This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft File: RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json) Hash identifier: 5cX6e1tMlr4axOxn7t7ijO36ShxX15EIHrUemzIufXI= Subject key identifier: EB:04:19:E5:7C:B7:04:5F:59:5F:51:95:90:59:D8:DE:7B:7A:AA:EA Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c Certificate serial: 019AC56826A5973C7DD3953ECB56B2AB7E2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft Manifest number: 1772 Signing time: Thu 27 Nov 2025 13:02:08 +0000 Manifest this update: Thu 27 Nov 2025 13:02:08 +0000 Manifest next update: Fri 28 Nov 2025 13:02:08 +0000 Files and hashes: 1: 1ZW8tndM5AtB-BPpT-oVfX7UdWI.roa (hash: 4fwNFjC/KzIgxsaWUD66CE+7p9ui38GyV7XXtJ3qf8o=) 2: M1T3Lq0Zfvr5VzRme2qyi-eGhtA.roa (hash: gy6FwOKBXTaLdVYVnEAs4hHwzg7SeC5YExBV8UoGhlY=) 3: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: 5Rs8TmxgyovkXU/BeusidmJLoCNOMyUPLi9LhzrC9nw=) 4: Sza6sQo4SxIMxey9qB4eBTtIEPg.roa (hash: C/1FfNF+TmksPsjo5TVeKV1X6wR0pQ31deypiIvzO+k=) 5: W7PWFrX-v5SaBlQz93CvawsAR8Y.roa (hash: YvmisDA3cqiQerchJ4ThrZ/s4MEmdOZ55Z/X5SC6qlM=) 6: Zj1tO-q-Puc3Q0mGzg6OAqTVIVg.roa (hash: 1LBMGTqPppIjvQRqI63B9KgLLPyRno6DAs97LHbn/gY=) 7: av__NdNP1QUH7sc8kWyYXLfIYOI.roa (hash: 2jJs6kCfkBBHYqS1sPlGnXp2/2u7ePPtdx/loFAD6Nw=) 8: hVN1Qld91f5dBJ9SSDlF23fJ2wE.roa (hash: fB256LdP6wo0MmK8V0JJWIWF+X7CQ/bXWoxB33HPuzk=) 9: jXuJH5XlRjh9NbnahdD8Y6zEokQ.roa (hash: uTge3zTxck7gBX+9co6u8laUzjU+YV+PjrgGrj8fBnM=) 10: sNlz3ltNKwFJp9lFAJRiixdiytE.roa (hash: fcd5iGxutFpHfnpxl9mUlT8Mi1NSPiKw7EA6qelRziw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 11:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c5:68:26:a5:97:3c:7d:d3:95:3e:cb:56:b2:ab:7e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c Validity Not Before: Nov 27 13:02:08 2025 GMT Not After : Nov 28 13:02:08 2025 GMT Subject: CN=eb0419e57cb7045f595f51959059d8de7b7aaaea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2a:c5:54:5d:36:59:4d:f9:fd:e8:19:36:b0: fd:1c:65:55:3d:3b:6f:71:1c:4e:75:07:66:5e:61: c4:77:a4:ad:2f:bc:94:95:8c:e0:9c:c9:b6:25:df: 67:c2:a7:4e:82:6b:98:26:7c:17:63:8b:f6:c0:0b: 83:88:e3:71:e7:0c:d6:32:c3:9d:bc:46:bc:7c:3d: 6c:b9:4b:76:3c:7e:4b:54:f1:22:81:17:6d:11:c1: d5:41:a5:f1:1c:2d:2c:23:ca:ec:d7:3d:8e:19:bc: 0c:25:6a:d1:bd:fd:81:3f:42:f0:45:5d:43:ad:ef: 12:80:19:9b:3d:f0:ee:51:f9:8a:b9:78:47:64:0a: 96:00:c3:83:44:53:d7:26:db:84:7c:5a:0c:eb:7e: 11:25:db:e7:0e:9b:5d:10:ff:8a:c7:e1:80:c4:b1: 2e:8d:b5:02:c3:ea:12:1a:c2:3c:f1:72:b2:1a:37: 06:32:bd:ab:91:2d:a4:ab:90:13:fc:9e:62:0e:84: 91:8c:80:72:c8:45:be:d2:86:83:fc:2b:aa:3e:ec: 5f:bb:66:4b:05:bc:7a:4f:75:18:2c:05:49:87:0a: fd:43:df:f7:04:18:ca:b9:e1:6c:87:af:17:fb:24: 70:d4:34:ca:ff:4a:04:a5:ec:a6:19:1b:b5:43:16: 75:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:04:19:E5:7C:B7:04:5F:59:5F:51:95:90:59:D8:DE:7B:7A:AA:EA X509v3 Authority Key Identifier: keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:a8:be:e0:5f:71:f5:13:65:3c:64:8d:b1:f9:36:d2:b4:79: 97:8c:ca:f5:33:39:38:00:ba:d6:5c:bd:0b:fb:c4:7f:3f:af: fd:a2:b9:d6:b5:64:26:c5:04:75:8c:3c:37:d6:69:72:0c:c3: 91:4c:4a:5a:02:8a:67:b3:97:54:ab:6d:1a:aa:df:e0:89:25: fb:1e:8c:33:82:6b:50:f0:49:9f:68:9d:c0:8e:69:9d:73:37: 09:59:3c:62:81:d1:c3:6c:71:3d:a0:b8:00:a6:30:9d:2a:c5: 07:79:2f:16:86:bf:62:2f:a1:1a:83:73:22:f2:39:30:82:ae: e0:ec:ae:18:5c:fa:fb:2d:65:1f:90:37:b6:51:b3:69:e1:ee: eb:8f:16:d0:c5:ee:ad:e4:ac:7f:76:78:21:0e:56:19:be:e7: bc:ee:97:8e:5e:46:ea:37:03:28:39:36:ff:58:49:bc:76:08: a2:0c:5e:80:43:d2:1c:e2:88:8d:30:b5:71:12:d8:54:9a:2e: dd:f2:b1:94:da:5e:cd:e4:54:c9:27:bf:b0:c3:d3:ec:0e:cc: 62:af:83:8b:53:eb:3d:37:15:c3:87:15:e6:0e:a2:ed:10:1c: 75:10:2a:91:13:b9:ae:57:1f:51:f8:06:62:06:3f:8c:54:82: 9b:29:dd:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrFaCallzx905U+y1ayq34vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw MzdjNmMwHhcNMjUxMTI3MTMwMjA4WhcNMjUxMTI4MTMwMjA4WjAzMTEwLwYDVQQD EyhlYjA0MTllNTdjYjcwNDVmNTk1ZjUxOTU5MDU5ZDhkZTdiN2FhYWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6irFVF02WU35/egZNrD9HGVVPTtv cRxOdQdmXmHEd6StL7yUlYzgnMm2Jd9nwqdOgmuYJnwXY4v2wAuDiONx5wzWMsOd vEa8fD1suUt2PH5LVPEigRdtEcHVQaXxHC0sI8rs1z2OGbwMJWrRvf2BP0LwRV1D re8SgBmbPfDuUfmKuXhHZAqWAMODRFPXJtuEfFoM634RJdvnDptdEP+Kx+GAxLEu jbUCw+oSGsI88XKyGjcGMr2rkS2kq5AT/J5iDoSRjIByyEW+0oaD/CuqPuxfu2ZL Bbx6T3UYLAVJhwr9Q9/3BBjKueFsh68X+yRw1DTK/0oEpeymGRu1QxZ1nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsEGeV8twRfWV9RlZBZ2N57eqrqMB8GA1UdIwQY MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt YzM2OWMxZDRjMzM3LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3 LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArqi+4F9x 9RNlPGSNsfk20rR5l4zK9TM5OAC61ly9C/vEfz+v/aK51rVkJsUEdYw8N9ZpcgzD kUxKWgKKZ7OXVKttGqrf4Ikl+x6MM4JrUPBJn2idwI5pnXM3CVk8YoHRw2xxPaC4 AKYwnSrFB3kvFoa/Yi+hGoNzIvI5MIKu4OyuGFz6+y1lH5A3tlGzaeHu648W0MXu reSsf3Z4IQ5WGb7nvO6Xjl5G6jcDKDk2/1hJvHYIogxegEPSHOKIjTC1cRLYVJou 3fKxlNpezeRUySe/sMPT7A7MYq+Di1PrPTcVw4cV5g6i7RAcdRAqkRO5rlcfUfgG YgY/jFSCmyndrw== -----END CERTIFICATE-----Generated at Thu Nov 27 15:30:48 2025 by rpki-client