This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft File: 40Y8J4uE4t8ApHvC2AyNgP-puok.mft (raw, json) Hash identifier: lbCxPYXlNfCWlkiB7fFeI/HoZGSEn8GTuT3spvxtW6k= Subject key identifier: 77:83:8C:DB:15:B7:D1:62:99:7B:1F:64:FB:21:50:0F:A9:D0:C4:65 Authority key identifier: E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89 Certificate issuer: /CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89 Certificate serial: 019AF19B63E85174AB7F373555DFA77C6C57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:23 +0000 Manifest this update: Sat 06 Dec 2025 03:01:23 +0000 Manifest next update: Sun 07 Dec 2025 03:01:23 +0000 Files and hashes: 1: 40Y8J4uE4t8ApHvC2AyNgP-puok.crl (hash: ShxO4ceP2kkiCF+AeFopZoA0BNZeDyKrS/CDQfPUFa8=) 2: 4mphuMGYKre7KcVIZklqvnEwe9w.roa (hash: BDdrPj5npMilCe1H11h3z51bgzRRHnfwNgW8/PXQiwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:63:e8:51:74:ab:7f:37:35:55:df:a7:7c:6c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3463c278b84e2df00a47bc2d80c8d80ffa9ba89 Validity Not Before: Dec 6 03:01:23 2025 GMT Not After : Dec 7 03:01:23 2025 GMT Subject: CN=77838cdb15b7d162997b1f64fb21500fa9d0c465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:54:01:72:4d:4d:20:ed:42:0b:8f:ec:6f:06: 3c:ef:a4:b5:37:7d:f6:97:ff:1e:a9:63:21:34:ff: e9:f0:06:f3:aa:9d:81:d7:32:74:4e:2d:43:c7:d6: e0:5a:3e:e1:51:3b:f1:7b:d3:4c:e5:9b:84:ed:17: 06:f2:52:23:74:ab:a2:a9:36:51:7b:b3:fe:d6:40: 5d:28:6d:40:c5:66:0c:76:cc:9d:52:70:f1:69:65: af:a0:69:e4:e0:9c:7e:5b:e0:b0:49:ed:24:cc:37: 42:ef:1b:7c:a8:f5:62:de:e6:39:fe:f5:2d:43:1d: 69:36:a2:17:be:5a:cf:45:34:34:9c:7d:19:2c:fa: 17:9a:c6:df:e3:a9:86:4c:ea:5a:e8:52:0a:14:a5: d6:35:13:b6:8a:04:b3:79:2c:70:5b:31:1e:5e:c9: 37:e9:66:49:20:75:1f:83:d6:a7:78:6f:fa:aa:00: 11:35:c4:60:92:df:39:a6:7a:5b:2c:df:20:39:2b: 56:7e:08:1d:32:a8:91:2f:27:f6:1b:6d:a6:4a:0b: 26:31:55:97:8f:45:f5:fb:2d:82:3c:00:db:83:a1: eb:a8:3d:8e:03:67:31:83:51:af:a7:ed:6e:82:5c: de:9d:d6:16:d6:ed:1a:4e:bf:13:a7:cc:d0:e2:a5: bb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:83:8C:DB:15:B7:D1:62:99:7B:1F:64:FB:21:50:0F:A9:D0:C4:65 X509v3 Authority Key Identifier: keyid:E3:46:3C:27:8B:84:E2:DF:00:A4:7B:C2:D8:0C:8D:80:FF:A9:BA:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y8J4uE4t8ApHvC2AyNgP-puok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97bace-b2d5-4052-8f61-5f2dfed5d1a4/1/40Y8J4uE4t8ApHvC2AyNgP-puok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:50:c1:39:b2:2c:5e:5b:da:8e:85:ad:95:44:8f:5d:12:5b: 99:42:47:8c:b9:8b:11:ec:56:62:e9:53:5a:6c:6c:43:ec:2c: 0e:80:eb:bd:26:43:c5:90:89:54:9d:87:e5:e2:86:2c:3e:f8: d1:a3:7c:12:b7:7e:a1:c3:10:a1:bf:ab:d0:d9:29:1a:34:7b: d1:50:a9:4f:e0:97:6c:58:58:f3:36:df:85:42:ff:92:e7:8b: 52:38:7a:81:6d:10:31:4e:ae:05:c7:d2:e2:6c:73:fe:db:71: 35:be:bf:39:f5:00:4c:7d:00:33:b7:63:9d:96:52:18:05:b0: a2:08:c0:3a:74:f0:93:11:d3:dc:f0:85:c3:e5:22:4f:13:07: 65:73:68:3a:ef:38:84:c8:48:9e:6e:30:34:58:5e:31:23:55: 7f:e2:70:ef:58:94:bc:bf:49:2d:ac:f9:41:3f:22:5f:c8:51: 94:56:e1:76:4d:b8:7d:c5:13:cc:5f:a2:e6:ef:5b:a1:2a:70: 9c:93:fb:7a:b0:7e:e4:03:ed:62:ad:81:0f:b1:2e:be:9f:3f: 16:3d:cc:7c:a2:9d:97:80:75:d2:7a:88:a1:d0:8d:5e:50:0e: 1e:cf:63:b4:e5:09:0f:9b:44:34:6b:a3:67:d5:fa:ce:4c:99: 3b:5d:78:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm2PoUXSrfzc1Vd+nfGxXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNDYzYzI3OGI4NGUyZGYwMGE0N2JjMmQ4MGM4ZDgwZmZh OWJhODkwHhcNMjUxMjA2MDMwMTIzWhcNMjUxMjA3MDMwMTIzWjAzMTEwLwYDVQQD Eyg3NzgzOGNkYjE1YjdkMTYyOTk3YjFmNjRmYjIxNTAwZmE5ZDBjNDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlQBck1NIO1CC4/sbwY876S1N332 l/8eqWMhNP/p8Abzqp2B1zJ0Ti1Dx9bgWj7hUTvxe9NM5ZuE7RcG8lIjdKuiqTZR e7P+1kBdKG1AxWYMdsydUnDxaWWvoGnk4Jx+W+CwSe0kzDdC7xt8qPVi3uY5/vUt Qx1pNqIXvlrPRTQ0nH0ZLPoXmsbf46mGTOpa6FIKFKXWNRO2igSzeSxwWzEeXsk3 6WZJIHUfg9aneG/6qgARNcRgkt85pnpbLN8gOStWfggdMqiRLyf2G22mSgsmMVWX j0X1+y2CPADbg6HrqD2OA2cxg1Gvp+1uglzendYW1u0aTr8Tp8zQ4qW7NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeDjNsVt9FimXsfZPshUA+p0MRlMB8GA1UdIwQY MBaAFONGPCeLhOLfAKR7wtgMjYD/qbqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85N2JhY2UtYjJkNS00MDUyLThmNjEt NWYyZGZlZDVkMWE0LzEvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85N2JhY2UtYjJkNS00MDUyLThmNjEtNWYyZGZlZDVkMWE0 LzEvNDBZOEo0dUU0dDhBcEh2QzJBeU5nUC1wdW9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFlDBObIs XlvajoWtlUSPXRJbmUJHjLmLEexWYulTWmxsQ+wsDoDrvSZDxZCJVJ2H5eKGLD74 0aN8Erd+ocMQob+r0NkpGjR70VCpT+CXbFhY8zbfhUL/kueLUjh6gW0QMU6uBcfS 4mxz/ttxNb6/OfUATH0AM7djnZZSGAWwogjAOnTwkxHT3PCFw+UiTxMHZXNoOu84 hMhInm4wNFheMSNVf+Jw71iUvL9JLaz5QT8iX8hRlFbhdk24fcUTzF+i5u9boSpw nJP7erB+5APtYq2BD7Euvp8/Fj3MfKKdl4B10nqIodCNXlAOHs9jtOUJD5tENGuj Z9X6zkyZO1148w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:35 2025 by rpki-client