This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft File: 40oXw13BfkPndPgjda_VDzPFNqQ.mft (raw, json) Hash identifier: fME1qiXtaVRfxWFH1KSIHmZK4j0KmIvzoH8hIKvMJHE= Subject key identifier: DF:FE:03:93:FB:71:6E:7A:52:93:DF:69:7B:EC:F1:EF:D8:CF:3C:F2 Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4 Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4 Certificate serial: 019B7523F92FCE443DDB3A1D4BCD5442A205 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft Manifest number: 1030 Signing time: Wed 31 Dec 2025 16:00:50 +0000 Manifest this update: Wed 31 Dec 2025 16:00:50 +0000 Manifest next update: Thu 01 Jan 2026 16:00:50 +0000 Files and hashes: 1: 13zsYUD0hA67z1BODvjquGKoT_E.roa (hash: MKw8FhdsNVau1tjrdAX7ReUxGObo82luQsljT5owYXc=) 2: 40oXw13BfkPndPgjda_VDzPFNqQ.crl (hash: LYJydwQfVTmCVGmceXl6unjmMRaO8S+e3Kx0xQCoT4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 16:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:75:23:f9:2f:ce:44:3d:db:3a:1d:4b:cd:54:42:a2:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4 Validity Not Before: Dec 31 16:00:50 2025 GMT Not After : Jan 1 16:00:50 2026 GMT Subject: CN=dffe0393fb716e7a5293df697becf1efd8cf3cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:62:00:7b:2e:a8:32:94:b0:48:38:04:2d:bc: 7d:e2:ff:d9:2a:d0:54:ea:b0:cf:b8:5e:24:08:bb: 39:b9:36:74:96:8a:dc:4a:7a:b1:02:67:ff:18:5d: bf:41:54:3f:15:7f:ec:44:9f:c7:4f:ef:96:63:b0: 99:a8:9d:60:a2:a7:b1:a0:7e:6f:51:7f:e9:57:3b: 60:a8:4a:11:82:75:2d:c5:0d:9d:cf:f3:5a:d0:5e: 8a:09:22:ff:c1:0e:3d:6f:35:25:d2:33:16:b3:28: d5:d5:f3:d2:05:ca:d2:83:dd:21:8f:e4:4b:2f:b8: f8:55:0a:83:96:b7:d5:8c:37:7d:d3:7a:6b:b8:a7: 1c:2a:eb:f2:07:72:b2:bf:4b:18:eb:60:4d:14:45: 45:61:8d:52:a4:43:71:0c:e9:5a:42:ba:62:69:f8: c8:ba:8c:00:b2:43:c6:06:6a:2b:34:d4:7d:8b:ea: e5:81:ef:87:07:8b:63:08:59:ef:d6:13:1b:ef:42: 01:e9:32:35:a9:1e:be:8c:b9:a5:d3:23:1f:3a:6c: 0a:26:af:34:52:a4:70:35:df:3f:8f:c3:a2:eb:39: 61:3e:c3:56:14:c8:8b:a5:97:d6:04:1e:7d:6b:2f: a2:43:95:07:4e:95:00:c0:e7:75:42:f5:87:5b:b4: 36:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:FE:03:93:FB:71:6E:7A:52:93:DF:69:7B:EC:F1:EF:D8:CF:3C:F2 X509v3 Authority Key Identifier: keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4d:51:1e:62:7e:4f:e4:68:fd:9c:26:28:e4:93:ac:11:83: 49:c1:12:ee:b9:ab:0a:be:17:35:af:5e:14:da:86:92:1a:88: 46:d3:c9:bc:03:04:e3:4f:fa:ff:60:fc:9a:2c:45:80:72:b1: e9:ce:81:e0:7b:cb:f1:f4:6a:49:51:17:72:d6:d0:ec:7c:62: 24:ab:a5:79:a9:d5:2f:f2:1f:15:ea:00:3e:9d:f0:bb:d4:e3: 12:d4:ff:c9:00:5d:eb:37:8b:79:94:1a:f4:f0:39:4b:d6:34: b6:d8:05:d5:03:cf:ba:69:2b:8f:83:bb:8b:4f:de:c1:80:2c: fc:2b:aa:bd:83:a5:f6:04:cf:6c:01:b2:f8:40:d7:16:a9:0c: f3:41:66:c5:2d:1a:26:61:6c:a8:b8:9d:0d:7a:1e:02:b3:32: 43:bd:6b:09:27:2c:a7:f2:ff:66:77:19:6d:45:8f:8d:65:e9: 32:ea:17:8f:58:68:ec:e2:f8:18:b5:3c:0d:9b:63:b3:2e:0d: ee:2b:1d:e6:1f:a3:d7:66:4e:11:03:c1:eb:81:01:e3:ce:f7: c2:ba:31:e2:95:9c:d0:86:0e:8e:3e:b9:68:87:d5:ea:75:62: 49:62:70:f4:67:03:6f:c4:dd:62:3a:9e:30:30:f1:c3:eb:a0: c1:d9:3e:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt1I/kvzkQ92zodS81UQqIFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNGExN2MzNWRjMTdlNDNlNzc0ZjgyMzc1YWZkNTBmMzNj NTM2YTQwHhcNMjUxMjMxMTYwMDUwWhcNMjYwMTAxMTYwMDUwWjAzMTEwLwYDVQQD EyhkZmZlMDM5M2ZiNzE2ZTdhNTI5M2RmNjk3YmVjZjFlZmQ4Y2YzY2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWIAey6oMpSwSDgELbx94v/ZKtBU 6rDPuF4kCLs5uTZ0lorcSnqxAmf/GF2/QVQ/FX/sRJ/HT++WY7CZqJ1goqexoH5v UX/pVztgqEoRgnUtxQ2dz/Na0F6KCSL/wQ49bzUl0jMWsyjV1fPSBcrSg90hj+RL L7j4VQqDlrfVjDd903pruKccKuvyB3Kyv0sY62BNFEVFYY1SpENxDOlaQrpiafjI uowAskPGBmorNNR9i+rlge+HB4tjCFnv1hMb70IB6TI1qR6+jLml0yMfOmwKJq80 UqRwNd8/j8Oi6zlhPsNWFMiLpZfWBB59ay+iQ5UHTpUAwOd1QvWHW7Q2cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/+A5P7cW56UpPfaXvs8e/YzzzyMB8GA1UdIwQY MBaAFONKF8NdwX5D53T4I3Wv1Q8zxTakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQt ZTBmMDc4ZTc2NDNkLzEvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQtZTBmMDc4ZTc2NDNk LzEvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADE1RHmJ+ T+Ro/ZwmKOSTrBGDScES7rmrCr4XNa9eFNqGkhqIRtPJvAME40/6/2D8mixFgHKx 6c6B4HvL8fRqSVEXctbQ7HxiJKuleanVL/IfFeoAPp3wu9TjEtT/yQBd6zeLeZQa 9PA5S9Y0ttgF1QPPumkrj4O7i0/ewYAs/CuqvYOl9gTPbAGy+EDXFqkM80FmxS0a JmFsqLidDXoeArMyQ71rCScsp/L/ZncZbUWPjWXpMuoXj1ho7OL4GLU8DZtjsy4N 7isd5h+j12ZOEQPB64EB4873wrox4pWc0IYOjj65aIfV6nViSWJw9GcDb8TdYjqe MDDxw+ugwdk+PQ== -----END CERTIFICATE-----Generated at Wed Dec 31 21:44:51 2025 by rpki-client