This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft File: eY4NpPkQB7IkdorLTRMfElF9K3o.mft (raw, json) Hash identifier: FNrpA3eHta+Dl1x37rVFD1jLpi9ivWgK/iGnD4t6FXw= Subject key identifier: B1:A3:80:42:49:76:4A:FA:8F:30:46:DB:B4:FC:91:78:4F:85:FF:CF Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A Certificate issuer: /CN=798e0da4f91007b224768acb4d131f12517d2b7a Certificate serial: 019AF509FC71F5465070F612DC4350E1E9D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft Manifest number: 0983 Signing time: Sat 06 Dec 2025 19:01:03 +0000 Manifest this update: Sat 06 Dec 2025 19:01:03 +0000 Manifest next update: Sun 07 Dec 2025 19:01:03 +0000 Files and hashes: 1: JQGa11BJ6rW4XIkwrE2Pn3mnbCE.roa (hash: lyg6mL7hgbTWMhjKowvZCwiOw1BkDLdd336Z4BXH0aw=) 2: PY2GKalpJxh0rVeN3SNnaDuGcN8.roa (hash: SriQyHP0WB/8fwiUvKAdnNLXQ0snarIjG0cxw/V7C/w=) 3: eY4NpPkQB7IkdorLTRMfElF9K3o.crl (hash: QYv22ZwaT/ExHAlGa8xtAxkVA/NCwWl3okHkw182apM=) 4: numbWnJewpdlWjFsofSPwm7IG3g.roa (hash: 14YqjZz0f+0ogH+Jj76bMz/1yDXbVz5uWlMR4KVjJRU=) 5: psQBUc0pobHwdrhlOUZzj_GPEto.roa (hash: qru8ysHHH3C4jCMlszx1z613KVN+O1eNTXPzB5PAv+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:fc:71:f5:46:50:70:f6:12:dc:43:50:e1:e9:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a Validity Not Before: Dec 6 19:01:03 2025 GMT Not After : Dec 7 19:01:03 2025 GMT Subject: CN=b1a3804249764afa8f3046dbb4fc91784f85ffcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:68:56:bb:36:31:d9:c8:24:79:ce:a8:45:6a: 2a:41:04:77:58:33:3a:cf:39:a8:ec:d3:ca:a2:f1: b1:81:e7:93:81:a0:0b:dc:14:b3:55:46:33:56:84: 3d:5d:a0:c2:8c:69:8d:ee:49:aa:f7:83:a8:8b:c6: 27:9e:c6:27:8a:e5:b1:59:2d:28:d6:68:b1:86:01: ef:1c:ef:b6:b4:62:dc:1b:e8:78:0e:45:6f:9f:61: 26:dc:27:c7:5e:4b:09:c5:07:a8:2e:7a:86:96:44: 7e:6c:89:ce:66:3b:8a:8a:31:4c:f4:ff:33:65:16: 76:f2:8c:2d:85:20:62:b6:bc:28:77:ed:ee:10:b8: ac:ea:0f:14:e6:d8:63:6b:4d:09:e2:bd:b8:62:a3: b8:8f:3c:e7:89:69:5a:e0:79:3d:10:6d:f2:e5:a4: c6:bf:c7:c8:73:2f:99:06:d7:77:25:2f:db:59:dd: 2d:71:3f:bd:56:8e:52:02:f7:b2:f6:71:3b:9b:5d: bc:33:9c:be:6f:44:81:c0:be:ee:26:ce:ec:c3:38: 24:ca:47:03:79:38:50:de:18:bf:b1:bc:77:96:89: fb:d4:0b:29:20:c7:e3:fe:cc:33:29:84:e9:be:c3: 5f:7f:9a:3f:8c:cf:8f:0e:09:0d:cc:f3:f0:e2:66: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:A3:80:42:49:76:4A:FA:8F:30:46:DB:B4:FC:91:78:4F:85:FF:CF X509v3 Authority Key Identifier: keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:09:a3:e2:91:5d:24:fd:5b:d1:d1:0a:0e:1f:88:6b:2b:70: f5:2f:b2:6a:81:35:65:e2:ac:1a:11:0e:64:e7:52:76:cb:46: cf:8d:de:dd:60:84:5a:12:30:bf:62:cb:f9:16:34:82:d8:69: 97:b7:9a:f4:87:5d:db:ee:a2:56:71:48:83:38:ac:c5:87:c9: 16:9b:e2:b7:e5:6e:23:d1:54:0d:3c:30:06:af:d1:ed:7c:57: 73:eb:f7:3c:c2:04:a8:21:b0:8c:79:4a:03:b9:47:59:35:28: b2:94:57:b5:e4:dc:c5:69:49:3e:d7:1c:8f:43:e0:1e:96:31: ca:63:06:7d:df:98:4b:01:84:e0:7c:79:1a:b8:b3:b1:82:37: ee:89:76:ef:51:53:7b:d5:6c:98:dc:07:57:1a:a0:e7:43:26: 17:11:27:ec:0b:ce:35:4d:29:88:4c:20:ba:34:cb:d8:1f:9d: 2f:78:75:54:30:7d:f0:19:e2:0c:42:e1:f8:4a:34:2e:d9:6e: 1b:39:17:fa:73:4f:79:e5:b5:91:30:58:70:96:3b:31:46:60: c5:59:93:cc:ee:4d:9c:6a:d2:98:47:fc:47:84:d9:9d:33:39: 8b:fd:28:d0:a9:5f:58:e8:4f:8e:6a:9f:66:7f:c2:3a:9e:37: 24:87:e9:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cfxx9UZQcPYS3ENQ4enQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5OGUwZGE0ZjkxMDA3YjIyNDc2OGFjYjRkMTMxZjEyNTE3 ZDJiN2EwHhcNMjUxMjA2MTkwMTAzWhcNMjUxMjA3MTkwMTAzWjAzMTEwLwYDVQQD EyhiMWEzODA0MjQ5NzY0YWZhOGYzMDQ2ZGJiNGZjOTE3ODRmODVmZmNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWhWuzYx2cgkec6oRWoqQQR3WDM6 zzmo7NPKovGxgeeTgaAL3BSzVUYzVoQ9XaDCjGmN7kmq94Ooi8YnnsYniuWxWS0o 1mixhgHvHO+2tGLcG+h4DkVvn2Em3CfHXksJxQeoLnqGlkR+bInOZjuKijFM9P8z ZRZ28owthSBitrwod+3uELis6g8U5thja00J4r24YqO4jzzniWla4Hk9EG3y5aTG v8fIcy+ZBtd3JS/bWd0tcT+9Vo5SAvey9nE7m128M5y+b0SBwL7uJs7swzgkykcD eThQ3hi/sbx3lon71AspIMfj/swzKYTpvsNff5o/jM+PDgkNzPPw4mbvIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGjgEJJdkr6jzBG27T8kXhPhf/PMB8GA1UdIwQY MBaAFHmODaT5EAeyJHaKy00THxJRfSt6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MDRlNjQtZjk4MS00NWI1LTljYWUt NGZiNGVmOTFhODJmLzEvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80MDRlNjQtZjk4MS00NWI1LTljYWUtNGZiNGVmOTFhODJm LzEvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASgmj4pFd JP1b0dEKDh+Iaytw9S+yaoE1ZeKsGhEOZOdSdstGz43e3WCEWhIwv2LL+RY0gthp l7ea9Idd2+6iVnFIgzisxYfJFpvit+VuI9FUDTwwBq/R7XxXc+v3PMIEqCGwjHlK A7lHWTUospRXteTcxWlJPtccj0PgHpYxymMGfd+YSwGE4Hx5GrizsYI37ol271FT e9VsmNwHVxqg50MmFxEn7AvONU0piEwgujTL2B+dL3h1VDB98BniDELh+Eo0Ltlu GzkX+nNPeeW1kTBYcJY7MUZgxVmTzO5NnGrSmEf8R4TZnTM5i/0o0KlfWOhPjmqf Zn/COp43JIfppg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:52:42 2025 by rpki-client