This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft File: R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json) Hash identifier: dEiBl6qGRtSm6fRLnLAlDvE7g+hwNH7EgHuZXAA1/vQ= Subject key identifier: D3:70:C8:28:55:42:49:01:A3:25:09:16:18:69:7F:B1:87:4B:E7:59 Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60 Certificate issuer: /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760 Certificate serial: 019AF0881FEFA7A1AA3AC7DD848C949550C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 22:00:44 +0000 Manifest this update: Fri 05 Dec 2025 22:00:44 +0000 Manifest next update: Sat 06 Dec 2025 22:00:44 +0000 Files and hashes: 1: 3SOTukwSWrR1Nu1I7c8QHUHDj5Q.roa (hash: 4YWkgAQs57y3jWp09RgMoPwSBLEZe+2Hmh3qEftE0D8=) 2: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: RoPE4KYoT0oyAG5dCgP0KnFqECKWcbM9Z5jJZ/JiGdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:1f:ef:a7:a1:aa:3a:c7:dd:84:8c:94:95:50:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760 Validity Not Before: Dec 5 22:00:44 2025 GMT Not After : Dec 6 22:00:44 2025 GMT Subject: CN=d370c82855424901a325091618697fb1874be759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:83:4d:16:38:90:e0:66:9a:45:02:46:e2:ef: b2:fe:32:ae:49:db:a6:d6:f9:b1:47:6f:40:41:df: 78:1d:3e:cc:84:d7:1c:44:8f:89:1a:db:2a:fd:12: 0a:79:fb:3f:03:8c:b4:a5:03:f7:ea:28:01:dc:12: 81:c6:f9:07:72:9c:18:f0:cf:df:0f:ce:cb:26:2c: cd:65:4c:1e:28:f3:2f:6c:15:7f:a7:39:73:29:75: ab:99:6d:5d:50:77:f8:6b:89:36:9c:0d:b2:bf:32: 28:dc:e0:1e:95:29:fe:79:43:86:b3:97:ab:90:2b: 42:d0:60:14:ba:c1:cb:a7:cd:e1:d6:62:54:71:8e: 8c:37:cd:e6:5f:b7:62:0c:c8:f2:f3:ba:ab:95:7e: 70:28:a3:e8:ff:db:36:94:03:04:51:77:05:7f:59: a9:90:3f:71:26:62:ac:e6:3f:5d:d8:64:a2:88:1a: f4:97:a3:ad:19:12:4e:5b:25:15:27:e6:47:09:77: 57:88:70:01:46:58:19:cd:f5:f1:86:89:a7:37:4b: 4e:fa:6f:f1:dd:3f:e9:a1:22:32:ad:7f:54:c9:0e: fa:e3:e9:ae:5e:aa:4b:19:aa:b3:09:2a:9d:a0:fa: a1:9f:48:5d:29:40:d7:56:5c:34:a9:41:30:fd:82: 24:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:70:C8:28:55:42:49:01:A3:25:09:16:18:69:7F:B1:87:4B:E7:59 X509v3 Authority Key Identifier: keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:99:d9:68:58:c4:cd:92:f6:b1:55:a3:9e:f5:26:6a:24:00: a2:cd:a0:1c:5f:fa:1b:51:7a:c7:a9:c9:35:bb:83:3a:cd:bd: ed:8b:6e:2f:e7:97:dc:c6:2a:d0:c9:4c:8e:ca:b0:bd:94:53: a5:be:a4:bc:f4:14:29:e1:0a:79:e4:cc:b5:f5:f5:b8:eb:ee: 93:13:66:53:b0:c7:0c:9b:0e:2f:12:1b:da:b3:4f:e4:d7:b6: 8a:55:3c:bd:47:04:f3:21:d7:00:81:bc:21:7e:be:85:3a:c9: a6:1d:fe:b1:e1:a5:f7:1d:65:f1:30:f6:b9:a5:a4:45:24:f6: d1:af:1e:3e:56:62:0a:31:d3:c3:f4:57:d5:48:54:9e:d3:3e: 18:57:c3:be:a5:6d:a9:47:86:c3:a3:32:d2:e4:ab:80:7e:2d: 4c:d0:49:5b:e2:c2:09:e7:eb:db:28:84:66:1b:10:6c:8e:e7: 8d:5c:ed:4e:b3:c5:5f:b1:f5:69:e8:b6:b3:81:db:f5:87:07: a1:9a:71:76:4e:40:a8:e0:fe:70:e1:f1:a5:74:fa:84:c1:b4: 62:a7:c8:c6:50:42:47:bf:b1:e7:bb:91:d2:91:b2:09:ce:49: df:0d:6b:10:be:78:75:09:9d:23:f8:bd:57:43:2c:b2:de:12: b7:58:72:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiB/vp6GqOsfdhIyUlVDBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3OGQyNDg5OGQxY2Y1MmQyM2Y5NTYxZGM2YWMwZjEzNjNl NmM3NjAwHhcNMjUxMjA1MjIwMDQ0WhcNMjUxMjA2MjIwMDQ0WjAzMTEwLwYDVQQD EyhkMzcwYzgyODU1NDI0OTAxYTMyNTA5MTYxODY5N2ZiMTg3NGJlNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsINNFjiQ4GaaRQJG4u+y/jKuSdum 1vmxR29AQd94HT7MhNccRI+JGtsq/RIKefs/A4y0pQP36igB3BKBxvkHcpwY8M/f D87LJizNZUweKPMvbBV/pzlzKXWrmW1dUHf4a4k2nA2yvzIo3OAelSn+eUOGs5er kCtC0GAUusHLp83h1mJUcY6MN83mX7diDMjy87qrlX5wKKPo/9s2lAMEUXcFf1mp kD9xJmKs5j9d2GSiiBr0l6OtGRJOWyUVJ+ZHCXdXiHABRlgZzfXxhomnN0tO+m/x 3T/poSIyrX9UyQ764+muXqpLGaqzCSqdoPqhn0hdKUDXVlw0qUEw/YIkAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNwyChVQkkBoyUJFhhpf7GHS+dZMB8GA1UdIwQY MBaAFEeNJImNHPUtI/lWHcasDxNj5sdgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjQwa2lZMGM5UzBqLVZZZHhxd1BFMlBteDJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy82Y2I3MmQtNDVhNy00NDkwLTljNTkt OTNlYWQzNWExMmNhLzEvUjQwa2lZMGM5UzBqLVZZZHhxd1BFMlBteDJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy82Y2I3MmQtNDVhNy00NDkwLTljNTktOTNlYWQzNWExMmNh LzEvUjQwa2lZMGM5UzBqLVZZZHhxd1BFMlBteDJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5nZaFjE zZL2sVWjnvUmaiQAos2gHF/6G1F6x6nJNbuDOs297YtuL+eX3MYq0MlMjsqwvZRT pb6kvPQUKeEKeeTMtfX1uOvukxNmU7DHDJsOLxIb2rNP5Ne2ilU8vUcE8yHXAIG8 IX6+hTrJph3+seGl9x1l8TD2uaWkRST20a8ePlZiCjHTw/RX1UhUntM+GFfDvqVt qUeGw6My0uSrgH4tTNBJW+LCCefr2yiEZhsQbI7njVztTrPFX7H1aei2s4Hb9YcH oZpxdk5AqOD+cOHxpXT6hMG0YqfIxlBCR7+x57uR0pGyCc5J3w1rEL54dQmdI/i9 V0Msst4St1hyQQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:46:56 2025 by rpki-client