This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft File: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft (raw, json) Hash identifier: k76MGI8LZ0eULmgZtNkKc4QZctu0etxWkOmG8XMVTIg= Subject key identifier: 87:CA:5A:81:DE:FE:87:75:D3:C3:D5:D9:CD:C7:12:48:41:86:87:E4 Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019AF23F8C28DC86D01EC25A6EA9EFA65829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft Manifest number: 17AE Signing time: Sat 06 Dec 2025 06:00:42 +0000 Manifest this update: Sat 06 Dec 2025 06:00:42 +0000 Manifest next update: Sun 07 Dec 2025 06:00:42 +0000 Files and hashes: 1: 07ZXjsdxsFuEtdgHwbOq-R5G76E.roa (hash: 1M9pQCAfVRT7MQ/Zj4tT9AVlQVRcilmGlJyGKK/xyXM=) 2: 1-qG54akf4ZK4Vn2nJAtq8qKMB-M.roa (hash: +KrvgwuNM4eT5l98LWe/CjZjFxSOKRz6fj1mSGz0IgM=) 3: 4PQhz7MOxuhGtS_nPubpyXMJOcI.roa (hash: BnJSvsApOD8luZipfIRx4R+p7IT8Z+rfRgGtpM8nPhY=) 4: 7_xHvFH9z1lTBMmCYCZyfOMLpCE.roa (hash: Dy9Ep1VuSlW1UwNypkd8T87oMpJakHz3KhMW+QvcJps=) 5: AlQ9s5QZK2NSuAym9BFFOrJaC0g.roa (hash: QAchfxqcPxu44vFEqxRKf6wyg72hfH4/rebn2BcHbus=) 6: Fxq3h1JsdzyzYDgYtP2wnoeOjLA.roa (hash: tJ0CFUjWGpQHeBJKiYedBkhtxvRYSIaLu2u0ULfF3Dw=) 7: GYDa6uF4PXtvgFCZif9U8DfyJhs.roa (hash: x9pM/mAY2BLb1r8R45XN3qmt1Gw8vPBkNTNsNDjS6Jk=) 8: ISiMd8SOBUmeZ3l9pfTrNrRMVZ4.roa (hash: jX1VL1H9HdYzBbWtVwBVZy9/vxHTwytZF8IGlvhq3Yc=) 9: JXUpuOiDJbpAQ6wJyegYg23uwQY.roa (hash: IcXnbwWR3QdHkuBHHjMtVeQKCG9JaMJJR88n+O+Lv4g=) 10: K3gtWKami_XUUUtVwrQwwcMOVAg.roa (hash: 01aEVs3iMb11GEQQScA48mgu1ByLdBE37Eq3V2mjiGQ=) 11: Kn5AOeIvqDj0QyY0a6gvSVOYK04.roa (hash: /7QM63bFC+CBTXnuyFwX9/7nQ/C+RhIxyYwX13EXYS0=) 12: LL7AEgR132RnJITVXb1v0I3LCyw.roa (hash: gwRFxp3BgZCfzCqdNDK/XuHwvvhdYQt+5LD2lZsPRaU=) 13: NaXmOsDpDUrJU-L3cR4MsoyMUQA.roa (hash: dVVNZQbSo8+6scs7Gd+Q59/WTz4n0kcfFCZ13Y+qz7s=) 14: UryH-7kbyXWUJTfxmD8_iKhQToA.roa (hash: 9X1VOT+y467gWK0X8aw0s4QPOjoJGbo5qGz+HUSG1OM=) 15: V4iFmGmpuX9vmwKfCIL4MHq3iJo.roa (hash: I7wr4UYfNx1god3F0V72adpmlcw8clHUqo883JUOo54=) 16: XR-_EEDwF8zWqFnUJesI7P4suXw.roa (hash: 5Fp6z6r3AdWNjIT316J/wStOBp8ELRHvRNd1XNc9tso=) 17: XXAYfqUHP9nZBwlGSXcDJmZr7gM.roa (hash: lTHokh5dlYVtVzphYfMaxHP19CTq5FCkid0Lic2Aukw=) 18: ZtIB391wA96ODwULxOuaUb3zKjw.roa (hash: iYFjXUPN6915L3avwAU1BHDz24hStz0uZXCywgYk214=) 19: ZyYK-k77F1xgjjVfUFKWc3u5FMg.roa (hash: A8osarOaXuQWeZx8KQYjMoJwdcPiXJPczE87ARsfRqI=) 20: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl (hash: Ksh+Jzh9PQJ98mMIeVlCpgnzced6ZelDNizmdI3wX3o=) 21: bke-YJ-tbDLGpp3kvZGH2TLdlOI.roa (hash: NXBX9RHNDwlq1k9iub5dxUrFv5q8FjUTbkNsfuh2Uzo=) 22: bzmfxm3S5hbe6Gaa6wvgeLEiaNA.roa (hash: Ar56s14Axf0ioHIstHBEGHX85IVOcRUFRcIehjO4vNI=) 23: fBlvBTMJM3ddqp2rUiQB8ldjkd0.roa (hash: ETihZGojVJlaCJwQ0UQbamp7h1DxH8Yq4UnyjKrHjTY=) 24: k1RkiO-oYIsdIxPMb4yp4wi06vw.roa (hash: MCgag/nnrriwvetJZ3hm9uP9KJjRl+UaPWHYQ89ULn8=) 25: oBKt6fMr87e-rFOhXitc_DWZtdg.roa (hash: qJjvrPZfU1anKZ4X1zOc4+1vwatadPrAJ6kaez7yYks=) 26: pKg9Eulzznq_Xmusn2tCljsUFm0.roa (hash: ZV91D/vMdBvdabbs6xfKbOYCwCqfj4mEA5NzU3QNIzA=) 27: pN1QTddIk2qdFe_mOVuHdGmP3Z4.roa (hash: CywtU84R198uQ8xF6BjJqnsNgApLacLlntN4HmgGHZM=) 28: rE9cybiH6oB4mGa5EHSN9cceqWE.roa (hash: YG48gdDn/SUyc3i/+XHJ5HagqvRplqEN/up/vYOmvBI=) 29: uYzA14o4SLgVDIUH1V-hG4krcmM.roa (hash: AAmmFasdZzQbOIJJuAxM6M66jvg5N0KdzbSbTAsq2+w=) 30: waIdBiyQcZY5S3UHlSgYjhWy3yA.roa (hash: B01bIchSEkzdF5UX/NW8F0eHIFCkAlYI9AyRAZwvgUg=) 31: yphDYCojIc0PisUPqGFzcSpaHr4.roa (hash: kueA64oPFnuqfOUJ8KFf+GceWa+kI7exnedP73+jI8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:8c:28:dc:86:d0:1e:c2:5a:6e:a9:ef:a6:58:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Dec 6 06:00:42 2025 GMT Not After : Dec 7 06:00:42 2025 GMT Subject: CN=87ca5a81defe8775d3c3d5d9cdc71248418687e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b8:fc:6c:0d:5e:44:0b:55:f9:04:71:39:00: 4c:f2:b8:31:65:96:24:ce:83:cb:ca:e0:65:a2:40: 5c:30:f5:36:f7:ad:25:af:88:fd:29:01:c1:92:62: cc:b3:48:01:9b:99:cc:01:88:d1:68:c4:c5:71:a0: be:de:63:08:90:b7:c7:91:cc:12:8d:79:66:04:bc: 9e:c4:3e:5d:55:eb:84:bb:f6:dd:a7:06:19:8a:ed: 70:92:d4:f6:73:e9:df:46:2c:d2:78:2b:99:99:19: 93:cc:4f:90:09:0d:0c:30:43:4f:ee:0f:fb:0b:cb: 58:5a:3b:fd:2f:dc:63:e8:96:f7:38:96:52:03:84: f3:1f:7e:22:b5:7f:c1:a4:3c:7e:f5:95:78:36:85: 52:3a:84:d2:a5:d0:7c:df:ca:83:e8:ee:27:20:58: 99:eb:5d:55:8b:28:c9:92:3b:8d:2d:93:87:3a:d0: 30:a1:6c:cf:09:04:3f:20:d5:81:5d:91:3a:b4:4c: 48:41:f9:c3:a0:b3:4a:20:65:0c:dc:3d:46:4c:24: b3:96:01:1d:8b:06:f1:ee:a0:f5:48:31:f5:32:7f: dd:30:52:74:57:5b:02:7a:da:26:6e:ce:d1:5a:ee: b1:3c:a2:0d:5c:83:ba:94:2b:e4:a9:d1:80:a3:ae: 73:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:CA:5A:81:DE:FE:87:75:D3:C3:D5:D9:CD:C7:12:48:41:86:87:E4 X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:10:53:4c:73:f4:ad:ed:5f:b7:0c:b9:46:99:2e:6c:cb:45: 76:81:6d:eb:27:c3:10:95:b4:dc:52:7c:f6:e2:10:7b:d4:7c: 43:c2:ae:3a:a9:86:f1:d2:24:91:f7:e0:e1:96:e7:67:91:eb: e6:66:49:84:5c:b4:1a:0e:5d:3d:3e:d2:b8:3b:37:d3:0a:1d: 3a:f0:b9:97:7d:bb:32:84:90:e2:8d:53:71:4c:66:65:31:a4: 9e:15:70:5d:55:43:7c:fc:ae:eb:dc:16:4c:27:26:9e:17:f8: e6:32:21:28:8f:f9:8a:c5:b0:9e:a9:88:bf:c9:29:34:85:44: 18:6c:c1:07:a1:9b:ff:ae:ea:dd:dd:93:9c:21:5d:7b:cf:74: e1:6a:72:7f:b0:c0:b2:db:ca:47:26:3a:3f:07:8b:25:23:88: 80:e2:37:67:a2:83:4d:58:7f:36:19:f2:2e:d8:5b:6c:f3:28: 65:62:db:4e:59:69:fb:f8:d0:20:67:c2:ee:17:71:39:44:f3: 99:b5:ca:ea:e0:f7:ea:d7:65:db:73:00:bf:7c:2e:e4:e4:c8: cb:85:37:f9:93:9a:af:dc:1b:69:eb:dc:0d:46:90:a2:6c:38: 0a:86:c8:c8:33:c2:07:1f:ba:91:d0:65:cf:fc:1c:96:11:17: 7e:76:0b:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4wo3IbQHsJabqnvplgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjUxMjA2MDYwMDQyWhcNMjUxMjA3MDYwMDQyWjAzMTEwLwYDVQQD Eyg4N2NhNWE4MWRlZmU4Nzc1ZDNjM2Q1ZDljZGM3MTI0ODQxODY4N2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77j8bA1eRAtV+QRxOQBM8rgxZZYk zoPLyuBlokBcMPU2960lr4j9KQHBkmLMs0gBm5nMAYjRaMTFcaC+3mMIkLfHkcwS jXlmBLyexD5dVeuEu/bdpwYZiu1wktT2c+nfRizSeCuZmRmTzE+QCQ0MMENP7g/7 C8tYWjv9L9xj6Jb3OJZSA4TzH34itX/BpDx+9ZV4NoVSOoTSpdB838qD6O4nIFiZ 611ViyjJkjuNLZOHOtAwoWzPCQQ/INWBXZE6tExIQfnDoLNKIGUM3D1GTCSzlgEd iwbx7qD1SDH1Mn/dMFJ0V1sCetombs7RWu6xPKINXIO6lCvkqdGAo65zYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfKWoHe/od108PV2c3HEkhBhofkMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRBTTHP0 re1ftwy5RpkubMtFdoFt6yfDEJW03FJ89uIQe9R8Q8KuOqmG8dIkkffg4ZbnZ5Hr 5mZJhFy0Gg5dPT7SuDs30wodOvC5l327MoSQ4o1TcUxmZTGknhVwXVVDfPyu69wW TCcmnhf45jIhKI/5isWwnqmIv8kpNIVEGGzBB6Gb/67q3d2TnCFde8904Wpyf7DA stvKRyY6PweLJSOIgOI3Z6KDTVh/NhnyLthbbPMoZWLbTllp+/jQIGfC7hdxOUTz mbXK6uD36tdl23MAv3wu5OTIy4U3+ZOar9wbaevcDUaQomw4CobIyDPCBx+6kdBl z/wclhEXfnYLVw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:30 2025 by rpki-client