This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft File: fiyz0KZBdpx4AcSBYSAVwsyztlU.mft (raw, json) Hash identifier: vq8FuW0xryA1RXKX262OV6oCehKKJl+KEWRTEyCLDlg= Subject key identifier: 09:A6:DD:2A:AD:DC:7B:BD:A4:DD:DC:BD:14:3C:8B:FF:AA:73:B3:77 Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55 Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655 Certificate serial: 019AF23FEAA2EAB5901748D46B6718CEC189 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 06:01:06 +0000 Manifest this update: Sat 06 Dec 2025 06:01:06 +0000 Manifest next update: Sun 07 Dec 2025 06:01:06 +0000 Files and hashes: 1: M3Ha07iuSnJt99v-sGLNUx8BBLI.roa (hash: IIpH3NsZ7PItLDv9GEILJ6qdrVTgVESMLfrKLW1hfuA=) 2: NJxwRBkvshih-xmgz1X2qxZLLGU.roa (hash: WAXGkwJLmpUUMtECpnkhuJeq2y5mE3vQZXofWlN+lAo=) 3: RP3f5WWvkrYQJc7jqMUs8Y1XTtU.roa (hash: hk9tzETRgkzSw8scjlpsIlP6fKBNwXAqFAfpPNKquL8=) 4: SinlQ5z34pUrW8vj7b8roBMhucc.roa (hash: l2JuiUg6/TaOO5OR8orwqynZnR5QYj967JWl5ck7FYw=) 5: fiyz0KZBdpx4AcSBYSAVwsyztlU.crl (hash: vsVRpMx0PBhpBNj782zw0ozFFitCRd+6qCi+pnYvcbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:ea:a2:ea:b5:90:17:48:d4:6b:67:18:ce:c1:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655 Validity Not Before: Dec 6 06:01:06 2025 GMT Not After : Dec 7 06:01:06 2025 GMT Subject: CN=09a6dd2aaddc7bbda4dddcbd143c8bffaa73b377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5b:cd:bb:a5:a1:eb:81:93:bc:58:33:c1:a6: e9:0e:e6:ca:7a:cd:4e:7f:7c:3c:97:43:e7:02:0f: c6:77:03:0a:27:67:98:27:67:3c:3a:e1:87:fb:1b: 3b:ba:21:f8:28:ae:2f:1f:55:c3:01:68:86:66:b4: 45:d1:38:f0:ab:41:a1:85:c5:06:00:bd:0d:24:8a: 27:4a:fe:cd:2c:42:a8:70:77:6b:c5:d6:ed:02:0f: 63:df:16:56:53:94:a9:b0:a8:aa:a9:5b:65:f4:d9: fd:60:e4:da:5a:81:08:7a:08:d8:da:9d:b8:3a:96: 56:58:a8:c9:ea:5d:4e:19:c6:a2:82:d3:3b:6b:5b: 12:d7:15:ec:66:01:0b:d0:d1:2d:61:fd:c5:4a:f7: c5:c7:79:40:fc:d5:3f:2e:da:c2:b3:d4:43:ba:83: bf:18:9f:c6:e6:f2:fb:b3:a9:45:02:ce:d4:5f:8b: e5:93:22:2a:51:f4:63:69:1b:a6:11:56:ac:15:a5: 9d:f4:87:9c:06:ae:7d:e9:f6:86:98:c9:5c:b6:bf: f4:ab:f6:02:17:ad:10:a6:f4:40:47:ec:ea:4d:4e: bc:14:55:2f:b1:33:0d:9c:9f:91:51:1b:00:b4:78: b0:db:f5:ca:eb:08:34:60:19:d2:f6:db:11:ab:4b: 5f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A6:DD:2A:AD:DC:7B:BD:A4:DD:DC:BD:14:3C:8B:FF:AA:73:B3:77 X509v3 Authority Key Identifier: keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:35:95:68:af:f8:a0:0d:b0:26:b1:5c:dc:f2:26:b4:99:8c: 09:a5:8f:0f:fb:56:bf:76:f0:6b:c3:7a:1a:df:a7:bf:cc:c7: 20:f0:a2:af:eb:21:61:2e:ff:9a:ac:b8:39:9a:28:0a:e5:ac: 75:c7:65:44:68:b2:3a:b3:9b:40:2d:9c:7b:d3:82:6a:ff:a5: 11:8c:1c:32:f0:f0:c2:f8:d6:a7:71:4e:7f:c1:68:16:af:4d: 26:32:b7:2f:b1:c3:a4:04:68:31:7c:5b:dc:a1:06:c2:fe:de: a7:1e:8f:94:bb:87:58:95:d6:13:54:91:90:21:d2:5c:ea:c2: fd:10:6a:f9:59:b0:69:40:36:0c:d0:cc:db:43:48:5d:c8:79: b4:7c:bc:f6:fd:e7:b6:88:82:e0:39:42:d7:e8:63:04:3e:97: 78:57:43:d0:0c:90:1a:66:4f:4e:6f:49:fe:7e:34:fc:27:70: 6d:d6:e2:c9:1e:f7:ba:72:53:99:28:72:25:cd:98:5e:99:dc: ce:42:a0:ad:c9:9f:9e:b2:d2:ee:4b:38:cf:78:8a:67:a2:65: 92:9d:ca:ef:7f:dc:ca:c8:bd:e0:02:ae:09:63:fa:95:ea:ba: e1:73:d9:5b:26:79:fe:ed:c7:e4:53:29:5e:b2:e0:07:ec:81: 23:de:e2:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+qi6rWQF0jUa2cYzsGJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMmNiM2QwYTY0MTc2OWM3ODAxYzQ4MTYxMjAxNWMyY2Ni M2I2NTUwHhcNMjUxMjA2MDYwMTA2WhcNMjUxMjA3MDYwMTA2WjAzMTEwLwYDVQQD EygwOWE2ZGQyYWFkZGM3YmJkYTRkZGRjYmQxNDNjOGJmZmFhNzNiMzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVvNu6Wh64GTvFgzwabpDubKes1O f3w8l0PnAg/GdwMKJ2eYJ2c8OuGH+xs7uiH4KK4vH1XDAWiGZrRF0Tjwq0GhhcUG AL0NJIonSv7NLEKocHdrxdbtAg9j3xZWU5SpsKiqqVtl9Nn9YOTaWoEIegjY2p24 OpZWWKjJ6l1OGcaigtM7a1sS1xXsZgEL0NEtYf3FSvfFx3lA/NU/LtrCs9RDuoO/ GJ/G5vL7s6lFAs7UX4vlkyIqUfRjaRumEVasFaWd9IecBq596faGmMlctr/0q/YC F60QpvRAR+zqTU68FFUvsTMNnJ+RURsAtHiw2/XK6wg0YBnS9tsRq0tf2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmm3Sqt3Hu9pN3cvRQ8i/+qc7N3MB8GA1UdIwQY MBaAFH4ss9CmQXaceAHEgWEgFcLMs7ZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80MzFkZjEtMDlmNC00NzVjLWEwNDUt ZjViYjI4NDNjODllLzEvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80MzFkZjEtMDlmNC00NzVjLWEwNDUtZjViYjI4NDNjODll LzEvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzWVaK/4 oA2wJrFc3PImtJmMCaWPD/tWv3bwa8N6Gt+nv8zHIPCir+shYS7/mqy4OZooCuWs dcdlRGiyOrObQC2ce9OCav+lEYwcMvDwwvjWp3FOf8FoFq9NJjK3L7HDpARoMXxb 3KEGwv7epx6PlLuHWJXWE1SRkCHSXOrC/RBq+VmwaUA2DNDM20NIXch5tHy89v3n toiC4DlC1+hjBD6XeFdD0AyQGmZPTm9J/n40/CdwbdbiyR73unJTmShyJc2YXpnc zkKgrcmfnrLS7ks4z3iKZ6Jlkp3K73/cysi94AKuCWP6leq64XPZWyZ5/u3H5FMp XrLgB+yBI97i2g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:28 2025 by rpki-client