This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft File: py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json) Hash identifier: 8ecPdIYwQKvh7bzDIxlSBmyPYY3b8ymA91AYDDp/Kmo= Subject key identifier: AB:FA:50:CD:F2:42:EB:D7:E4:B9:DD:B2:FE:19:EC:2C:B3:F3:4A:74 Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C Certificate issuer: /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c Certificate serial: 019B35699B57EF8495668FF3D84B616C2381 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft Manifest number: 14AF Signing time: Fri 19 Dec 2025 07:01:11 +0000 Manifest this update: Fri 19 Dec 2025 07:01:11 +0000 Manifest next update: Sat 20 Dec 2025 07:01:11 +0000 Files and hashes: 1: JNAtdBMSX5VhwApOgTuAEW816wE.roa (hash: /ZrZUMi4cKx5uDajSWU/yOuRSvJFXt9XoQWTgblnDdM=) 2: Kk_Nqx-T7Pv-J68aF1UpAxcFsyI.roa (hash: SIEfBbEbGt2Z3RQ6DVZe/KIGqB2xRs2VDt+6m/NBCj4=) 3: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: XvkFrTXvtdcchGspFAeaFLwnwRUHuDBPM1dArkvFMrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:9b:57:ef:84:95:66:8f:f3:d8:4b:61:6c:23:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c Validity Not Before: Dec 19 07:01:11 2025 GMT Not After : Dec 20 07:01:11 2025 GMT Subject: CN=abfa50cdf242ebd7e4b9ddb2fe19ec2cb3f34a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bb:2c:67:de:69:4f:7d:82:40:f8:90:e7:8d: 33:01:b2:38:04:66:e6:98:97:58:23:b4:63:9a:60: 20:22:76:b4:bc:81:4b:18:05:f3:e8:1b:db:c1:16: 36:ec:48:47:c9:8f:20:72:32:65:f4:ef:71:42:3f: f7:b6:de:43:6e:e4:0b:9d:e7:5c:7c:91:b8:13:0f: 77:1b:7f:5d:5c:e7:8e:d5:ee:d7:83:ec:2a:c9:57: 25:35:ac:4c:49:06:f2:98:f2:38:4f:ae:fa:71:a2: 78:d2:cc:01:ad:0a:c3:a7:89:84:25:c9:df:24:b7: 57:bb:e2:12:9c:f0:30:f9:ed:8f:16:38:ff:3e:2b: 1c:37:f1:e7:b0:2f:76:48:27:fd:96:94:bf:6b:73: 78:04:9d:fd:45:17:7f:7a:e5:e8:db:88:17:cc:4b: d7:a3:56:9a:86:bb:72:88:90:a4:bd:73:fa:9a:37: cd:da:e5:b1:db:7a:eb:f1:e3:fe:2a:36:76:aa:2b: fc:e8:73:3c:5a:63:e3:94:ca:c1:82:f9:5b:aa:84: ed:49:5f:6b:ad:d9:09:b4:43:43:5b:25:14:14:88: 69:ee:4c:d3:ad:cf:89:b9:ce:ea:0e:36:51:0a:ce: dc:90:da:00:38:05:b8:03:8c:b7:dd:f4:de:fd:0f: 2a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FA:50:CD:F2:42:EB:D7:E4:B9:DD:B2:FE:19:EC:2C:B3:F3:4A:74 X509v3 Authority Key Identifier: keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:4f:77:01:12:f2:f6:36:de:b9:19:61:26:77:90:66:3d:c0: 26:24:22:84:a7:eb:b6:24:7f:a5:9f:c0:e9:1e:6f:01:02:7c: 69:12:7f:cc:de:07:da:d3:c1:38:0a:05:7f:84:39:52:dd:2b: e8:bf:43:74:6b:fc:20:5c:38:f2:aa:74:ff:fb:33:c8:7a:00: c5:43:d7:c9:72:12:c5:3d:cb:91:14:9f:10:8c:12:78:1f:d1: 56:b0:79:51:15:ac:a6:86:f8:6c:08:47:3e:9d:9a:34:9f:f2: b9:d4:25:49:21:2e:0c:ba:7d:5f:29:a6:44:fe:94:8d:91:0c: cb:a7:de:2a:32:16:70:4f:9b:0d:08:ec:1c:fe:a5:76:f6:9d: 5f:21:69:0e:ac:4b:7f:77:25:d7:03:1e:87:ff:87:2f:1a:0a: d9:d7:8b:02:25:8f:52:fe:f2:aa:5b:8a:8b:ff:db:69:f5:20: da:d2:9f:e4:8e:d5:a2:af:24:f3:8a:7e:53:f4:67:de:b7:87: 30:31:d7:e2:4e:ca:de:24:5c:66:25:13:a4:ea:ef:6b:b7:19: 58:6e:d8:2f:6f:ee:88:5d:97:16:f2:0f:c3:e6:7d:cf:4e:f5: 42:cc:6a:3d:b2:22:b7:29:f3:fe:ae:7c:d4:a6:55:ea:45:e1: d8:2e:0f:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aZtX74SVZo/z2EthbCOBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MmQxNzhjOGU1M2Y1MjEzMWMxZmI2NDc0M2M5NjBjZjg5 N2ZkMGMwHhcNMjUxMjE5MDcwMTExWhcNMjUxMjIwMDcwMTExWjAzMTEwLwYDVQQD EyhhYmZhNTBjZGYyNDJlYmQ3ZTRiOWRkYjJmZTE5ZWMyY2IzZjM0YTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7ssZ95pT32CQPiQ540zAbI4BGbm mJdYI7RjmmAgIna0vIFLGAXz6BvbwRY27EhHyY8gcjJl9O9xQj/3tt5DbuQLnedc fJG4Ew93G39dXOeO1e7Xg+wqyVclNaxMSQbymPI4T676caJ40swBrQrDp4mEJcnf JLdXu+ISnPAw+e2PFjj/PiscN/HnsC92SCf9lpS/a3N4BJ39RRd/euXo24gXzEvX o1aahrtyiJCkvXP6mjfN2uWx23rr8eP+KjZ2qiv86HM8WmPjlMrBgvlbqoTtSV9r rdkJtENDWyUUFIhp7kzTrc+Juc7qDjZRCs7ckNoAOAW4A4y33fTe/Q8q9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKv6UM3yQuvX5Lndsv4Z7Cyz80p0MB8GA1UdIwQY MBaAFKctF4yOU/UhMcH7ZHQ8lgz4l/0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xYjgxM2EtNWU4Ni00NWIwLTk5Y2Qt MjhiOWQyNjFlY2IxLzEvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xYjgxM2EtNWU4Ni00NWIwLTk5Y2QtMjhiOWQyNjFlY2Ix LzEvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQE93ARLy 9jbeuRlhJneQZj3AJiQihKfrtiR/pZ/A6R5vAQJ8aRJ/zN4H2tPBOAoFf4Q5Ut0r 6L9DdGv8IFw48qp0//szyHoAxUPXyXISxT3LkRSfEIwSeB/RVrB5URWspob4bAhH Pp2aNJ/yudQlSSEuDLp9XymmRP6UjZEMy6feKjIWcE+bDQjsHP6ldvadXyFpDqxL f3cl1wMeh/+HLxoK2deLAiWPUv7yqluKi//bafUg2tKf5I7Voq8k84p+U/Rn3reH MDHX4k7K3iRcZiUTpOrva7cZWG7YL2/uiF2XFvIPw+Z9z071QsxqPbIitynz/q58 1KZV6kXh2C4PSw== -----END CERTIFICATE-----Generated at Fri Dec 19 16:20:16 2025 by rpki-client