This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft File: 250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json) Hash identifier: 3yyYonow592g0glBkVOCm8imiuFjN24tcZNs2FiVjn0= Subject key identifier: BD:F0:AC:BA:D0:31:02:8F:F2:DD:AB:03:1B:B1:B6:B3:11:16:7F:DD Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42 Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042 Certificate serial: 019AF389F7F928462ED8D301B7022AFE75F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft Manifest number: 132A Signing time: Sat 06 Dec 2025 12:01:36 +0000 Manifest this update: Sat 06 Dec 2025 12:01:36 +0000 Manifest next update: Sun 07 Dec 2025 12:01:36 +0000 Files and hashes: 1: 0c-KKappZ1t73aXjS8mz1x-xTGc.roa (hash: MAa3tSzCnjrh/og+z4XVJnuDQ4AqmSQvPQCYBTfEoDQ=) 2: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: GmpcyHgrvHuGQRDYXt7cW0bqZBMGXPHS1fl+VRyQRvo=) 3: 3sv6NKDpba_DUykmu28n6vWbI8U.roa (hash: gUh8eARhI2X9S3x1fvxAhLVuOISp5wl4VqYYPGnDg8Y=) 4: 4rupNMtZnDN0QSWru1RNhLDuJIo.roa (hash: z4IbiN1+w7zdJy/d9hWZDYM0E9ZzQh9TzT+f2XEsa+o=) 5: 67A2CgJxemu3UONyMlCVAtsKdlY.roa (hash: xvBw7mNRlOl8XFOFSPthYphIDW4EGlwFC4zOhUwlCv8=) 6: E2YGCkvl1qJmLxaFsCR58I4gibo.roa (hash: xheLTw+nhNWSmWNkdWISArZADpVzS+Ca89hGltJJMno=) 7: Sp4iVd_pOq560eUzaVqvX_2Gqas.roa (hash: JgPqfPTZcwMnjOQsf/Q1+96TPKUck5H6ntnLpmTpKbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:f7:f9:28:46:2e:d8:d3:01:b7:02:2a:fe:75:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042 Validity Not Before: Dec 6 12:01:36 2025 GMT Not After : Dec 7 12:01:36 2025 GMT Subject: CN=bdf0acbad031028ff2ddab031bb1b6b311167fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ae:eb:53:b6:d0:db:75:ad:cc:5a:0b:21:ab: 17:a3:29:1d:13:8a:83:6c:d9:78:ad:8f:31:ee:f6: d5:c9:cf:aa:7c:65:b2:2e:83:85:ee:8a:97:86:2b: 3c:40:ad:75:f9:9f:8d:64:e4:75:a6:1e:bf:20:65: 82:af:49:13:59:e8:da:84:36:ef:04:18:10:38:02: 27:8b:ac:7c:89:de:a7:92:01:5e:df:be:7f:af:bf: 19:e3:b0:c2:fa:ad:db:1c:b7:b6:57:80:cc:9b:ac: fa:33:ca:97:d6:c0:92:e6:1b:5e:f5:50:dd:86:5f: f0:5a:16:bb:d3:2c:67:d1:1f:79:7c:7e:71:cb:31: 51:84:88:42:f7:26:b0:12:e4:f3:2c:38:89:5e:92: 9a:60:2c:ca:5f:fa:f8:26:3e:2a:94:ae:1c:42:13: 12:6f:33:b8:6f:d0:aa:14:73:ba:e2:3d:50:34:76: d8:c2:da:dc:bc:b1:8c:a3:af:43:1a:75:34:d3:a9: 8b:34:46:bf:fd:6d:a4:c6:42:b7:5d:23:47:eb:76: 3d:34:d0:5e:3e:6c:61:55:bf:bd:78:70:bd:52:1b: a5:40:a8:1c:e6:53:13:9d:1f:61:27:78:d0:79:85: b7:d9:93:51:65:f0:51:f0:c9:95:54:5f:52:95:d8: 45:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F0:AC:BA:D0:31:02:8F:F2:DD:AB:03:1B:B1:B6:B3:11:16:7F:DD X509v3 Authority Key Identifier: keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:eb:68:38:8e:d0:e8:76:20:fd:e4:61:9e:d5:10:8a:01:1d: 9f:9d:c8:51:94:d4:65:e9:a5:3b:a5:b2:a2:8e:6c:51:6f:21: fd:28:bf:5e:91:54:8b:08:0c:41:c8:95:db:e5:6d:7e:dc:c4: 13:7a:44:52:bd:a6:b5:18:76:5d:10:c3:86:e3:4f:7c:88:e0: c8:c5:13:6f:2c:94:d5:a5:21:7f:14:d2:4f:42:ec:db:08:51: 97:38:f5:25:4d:3c:62:fa:20:c3:da:f4:ba:8f:a9:e7:a2:2b: 02:9f:24:66:2e:0b:07:d9:04:46:b1:c1:90:38:e5:ab:54:50: d8:a6:38:36:5a:7c:de:fd:b3:67:dc:d7:df:0a:27:d7:aa:b9: d7:42:ce:86:05:78:44:15:2f:69:9b:4e:25:9e:99:82:5e:56: 5d:18:38:64:d8:fd:b4:5d:43:08:ab:5e:29:25:fb:c5:a6:e0: 30:8b:48:fd:12:d3:20:12:b7:6f:60:15:91:fd:ed:b8:58:8f: 0b:47:b3:85:42:09:a2:98:0f:37:c1:da:3a:12:ea:e3:ff:59: db:58:e0:98:6b:b6:74:0c:c4:bc:f9:17:c5:1b:1d:d4:e0:ee: 91:17:52:42:20:2d:b1:e1:6d:8c:90:f1:e5:43:20:3b:0e:a7: c9:45:e8:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziff5KEYu2NMBtwIq/nXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWQxOTdmYmJlZTJhMWRjY2I0ZjU1NzIyYTgyMTBkMzEw NWIwNDIwHhcNMjUxMjA2MTIwMTM2WhcNMjUxMjA3MTIwMTM2WjAzMTEwLwYDVQQD EyhiZGYwYWNiYWQwMzEwMjhmZjJkZGFiMDMxYmIxYjZiMzExMTY3ZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAya7rU7bQ23WtzFoLIasXoykdE4qD bNl4rY8x7vbVyc+qfGWyLoOF7oqXhis8QK11+Z+NZOR1ph6/IGWCr0kTWejahDbv BBgQOAIni6x8id6nkgFe375/r78Z47DC+q3bHLe2V4DMm6z6M8qX1sCS5hte9VDd hl/wWha70yxn0R95fH5xyzFRhIhC9yawEuTzLDiJXpKaYCzKX/r4Jj4qlK4cQhMS bzO4b9CqFHO64j1QNHbYwtrcvLGMo69DGnU006mLNEa//W2kxkK3XSNH63Y9NNBe PmxhVb+9eHC9UhulQKgc5lMTnR9hJ3jQeYW32ZNRZfBR8MmVVF9SldhF2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3wrLrQMQKP8t2rAxuxtrMRFn/dMB8GA1UdIwQY MBaAFNudGX+77iodzLT1VyKoIQ0xBbBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMt NGIyMzk1NmZiZDg2LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMtNGIyMzk1NmZiZDg2 LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXOtoOI7Q 6HYg/eRhntUQigEdn53IUZTUZemlO6Wyoo5sUW8h/Si/XpFUiwgMQciV2+VtftzE E3pEUr2mtRh2XRDDhuNPfIjgyMUTbyyU1aUhfxTST0Ls2whRlzj1JU08Yvogw9r0 uo+p56IrAp8kZi4LB9kERrHBkDjlq1RQ2KY4Nlp83v2zZ9zX3won16q510LOhgV4 RBUvaZtOJZ6Zgl5WXRg4ZNj9tF1DCKteKSX7xabgMItI/RLTIBK3b2AVkf3tuFiP C0ezhUIJopgPN8HaOhLq4/9Z21jgmGu2dAzEvPkXxRsd1ODukRdSQiAtseFtjJDx 5UMgOw6nyUXohw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:34:10 2025 by rpki-client