This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft File: IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json) Hash identifier: thPMJDMyKqShOj635ihwpOX5Fs33Io4pXHumOP3XUsg= Subject key identifier: C7:92:7E:D8:F5:61:DC:52:2A:21:E9:C7:80:25:D0:4D:C7:F4:5D:5F Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d Certificate serial: 019B0F37942F229FAE5DA65D8990CD81479A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft Manifest number: 1141 Signing time: Thu 11 Dec 2025 21:00:59 +0000 Manifest this update: Thu 11 Dec 2025 21:00:59 +0000 Manifest next update: Fri 12 Dec 2025 21:00:59 +0000 Files and hashes: 1: 7fVHLIE5Fr7X8yFvO0PeQIriJkk.roa (hash: V2T+9sBa8KkNKPdhdy6f3WlbGWAyrtoeOYEsZ7+3u8w=) 2: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: 29dxv4IB+ipukGVAFFcyGPnR7KdAYLE4YPn/Q+0rWpg=) 3: VNrppWVy36SKNgtS_F1qaT2zJHY.roa (hash: 9DXGS+oBa4dlfj3+GMMrbil8G+vwg9kQTst1kCj/GhM=) 4: lNuBLYCJ0lfEgO69TARxUVn65MY.roa (hash: c/DzytieLHDcyyqGT5jbt6nBdARkMqsmssA/P9Kdzjk=) 5: sLy4f0J28AKLnDg3qJ8vxAYCBx0.roa (hash: beKd4jqG4/esSSfPF84tT28gcKiXZoavsjTYolwvANc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:94:2f:22:9f:ae:5d:a6:5d:89:90:cd:81:47:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d Validity Not Before: Dec 11 21:00:59 2025 GMT Not After : Dec 12 21:00:59 2025 GMT Subject: CN=c7927ed8f561dc522a21e9c78025d04dc7f45d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b2:a9:58:ea:7b:c8:87:55:39:54:e9:b5:21: ed:01:c9:64:20:eb:e1:94:6d:0c:66:1d:cb:b6:3f: d9:b8:c5:10:f9:7c:f7:02:19:01:56:4e:1d:84:63: 3d:d1:d3:89:5a:e5:82:7e:39:b4:e5:e5:d6:18:69: c2:62:e4:a2:f3:d1:eb:df:17:99:30:04:ff:a3:4f: 26:39:ef:0a:39:14:2f:07:42:eb:0e:13:45:da:e2: 3b:37:ec:a5:af:b9:15:78:83:44:d6:96:31:64:7e: b2:1f:e5:00:2d:f7:3f:20:33:1a:53:4d:3f:f8:f3: 74:d9:6a:af:8e:7f:fb:72:b1:88:60:07:e7:94:1e: a1:84:a5:72:21:64:cd:76:ef:d8:82:50:63:f3:2f: 35:b7:45:80:9d:bd:ff:f3:6f:e9:14:88:72:e0:f9: 8c:08:35:5a:b5:86:7f:05:5f:1c:d4:7a:f8:f0:99: 91:9b:df:c6:ea:3a:a1:60:40:75:ec:0d:6a:ad:46: ec:fc:a2:5c:1c:b7:b2:c7:9a:2a:f8:ac:84:70:64: d7:dd:f0:5a:2e:d3:d9:b4:41:30:99:9d:cc:f1:e2: bc:cb:7a:78:7b:bf:12:ac:80:5c:1f:0b:89:f8:e5: d4:9e:44:c1:c9:1e:7e:a0:db:b1:4a:91:74:b9:5a: 2d:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:92:7E:D8:F5:61:DC:52:2A:21:E9:C7:80:25:D0:4D:C7:F4:5D:5F X509v3 Authority Key Identifier: keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:2c:14:92:d2:26:16:d5:34:ac:59:31:c7:6c:79:f0:ba:f7: 9f:8b:d9:12:06:41:62:90:c0:44:bb:ec:53:a7:ce:2b:db:5d: dd:b9:f8:99:0a:c9:98:fc:c1:18:b9:32:91:15:0f:6a:b4:44: eb:2e:58:a9:a1:ef:00:b2:5f:03:11:a6:92:fd:f3:b2:57:5a: 17:68:34:6a:68:d2:36:aa:c8:5e:c0:65:f4:91:13:47:72:f4: 98:8d:5f:6c:f2:c0:03:c8:25:c0:e8:00:51:e5:39:c8:ce:97: 1e:c0:6a:f4:1a:5d:a5:80:8e:eb:fb:d3:6d:9b:27:6c:db:c4: dd:ae:58:68:6f:97:7e:f7:fc:72:bd:fe:07:df:af:b5:ff:b1: c3:4f:aa:18:81:5b:e7:30:7c:39:93:a3:d9:a6:d9:ec:cb:0c: 17:a2:99:13:5a:fe:94:ab:d6:8f:18:84:f6:c9:c3:51:c6:47: 56:ac:3b:2e:ec:e4:42:22:31:1e:3e:c1:60:1b:79:d3:93:3e: 42:49:aa:a4:be:85:f0:50:c0:8d:ec:b4:c5:70:92:37:8e:50: 90:39:b4:dd:22:9d:f0:b7:b9:d1:3f:30:f0:88:13:2b:12:b0: 0d:2c:64:1c:16:b9:6d:4b:31:fe:e3:ce:7f:c2:d2:5c:c8:31: 2f:4e:2e:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN5QvIp+uXaZdiZDNgUeaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZjYzODEwN2FiYjg0YWU2ZmIwM2NjMWRiMmNmZDFiYzQ0 ODdmOGQwHhcNMjUxMjExMjEwMDU5WhcNMjUxMjEyMjEwMDU5WjAzMTEwLwYDVQQD EyhjNzkyN2VkOGY1NjFkYzUyMmEyMWU5Yzc4MDI1ZDA0ZGM3ZjQ1ZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17KpWOp7yIdVOVTptSHtAclkIOvh lG0MZh3Ltj/ZuMUQ+Xz3AhkBVk4dhGM90dOJWuWCfjm05eXWGGnCYuSi89Hr3xeZ MAT/o08mOe8KORQvB0LrDhNF2uI7N+ylr7kVeINE1pYxZH6yH+UALfc/IDMaU00/ +PN02Wqvjn/7crGIYAfnlB6hhKVyIWTNdu/YglBj8y81t0WAnb3/82/pFIhy4PmM CDVatYZ/BV8c1Hr48JmRm9/G6jqhYEB17A1qrUbs/KJcHLeyx5oq+KyEcGTX3fBa LtPZtEEwmZ3M8eK8y3p4e78SrIBcHwuJ+OXUnkTByR5+oNuxSpF0uVotgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMeSftj1YdxSKiHpx4Al0E3H9F1fMB8GA1UdIwQY MBaAFCD2OBB6u4Sub7A8wdss/RvESH+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80ZjU4MDgtMWMwNC00MjU1LTliODQt YTgyODM2ZGUwNWZjLzEvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80ZjU4MDgtMWMwNC00MjU1LTliODQtYTgyODM2ZGUwNWZj LzEvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGywUktIm FtU0rFkxx2x58Lr3n4vZEgZBYpDARLvsU6fOK9td3bn4mQrJmPzBGLkykRUParRE 6y5YqaHvALJfAxGmkv3zsldaF2g0amjSNqrIXsBl9JETR3L0mI1fbPLAA8glwOgA UeU5yM6XHsBq9BpdpYCO6/vTbZsnbNvE3a5YaG+Xfvf8cr3+B9+vtf+xw0+qGIFb 5zB8OZOj2abZ7MsMF6KZE1r+lKvWjxiE9snDUcZHVqw7LuzkQiIxHj7BYBt505M+ QkmqpL6F8FDAjey0xXCSN45QkDm03SKd8Le50T8w8IgTKxKwDSxkHBa5bUsx/uPO f8LSXMgxL04u3w== -----END CERTIFICATE-----Generated at Fri Dec 12 02:38:08 2025 by rpki-client