This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft File: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json) Hash identifier: qXg8FwnK2gEIC8slfRIxGB+s4T/taX4eoMDWqUU2L6M= Subject key identifier: DB:C0:37:85:79:6A:EF:12:24:8A:66:2F:E4:4C:9B:0C:59:48:06:41 Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 Certificate issuer: /CN=458d12f095053c35876b88b47685d6435421fcf2 Certificate serial: 019AF65352CD28E6F1C67D774F1F2CB65E5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft Manifest number: 1771 Signing time: Sun 07 Dec 2025 01:00:46 +0000 Manifest this update: Sun 07 Dec 2025 01:00:46 +0000 Manifest next update: Mon 08 Dec 2025 01:00:46 +0000 Files and hashes: 1: 0bSG1GbQSr3JP2M9BW2A6zWEmWQ.roa (hash: m8/KEzPrRo4PqG3DFfILeyvmSqlK6Zrphut5P8ccG8c=) 2: 9lwL98-HDVBrZzYLRCpSdOAFXpo.roa (hash: Za/9eX9VNb3FiSxJk6MAE/CpFGWxRO5mjghE1elRivc=) 3: B0iUIhkwv2ZZdyXRyu9yUh7Z61o.roa (hash: F6O6OkDRyyyGqFimHsLztSYsh0AUNFPNkRW3jSPwvEw=) 4: I1EoUAseUd3MHO-sI_txqICBiwc.roa (hash: khM+HdjIw9WozXCqEk/wtCOtMrpNfxWXErjSXn8BT5M=) 5: KQ7nGqqdl8DwDw35UdDbOJPZhfY.roa (hash: 8pIf1gsysAeCO62ayw5k2bU+b1g8t0mrR6+zNCtTibQ=) 6: LS_oKjOyENRZwn9y786G7x_fDEc.roa (hash: qwrjawF9Z67WE+ivjm8mPIl3xqaLReHxca9+SNnwKPE=) 7: Pvub5ztTS47f0XG6tBZE9ngX8Rw.roa (hash: euQ5dqT6xwCfoTsPu9P7kfQ9UGdbPzkkEJWSyFwCBTw=) 8: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: Arbj1f7YeeN+ypX1h704ujAbWBLcLjvm/OC2bgKaIBY=) 9: lqxGizsVmZbvi7xpd3yzs2I4ILw.roa (hash: aTi4SECMvkjegR9/FyzL9HTmeGkM0AsiVgyipWCsYrY=) 10: sFnlwbiQ75y8_114DKwn3kP_iWc.roa (hash: dkHr9wKemXLLSQfaJK2+kCvWwELtA6u+nMBynz2rXgQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:52:cd:28:e6:f1:c6:7d:77:4f:1f:2c:b6:5e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2 Validity Not Before: Dec 7 01:00:46 2025 GMT Not After : Dec 8 01:00:46 2025 GMT Subject: CN=dbc03785796aef12248a662fe44c9b0c59480641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:55:07:e6:59:ba:09:d9:83:5d:83:7b:98:b9: bc:88:fa:0e:09:6d:8a:b4:91:dc:3b:e2:78:67:9b: 2a:09:05:fa:59:97:fa:a5:4d:be:cd:6b:66:76:ee: 82:aa:9d:b7:50:c8:43:4d:fc:33:62:d3:82:0d:eb: eb:c1:7b:ca:62:ff:82:bb:c4:b9:f8:2d:bf:15:1e: b1:e1:c4:85:26:a4:03:47:2d:58:7c:ee:cc:47:6d: c9:2a:cd:8b:9d:f3:1e:c1:d0:1f:70:12:cb:d8:b2: c2:c0:71:61:94:10:81:cc:be:36:b9:f4:9a:8d:e1: 7b:f1:a2:cd:1b:a4:5f:c8:81:e5:64:50:26:c2:66: 5d:8b:09:a9:c7:e6:2b:0d:1e:b6:e0:78:f3:03:af: bb:bf:fc:c3:27:c2:e2:97:d0:80:04:5a:24:fe:d0: d4:cc:b8:6e:e4:e9:01:3f:9c:b5:90:73:8a:ca:fd: 67:39:b7:ca:18:5b:23:26:8f:d7:30:56:04:65:6b: b4:df:23:f6:33:bb:7b:73:c5:90:9d:93:66:6d:74: fb:d5:48:e2:c7:c0:60:c9:d2:05:f5:91:91:39:43: 1f:b5:7c:0c:04:5e:23:9e:f7:a8:16:4b:b5:d8:12: ce:a4:f1:70:d5:3a:28:17:91:19:2c:b8:88:48:93: 8c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:C0:37:85:79:6A:EF:12:24:8A:66:2F:E4:4C:9B:0C:59:48:06:41 X509v3 Authority Key Identifier: keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:0b:36:13:05:f6:53:68:cb:7d:92:b6:bb:78:85:26:14:4e: 06:91:aa:34:be:92:4e:8c:98:72:ea:61:d8:f9:b1:01:62:70: 61:71:5d:a1:b2:f2:23:f5:ad:d2:48:50:47:a6:71:9c:5e:70: 24:3f:6b:66:80:2b:25:89:df:2a:24:46:38:61:30:4c:ad:52: 76:9b:ba:dc:ee:c5:7f:6f:a8:98:ab:1f:e9:c8:8a:b3:a1:70: a7:a6:f7:a7:03:87:66:1b:be:ec:25:bf:70:8c:14:e2:6b:af: ba:42:82:f9:d5:14:7e:b5:64:6f:96:57:a4:99:6b:13:2a:0c: 22:24:0c:cc:fb:40:f3:2e:a2:c3:fb:04:26:88:d5:f1:8d:6e: 82:31:bd:6f:5b:1b:0b:55:24:94:0a:58:42:9a:85:0c:8c:69: eb:c0:60:5e:c7:c1:42:c4:54:9b:f4:95:ed:22:f7:8d:d5:fb: ad:ec:92:ac:bc:db:0b:aa:7a:22:f3:24:2f:bb:4a:9c:82:2f: fc:1c:51:de:75:10:13:26:ba:fe:ee:c4:e5:6a:b8:69:cc:53: 80:53:0c:52:3f:fb:11:fd:ca:8d:b6:3b:8e:9d:19:22:70:e4: ed:84:05:72:d7:f0:89:55:2e:8e:c0:1a:75:b2:8c:10:6d:d2: 89:f2:35:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U1LNKObxxn13Tx8stl5dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OGQxMmYwOTUwNTNjMzU4NzZiODhiNDc2ODVkNjQzNTQy MWZjZjIwHhcNMjUxMjA3MDEwMDQ2WhcNMjUxMjA4MDEwMDQ2WjAzMTEwLwYDVQQD EyhkYmMwMzc4NTc5NmFlZjEyMjQ4YTY2MmZlNDRjOWIwYzU5NDgwNjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1UH5lm6CdmDXYN7mLm8iPoOCW2K tJHcO+J4Z5sqCQX6WZf6pU2+zWtmdu6Cqp23UMhDTfwzYtOCDevrwXvKYv+Cu8S5 +C2/FR6x4cSFJqQDRy1YfO7MR23JKs2LnfMewdAfcBLL2LLCwHFhlBCBzL42ufSa jeF78aLNG6RfyIHlZFAmwmZdiwmpx+YrDR624HjzA6+7v/zDJ8Lil9CABFok/tDU zLhu5OkBP5y1kHOKyv1nObfKGFsjJo/XMFYEZWu03yP2M7t7c8WQnZNmbXT71Uji x8BgydIF9ZGROUMftXwMBF4jnveoFku12BLOpPFw1TooF5EZLLiISJOMAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvAN4V5au8SJIpmL+RMmwxZSAZBMB8GA1UdIwQY MBaAFEWNEvCVBTw1h2uItHaF1kNUIfzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTkt Mzk1NTk1OWVhZjgxLzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Y2VjYzctZjYzZC00M2ZjLWIyMTktMzk1NTk1OWVhZjgx LzEvUlkwUzhKVUZQRFdIYTRpMGRvWFdRMVFoX1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigs2EwX2 U2jLfZK2u3iFJhROBpGqNL6SToyYcuph2PmxAWJwYXFdobLyI/Wt0khQR6ZxnF5w JD9rZoArJYnfKiRGOGEwTK1Sdpu63O7Ff2+omKsf6ciKs6Fwp6b3pwOHZhu+7CW/ cIwU4muvukKC+dUUfrVkb5ZXpJlrEyoMIiQMzPtA8y6iw/sEJojV8Y1ugjG9b1sb C1UklApYQpqFDIxp68BgXsfBQsRUm/SV7SL3jdX7reySrLzbC6p6IvMkL7tKnIIv /BxR3nUQEya6/u7E5Wq4acxTgFMMUj/7Ef3KjbY7jp0ZInDk7YQFctfwiVUujsAa dbKMEG3SifI1ug== -----END CERTIFICATE-----Generated at Sun Dec 7 04:15:28 2025 by rpki-client