This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft File: 250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json) Hash identifier: 7hJ7eQm4QbgA5jGg46F/NooL8txJoS91l7W8wdDUd8M= Subject key identifier: A5:FC:BC:D9:98:BC:2D:49:F7:D5:AA:B5:E4:C2:31:0A:1C:95:2A:BA Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42 Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042 Certificate serial: 019B3EDAB331E15995484FB7B27C836442ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft Manifest number: 1351 Signing time: Sun 21 Dec 2025 03:01:18 +0000 Manifest this update: Sun 21 Dec 2025 03:01:18 +0000 Manifest next update: Mon 22 Dec 2025 03:01:18 +0000 Files and hashes: 1: 0c-KKappZ1t73aXjS8mz1x-xTGc.roa (hash: MAa3tSzCnjrh/og+z4XVJnuDQ4AqmSQvPQCYBTfEoDQ=) 2: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: FkaGPHdYevUlnGE0h+2d7CSuhMrzz3B5D2SmazACCCY=) 3: 3sv6NKDpba_DUykmu28n6vWbI8U.roa (hash: gUh8eARhI2X9S3x1fvxAhLVuOISp5wl4VqYYPGnDg8Y=) 4: 4rupNMtZnDN0QSWru1RNhLDuJIo.roa (hash: z4IbiN1+w7zdJy/d9hWZDYM0E9ZzQh9TzT+f2XEsa+o=) 5: 67A2CgJxemu3UONyMlCVAtsKdlY.roa (hash: xvBw7mNRlOl8XFOFSPthYphIDW4EGlwFC4zOhUwlCv8=) 6: E2YGCkvl1qJmLxaFsCR58I4gibo.roa (hash: xheLTw+nhNWSmWNkdWISArZADpVzS+Ca89hGltJJMno=) 7: Sp4iVd_pOq560eUzaVqvX_2Gqas.roa (hash: JgPqfPTZcwMnjOQsf/Q1+96TPKUck5H6ntnLpmTpKbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 03:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:b3:31:e1:59:95:48:4f:b7:b2:7c:83:64:42:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042 Validity Not Before: Dec 21 03:01:18 2025 GMT Not After : Dec 22 03:01:18 2025 GMT Subject: CN=a5fcbcd998bc2d49f7d5aab5e4c2310a1c952aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4f:3f:ce:0d:11:52:d5:05:a9:b7:20:9e:42: 01:4a:13:c3:f9:16:a2:df:c3:8f:9c:db:b5:e9:7f: 07:e1:d7:97:c2:06:e5:01:68:56:c6:65:b4:07:33: 8b:09:61:08:38:dc:6b:db:5e:49:1b:c7:df:72:1d: 8d:7f:f4:32:85:4a:e0:f7:89:6c:b0:0b:17:e1:f8: 60:08:15:82:95:ba:28:10:b1:36:7a:4f:30:b0:91: 0e:2b:e7:17:78:3c:c2:82:c4:fa:ae:07:76:7d:76: 5c:fe:67:2b:00:ad:ff:46:c2:00:18:78:cc:54:2b: d0:64:a1:33:2c:50:4c:9b:b2:6e:a2:fa:10:d3:cb: 50:eb:0f:d0:fd:c4:fc:83:ab:2c:f0:fe:22:a8:20: 75:00:7a:83:eb:48:8d:cf:b8:54:12:b5:d1:1f:d8: 34:7c:50:17:7c:65:4e:e9:57:80:8b:10:87:d3:c5: cc:44:f7:84:d7:14:15:b6:b4:87:7e:95:8a:9a:06: b6:70:09:f6:9b:f7:a1:06:81:31:ab:76:ab:0b:7b: 5d:0d:29:1a:b0:a6:5d:b4:41:57:63:22:e2:35:95: 84:1c:b2:3c:b1:b2:a4:ff:70:39:77:81:9d:02:63: d9:41:0e:6a:92:92:cf:b2:ab:8e:50:b8:51:48:96: 30:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:FC:BC:D9:98:BC:2D:49:F7:D5:AA:B5:E4:C2:31:0A:1C:95:2A:BA X509v3 Authority Key Identifier: keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d2:a3:b7:84:6b:f9:0e:7e:a6:0b:41:95:dc:3c:21:30:4a: 6a:cf:ab:79:bb:f7:9d:b9:ae:4f:88:28:50:70:1e:9e:1e:93: f0:2d:e7:65:a6:e7:c6:38:8b:32:03:ea:fc:46:f0:65:84:d0: 86:da:9d:12:fc:0a:ef:ca:9a:a6:7a:e3:5f:be:73:ac:8a:30: 00:49:98:fc:c3:1f:00:8b:c6:c8:1c:31:37:24:bb:f4:09:ee: 8c:6b:94:09:7f:34:86:67:9d:bd:d5:fe:64:4a:0a:02:60:8d: f6:81:32:3f:3e:60:49:81:f9:c2:61:b7:89:1b:23:4f:f8:a4: 6a:ca:2a:b6:a3:fb:fe:d3:87:d8:ea:38:eb:56:0e:2b:15:e2: a0:08:8a:81:11:59:84:16:03:ab:6e:e9:b2:d3:15:6d:95:34: cb:fe:80:bb:04:4d:ec:14:c4:6d:3a:26:d2:77:53:7e:5f:f7: 83:a8:0b:d0:af:87:81:2d:99:fd:4e:17:91:4e:52:50:26:cd: fa:6b:8f:e0:10:3b:ed:63:22:4d:b3:7e:aa:e0:2d:8c:56:c1: a1:fc:c2:ef:e5:a4:f9:a4:6b:39:65:f2:87:5f:69:c8:70:fb: d6:b1:fe:43:cb:76:98:db:16:1a:24:59:4a:f8:12:a7:18:c5: 4d:36:93:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2rMx4VmVSE+3snyDZELtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiOWQxOTdmYmJlZTJhMWRjY2I0ZjU1NzIyYTgyMTBkMzEw NWIwNDIwHhcNMjUxMjIxMDMwMTE4WhcNMjUxMjIyMDMwMTE4WjAzMTEwLwYDVQQD EyhhNWZjYmNkOTk4YmMyZDQ5ZjdkNWFhYjVlNGMyMzEwYTFjOTUyYWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE8/zg0RUtUFqbcgnkIBShPD+Rai 38OPnNu16X8H4deXwgblAWhWxmW0BzOLCWEIONxr215JG8ffch2Nf/QyhUrg94ls sAsX4fhgCBWClbooELE2ek8wsJEOK+cXeDzCgsT6rgd2fXZc/mcrAK3/RsIAGHjM VCvQZKEzLFBMm7JuovoQ08tQ6w/Q/cT8g6ss8P4iqCB1AHqD60iNz7hUErXRH9g0 fFAXfGVO6VeAixCH08XMRPeE1xQVtrSHfpWKmga2cAn2m/ehBoExq3arC3tdDSka sKZdtEFXYyLiNZWEHLI8sbKk/3A5d4GdAmPZQQ5qkpLPsquOULhRSJYwFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKX8vNmYvC1J99WqteTCMQoclSq6MB8GA1UdIwQY MBaAFNudGX+77iodzLT1VyKoIQ0xBbBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMt NGIyMzk1NmZiZDg2LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMtNGIyMzk1NmZiZDg2 LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNKjt4Rr +Q5+pgtBldw8ITBKas+rebv3nbmuT4goUHAenh6T8C3nZabnxjiLMgPq/EbwZYTQ htqdEvwK78qapnrjX75zrIowAEmY/MMfAIvGyBwxNyS79AnujGuUCX80hmedvdX+ ZEoKAmCN9oEyPz5gSYH5wmG3iRsjT/ikasoqtqP7/tOH2Oo461YOKxXioAiKgRFZ hBYDq27pstMVbZU0y/6AuwRN7BTEbTom0ndTfl/3g6gL0K+HgS2Z/U4XkU5SUCbN +muP4BA77WMiTbN+quAtjFbBofzC7+Wk+aRrOWXyh19pyHD71rH+Q8t2mNsWGiRZ SvgSpxjFTTaTEQ== -----END CERTIFICATE-----Generated at Sun Dec 21 12:13:29 2025 by rpki-client