This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft File: IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json) Hash identifier: rPoAyeqefJOXqyzAFTPjII8KuQRWCvKrEJitXhg981M= Subject key identifier: D4:50:F5:82:6F:44:32:A5:A1:4C:F6:50:43:F9:6A:A8:88:F8:4D:F5 Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D Certificate issuer: /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d Certificate serial: 019AF23FCD14F457AB0DC84B950E5C3A2E0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft Manifest number: 1132 Signing time: Sat 06 Dec 2025 06:00:58 +0000 Manifest this update: Sat 06 Dec 2025 06:00:58 +0000 Manifest next update: Sun 07 Dec 2025 06:00:58 +0000 Files and hashes: 1: 7fVHLIE5Fr7X8yFvO0PeQIriJkk.roa (hash: V2T+9sBa8KkNKPdhdy6f3WlbGWAyrtoeOYEsZ7+3u8w=) 2: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: Roj3X3tbUebJXPoRh7zYb5PxUTjZVzwbx7SJgQpUaaA=) 3: VNrppWVy36SKNgtS_F1qaT2zJHY.roa (hash: 9DXGS+oBa4dlfj3+GMMrbil8G+vwg9kQTst1kCj/GhM=) 4: lNuBLYCJ0lfEgO69TARxUVn65MY.roa (hash: c/DzytieLHDcyyqGT5jbt6nBdARkMqsmssA/P9Kdzjk=) 5: sLy4f0J28AKLnDg3qJ8vxAYCBx0.roa (hash: beKd4jqG4/esSSfPF84tT28gcKiXZoavsjTYolwvANc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:cd:14:f4:57:ab:0d:c8:4b:95:0e:5c:3a:2e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d Validity Not Before: Dec 6 06:00:58 2025 GMT Not After : Dec 7 06:00:58 2025 GMT Subject: CN=d450f5826f4432a5a14cf65043f96aa888f84df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a6:8f:8d:f1:a7:16:dd:5f:c0:86:9b:e3:c2: c8:34:9b:87:9c:ff:ff:10:e9:c7:e4:c0:49:f5:db: bf:24:97:20:19:75:16:7c:ce:77:b9:0e:e7:bd:18: 8e:8e:54:a5:b5:22:ba:8f:41:33:0e:3e:be:cc:d2: 6b:76:41:2b:50:a0:93:c9:0a:6e:a5:49:17:7e:24: 9d:5b:6a:37:ea:69:1d:84:f0:cb:43:ed:58:6f:12: 73:b5:46:49:77:3b:85:c2:8f:b5:7a:8f:8d:4d:fa: 49:68:20:9d:c2:a9:49:52:9a:66:8b:8f:f8:f6:3e: 19:95:e6:3f:b3:59:a5:73:36:e3:09:b7:fa:df:95: 10:6a:5a:f7:56:95:99:83:22:97:6c:06:f4:77:02: 4f:4a:8d:16:ac:b8:0d:44:02:fa:60:96:b0:01:3a: 53:3d:04:9d:8d:9c:ce:c6:e5:a8:08:c3:e7:65:bd: 0a:82:a4:11:6b:29:1e:a5:c5:d8:f0:c7:02:26:69: 16:d0:cc:c9:ad:b9:8a:d3:77:b0:65:0e:fb:eb:e8: 5b:dd:7d:c2:64:3c:bb:dd:68:79:7d:c3:dc:44:6c: 9e:01:9c:c6:9a:bc:b4:08:12:d8:c8:4e:f4:a7:b2: eb:f5:f8:bf:d4:74:2e:7c:33:4a:11:ab:bc:a8:b7: e2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:50:F5:82:6F:44:32:A5:A1:4C:F6:50:43:F9:6A:A8:88:F8:4D:F5 X509v3 Authority Key Identifier: keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:7a:f0:96:a3:41:05:2b:f5:86:aa:75:46:b9:c3:a5:b9:1a: e9:fd:fc:fb:50:5b:1f:85:d2:67:11:48:8b:3c:09:cb:5a:8a: 22:c3:77:30:18:24:3a:09:13:97:1f:f8:11:b2:3a:a1:29:6b: 4d:0f:0b:43:63:0a:21:2a:80:d1:a1:98:af:80:f0:57:59:0b: ab:f3:ca:09:d7:44:12:c2:52:29:8d:6f:cf:8b:6a:02:db:0e: f5:2d:f5:96:8b:ad:5c:33:a9:0d:d6:36:7f:c1:17:ad:0e:49: 42:7a:bc:48:08:8a:b9:59:b0:21:35:a2:84:16:66:25:c1:82: e0:73:b8:06:16:e3:f2:f9:b3:76:6f:5a:99:eb:10:42:29:a1: fd:b7:fb:65:0a:c8:cb:d3:99:46:9f:37:d4:a0:b5:80:3a:62: 33:ff:9f:e7:9c:34:f6:42:58:41:e9:9d:6b:38:ff:fa:f7:82: 25:5f:b4:b9:0c:32:d0:c0:9b:86:d0:47:3f:82:a5:af:84:a1: ab:00:bf:37:2f:43:90:c1:77:f7:54:c2:a9:56:e7:7f:02:c7: 08:16:a3:c0:3b:fa:c5:da:a9:0e:95:ca:98:ba:03:96:0a:c0: 4a:3f:ff:22:e8:01:fd:9d:3c:7d:26:23:8f:46:c0:32:ec:f5: c9:02:c6:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP80U9FerDchLlQ5cOi4MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwZjYzODEwN2FiYjg0YWU2ZmIwM2NjMWRiMmNmZDFiYzQ0 ODdmOGQwHhcNMjUxMjA2MDYwMDU4WhcNMjUxMjA3MDYwMDU4WjAzMTEwLwYDVQQD EyhkNDUwZjU4MjZmNDQzMmE1YTE0Y2Y2NTA0M2Y5NmFhODg4Zjg0ZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56aPjfGnFt1fwIab48LINJuHnP// EOnH5MBJ9du/JJcgGXUWfM53uQ7nvRiOjlSltSK6j0EzDj6+zNJrdkErUKCTyQpu pUkXfiSdW2o36mkdhPDLQ+1YbxJztUZJdzuFwo+1eo+NTfpJaCCdwqlJUppmi4/4 9j4ZleY/s1mlczbjCbf635UQalr3VpWZgyKXbAb0dwJPSo0WrLgNRAL6YJawATpT PQSdjZzOxuWoCMPnZb0KgqQRaykepcXY8McCJmkW0MzJrbmK03ewZQ776+hb3X3C ZDy73Wh5fcPcRGyeAZzGmry0CBLYyE70p7Lr9fi/1HQufDNKEau8qLfiBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRQ9YJvRDKloUz2UEP5aqiI+E31MB8GA1UdIwQY MBaAFCD2OBB6u4Sub7A8wdss/RvESH+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80ZjU4MDgtMWMwNC00MjU1LTliODQt YTgyODM2ZGUwNWZjLzEvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC80ZjU4MDgtMWMwNC00MjU1LTliODQtYTgyODM2ZGUwNWZj LzEvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnrwlqNB BSv1hqp1RrnDpbka6f38+1BbH4XSZxFIizwJy1qKIsN3MBgkOgkTlx/4EbI6oSlr TQ8LQ2MKISqA0aGYr4DwV1kLq/PKCddEEsJSKY1vz4tqAtsO9S31loutXDOpDdY2 f8EXrQ5JQnq8SAiKuVmwITWihBZmJcGC4HO4Bhbj8vmzdm9amesQQimh/bf7ZQrI y9OZRp831KC1gDpiM/+f55w09kJYQemdazj/+veCJV+0uQwy0MCbhtBHP4Klr4Sh qwC/Ny9DkMF391TCqVbnfwLHCBajwDv6xdqpDpXKmLoDlgrASj//IugB/Z08fSYj j0bAMuz1yQLGsg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:47 2025 by rpki-client