This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json) Hash identifier: 45nrqvYbk8NtBSDVTYi/HSAo05MXkHrFs/TdGTg8obU= Subject key identifier: F1:5E:65:99:B3:5C:6C:DA:EC:27:3B:31:80:FA:6A:8B:FA:EC:12:71 Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a Certificate serial: 019B38A276C994478E30DBE5EF82A6309875 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft Manifest number: 145E Signing time: Fri 19 Dec 2025 22:02:09 +0000 Manifest this update: Fri 19 Dec 2025 22:02:09 +0000 Manifest next update: Sat 20 Dec 2025 22:02:09 +0000 Files and hashes: 1: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: 6gyFmX8/y9vANTGC/b7lBakzA1yUVA2nqU3v4Vk5ACM=) 2: EAKe9346ONHQ_VuM_WxVCj_cv4Y.roa (hash: 5H5/ZpQAnmY/nM8N1VtyRS6/84qLoSsU0G+AmpT2T/k=) 3: RBJ-L0gnLCM7Rv9f1a6uxn7Yu-0.roa (hash: 4xHToao8czKd/Xx3uSwWIpAVRfAfaES7tBaw71UFRvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:76:c9:94:47:8e:30:db:e5:ef:82:a6:30:98:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a Validity Not Before: Dec 19 22:02:09 2025 GMT Not After : Dec 20 22:02:09 2025 GMT Subject: CN=f15e6599b35c6cdaec273b3180fa6a8bfaec1271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ea:50:66:57:90:12:ef:bd:c7:d2:5b:71:a2: 1b:cd:bd:e4:01:07:4b:a5:f6:7f:b4:f9:15:45:8a: 54:d7:cd:0e:71:ca:e2:17:5c:56:d6:cc:1a:cd:9f: f5:2a:d6:1f:0d:c6:19:35:7b:ff:37:f3:df:40:70: a0:89:d7:52:b2:33:c0:62:d0:7f:1d:f7:48:96:47: df:87:e2:91:c8:64:65:dc:29:ac:0d:c7:b5:07:f5: d6:2a:75:80:49:c5:44:8c:b7:97:8f:78:5d:79:7d: 74:c4:57:09:2d:9c:69:9d:23:49:e9:e4:45:f1:e2: 55:d4:29:7f:d5:d5:2c:e9:de:56:06:20:47:4f:bc: 61:ef:a3:5f:30:7e:5c:b8:58:40:97:0d:e4:de:d1: f3:3d:c9:59:1f:19:85:9b:84:e4:a3:01:1b:3b:53: 44:11:d5:69:ef:bf:e0:52:06:be:b5:40:76:30:a2: 05:fb:09:5c:5a:ed:12:da:b9:fb:5a:54:20:03:cf: 6a:22:83:ea:c4:ea:e9:e4:27:db:d2:ce:4b:e8:1e: 37:76:b1:be:a2:f8:02:5f:a4:9d:2f:70:52:ce:1a: cf:7d:c2:55:10:54:f1:c0:fa:0c:7c:dd:af:85:ab: a1:5a:5a:95:04:34:3c:28:ce:d8:96:74:19:6c:9b: cb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5E:65:99:B3:5C:6C:DA:EC:27:3B:31:80:FA:6A:8B:FA:EC:12:71 X509v3 Authority Key Identifier: keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:94:ae:41:7a:4c:48:bc:68:fe:7b:30:c0:c7:1c:9a:73:90: bc:82:f7:be:cf:e6:e1:17:20:b8:8b:15:64:dc:fe:a0:d6:af: e8:42:32:45:62:e3:ac:33:ac:05:59:d3:72:22:c2:2a:16:c9: ec:c9:24:55:d2:e9:5a:51:e8:36:62:03:c2:a6:b2:0f:c3:0a: 83:57:c2:64:e3:af:c3:44:fe:9c:5e:c9:80:15:b1:c4:5b:a3: dd:8e:d9:1d:a0:ac:0d:84:ca:67:6a:0c:b7:52:5a:5e:e6:8a: e0:d1:a0:b5:12:2a:d9:cb:82:d8:63:2b:61:97:c3:de:b3:29: ee:01:2b:b9:9e:a5:5e:f2:15:d1:5f:35:ef:b6:41:d0:cf:1d: 44:ac:00:11:b1:5f:3a:e5:36:55:3e:f7:2a:50:cb:bc:7f:88: dd:a1:7d:79:f1:09:3f:94:4a:9c:7b:d1:fc:23:36:d9:a7:61: 12:53:fd:33:a7:ba:60:e1:d5:c9:4e:58:8f:16:b8:39:b2:6e: 93:d5:e1:d2:12:83:ec:23:43:14:ea:88:a7:1b:94:08:0f:e4: 0b:0b:09:2d:77:9b:9a:44:8b:17:77:b1:55:72:4b:e9:83:79: 3c:4b:ea:73:45:ff:2c:f9:24:66:35:aa:cf:8d:ed:8a:2d:0b: 63:b0:eb:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4onbJlEeOMNvl74KmMJh1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOGQwOGVkYzQzOTNhODY3MTI5NmY4ZWFjYmJlY2Y5NGQ3 NjU2MmEwHhcNMjUxMjE5MjIwMjA5WhcNMjUxMjIwMjIwMjA5WjAzMTEwLwYDVQQD EyhmMTVlNjU5OWIzNWM2Y2RhZWMyNzNiMzE4MGZhNmE4YmZhZWMxMjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+pQZleQEu+9x9JbcaIbzb3kAQdL pfZ/tPkVRYpU180OccriF1xW1swazZ/1KtYfDcYZNXv/N/PfQHCgiddSsjPAYtB/ HfdIlkffh+KRyGRl3CmsDce1B/XWKnWAScVEjLeXj3hdeX10xFcJLZxpnSNJ6eRF 8eJV1Cl/1dUs6d5WBiBHT7xh76NfMH5cuFhAlw3k3tHzPclZHxmFm4TkowEbO1NE EdVp77/gUga+tUB2MKIF+wlcWu0S2rn7WlQgA89qIoPqxOrp5Cfb0s5L6B43drG+ ovgCX6SdL3BSzhrPfcJVEFTxwPoMfN2vhauhWlqVBDQ8KM7YlnQZbJvLFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFeZZmzXGza7Cc7MYD6aov67BJxMB8GA1UdIwQY MBaAFNuNCO3EOTqGcSlvjqy77PlNdlYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEt YzYzNDlkYjk0OTliLzEvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEtYzYzNDlkYjk0OTli LzEvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpSuQXpM SLxo/nswwMccmnOQvIL3vs/m4RcguIsVZNz+oNav6EIyRWLjrDOsBVnTciLCKhbJ 7MkkVdLpWlHoNmIDwqayD8MKg1fCZOOvw0T+nF7JgBWxxFuj3Y7ZHaCsDYTKZ2oM t1JaXuaK4NGgtRIq2cuC2GMrYZfD3rMp7gEruZ6lXvIV0V8177ZB0M8dRKwAEbFf OuU2VT73KlDLvH+I3aF9efEJP5RKnHvR/CM22adhElP9M6e6YOHVyU5Yjxa4ObJu k9Xh0hKD7CNDFOqIpxuUCA/kCwsJLXebmkSLF3exVXJL6YN5PEvqc0X/LPkkZjWq z43tii0LY7DrBQ== -----END CERTIFICATE-----Generated at Sat Dec 20 03:22:50 2025 by rpki-client