This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft File: 40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json) Hash identifier: zdTV6iUCkV5A1eLh2h/XBNirklep3TbNd39HfsLgGCM= Subject key identifier: 69:4F:C0:62:97:AB:17:0A:DC:1E:BF:F3:72:7B:1A:59:0E:22:82:65 Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4 Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4 Certificate serial: 019AF3C0AAAEEC243A3A6075D1B1A1C7B4B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft Manifest number: 0FED Signing time: Sat 06 Dec 2025 13:01:21 +0000 Manifest this update: Sat 06 Dec 2025 13:01:21 +0000 Manifest next update: Sun 07 Dec 2025 13:01:21 +0000 Files and hashes: 1: 13zsYUD0hA67z1BODvjquGKoT_E.roa (hash: MKw8FhdsNVau1tjrdAX7ReUxGObo82luQsljT5owYXc=) 2: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: siOhoRxgymHHYthj/ei599yefLUfj+1ucPp1Ym3IJd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:aa:ae:ec:24:3a:3a:60:75:d1:b1:a1:c7:b4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4 Validity Not Before: Dec 6 13:01:21 2025 GMT Not After : Dec 7 13:01:21 2025 GMT Subject: CN=694fc06297ab170adc1ebff3727b1a590e228265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a0:5c:61:8c:fb:ac:a5:ec:d4:32:27:fa:6f: 94:af:dc:58:98:a2:b2:fe:de:8b:af:9d:ea:dd:ba: 9e:fd:60:77:e9:ac:42:b3:87:98:76:40:53:36:19: c0:70:28:20:a5:31:2b:d0:3c:4d:f4:c0:64:c9:7e: fc:3c:09:71:94:ea:25:9d:63:4b:4d:35:44:ba:7e: 86:27:94:48:4b:e5:73:98:6c:32:f7:ef:53:b5:ea: 6c:ea:1c:1e:bf:e9:22:1a:47:f7:6c:f5:89:a6:87: 4e:09:18:f3:c1:08:59:1e:91:fb:2b:0a:c4:89:51: b3:58:8e:b5:32:17:37:3b:a4:b6:52:e9:e8:52:50: 94:5e:b0:8f:28:01:01:76:76:45:9d:68:65:be:c8: a9:bb:9a:3a:66:09:af:4f:26:e4:73:47:4e:94:fd: 90:4f:a7:a8:ff:d9:43:8b:1b:dc:c0:5d:d3:db:30: ff:f2:73:ae:9b:5e:17:a4:c1:bf:32:bd:0a:02:af: ed:a0:51:23:6a:e7:2c:ea:e3:49:e3:1f:b3:bf:c2: 26:9c:7d:71:26:23:d7:85:25:7d:be:7f:ce:c4:d1: 7e:cc:fa:f8:9d:07:67:92:f8:e0:15:30:de:3b:13: 4b:e9:44:33:24:2d:22:22:cf:0c:b8:df:e1:f3:29: 42:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:4F:C0:62:97:AB:17:0A:DC:1E:BF:F3:72:7B:1A:59:0E:22:82:65 X509v3 Authority Key Identifier: keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:bc:0c:46:15:87:1f:da:1c:3a:81:9b:f0:29:a1:88:86:84: 2c:c0:3a:69:e2:0a:bd:06:fb:be:e4:30:11:31:4a:a2:15:4c: d0:cc:d0:b5:44:bf:c7:3e:01:15:0b:d4:d1:b3:bc:7d:40:b8: a8:3c:7b:e3:31:0c:9a:2f:2e:d8:34:de:30:30:c5:ad:e5:42: da:9e:28:a3:27:fa:6c:4a:6d:66:28:3f:6d:1d:df:0a:d3:0c: 13:b0:f7:51:5b:4b:19:15:fc:70:39:2b:0d:fd:58:4d:18:37: b2:d4:7f:46:5e:eb:04:92:cc:c2:22:52:29:bd:f7:cd:1f:c4: c7:76:61:ba:4c:18:34:96:c0:ab:01:1c:19:6e:cd:ba:50:a4: 3a:71:3d:e7:ad:af:41:6e:d8:d6:cc:c8:6b:ae:aa:68:6f:9b: 35:47:8c:b2:4c:5e:53:f7:8e:5e:39:b0:5a:94:ce:f2:0c:6c: 3f:53:05:1d:2c:61:17:eb:0d:84:d3:7f:c4:65:b2:72:54:ec: 5b:a4:93:10:71:de:9a:cc:3b:71:ce:f9:67:40:b3:1d:34:96: 73:bc:79:e8:c0:e4:da:79:5d:52:0a:cd:d9:7d:ef:36:e1:ac: 91:ab:fe:93:b2:c8:8d:85:95:60:d5:07:11:c6:ad:09:aa:41: 33:bf:32:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwKqu7CQ6OmB10bGhx7S2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNGExN2MzNWRjMTdlNDNlNzc0ZjgyMzc1YWZkNTBmMzNj NTM2YTQwHhcNMjUxMjA2MTMwMTIxWhcNMjUxMjA3MTMwMTIxWjAzMTEwLwYDVQQD Eyg2OTRmYzA2Mjk3YWIxNzBhZGMxZWJmZjM3MjdiMWE1OTBlMjI4MjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6BcYYz7rKXs1DIn+m+Ur9xYmKKy /t6Lr53q3bqe/WB36axCs4eYdkBTNhnAcCggpTEr0DxN9MBkyX78PAlxlOolnWNL TTVEun6GJ5RIS+VzmGwy9+9Tteps6hwev+kiGkf3bPWJpodOCRjzwQhZHpH7KwrE iVGzWI61Mhc3O6S2UunoUlCUXrCPKAEBdnZFnWhlvsipu5o6ZgmvTybkc0dOlP2Q T6eo/9lDixvcwF3T2zD/8nOum14XpMG/Mr0KAq/toFEjaucs6uNJ4x+zv8ImnH1x JiPXhSV9vn/OxNF+zPr4nQdnkvjgFTDeOxNL6UQzJC0iIs8MuN/h8ylCJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlPwGKXqxcK3B6/83J7GlkOIoJlMB8GA1UdIwQY MBaAFONKF8NdwX5D53T4I3Wv1Q8zxTakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQt ZTBmMDc4ZTc2NDNkLzEvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQtZTBmMDc4ZTc2NDNk LzEvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEbwMRhWH H9ocOoGb8CmhiIaELMA6aeIKvQb7vuQwETFKohVM0MzQtUS/xz4BFQvU0bO8fUC4 qDx74zEMmi8u2DTeMDDFreVC2p4ooyf6bEptZig/bR3fCtMME7D3UVtLGRX8cDkr Df1YTRg3stR/Rl7rBJLMwiJSKb33zR/Ex3ZhukwYNJbAqwEcGW7NulCkOnE9562v QW7Y1szIa66qaG+bNUeMskxeU/eOXjmwWpTO8gxsP1MFHSxhF+sNhNN/xGWyclTs W6STEHHemsw7cc75Z0CzHTSWc7x56MDk2nldUgrN2X3vNuGskav+k7LIjYWVYNUH EcatCapBM78y5w== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:51 2025 by rpki-client