This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft File: 39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json) Hash identifier: lS8aJwsMuB/1NXJwJQyu4D4B4BgMlK4rkWS7K9LsNSU= Subject key identifier: 82:F8:4D:68:EF:5D:B0:04:B2:24:B3:13:34:35:A3:9C:75:68:3D:E6 Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30 Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030 Certificate serial: 019B3F7F5BA6CB176E2BDE143F15C6CB4CFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft Manifest number: 0662 Signing time: Sun 21 Dec 2025 06:01:09 +0000 Manifest this update: Sun 21 Dec 2025 06:01:09 +0000 Manifest next update: Mon 22 Dec 2025 06:01:09 +0000 Files and hashes: 1: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: KKYGOFFKf8GAnG/kSpJ1iElmKPp5Wfo9qQ7ovawwZUo=) 2: tfQVIf0zNMfuGd1tpip3CLYwCts.roa (hash: +gDGXslGsdNWpAD47LvCZk6SPybHtwdwVZQN5l58KIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7f:5b:a6:cb:17:6e:2b:de:14:3f:15:c6:cb:4c:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030 Validity Not Before: Dec 21 06:01:09 2025 GMT Not After : Dec 22 06:01:09 2025 GMT Subject: CN=82f84d68ef5db004b224b3133435a39c75683de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:83:d3:28:df:95:29:02:ed:26:99:56:2a:f0: 92:97:27:52:f6:72:ce:37:d3:cb:d1:ce:b6:59:f5: 4b:34:82:6a:80:3f:17:6c:ae:4f:41:d9:08:2e:1d: 84:7d:2d:cf:e8:d0:19:58:69:f9:24:49:f2:4c:6a: a2:c4:c7:80:6e:66:cf:47:87:89:9b:05:8c:1e:8e: 1c:5e:64:bc:78:be:0a:4c:38:44:4d:0a:16:9c:26: ab:c6:7a:a5:45:02:e0:d4:cb:71:46:a7:05:2a:4a: 2b:8c:55:46:96:16:02:30:a9:14:0f:f5:32:93:35: 69:e9:91:80:67:be:13:23:e9:99:df:f1:a2:26:9a: 8f:7c:09:8d:4a:bb:f1:55:4a:ea:37:be:e9:37:f0: e5:bb:c7:78:60:82:73:94:9f:b8:59:04:a4:13:c9: ea:a1:dc:d0:b3:7b:0a:97:04:30:0f:79:19:a2:69: e9:29:51:37:72:c9:19:fa:5b:7c:9e:b7:89:12:f2: 1a:f9:2e:0b:53:3c:de:36:11:e8:a3:d9:2d:36:f3: 0a:5a:6b:10:a1:df:55:c8:b4:82:7b:c0:be:91:29: bd:b6:bd:e1:3c:e8:25:05:61:74:9f:8a:43:be:ae: 90:46:0d:6c:d2:8f:c6:ac:b5:ab:90:20:db:43:19: 5f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:F8:4D:68:EF:5D:B0:04:B2:24:B3:13:34:35:A3:9C:75:68:3D:E6 X509v3 Authority Key Identifier: keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:58:6f:8c:bf:57:15:fd:aa:14:45:a9:ad:1b:9f:d1:05:89: a1:0e:82:2e:b8:80:dc:23:9e:b0:50:e6:43:fe:4e:ce:48:a9: d8:a4:7c:6c:e1:09:6c:b2:01:fc:0a:86:4d:77:9a:9b:bb:55: c6:db:84:da:46:5d:5c:32:ec:e6:c1:09:88:e0:e0:64:44:9d: d0:d7:62:2d:8a:ea:21:14:5f:80:47:cf:56:0e:12:42:86:19: 38:af:59:7d:75:bf:20:c1:1e:a1:25:e9:b4:5b:52:20:01:91: 2c:45:d3:be:c4:44:01:cf:07:ba:a4:0e:de:6b:3f:7b:3a:87: 80:03:f3:37:e1:b9:71:8d:b8:06:2d:34:56:d3:1e:32:1f:ff: cc:39:66:36:b6:e0:86:d5:85:fb:32:c2:d1:06:af:8a:8a:e4: cc:0f:54:16:75:5c:15:6e:8e:89:43:5b:f0:d5:c9:71:22:df: ed:d8:62:70:03:7d:ff:44:0f:c1:79:ad:cf:2f:a1:27:16:83: 2f:d7:fe:5e:12:d3:38:ca:ed:5c:2e:02:52:e9:7d:d1:a3:c7: 69:d2:97:aa:85:ad:34:01:f2:76:d2:4e:3c:6c:dc:da:35:b0: a6:27:00:63:8d:a7:64:f6:d0:97:6d:ee:a7:b3:06:95:71:77: d2:92:f0:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/f1umyxduK94UPxXGy0z9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZDA0NmFmNWVkYzExOTY0MDk2ZGMyMGY2YWYxZGU1NWQ5 YzkwMzAwHhcNMjUxMjIxMDYwMTA5WhcNMjUxMjIyMDYwMTA5WjAzMTEwLwYDVQQD Eyg4MmY4NGQ2OGVmNWRiMDA0YjIyNGIzMTMzNDM1YTM5Yzc1NjgzZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIPTKN+VKQLtJplWKvCSlydS9nLO N9PL0c62WfVLNIJqgD8XbK5PQdkILh2EfS3P6NAZWGn5JEnyTGqixMeAbmbPR4eJ mwWMHo4cXmS8eL4KTDhETQoWnCarxnqlRQLg1MtxRqcFKkorjFVGlhYCMKkUD/Uy kzVp6ZGAZ74TI+mZ3/GiJpqPfAmNSrvxVUrqN77pN/Dlu8d4YIJzlJ+4WQSkE8nq odzQs3sKlwQwD3kZomnpKVE3cskZ+lt8nreJEvIa+S4LUzzeNhHoo9ktNvMKWmsQ od9VyLSCe8C+kSm9tr3hPOglBWF0n4pDvq6QRg1s0o/GrLWrkCDbQxlfMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIL4TWjvXbAEsiSzEzQ1o5x1aD3mMB8GA1UdIwQY MBaAFN/QRq9e3BGWQJbcIPavHeVdnJAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzlCR3IxN2NFWlpBbHR3ZzlxOGQ1VjJja0RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iZmQwZmYtODQ1ZS00ZTEyLWFjN2Mt NTg4ZTBkOTIzYzE1LzEvMzlCR3IxN2NFWlpBbHR3ZzlxOGQ1VjJja0RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iZmQwZmYtODQ1ZS00ZTEyLWFjN2MtNTg4ZTBkOTIzYzE1 LzEvMzlCR3IxN2NFWlpBbHR3ZzlxOGQ1VjJja0RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFhvjL9X Ff2qFEWprRuf0QWJoQ6CLriA3COesFDmQ/5Ozkip2KR8bOEJbLIB/AqGTXeam7tV xtuE2kZdXDLs5sEJiODgZESd0NdiLYrqIRRfgEfPVg4SQoYZOK9ZfXW/IMEeoSXp tFtSIAGRLEXTvsREAc8HuqQO3ms/ezqHgAPzN+G5cY24Bi00VtMeMh//zDlmNrbg htWF+zLC0QaviorkzA9UFnVcFW6OiUNb8NXJcSLf7dhicAN9/0QPwXmtzy+hJxaD L9f+XhLTOMrtXC4CUul90aPHadKXqoWtNAHydtJOPGzc2jWwpicAY42nZPbQl23u p7MGlXF30pLwXQ== -----END CERTIFICATE-----Generated at Sun Dec 21 16:13:24 2025 by rpki-client