This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft File: MF140gdceCCXnXulDSWxQntn1FY.mft (raw, json) Hash identifier: Ch4kf3X2qLbChNr8SoDNKlRdtmryujPHmJs4dMsSRz8= Subject key identifier: 27:9B:3E:F4:BD:A5:5F:F9:36:96:A3:07:BE:83:BC:21:12:FD:B4:E3 Authority key identifier: 30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56 Certificate issuer: /CN=305d78d2075c7820979d7ba50d25b1427b67d456 Certificate serial: 019AF1D23CB3CC0A787EB2AA97D906C07A30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 04:01:18 +0000 Manifest this update: Sat 06 Dec 2025 04:01:18 +0000 Manifest next update: Sun 07 Dec 2025 04:01:18 +0000 Files and hashes: 1: MF140gdceCCXnXulDSWxQntn1FY.crl (hash: MKjjw/ji1YqRu0EQZJNejQVmNiDmBlTeTosOOppqs9Q=) 2: w22fMY9NDCCcG4e2_IUcNQ_Kq9Q.roa (hash: pqPEuP/XkZYkW0RjNxblrG+NfoIqGAgVKY/Jqk/oP3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3c:b3:cc:0a:78:7e:b2:aa:97:d9:06:c0:7a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=305d78d2075c7820979d7ba50d25b1427b67d456 Validity Not Before: Dec 6 04:01:18 2025 GMT Not After : Dec 7 04:01:18 2025 GMT Subject: CN=279b3ef4bda55ff93696a307be83bc2112fdb4e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:90:1f:8c:c0:7b:60:e9:9f:39:21:6e:26:8e: 3d:08:7e:a1:52:8b:7e:85:e4:a3:a1:d3:ca:da:6b: 5f:7a:57:a7:13:2d:9d:bf:56:34:89:ae:c4:d3:04: 1f:d3:06:38:87:74:07:d2:ff:e7:bb:b2:78:ad:07: cc:f8:0f:4c:e8:1d:5b:fd:7c:0e:72:32:b2:5d:53: ac:d3:20:f6:55:0d:9a:d9:01:61:7f:36:21:74:a8: 65:0b:73:22:ab:de:3d:c0:e5:b8:22:36:71:34:59: a6:fe:6d:60:0b:3f:1c:17:fe:86:e6:e1:14:52:47: e3:a2:15:8b:34:0e:37:9f:c8:f2:22:8d:9b:4c:6c: bd:3c:5b:68:98:9b:87:87:4f:26:e8:0c:7a:f4:04: 0b:d4:5a:e5:28:50:05:ca:d0:53:86:d4:d6:5d:1c: 92:ba:45:d9:e9:22:e4:a4:2c:20:04:8b:3d:30:4b: 8b:e9:18:e6:57:55:d1:5b:8d:b5:51:73:75:66:e7: 2a:93:c3:18:48:8a:7c:a7:6a:29:47:df:06:55:a1: ac:d0:21:4d:68:bf:19:02:98:fe:96:a8:2b:44:b9: e0:49:1e:38:dd:cc:23:a0:3a:fc:b0:18:48:1a:87: 77:81:3e:c8:1c:39:77:06:ca:e6:31:fa:b2:e0:7c: b7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:9B:3E:F4:BD:A5:5F:F9:36:96:A3:07:BE:83:BC:21:12:FD:B4:E3 X509v3 Authority Key Identifier: keyid:30:5D:78:D2:07:5C:78:20:97:9D:7B:A5:0D:25:B1:42:7B:67:D4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MF140gdceCCXnXulDSWxQntn1FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7156a-8feb-439e-a88f-086c4ea1d8ca/1/MF140gdceCCXnXulDSWxQntn1FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:83:03:30:58:d1:95:06:88:2d:c4:24:10:6b:80:e0:d1:c1: da:c1:ad:b0:71:76:63:ef:13:d1:48:7f:1f:0c:42:cc:83:d5: 20:ef:a9:81:69:9e:3f:ee:5b:7f:6d:f4:5b:c3:fd:a5:04:3e: b3:5d:f2:e3:a8:72:41:6b:8e:cd:c1:de:1e:5d:a1:26:8a:d7: ee:ed:cd:5b:32:4d:36:40:91:38:95:b7:d7:36:ac:eb:ef:dc: 0b:b7:bd:1a:1f:21:32:49:00:a2:3a:50:3c:69:3f:a0:bc:bf: 1f:24:92:d9:4f:da:61:d9:52:b0:50:32:d4:07:d3:e5:96:da: fe:6f:6c:9c:63:a3:52:e6:82:8c:6c:a6:01:d2:7f:f6:2c:ba: f9:8d:07:b9:9d:42:3d:9b:6c:f3:6d:3c:ad:ac:92:92:71:45: 03:b3:11:d6:ae:3e:d8:ea:10:80:19:43:ad:45:78:61:0a:d1: 5f:4c:a3:a6:18:96:f1:90:9e:e0:57:ff:27:39:dd:ae:f8:ed: ac:85:38:8c:d8:e6:20:ca:2d:f6:2d:52:df:26:26:96:f5:1e: 00:86:b9:29:25:6a:36:19:a1:ff:d5:16:3c:c6:0b:32:ee:bc: e0:74:fc:ca:de:81:e9:0b:1f:ae:cd:16:7b:31:ee:7d:d0:7e: 8d:bb:aa:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0jyzzAp4frKql9kGwHowMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNWQ3OGQyMDc1Yzc4MjA5NzlkN2JhNTBkMjViMTQyN2I2 N2Q0NTYwHhcNMjUxMjA2MDQwMTE4WhcNMjUxMjA3MDQwMTE4WjAzMTEwLwYDVQQD EygyNzliM2VmNGJkYTU1ZmY5MzY5NmEzMDdiZTgzYmMyMTEyZmRiNGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZAfjMB7YOmfOSFuJo49CH6hUot+ heSjodPK2mtfelenEy2dv1Y0ia7E0wQf0wY4h3QH0v/nu7J4rQfM+A9M6B1b/XwO cjKyXVOs0yD2VQ2a2QFhfzYhdKhlC3Miq949wOW4IjZxNFmm/m1gCz8cF/6G5uEU UkfjohWLNA43n8jyIo2bTGy9PFtomJuHh08m6Ax69AQL1FrlKFAFytBThtTWXRyS ukXZ6SLkpCwgBIs9MEuL6RjmV1XRW421UXN1Zucqk8MYSIp8p2opR98GVaGs0CFN aL8ZApj+lqgrRLngSR443cwjoDr8sBhIGod3gT7IHDl3BsrmMfqy4Hy3TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCebPvS9pV/5NpajB76DvCES/bTjMB8GA1UdIwQY MBaAFDBdeNIHXHggl517pQ0lsUJ7Z9RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUYxNDBnZGNlQ0NYblh1bERTV3hRbnRuMUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jNzE1NmEtOGZlYi00MzllLWE4OGYt MDg2YzRlYTFkOGNhLzEvTUYxNDBnZGNlQ0NYblh1bERTV3hRbnRuMUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jNzE1NmEtOGZlYi00MzllLWE4OGYtMDg2YzRlYTFkOGNh LzEvTUYxNDBnZGNlQ0NYblh1bERTV3hRbnRuMUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYMDMFjR lQaILcQkEGuA4NHB2sGtsHF2Y+8T0Uh/HwxCzIPVIO+pgWmeP+5bf230W8P9pQQ+ s13y46hyQWuOzcHeHl2hJorX7u3NWzJNNkCROJW31zas6+/cC7e9Gh8hMkkAojpQ PGk/oLy/HySS2U/aYdlSsFAy1AfT5Zba/m9snGOjUuaCjGymAdJ/9iy6+Y0HuZ1C PZts8208raySknFFA7MR1q4+2OoQgBlDrUV4YQrRX0yjphiW8ZCe4Ff/Jzndrvjt rIU4jNjmIMot9i1S3yYmlvUeAIa5KSVqNhmh/9UWPMYLMu684HT8yt6B6Qsfrs0W ezHufdB+jbuq4A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:12:03 2025 by rpki-client