This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft File: 40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json) Hash identifier: fmxtU2N0oJLxnAtroEDHhczD0ewz38STU/wK45tv3cs= Subject key identifier: 32:A7:5A:CF:80:56:41:A5:6F:86:70:B7:BD:5F:EF:83:65:3C:24:3A Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4 Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4 Certificate serial: 019B4100324CF1B6FB4DD230CCCB0A6A27E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft Manifest number: 1015 Signing time: Sun 21 Dec 2025 13:01:30 +0000 Manifest this update: Sun 21 Dec 2025 13:01:30 +0000 Manifest next update: Mon 22 Dec 2025 13:01:30 +0000 Files and hashes: 1: 13zsYUD0hA67z1BODvjquGKoT_E.roa (hash: MKw8FhdsNVau1tjrdAX7ReUxGObo82luQsljT5owYXc=) 2: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: p4ENVUdcYHDcXce0vw015Rrj58EeJSOmfEiz5y+q41o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:32:4c:f1:b6:fb:4d:d2:30:cc:cb:0a:6a:27:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4 Validity Not Before: Dec 21 13:01:30 2025 GMT Not After : Dec 22 13:01:30 2025 GMT Subject: CN=32a75acf805641a56f8670b7bd5fef83653c243a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:18:ac:03:05:e7:52:19:47:92:9b:8a:06:60: c0:ba:d3:3c:51:da:5c:a4:7a:81:ef:f2:f3:a4:a1: af:01:70:bb:b8:79:18:76:50:48:3b:b6:10:e0:ec: 50:f5:05:f4:30:78:37:e9:51:d8:e6:ec:32:54:89: cb:5a:74:f1:9e:f0:6d:ae:52:5f:4b:74:75:0a:f2: ff:90:88:5a:73:3d:8b:bf:75:da:ac:05:47:a0:5b: 0d:41:10:ce:63:4f:d5:b0:72:a5:11:4d:76:30:71: 42:ba:15:65:dc:95:36:04:62:85:53:e3:62:91:89: 40:57:b2:19:51:38:51:8f:56:27:15:80:0d:ca:e8: c2:0d:0e:2e:52:11:d8:1d:c5:b9:73:9a:1e:84:78: 81:25:fe:78:48:30:f6:2b:3f:2b:46:0b:45:2b:22: 72:3c:d9:c9:d1:cc:a1:92:5f:96:92:56:4b:3c:a2: 2c:5a:c5:bb:5c:ab:bc:ef:c2:96:38:fa:a3:ea:c5: 6c:cb:f9:a8:ab:90:f2:4b:6b:c0:81:71:75:dd:a6: 90:ed:6a:cb:4e:d2:1f:9d:6f:e2:5e:b2:1b:d0:b2: 83:5a:e4:5f:a7:87:e8:7d:96:a4:49:65:55:66:cf: 93:49:5a:0c:56:48:af:77:63:e5:08:8d:fb:43:35: 64:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A7:5A:CF:80:56:41:A5:6F:86:70:B7:BD:5F:EF:83:65:3C:24:3A X509v3 Authority Key Identifier: keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:9d:dc:4c:80:7e:ba:b4:cb:b8:4d:c7:e6:ce:49:2a:5e:3e: a0:4b:62:4c:29:6e:72:ae:01:c5:ab:a7:f6:7e:d3:09:e6:59: 14:3c:8e:80:77:7b:d9:76:5c:f9:1c:72:71:18:d1:a9:74:a7: 54:4c:94:88:22:26:8d:73:6f:5b:f9:6d:d3:10:29:eb:a1:b4: c9:35:d3:f1:5b:64:c3:de:85:6b:ff:60:ae:e4:08:30:bb:e4: 03:6f:b9:84:1d:71:71:59:48:bc:ef:da:f9:7e:59:c7:74:0e: 51:b1:15:fd:31:4c:c1:97:29:52:00:06:df:5a:92:d2:e8:d0: 20:06:91:0d:55:a4:a0:93:69:16:a1:fd:c1:56:a6:11:43:c5: 5c:1d:ff:80:9c:58:14:13:cc:a4:e3:ca:73:9d:5d:41:e9:a8: 15:43:36:24:a5:18:eb:55:4c:34:a4:6f:c5:96:9e:e1:dc:75: ae:be:2e:b3:f2:63:5b:be:c4:a7:99:c7:39:da:78:05:d6:1c: 5a:12:50:ff:f9:51:25:7b:83:32:de:ca:7a:c9:b2:97:ae:81: 18:c6:e8:a2:86:61:83:c0:02:4a:f2:cb:2e:5f:a9:07:a8:15: 65:f8:3e:b0:59:b9:2c:7d:51:fd:b9:8a:31:63:55:0f:4c:43: 05:1f:75:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBADJM8bb7TdIwzMsKaifmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNGExN2MzNWRjMTdlNDNlNzc0ZjgyMzc1YWZkNTBmMzNj NTM2YTQwHhcNMjUxMjIxMTMwMTMwWhcNMjUxMjIyMTMwMTMwWjAzMTEwLwYDVQQD EygzMmE3NWFjZjgwNTY0MWE1NmY4NjcwYjdiZDVmZWY4MzY1M2MyNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRisAwXnUhlHkpuKBmDAutM8Udpc pHqB7/LzpKGvAXC7uHkYdlBIO7YQ4OxQ9QX0MHg36VHY5uwyVInLWnTxnvBtrlJf S3R1CvL/kIhacz2Lv3XarAVHoFsNQRDOY0/VsHKlEU12MHFCuhVl3JU2BGKFU+Ni kYlAV7IZUThRj1YnFYANyujCDQ4uUhHYHcW5c5oehHiBJf54SDD2Kz8rRgtFKyJy PNnJ0cyhkl+WklZLPKIsWsW7XKu878KWOPqj6sVsy/moq5DyS2vAgXF13aaQ7WrL TtIfnW/iXrIb0LKDWuRfp4fofZakSWVVZs+TSVoMVkivd2PlCI37QzVkUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKnWs+AVkGlb4Zwt71f74NlPCQ6MB8GA1UdIwQY MBaAFONKF8NdwX5D53T4I3Wv1Q8zxTakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQt ZTBmMDc4ZTc2NDNkLzEvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQtZTBmMDc4ZTc2NDNk LzEvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZ3cTIB+ urTLuE3H5s5JKl4+oEtiTClucq4Bxaun9n7TCeZZFDyOgHd72XZc+RxycRjRqXSn VEyUiCImjXNvW/lt0xAp66G0yTXT8Vtkw96Fa/9gruQIMLvkA2+5hB1xcVlIvO/a +X5Zx3QOUbEV/TFMwZcpUgAG31qS0ujQIAaRDVWkoJNpFqH9wVamEUPFXB3/gJxY FBPMpOPKc51dQemoFUM2JKUY61VMNKRvxZae4dx1rr4us/JjW77Ep5nHOdp4BdYc WhJQ//lRJXuDMt7Kesmyl66BGMboooZhg8ACSvLLLl+pB6gVZfg+sFm5LH1R/bmK MWNVD0xDBR91Gg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:00:33 2025 by rpki-client