:E2:7D:F8:70:D8:9F:C8:0A:17:CA:B0:08:27:6E:69:F6:7D:81:AE Authority key identifier: BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11 Certificate issuer: /CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11 Certificate serial: 019AF465B0185D2A7B3046EC659A77350340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft Manifest number: 0455 Signing time: Sat 06 Dec 2025 16:01:36 +0000 Manifest this update: Sat 06 Dec 2025 16:01:36 +0000 Manifest next update: Sun 07 Dec 2025 16:01:36 +0000 Files and hashes: 1: cyjfAn3tv8ZWD2QqdZEtx3LldGg.roa (hash: dQNTgxKb8PiIdXk5ccOTcLzQhMEZp5vC8gyDHDhC7Ow=) 2: v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl (hash: xsENEx9l2JPe8Ki69ZpqKeG9tS42wtakLz0OiFDOWGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:b0:18:5d:2a:7b:30:46:ec:65:9a:77:35:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf8d081c96fa7d0fc2a9d32aedd50c23a61c6f11 Validity Not Before: Dec 6 16:01:36 2025 GMT Not After : Dec 7 16:01:36 2025 GMT Subject: CN=22e27df870d89fc80a17cab008276e69f67d81ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:8e:e3:c2:69:46:8d:65:7e:a8:76:de:17:a0: 2e:dc:da:5a:61:ed:c4:1e:e4:06:97:52:0a:12:8d: c3:bf:2a:e8:9d:87:b8:86:02:38:71:a1:fb:de:d4: 30:d7:61:8d:12:3f:42:07:28:90:05:28:68:02:48: dc:df:c5:fd:4d:be:4d:43:df:7d:a6:e0:ce:0b:4e: 91:e3:30:07:95:a4:09:67:e1:04:1d:fb:5b:1b:43: f4:98:2f:c2:b6:1c:27:60:28:81:79:fc:0f:e0:c6: 55:fc:df:cb:53:bb:16:b7:f7:eb:57:77:08:17:74: 4d:be:b7:68:0d:80:02:d2:80:b4:e6:43:f0:a2:8d: 32:b0:e7:aa:63:a5:59:e6:e2:0c:8b:f2:63:b3:8f: 25:6c:7e:da:02:90:fd:19:77:d1:95:d4:29:5b:5b: dc:c4:cf:03:66:2c:98:d4:23:62:31:c4:5b:27:23: ff:3d:e9:0e:05:07:dc:8c:ae:9f:2c:22:f9:df:23: d2:e1:46:86:23:43:90:a7:17:ee:fa:a5:52:8d:9d: 9c:87:3d:0d:39:8f:b1:e3:85:08:d9:62:0d:bb:5d: b9:b1:c7:5a:03:96:56:6d:24:18:4d:86:67:69:a8: c4:3c:cc:31:ed:cf:ef:93:a0:1e:f7:b2:ad:ed:21: 75:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:E2:7D:F8:70:D8:9F:C8:0A:17:CA:B0:08:27:6E:69:F6:7D:81:AE X509v3 Authority Key Identifier: keyid:BF:8D:08:1C:96:FA:7D:0F:C2:A9:D3:2A:ED:D5:0C:23:A6:1C:6F:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v40IHJb6fQ_CqdMq7dUMI6YcbxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7f6f96-664c-4c61-bd25-0974f09879a9/1/v40IHJb6fQ_CqdMq7dUMI6YcbxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b9:df:63:f0:f6:71:45:b9:d5:52:e5:19:41:6c:68:2a:73: ea:1d:c1:21:bb:51:94:96:b3:9d:77:dc:12:65:e1:82:eb:04: 17:60:c8:b2:d0:db:ba:5f:25:da:3b:d6:47:1c:cf:30:ad:ba: 72:7d:0d:c9:70:b8:5d:1c:cc:01:5c:69:1d:02:1f:0e:79:ed: 58:24:c9:8e:ea:3c:c8:15:bd:bd:3b:09:05:04:20:ec:67:b7: 21:5d:e0:4a:47:7f:8c:04:c8:67:c3:98:64:a1:8e:fa:69:ec: cb:cb:5b:ed:05:06:be:0d:d4:75:a1:86:9c:ca:78:e2:44:25: 6d:0a:7e:48:bc:32:7b:5a:d9:3d:9d:a3:b0:56:00:be:5e:94: dd:72:bf:56:10:19:68:f4:64:ce:c5:cd:9d:3f:97:03:8e:31: 14:ad:48:f4:d1:60:c0:ac:53:f7:72:ed:6d:9c:61:a5:12:35: 53:72:c8:fe:a0:d3:61:7b:19:bb:b8:e2:4b:d4:a2:c5:2d:1f: 1e:63:99:a5:ca:cc:4e:2f:bb:df:d9:eb:65:e0:fb:13:27:c3: cc:1a:31:60:39:8f:fc:bd:46:00:2f:93:25:ea:ec:a4:87:04: 84:bf:65:bd:2e:74:5d:49:7b:ae:d9:73:bb:6e:2a:9a:89:7a: 83:09:f9:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZbAYXSp7MEbsZZp3NQNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmOGQwODFjOTZmYTdkMGZjMmE5ZDMyYWVkZDUwYzIzYTYx YzZmMTEwHhcNMjUxMjA2MTYwMTM2WhcNMjUxMjA3MTYwMTM2WjAzMTEwLwYDVQQD EygyMmUyN2RmODcwZDg5ZmM4MGExN2NhYjAwODI3NmU2OWY2N2Q4MWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr47jwmlGjWV+qHbeF6Au3NpaYe3E HuQGl1IKEo3DvyronYe4hgI4caH73tQw12GNEj9CByiQBShoAkjc38X9Tb5NQ999 puDOC06R4zAHlaQJZ+EEHftbG0P0mC/CthwnYCiBefwP4MZV/N/LU7sWt/frV3cI F3RNvrdoDYAC0oC05kPwoo0ysOeqY6VZ5uIMi/Jjs48lbH7aApD9GXfRldQpW1vc xM8DZiyY1CNiMcRbJyP/PekOBQfcjK6fLCL53yPS4UaGI0OQpxfu+qVSjZ2chz0N OY+x44UI2WINu125scdaA5ZWbSQYTYZnaajEPMwx7c/vk6Ae97Kt7SF1bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLiffhw2J/IChfKsAgnbmn2fYGuMB8GA1UdIwQY MBaAFL+NCByW+n0PwqnTKu3VDCOmHG8RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjQwSUhKYjZmUV9DcWRNcTdkVU1JNlljYnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83ZjZmOTYtNjY0Yy00YzYxLWJkMjUt MDk3NGYwOTg3OWE5LzEvdjQwSUhKYjZmUV9DcWRNcTdkVU1JNlljYnhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni83ZjZmOTYtNjY0Yy00YzYxLWJkMjUtMDk3NGYwOTg3OWE5 LzEvdjQwSUhKYjZmUV9DcWRNcTdkVU1JNlljYnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrnfY/D2 cUW51VLlGUFsaCpz6h3BIbtRlJaznXfcEmXhgusEF2DIstDbul8l2jvWRxzPMK26 cn0NyXC4XRzMAVxpHQIfDnntWCTJjuo8yBW9vTsJBQQg7Ge3IV3gSkd/jATIZ8OY ZKGO+mnsy8tb7QUGvg3UdaGGnMp44kQlbQp+SLwye1rZPZ2jsFYAvl6U3XK/VhAZ aPRkzsXNnT+XA44xFK1I9NFgwKxT93LtbZxhpRI1U3LI/qDTYXsZu7jiS9SixS0f HmOZpcrMTi+739nrZeD7EyfDzBoxYDmP/L1GAC+TJerspIcEhL9lvS50XUl7rtlz u24qmol6gwn5Gw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:11:56 2025 by rpki-client