This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft File: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json) Hash identifier: WoqHmSdtG37WohiebmNiAVR4gGL4RqKEg3n8MLUXAqs= Subject key identifier: EF:C7:C1:EA:9C:7D:1D:D4:AF:4A:39:7B:EC:58:C5:12:91:2A:4C:C6 Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Certificate serial: 019B3BD92CFB069A11C30BE496A2CE3331A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft Manifest number: 17A2 Signing time: Sat 20 Dec 2025 13:00:47 +0000 Manifest this update: Sat 20 Dec 2025 13:00:47 +0000 Manifest next update: Sun 21 Dec 2025 13:00:47 +0000 Files and hashes: 1: HG0sxwCI7w4fkh8VU0N2fcVMuLU.roa (hash: 1EixzIypMSg7Afd2h1TllH/pBszhQ8LEEsFtCe9BNAQ=) 2: SF9inl-Z2UBEp7L7rHoMTP2o47I.roa (hash: OJPpBVtZqLTjhkxtA0o0cIzlBYqPE/6vDiaXNk1Wf6s=) 3: YkO14vUX3HHLD5m73eeF94u-z9Y.roa (hash: myJ7UTUt7mcT9gjy0mgRP7jrD85IU3fMUws/RpMjTT4=) 4: ays9--_IW8JzhtfNk76o0BfVsHs.roa (hash: m+8N0lTDKN6USUkq7MoOzNst+iEzsskPzpKLc4PITjQ=) 5: bTtf1_C9R2Bt4xdvshIG3OCVSD0.roa (hash: Z47R6cDRJGZAaj0MeG+895zHqKHcV33MIM2W9d4hC9E=) 6: c-pova8C1uulibxroeJZUgkQnv8.roa (hash: OvhwnSV+pVkr5UA9RfkEZJQ3n/9Mm7Ihqgy3rKhknz8=) 7: cdiLy2n18Y-vOIkFViZGUd7RsKM.roa (hash: /+RvQbcmllMNKfEXhyM/QGFxvrK6kosbr0fHB6H8FyU=) 8: dVPbIRfsnF_eS0blJ9Y7zNoUs7k.roa (hash: ShygWBXCmOMXv5YpTJlMJ5UYglgVh9DDoGkuss6YEGo=) 9: obNE3NdMVlCy0XPf9mK-g4oa9eg.roa (hash: 7NjsanTWQOoFeSktyUJvcMuLG2S6+z5IgmOffiI6238=) 10: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: WdQwNr80emcVpbD2pvRvtpaa2WWCCQwvjvZZv3SVtS4=) 11: un7p1oX6IuixEnJw52S1lgp4k0A.roa (hash: zhKv5DC0Mh83opPQLWP9MGfrzkdDgqEhOQ8/1xd2cZA=) 12: vXPdTshBqnn4ghgMByB7XXaLYRA.roa (hash: f07bhqR7ZOptfaHvf20BCw3ge0IxK37mw/76h6jHsI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:2c:fb:06:9a:11:c3:0b:e4:96:a2:ce:33:31:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba Validity Not Before: Dec 20 13:00:47 2025 GMT Not After : Dec 21 13:00:47 2025 GMT Subject: CN=efc7c1ea9c7d1dd4af4a397bec58c512912a4cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4a:97:0f:d3:f4:0b:cd:77:f0:b8:9e:5b:3f: a4:18:40:00:1e:ec:df:bf:c8:dc:ac:b9:8c:fc:59: 81:0f:c8:a6:24:8d:63:40:8d:55:51:3f:95:19:e3: 24:81:b9:66:52:72:3f:19:d4:37:8f:b3:f0:65:b3: 8c:af:2d:82:79:b5:65:3f:cb:b7:6b:e8:58:77:66: a9:dc:af:ce:03:f7:96:ce:99:16:45:2a:9a:c6:95: 76:cf:3f:8d:24:cd:de:37:8a:97:b8:d9:b6:7c:24: 8b:aa:da:54:4b:35:3f:9e:21:2c:53:a6:8a:2f:c7: 6b:0e:27:1e:af:42:f7:7b:dd:7c:44:81:69:d2:48: d7:a2:bb:04:ab:6f:1b:20:0a:ed:8b:bd:9a:82:a2: 98:fc:23:67:36:e7:6b:9f:33:e5:ce:0b:32:3e:38: 2d:78:a8:cf:7c:ff:d3:ff:52:ed:1e:cf:ed:45:3e: 07:79:a8:36:0f:98:9d:da:73:ed:38:02:35:f7:6e: 4a:b3:89:b8:b5:db:ab:cd:97:43:a4:02:71:38:38: 5a:30:89:e4:4a:0e:2f:ec:87:d8:c7:4e:93:26:34: a5:73:6b:9d:b4:12:73:8d:68:f1:1a:69:e4:22:27: 6a:62:fa:82:5f:f0:64:8b:d2:de:32:3a:92:db:57: bd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C7:C1:EA:9C:7D:1D:D4:AF:4A:39:7B:EC:58:C5:12:91:2A:4C:C6 X509v3 Authority Key Identifier: keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:c2:e7:fd:50:d9:ea:34:a2:06:0d:38:c0:9b:b7:e1:fe:35: 33:e2:e3:f4:c6:35:d7:9c:ef:58:cf:79:dc:8b:0b:62:5e:49: 3b:ef:9d:68:83:70:61:89:37:b0:53:99:fd:0f:47:1d:92:51: 86:ea:0d:d3:61:76:f2:34:7a:20:02:94:23:73:0a:31:79:80: 36:00:06:f3:e5:6c:23:3c:9b:cc:ea:4f:45:59:23:8e:e1:84: 9f:19:44:92:12:e7:26:f4:3a:04:cb:9e:c4:2c:46:89:f8:ea: 84:9f:0f:f0:e5:b6:0a:6b:0b:2a:47:39:19:a8:31:b8:34:c4: 8b:2b:ba:7f:ed:50:3a:36:60:c3:69:1c:b9:cb:36:10:26:99: 0d:5d:4b:5d:30:ab:2c:94:e8:83:7d:d4:b2:29:ec:4b:75:c0: a1:0f:58:36:1c:16:5e:f6:4e:ac:78:3a:95:34:60:2e:20:06: 34:be:30:81:25:0c:62:45:db:b5:70:57:eb:66:49:c0:01:14: 25:aa:ee:a1:fd:c3:7f:e7:61:f3:0a:c9:d8:ac:ad:e5:8c:94: 9f:9e:f4:df:b4:ec:6f:20:82:17:da:8c:ce:3e:8b:b4:8d:31: fd:d8:13:b0:04:7e:0c:95:b0:8a:dc:29:81:bc:2d:54:d0:2c: df:86:3c:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72Sz7BpoRwwvklqLOMzGiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZWUxODJkOWM0M2E1Y2U3MDY4ZGZkOWJhN2FhOGVkOTBl NWUwYmEwHhcNMjUxMjIwMTMwMDQ3WhcNMjUxMjIxMTMwMDQ3WjAzMTEwLwYDVQQD EyhlZmM3YzFlYTljN2QxZGQ0YWY0YTM5N2JlYzU4YzUxMjkxMmE0Y2M2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0qXD9P0C8138LieWz+kGEAAHuzf v8jcrLmM/FmBD8imJI1jQI1VUT+VGeMkgblmUnI/GdQ3j7PwZbOMry2CebVlP8u3 a+hYd2ap3K/OA/eWzpkWRSqaxpV2zz+NJM3eN4qXuNm2fCSLqtpUSzU/niEsU6aK L8drDicer0L3e918RIFp0kjXorsEq28bIArti72agqKY/CNnNudrnzPlzgsyPjgt eKjPfP/T/1LtHs/tRT4Heag2D5id2nPtOAI1925Ks4m4tdurzZdDpAJxODhaMInk Sg4v7IfYx06TJjSlc2udtBJzjWjxGmnkIidqYvqCX/Bki9LeMjqS21e9mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/HweqcfR3Ur0o5e+xYxRKRKkzGMB8GA1UdIwQY MBaAFKfuGC2cQ6XOcGjf2bp6qO2Q5eC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt NmI1ZjY4NTIyYTdkLzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk LzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8Ln/VDZ 6jSiBg04wJu34f41M+Lj9MY115zvWM953IsLYl5JO++daINwYYk3sFOZ/Q9HHZJR huoN02F28jR6IAKUI3MKMXmANgAG8+VsIzybzOpPRVkjjuGEnxlEkhLnJvQ6BMue xCxGifjqhJ8P8OW2CmsLKkc5GagxuDTEiyu6f+1QOjZgw2kcucs2ECaZDV1LXTCr LJTog33UsinsS3XAoQ9YNhwWXvZOrHg6lTRgLiAGNL4wgSUMYkXbtXBX62ZJwAEU Jaruof3Df+dh8wrJ2Kyt5YyUn57037TsbyCCF9qMzj6LtI0x/dgTsAR+DJWwitwp gbwtVNAs34Y8yg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:49:44 2025 by rpki-client