This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft File: 40Y1lMN3zViH3pB4tLLozcTTrls.mft (raw, json) Hash identifier: 1jKVgpW2Y4IZHbAwiFLcX5SFoERUsMtfal0t6JpFxVU= Subject key identifier: 8C:27:87:90:CA:B1:9B:1D:5D:F9:D4:B8:D0:9D:EF:1B:7E:70:2E:86 Authority key identifier: E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B Certificate issuer: /CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b Certificate serial: 019B552B6FF070ACF93FF12C16A79D1EA405 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft Manifest number: 05D9 Signing time: Thu 25 Dec 2025 11:01:08 +0000 Manifest this update: Thu 25 Dec 2025 11:01:08 +0000 Manifest next update: Fri 26 Dec 2025 11:01:08 +0000 Files and hashes: 1: 40Y1lMN3zViH3pB4tLLozcTTrls.crl (hash: NUEHEz4kv9z9chZcpUJNYJaNieJ86ck/KvW/Lbgak3g=) 2: nZAWWVMmtESroqhC0PS3Wx64m1g.roa (hash: qpLibwBGLw83uqsHA4XHZBFcLuSXya9DooLiBQa7gxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2b:6f:f0:70:ac:f9:3f:f1:2c:16:a7:9d:1e:a4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3463594c377cd5887de9078b4b2e8cdc4d3ae5b Validity Not Before: Dec 25 11:01:08 2025 GMT Not After : Dec 26 11:01:08 2025 GMT Subject: CN=8c278790cab19b1d5df9d4b8d09def1b7e702e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7d:be:d5:85:70:59:7f:67:5c:2a:37:ce:33: bc:3f:9c:ae:d2:6a:32:9c:74:7a:73:ee:40:a9:8b: b5:b1:cf:18:a6:f6:69:fb:fd:9a:4b:e5:31:2b:20: 36:07:9f:58:7c:51:90:68:8f:3a:ad:bd:c0:18:3d: 3f:22:7d:7d:af:14:56:53:4b:89:23:76:3f:3b:85: 8e:6d:26:18:55:c2:72:f2:74:a0:a0:8d:ab:be:eb: e2:22:f8:ae:d5:45:f2:c6:a3:00:fe:1a:bb:80:05: ce:de:69:72:35:68:5d:63:4c:c4:d4:05:fb:d2:fa: 7d:1a:0f:e5:45:62:56:a7:d9:72:23:bb:3a:d1:7e: d2:1a:19:b3:2a:84:a6:05:02:d6:d6:9f:ed:cf:5d: 53:e3:24:4b:86:71:3c:80:30:27:2a:7e:aa:98:43: ff:72:8f:9d:24:13:6e:b8:ed:08:82:9c:2e:39:55: d7:29:7a:9f:f8:01:84:99:5f:b9:b6:23:ba:e7:0c: de:ae:d3:ff:89:48:52:0e:f4:11:09:d9:63:d9:c1: a7:0a:fa:e1:51:25:53:27:27:c5:79:f9:f7:7d:8f: 6c:de:5b:1a:9c:20:64:7f:bf:fc:90:06:64:20:d0: bd:cd:a2:9d:8f:b4:79:0c:93:4a:51:50:c5:96:39: 6c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:27:87:90:CA:B1:9B:1D:5D:F9:D4:B8:D0:9D:EF:1B:7E:70:2E:86 X509v3 Authority Key Identifier: keyid:E3:46:35:94:C3:77:CD:58:87:DE:90:78:B4:B2:E8:CD:C4:D3:AE:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40Y1lMN3zViH3pB4tLLozcTTrls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c571ce-ef3a-4a28-b5b8-fea236f54034/1/40Y1lMN3zViH3pB4tLLozcTTrls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:7e:f2:53:bd:1e:22:b8:fd:7c:bc:ca:92:3a:77:38:56:05: 71:a6:ad:75:c1:bb:83:ed:47:45:f3:b1:60:c4:5f:cf:12:5a: 21:3b:cc:ea:56:dd:72:2b:fb:a7:13:8b:54:bc:99:fe:3a:10: e5:2d:0c:c7:1c:7b:9c:a9:d3:0e:59:d0:77:1b:79:44:b9:3c: 5a:33:d0:07:c7:a8:27:c6:6e:2c:49:ed:cc:88:ad:f6:b4:b3: 3a:d2:67:c3:d6:ca:fe:c6:dc:fa:84:a8:f3:16:31:52:75:c5: 1b:ec:4d:de:ee:04:37:af:91:01:f3:58:a8:40:f3:48:f7:38: f2:05:4b:d8:c5:b7:ed:4b:07:63:37:24:e3:29:f5:7c:7c:e1: 0f:fe:e0:ad:aa:1c:ab:f6:71:f1:ac:7b:9c:b1:aa:d9:ba:d9: 66:93:38:99:17:6a:4b:53:eb:98:ed:db:c2:00:a8:7d:d2:1a: b5:d7:16:4c:7e:b4:88:17:14:9e:7c:7a:e9:56:c7:f8:6e:8a: 99:1b:41:ac:a8:58:3c:2d:83:ba:b7:40:67:bb:19:c9:27:cc: d9:88:dc:aa:ea:07:c7:dd:0b:57:4a:57:94:df:da:5a:de:a6: f4:7d:18:d9:be:c7:c8:59:52:92:a0:0e:d3:0f:ef:73:d0:43: 21:07:48:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVK2/wcKz5P/EsFqedHqQFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNDYzNTk0YzM3N2NkNTg4N2RlOTA3OGI0YjJlOGNkYzRk M2FlNWIwHhcNMjUxMjI1MTEwMTA4WhcNMjUxMjI2MTEwMTA4WjAzMTEwLwYDVQQD Eyg4YzI3ODc5MGNhYjE5YjFkNWRmOWQ0YjhkMDlkZWYxYjdlNzAyZTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X2+1YVwWX9nXCo3zjO8P5yu0moy nHR6c+5AqYu1sc8YpvZp+/2aS+UxKyA2B59YfFGQaI86rb3AGD0/In19rxRWU0uJ I3Y/O4WObSYYVcJy8nSgoI2rvuviIviu1UXyxqMA/hq7gAXO3mlyNWhdY0zE1AX7 0vp9Gg/lRWJWp9lyI7s60X7SGhmzKoSmBQLW1p/tz11T4yRLhnE8gDAnKn6qmEP/ co+dJBNuuO0IgpwuOVXXKXqf+AGEmV+5tiO65wzertP/iUhSDvQRCdlj2cGnCvrh USVTJyfFefn3fY9s3lsanCBkf7/8kAZkINC9zaKdj7R5DJNKUVDFljlsHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwnh5DKsZsdXfnUuNCd7xt+cC6GMB8GA1UdIwQY MBaAFONGNZTDd81Yh96QeLSy6M3E065bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDBZMWxNTjN6VmlIM3BCNHRMTG96Y1RUcmxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jNTcxY2UtZWYzYS00YTI4LWI1Yjgt ZmVhMjM2ZjU0MDM0LzEvNDBZMWxNTjN6VmlIM3BCNHRMTG96Y1RUcmxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9jNTcxY2UtZWYzYS00YTI4LWI1YjgtZmVhMjM2ZjU0MDM0 LzEvNDBZMWxNTjN6VmlIM3BCNHRMTG96Y1RUcmxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbX7yU70e Irj9fLzKkjp3OFYFcaatdcG7g+1HRfOxYMRfzxJaITvM6lbdciv7pxOLVLyZ/joQ 5S0Mxxx7nKnTDlnQdxt5RLk8WjPQB8eoJ8ZuLEntzIit9rSzOtJnw9bK/sbc+oSo 8xYxUnXFG+xN3u4EN6+RAfNYqEDzSPc48gVL2MW37UsHYzck4yn1fHzhD/7graoc q/Zx8ax7nLGq2brZZpM4mRdqS1PrmO3bwgCofdIatdcWTH60iBcUnnx66VbH+G6K mRtBrKhYPC2DurdAZ7sZySfM2YjcquoHx90LV0pXlN/aWt6m9H0Y2b7HyFlSkqAO 0w/vc9BDIQdIpw== -----END CERTIFICATE-----Generated at Thu Dec 25 13:57:51 2025 by rpki-client