This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft File: 39UkoF1He4L7ypPnpQSqMaOtaGM.mft (raw, json) Hash identifier: hDlAhl8QoAcWqmW0LqP+/odXzhfAgIWz5JNlZ/jHj88= Subject key identifier: 49:58:35:99:D4:45:E6:BB:96:37:D9:5C:0C:B1:1C:C8:5F:15:8A:90 Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63 Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863 Certificate serial: 019AF49BED31DB6F69E3ECEFA3B181953090 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft Manifest number: 1774 Signing time: Sat 06 Dec 2025 17:00:50 +0000 Manifest this update: Sat 06 Dec 2025 17:00:50 +0000 Manifest next update: Sun 07 Dec 2025 17:00:50 +0000 Files and hashes: 1: 39UkoF1He4L7ypPnpQSqMaOtaGM.crl (hash: 0MDEHVDK1UOFt0e/JfwI9Xz2mMKaDtU6lim2izvKI60=) 2: kS02S7ip8j2u2CZeGLzOHHL59kM.roa (hash: 2jk1V8A0mEt1rNAN366+0eQ/9s8tc4AYb6Gn/kTOhTA=) 3: me3p8QV58B-KPTyEebXHbUt57F4.roa (hash: RbcsBttE7vNIP3XYdPFTNMZZr81PhLK/Xuu/3kpgyJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:ed:31:db:6f:69:e3:ec:ef:a3:b1:81:95:30:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863 Validity Not Before: Dec 6 17:00:50 2025 GMT Not After : Dec 7 17:00:50 2025 GMT Subject: CN=49583599d445e6bb9637d95c0cb11cc85f158a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:0d:d0:d8:44:9f:32:56:b9:2e:55:89:55: fd:72:d5:ce:91:17:4a:e2:e7:92:60:8c:74:94:e4: 7e:5f:70:26:d0:ac:c8:90:42:e4:ac:23:f3:fc:9f: bb:61:30:db:0b:54:dd:d5:5e:3f:18:d7:b1:4b:60: db:e6:e1:83:78:0d:73:4c:48:2c:89:f4:fe:c2:a4: 2c:3f:46:ea:b0:0e:02:57:a8:24:01:56:e1:e6:54: 4e:e2:fa:ef:e3:7e:36:65:b8:8a:a7:05:09:08:80: 38:df:99:85:81:46:c0:74:5e:b8:1a:36:44:29:f1: 2f:a9:3f:91:b0:55:4c:af:8f:4f:c4:ed:10:2d:32: cc:57:8f:a6:9d:d1:e0:43:89:31:87:4e:f1:3e:11: e1:66:57:0f:f4:ff:0a:22:04:ad:4e:15:7a:2d:a8: e9:c3:9a:16:df:27:fc:b2:58:1c:f8:63:8d:cb:ba: a1:cb:e6:ca:33:28:55:0f:82:bf:bf:79:d1:ab:05: 19:09:dc:b5:e2:61:f5:87:28:00:05:96:2e:81:64: 00:d6:7a:93:e7:cd:48:8d:a4:f3:14:c3:e7:8c:54: c2:4e:e4:38:56:0b:08:b4:2f:1d:f0:88:e9:e8:40: ff:88:ee:e5:a2:51:bf:16:33:4b:e7:59:f1:c8:69: 89:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:58:35:99:D4:45:E6:BB:96:37:D9:5C:0C:B1:1C:C8:5F:15:8A:90 X509v3 Authority Key Identifier: keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:86:88:51:61:c0:dc:5b:c8:e6:ee:6f:29:af:14:99:b2:67: ab:f1:d1:a6:17:b9:80:12:12:98:ba:34:9d:d5:38:96:09:31: 2e:28:3b:3f:fa:56:bf:c4:d5:2d:2f:aa:cd:2e:c7:6e:14:4e: 93:43:5b:22:67:2d:ba:2f:63:6b:db:7b:e6:34:65:5f:59:44: 00:7b:0c:4a:e6:c7:97:9a:09:c6:6b:92:cd:04:10:55:c0:22: d7:03:0c:45:94:d9:05:05:6d:d8:81:85:e0:34:a5:f3:ff:ea: 85:d5:3d:2e:77:62:c0:03:7d:4a:dd:17:ef:36:22:e0:f3:b8: ca:9e:4a:b7:07:a5:b1:6b:d9:ea:3b:f9:01:a8:e1:9b:b3:48: af:06:43:0a:4b:e9:82:a5:5c:18:30:38:de:52:cb:e2:2f:08: ef:d3:d7:82:46:ee:6a:6b:af:d3:66:dd:73:c1:aa:e1:cf:79: 91:42:4d:70:e7:5c:86:db:67:5b:61:e6:1f:4b:a4:6b:75:1b: 1b:0f:dd:09:d8:fd:8b:14:c5:4e:a4:d4:04:30:b8:3a:9a:25: 30:4a:db:37:08:fb:c3:9d:9c:82:22:f5:4a:3a:52:b2:8b:66: cb:38:49:4c:73:93:ca:43:bd:47:fd:8d:b0:11:4c:17:4b:16: 9d:c0:53:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m+0x229p4+zvo7GBlTCQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZDUyNGEwNWQ0NzdiODJmYmNhOTNlN2E1MDRhYTMxYTNh ZDY4NjMwHhcNMjUxMjA2MTcwMDUwWhcNMjUxMjA3MTcwMDUwWjAzMTEwLwYDVQQD Eyg0OTU4MzU5OWQ0NDVlNmJiOTYzN2Q5NWMwY2IxMWNjODVmMTU4YTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFcN0NhEnzJWuS5ViVX9ctXOkRdK 4ueSYIx0lOR+X3Am0KzIkELkrCPz/J+7YTDbC1Td1V4/GNexS2Db5uGDeA1zTEgs ifT+wqQsP0bqsA4CV6gkAVbh5lRO4vrv4342ZbiKpwUJCIA435mFgUbAdF64GjZE KfEvqT+RsFVMr49PxO0QLTLMV4+mndHgQ4kxh07xPhHhZlcP9P8KIgStThV6Lajp w5oW3yf8slgc+GONy7qhy+bKMyhVD4K/v3nRqwUZCdy14mH1hygABZYugWQA1nqT 581IjaTzFMPnjFTCTuQ4VgsItC8d8Ijp6ED/iO7lolG/FjNL51nxyGmJAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElYNZnURea7ljfZXAyxHMhfFYqQMB8GA1UdIwQY MBaAFN/VJKBdR3uC+8qT56UEqjGjrWhjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yMGMxODctMDBmZC00NTllLWFhZTQt NDY3ZjRmN2Y1ZGVkLzEvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yMGMxODctMDBmZC00NTllLWFhZTQtNDY3ZjRmN2Y1ZGVk LzEvMzlVa29GMUhlNEw3eXBQbnBRU3FNYU90YUdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZIaIUWHA 3FvI5u5vKa8UmbJnq/HRphe5gBISmLo0ndU4lgkxLig7P/pWv8TVLS+qzS7HbhRO k0NbImctui9ja9t75jRlX1lEAHsMSubHl5oJxmuSzQQQVcAi1wMMRZTZBQVt2IGF 4DSl8//qhdU9LndiwAN9St0X7zYi4PO4yp5KtwelsWvZ6jv5Aajhm7NIrwZDCkvp gqVcGDA43lLL4i8I79PXgkbuamuv02bdc8Gq4c95kUJNcOdchttnW2HmH0uka3Ub Gw/dCdj9ixTFTqTUBDC4OpolMErbNwj7w52cgiL1SjpSsotmyzhJTHOTykO9R/2N sBFMF0sWncBTVA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:13:14 2025 by rpki-client