This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft File: 40Y1lMN3zViH3pB4tLLozcTTrls.mft (raw, json) Hash identifier: SU5P0OrGJewXF0tCQFXS+I7WpKDT9yW1fjweh9wPzPg= Subject key identifier: 0E:2F:D3:B8:03:DB:40:56:B9:90:68:95:56:C8:51:FC:39:E7:04:AE Authority key identifier: E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B Certificate issuer: /CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b Certificate serial: 019AF0BF4584C5C9F2EE7DA1B015F8875282 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft Manifest number: 05A5 Signing time: Fri 05 Dec 2025 23:00:58 +0000 Manifest this update: Fri 05 Dec 2025 23:00:58 +0000 Manifest next update: Sat 06 Dec 2025 23:00:58 +0000 Files and hashes: 1: 40Y1lMN3zViH3pB4tLLozcTTrls.crl (hash: N/bo/NDMz4FTrV7oHdVJpg3dPL02fld3s7/BNanoE4Y=) 2: nZAWWVMmtESroqhC0PS3Wx64m1g.roa (hash: qpLibwBGLw83uqsHA4XHZBFcLuSXya9DooLiBQa7gxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:45:84:c5:c9:f2:ee:7d:a1:b0:15:f8:87:52:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b Validity Not Before: Dec 5 23:00:58 2025 GMT Not After : Dec 6 23:00:58 2025 GMT Subject: CN=0e2fd3b803db4056b990689556c851fc39e704ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cb:4f:28:90:0d:df:63:24:8a:ea:11:ca:3c: e5:db:14:a7:4f:68:a1:75:b0:47:eb:9e:0f:69:e6: 97:92:f6:b1:46:34:db:4d:e9:b4:ba:f3:4d:55:5f: 7c:53:f5:94:5f:30:67:3c:80:2d:59:02:83:dd:f8: d5:aa:67:4e:12:e0:b1:ab:cd:b1:a5:13:86:52:b8: 09:d4:a6:0e:32:19:06:98:43:5c:6c:88:0c:1a:3a: ce:77:3e:8c:be:ad:89:c4:a3:0d:4d:0b:1b:af:9b: 14:e6:9b:ec:6c:ca:fe:d6:7b:17:f6:4d:b8:c9:6a: 9b:12:44:6f:4a:ab:50:7f:33:f3:5e:c0:c5:d1:d6: 0b:a9:66:e1:89:8e:fc:91:13:cf:77:a2:2f:7a:71: 1a:69:e9:26:21:da:62:c5:41:4c:d3:c1:fb:ad:85: c8:63:c2:fb:79:5f:2e:a1:34:e1:ba:c9:82:bb:50: 77:9a:1e:10:f8:1e:82:13:9a:f8:c7:97:31:b6:c4: 8d:22:7f:51:9a:16:3d:20:27:91:12:24:33:5b:49: 53:dd:b8:3a:82:e1:5c:0e:e6:9b:55:8b:46:ab:af: 3a:18:e4:c6:f9:6b:ed:5f:5e:eb:18:58:63:48:dc: 8b:21:32:94:04:10:8a:96:49:5b:e5:71:f8:18:85: 4e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2F:D3:B8:03:DB:40:56:B9:90:68:95:56:C8:51:FC:39:E7:04:AE X509v3 Authority Key Identifier: keyid:E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:01:83:f9:b4:35:bc:f0:84:8b:62:f0:f3:22:82:39:94:97: fa:4c:c9:d0:bf:95:6f:d8:6d:41:20:3e:23:14:e6:74:30:c3: af:54:7b:0f:cd:b7:f7:5c:f4:09:7f:83:a8:63:bf:d1:84:96: a3:3c:af:8e:05:df:23:4f:68:ec:11:37:8a:54:29:24:cb:0c: 34:8a:91:12:aa:0f:7c:73:81:d8:64:1e:0f:bc:50:f2:ad:ab: 44:9b:bb:86:81:61:46:e7:f1:90:37:71:3e:48:73:7f:41:4a: 4d:dc:e3:95:30:31:89:64:f4:ec:fd:a7:56:b4:f2:f8:9e:5e: 37:eb:e5:96:cb:0c:8f:85:03:09:af:07:30:eb:37:5f:e9:86: 19:01:34:f9:22:15:50:cd:96:8a:7d:67:c1:7d:92:7f:bd:7c: b9:47:6b:0d:fa:95:da:68:33:18:e7:01:a8:0b:eb:f5:05:bd: 6d:e0:3c:dc:5d:35:6b:a2:a3:b9:53:5f:b2:07:7d:91:c7:5b: 5d:52:4b:b7:37:c5:06:38:f1:a5:08:7a:9d:8d:d6:90:c9:e1: a9:26:9d:a6:60:2d:0c:17:a5:4a:ce:5a:8d:a9:2a:cd:13:da: 1f:6c:e5:d0:f2:ad:62:ed:ec:28:43:b7:0e:ca:10:ca:f7:0c: 05:4f:30:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv0WExcny7n2hsBX4h1KCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNDYzNTk0YzM3N2NkNTg4N2RlOTA3OGI0YjJlOGNkYzRk M2FlNWIwHhcNMjUxMjA1MjMwMDU4WhcNMjUxMjA2MjMwMDU4WjAzMTEwLwYDVQQD EygwZTJmZDNiODAzZGI0MDU2Yjk5MDY4OTU1NmM4NTFmYzM5ZTcwNGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8tPKJAN32MkiuoRyjzl2xSnT2ih dbBH654PaeaXkvaxRjTbTem0uvNNVV98U/WUXzBnPIAtWQKD3fjVqmdOEuCxq82x pROGUrgJ1KYOMhkGmENcbIgMGjrOdz6Mvq2JxKMNTQsbr5sU5pvsbMr+1nsX9k24 yWqbEkRvSqtQfzPzXsDF0dYLqWbhiY78kRPPd6IvenEaaekmIdpixUFM08H7rYXI Y8L7eV8uoTThusmCu1B3mh4Q+B6CE5r4x5cxtsSNIn9RmhY9ICeREiQzW0lT3bg6 guFcDuabVYtGq686GOTG+WvtX17rGFhjSNyLITKUBBCKlklb5XH4GIVOWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA4v07gD20BWuZBolVbIUfw55wSuMB8GA1UdIwQY MBaAFONGNZTDd81Yh96QeLSy6M3E065bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDBZMWxNTjN6VmlIM3BCNHRMTG96Y1RUcmxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jNTcxY2UtZWYzYS00YTI4LWI1Yjgt ZmVhMjM2ZjU0MDM0LzEvNDBZMWxNTjN6VmlIM3BCNHRMTG96Y1RUcmxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9jNTcxY2UtZWYzYS00YTI4LWI1YjgtZmVhMjM2ZjU0MDM0 LzEvNDBZMWxNTjN6VmlIM3BCNHRMTG96Y1RUcmxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowGD+bQ1 vPCEi2Lw8yKCOZSX+kzJ0L+Vb9htQSA+IxTmdDDDr1R7D82391z0CX+DqGO/0YSW ozyvjgXfI09o7BE3ilQpJMsMNIqREqoPfHOB2GQeD7xQ8q2rRJu7hoFhRufxkDdx Pkhzf0FKTdzjlTAxiWT07P2nVrTy+J5eN+vllssMj4UDCa8HMOs3X+mGGQE0+SIV UM2Win1nwX2Sf718uUdrDfqV2mgzGOcBqAvr9QW9beA83F01a6KjuVNfsgd9kcdb XVJLtzfFBjjxpQh6nY3WkMnhqSadpmAtDBelSs5ajakqzRPaH2zl0PKtYu3sKEO3 DsoQyvcMBU8wEw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:18:57 2025 by rpki-client