This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft File: fiyz0KZBdpx4AcSBYSAVwsyztlU.mft (raw, json) Hash identifier: Tihv6scufVYk8tLKW5vsWozDP321A7B96oVg59w+JoA= Subject key identifier: EF:C4:68:05:24:CD:9C:02:A4:21:07:E1:CD:2D:D9:09:6A:9F:A7:4E Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55 Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655 Certificate serial: 019AACB986FD2F0012EC781AC4D35F800684 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft Manifest number: 1742 Signing time: Sat 22 Nov 2025 18:00:31 +0000 Manifest this update: Sat 22 Nov 2025 18:00:31 +0000 Manifest next update: Sun 23 Nov 2025 18:00:31 +0000 Files and hashes: 1: M3Ha07iuSnJt99v-sGLNUx8BBLI.roa (hash: IIpH3NsZ7PItLDv9GEILJ6qdrVTgVESMLfrKLW1hfuA=) 2: NJxwRBkvshih-xmgz1X2qxZLLGU.roa (hash: WAXGkwJLmpUUMtECpnkhuJeq2y5mE3vQZXofWlN+lAo=) 3: RP3f5WWvkrYQJc7jqMUs8Y1XTtU.roa (hash: hk9tzETRgkzSw8scjlpsIlP6fKBNwXAqFAfpPNKquL8=) 4: SinlQ5z34pUrW8vj7b8roBMhucc.roa (hash: l2JuiUg6/TaOO5OR8orwqynZnR5QYj967JWl5ck7FYw=) 5: fiyz0KZBdpx4AcSBYSAVwsyztlU.crl (hash: YdUjtl9s5lSmtv4YLkWU6zIQpFP2xb90oBmJFEUADDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:b9:86:fd:2f:00:12:ec:78:1a:c4:d3:5f:80:06:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655 Validity Not Before: Nov 22 18:00:31 2025 GMT Not After : Nov 23 18:00:31 2025 GMT Subject: CN=efc4680524cd9c02a42107e1cd2dd9096a9fa74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:47:18:22:4a:ba:d0:02:ae:45:a4:a6:16:c8: 08:ae:d6:61:10:21:e6:e8:b0:99:fd:ad:35:af:48: bd:1b:db:6e:3d:1d:9a:7b:7c:e3:d7:63:3e:67:54: 85:bf:56:3d:0e:6f:63:95:f7:c5:c5:52:36:7f:a3: 73:e0:b2:07:d7:15:dc:73:ab:2a:c6:64:f5:3c:42: b8:c2:84:b2:6c:bb:c6:4b:2d:dc:3b:b3:35:52:09: 5e:71:00:ed:20:2e:1a:31:d7:9a:af:40:18:02:89: 39:ab:a9:8f:21:24:40:53:51:dd:ff:e8:ae:d5:31: df:3a:4d:50:6f:71:86:b4:2c:3e:99:6a:89:ac:ac: 00:b4:61:03:cd:46:1b:79:5f:36:ed:9a:45:01:e0: 7e:92:3d:25:89:be:c9:28:02:97:ac:50:48:97:d6: d9:ec:8d:cc:4d:a6:79:71:9a:df:67:79:5c:44:b8: cb:80:13:f1:59:35:d7:05:e0:38:2a:1b:ac:fe:b5: 9e:1d:35:88:67:8c:0f:ff:49:7a:86:b5:df:38:2c: 25:c7:2b:7f:3c:c2:bf:34:9a:65:85:1c:a9:ef:bc: 38:61:57:c6:c7:f0:36:7c:f6:a2:59:ac:5e:17:be: 71:86:cf:60:d6:48:64:df:f2:b4:93:00:80:52:d8: 35:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C4:68:05:24:CD:9C:02:A4:21:07:E1:CD:2D:D9:09:6A:9F:A7:4E X509v3 Authority Key Identifier: keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:8c:9e:df:c5:08:28:46:be:2c:8f:61:c3:86:fd:19:52:95: f0:22:cd:c2:98:a5:7e:28:f6:bc:a1:0b:f2:f4:e9:8a:b6:99: 32:f7:e7:3d:8b:f4:8f:7e:1f:26:44:ed:b3:8d:d0:68:20:2d: 82:27:73:d6:ca:99:c0:19:6c:79:4c:d2:63:8c:ae:be:93:ed: e1:26:b2:f1:77:2b:b5:19:8b:76:64:68:82:b4:63:52:d7:87: 52:2c:78:c4:81:33:67:3c:f5:2d:5d:0a:65:b9:0b:f7:14:a2: 83:92:85:dc:07:77:0d:e4:44:72:d7:93:e2:14:c0:bf:6c:ec: d5:2a:40:bd:49:0e:f0:f1:e6:ec:a5:d7:2c:44:2a:37:89:c8: 9b:35:87:9f:bb:06:93:57:fc:86:b5:02:3a:46:57:15:87:bf: 99:8d:ff:83:28:36:5f:76:64:9e:99:19:fb:ca:b6:1d:2d:6e: e1:c0:35:28:87:2a:47:07:54:7b:a5:b3:1e:63:c8:eb:8b:45: 42:f9:b5:23:20:3c:eb:9f:9a:ca:f9:e6:1f:b9:c0:cc:e6:d6: 8c:3e:e4:b3:88:70:54:e9:27:12:28:46:03:84:e5:f2:48:a5: 6c:c3:76:03:f3:c1:6c:bf:08:17:ba:2e:89:b3:e6:87:3a:51: d5:55:eb:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsuYb9LwAS7HgaxNNfgAaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMmNiM2QwYTY0MTc2OWM3ODAxYzQ4MTYxMjAxNWMyY2Ni M2I2NTUwHhcNMjUxMTIyMTgwMDMxWhcNMjUxMTIzMTgwMDMxWjAzMTEwLwYDVQQD EyhlZmM0NjgwNTI0Y2Q5YzAyYTQyMTA3ZTFjZDJkZDkwOTZhOWZhNzRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskcYIkq60AKuRaSmFsgIrtZhECHm 6LCZ/a01r0i9G9tuPR2ae3zj12M+Z1SFv1Y9Dm9jlffFxVI2f6Nz4LIH1xXcc6sq xmT1PEK4woSybLvGSy3cO7M1UglecQDtIC4aMdear0AYAok5q6mPISRAU1Hd/+iu 1THfOk1Qb3GGtCw+mWqJrKwAtGEDzUYbeV827ZpFAeB+kj0lib7JKAKXrFBIl9bZ 7I3MTaZ5cZrfZ3lcRLjLgBPxWTXXBeA4Khus/rWeHTWIZ4wP/0l6hrXfOCwlxyt/ PMK/NJplhRyp77w4YVfGx/A2fPaiWaxeF75xhs9g1khk3/K0kwCAUtg1DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/EaAUkzZwCpCEH4c0t2Qlqn6dOMB8GA1UdIwQY MBaAFH4ss9CmQXaceAHEgWEgFcLMs7ZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80MzFkZjEtMDlmNC00NzVjLWEwNDUt ZjViYjI4NDNjODllLzEvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80MzFkZjEtMDlmNC00NzVjLWEwNDUtZjViYjI4NDNjODll LzEvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYye38UI KEa+LI9hw4b9GVKV8CLNwpilfij2vKEL8vTpiraZMvfnPYv0j34fJkTts43QaCAt gidz1sqZwBlseUzSY4yuvpPt4Say8XcrtRmLdmRogrRjUteHUix4xIEzZzz1LV0K ZbkL9xSig5KF3Ad3DeREcteT4hTAv2zs1SpAvUkO8PHm7KXXLEQqN4nImzWHn7sG k1f8hrUCOkZXFYe/mY3/gyg2X3ZknpkZ+8q2HS1u4cA1KIcqRwdUe6WzHmPI64tF Qvm1IyA865+ayvnmH7nAzObWjD7ks4hwVOknEihGA4Tl8kilbMN2A/PBbL8IF7ou ibPmhzpR1VXr8w== -----END CERTIFICATE-----Generated at Sat Nov 22 21:44:24 2025 by rpki-client