This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft File: f1byiUjIMvLUNLtE1d4OoSJgGwU.mft (raw, json) Hash identifier: XNLXuISa4ZwvQ/E7s2t75C44lx1eKf6Zn4nlrLt8NGs= Subject key identifier: 92:EF:D1:66:1A:5E:5B:A7:62:A1:82:55:84:98:02:D0:4B:0A:D8:8B Authority key identifier: 7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05 Certificate issuer: /CN=7f56f28948c832f2d434bb44d5de0ea122601b05 Certificate serial: 019AABA887C0BB2C816C88EC31A835739E4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft Manifest number: 173D Signing time: Sat 22 Nov 2025 13:02:19 +0000 Manifest this update: Sat 22 Nov 2025 13:02:19 +0000 Manifest next update: Sun 23 Nov 2025 13:02:19 +0000 Files and hashes: 1: NvmfsV1sm7XmyjVKzPOWhb7earQ.roa (hash: r7bWWSDXyiXMj/Swi3flONfAIYfEqRkATWw60gas71A=) 2: WPpLjvv6YbGI7GsTe1ygm0Vy3Lk.roa (hash: N+pPrOkjdISbUNAALF5nqmKzIaYbhj0lt6NwOuwgniw=) 3: f1byiUjIMvLUNLtE1d4OoSJgGwU.crl (hash: rwE4+bFqwpGc2AKK4tDKKKV+TmGxpiBoLCPksGlfZhM=) 4: tLoY5nfmVJWTJGYh886gVbz0Hf0.roa (hash: g2GCG3am8xDu8ahhY94JoBYaTCS9zIT5JVCSvfgRMSE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:a8:87:c0:bb:2c:81:6c:88:ec:31:a8:35:73:9e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f56f28948c832f2d434bb44d5de0ea122601b05 Validity Not Before: Nov 22 13:02:19 2025 GMT Not After : Nov 23 13:02:19 2025 GMT Subject: CN=92efd1661a5e5ba762a18255849802d04b0ad88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bf:e1:49:d1:00:b0:5d:9f:d1:75:9a:ca:05: 7f:0d:76:12:c4:01:1e:84:e3:ec:02:53:7d:4d:40: f6:72:9d:38:c4:76:81:c5:a3:b3:0a:0e:d4:19:8b: 12:8f:02:59:da:f7:41:45:a0:5d:fe:47:e9:58:57: 30:b6:d5:65:5e:cc:15:0f:12:59:80:f0:2c:89:84: 07:16:50:ea:4b:fd:35:47:3a:18:3c:87:e2:55:1c: d3:2f:14:38:ad:59:26:7f:23:81:7d:4d:1f:ba:f4: af:1b:5c:1e:3b:8d:a8:8a:2c:a2:cc:5c:fa:4e:db: fc:ad:fd:80:cc:df:b8:38:c5:53:f4:4a:ee:01:48: 4c:68:42:86:0e:13:52:76:0c:85:9f:18:e1:0f:36: 6a:71:72:91:0b:96:4a:91:eb:96:2f:48:e7:7d:77: e8:c6:0b:93:72:68:a0:ef:5b:bc:9b:c0:a0:74:2a: cc:0c:63:ab:79:44:60:2c:60:50:27:f5:1b:9e:67: aa:84:93:a1:57:54:eb:e5:c7:ba:ce:20:10:1f:17: 1c:ec:01:13:be:a8:64:da:a0:64:4c:a9:6b:7a:42: 25:28:3b:23:45:b5:4d:79:a8:4b:c4:97:54:12:10: 84:4b:65:d4:bd:bd:f0:6f:12:fb:a7:66:43:7a:b8: 8f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EF:D1:66:1A:5E:5B:A7:62:A1:82:55:84:98:02:D0:4B:0A:D8:8B X509v3 Authority Key Identifier: keyid:7F:56:F2:89:48:C8:32:F2:D4:34:BB:44:D5:DE:0E:A1:22:60:1B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1byiUjIMvLUNLtE1d4OoSJgGwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21fbca-80e0-4b8c-8622-4e86ad64f774/1/f1byiUjIMvLUNLtE1d4OoSJgGwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:fa:46:2f:4d:98:21:5d:ce:f3:e7:ab:70:15:5b:76:28:5d: 26:f7:bc:d0:e5:ca:f6:b0:01:68:34:14:91:ba:0a:09:97:d1: 56:8c:f5:f9:90:18:53:85:b6:c0:69:87:91:63:dc:25:ff:0e: 79:ed:f7:d4:d8:49:9a:4f:99:b5:85:6f:de:9b:f4:ef:b0:78: 14:1e:42:e7:a9:8f:b5:d3:70:49:a6:05:74:60:8e:00:98:79: 87:a5:2d:3b:f8:57:40:2a:8e:4f:41:f6:1b:48:be:5b:65:27: 19:bf:6c:ce:1e:cf:03:96:0c:30:96:7a:63:fd:36:45:ed:ae: 44:1c:ea:8a:5b:9a:5e:49:a2:38:82:af:bf:5b:fc:73:bf:8a: 30:25:61:bd:ea:54:f3:69:1a:21:36:a7:0a:38:85:8e:11:da: 1f:20:eb:6a:5d:e9:c4:9f:b3:7a:df:d4:8f:65:7d:7c:e2:37: 47:7f:b6:e0:5b:64:e4:a8:36:3f:c1:f5:cf:82:e9:54:7d:fc: 3a:5a:b7:05:14:a8:b0:ea:21:dc:87:c9:cd:cf:71:0d:1b:26: 17:76:03:3a:3d:f0:87:ce:0b:67:42:4f:bf:dc:89:1a:2f:2f: 01:e0:71:b9:8e:e5:62:4f:a7:97:89:5c:b9:21:8f:68:df:67: e4:26:d5:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrqIfAuyyBbIjsMag1c55MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNTZmMjg5NDhjODMyZjJkNDM0YmI0NGQ1ZGUwZWExMjI2 MDFiMDUwHhcNMjUxMTIyMTMwMjE5WhcNMjUxMTIzMTMwMjE5WjAzMTEwLwYDVQQD Eyg5MmVmZDE2NjFhNWU1YmE3NjJhMTgyNTU4NDk4MDJkMDRiMGFkODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r/hSdEAsF2f0XWaygV/DXYSxAEe hOPsAlN9TUD2cp04xHaBxaOzCg7UGYsSjwJZ2vdBRaBd/kfpWFcwttVlXswVDxJZ gPAsiYQHFlDqS/01RzoYPIfiVRzTLxQ4rVkmfyOBfU0fuvSvG1weO42oiiyizFz6 Ttv8rf2AzN+4OMVT9EruAUhMaEKGDhNSdgyFnxjhDzZqcXKRC5ZKkeuWL0jnfXfo xguTcmig71u8m8CgdCrMDGOreURgLGBQJ/UbnmeqhJOhV1Tr5ce6ziAQHxcc7AET vqhk2qBkTKlrekIlKDsjRbVNeahLxJdUEhCES2XUvb3wbxL7p2ZDeriPLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJLv0WYaXlunYqGCVYSYAtBLCtiLMB8GA1UdIwQY MBaAFH9W8olIyDLy1DS7RNXeDqEiYBsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMWZiY2EtODBlMC00YjhjLTg2MjIt NGU4NmFkNjRmNzc0LzEvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yMWZiY2EtODBlMC00YjhjLTg2MjItNGU4NmFkNjRmNzc0 LzEvZjFieWlVaklNdkxVTkx0RTFkNE9vU0pnR3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/pGL02Y IV3O8+ercBVbdihdJve80OXK9rABaDQUkboKCZfRVoz1+ZAYU4W2wGmHkWPcJf8O ee331NhJmk+ZtYVv3pv077B4FB5C56mPtdNwSaYFdGCOAJh5h6UtO/hXQCqOT0H2 G0i+W2UnGb9szh7PA5YMMJZ6Y/02Re2uRBzqiluaXkmiOIKvv1v8c7+KMCVhvepU 82kaITanCjiFjhHaHyDral3pxJ+zet/Uj2V9fOI3R3+24Ftk5Kg2P8H1z4LpVH38 Olq3BRSosOoh3IfJzc9xDRsmF3YDOj3wh84LZ0JPv9yJGi8vAeBxuY7lYk+nl4lc uSGPaN9n5CbVGg== -----END CERTIFICATE-----Generated at Sat Nov 22 21:40:33 2025 by rpki-client