This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft File: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft (raw, json) Hash identifier: tnpQ0kielakL19IlVhNwCDhsrtF0SqLmT/AiIDNo9Qo= Subject key identifier: 10:11:A2:2A:B0:65:49:66:13:5A:BE:B0:1C:5B:79:65:CF:82:56:3E Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B37C5B9BBC9E7EEF5A88F8193EAAC9791 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft Manifest number: 17D2 Signing time: Fri 19 Dec 2025 18:01:03 +0000 Manifest this update: Fri 19 Dec 2025 18:01:03 +0000 Manifest next update: Sat 20 Dec 2025 18:01:03 +0000 Files and hashes: 1: 07ZXjsdxsFuEtdgHwbOq-R5G76E.roa (hash: 1M9pQCAfVRT7MQ/Zj4tT9AVlQVRcilmGlJyGKK/xyXM=) 2: 1-qG54akf4ZK4Vn2nJAtq8qKMB-M.roa (hash: +KrvgwuNM4eT5l98LWe/CjZjFxSOKRz6fj1mSGz0IgM=) 3: 4PQhz7MOxuhGtS_nPubpyXMJOcI.roa (hash: BnJSvsApOD8luZipfIRx4R+p7IT8Z+rfRgGtpM8nPhY=) 4: 7_xHvFH9z1lTBMmCYCZyfOMLpCE.roa (hash: Dy9Ep1VuSlW1UwNypkd8T87oMpJakHz3KhMW+QvcJps=) 5: AlQ9s5QZK2NSuAym9BFFOrJaC0g.roa (hash: QAchfxqcPxu44vFEqxRKf6wyg72hfH4/rebn2BcHbus=) 6: Fxq3h1JsdzyzYDgYtP2wnoeOjLA.roa (hash: tJ0CFUjWGpQHeBJKiYedBkhtxvRYSIaLu2u0ULfF3Dw=) 7: GYDa6uF4PXtvgFCZif9U8DfyJhs.roa (hash: x9pM/mAY2BLb1r8R45XN3qmt1Gw8vPBkNTNsNDjS6Jk=) 8: ISiMd8SOBUmeZ3l9pfTrNrRMVZ4.roa (hash: jX1VL1H9HdYzBbWtVwBVZy9/vxHTwytZF8IGlvhq3Yc=) 9: JXUpuOiDJbpAQ6wJyegYg23uwQY.roa (hash: IcXnbwWR3QdHkuBHHjMtVeQKCG9JaMJJR88n+O+Lv4g=) 10: K3gtWKami_XUUUtVwrQwwcMOVAg.roa (hash: 01aEVs3iMb11GEQQScA48mgu1ByLdBE37Eq3V2mjiGQ=) 11: Kn5AOeIvqDj0QyY0a6gvSVOYK04.roa (hash: /7QM63bFC+CBTXnuyFwX9/7nQ/C+RhIxyYwX13EXYS0=) 12: LL7AEgR132RnJITVXb1v0I3LCyw.roa (hash: gwRFxp3BgZCfzCqdNDK/XuHwvvhdYQt+5LD2lZsPRaU=) 13: NaXmOsDpDUrJU-L3cR4MsoyMUQA.roa (hash: dVVNZQbSo8+6scs7Gd+Q59/WTz4n0kcfFCZ13Y+qz7s=) 14: UryH-7kbyXWUJTfxmD8_iKhQToA.roa (hash: 9X1VOT+y467gWK0X8aw0s4QPOjoJGbo5qGz+HUSG1OM=) 15: V4iFmGmpuX9vmwKfCIL4MHq3iJo.roa (hash: I7wr4UYfNx1god3F0V72adpmlcw8clHUqo883JUOo54=) 16: XR-_EEDwF8zWqFnUJesI7P4suXw.roa (hash: 5Fp6z6r3AdWNjIT316J/wStOBp8ELRHvRNd1XNc9tso=) 17: XXAYfqUHP9nZBwlGSXcDJmZr7gM.roa (hash: lTHokh5dlYVtVzphYfMaxHP19CTq5FCkid0Lic2Aukw=) 18: ZtIB391wA96ODwULxOuaUb3zKjw.roa (hash: iYFjXUPN6915L3avwAU1BHDz24hStz0uZXCywgYk214=) 19: ZyYK-k77F1xgjjVfUFKWc3u5FMg.roa (hash: A8osarOaXuQWeZx8KQYjMoJwdcPiXJPczE87ARsfRqI=) 20: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl (hash: KEulCEAaNCzVuuVlo5DWpHoYcZKiNKqjZnQoSBLjB6o=) 21: bke-YJ-tbDLGpp3kvZGH2TLdlOI.roa (hash: NXBX9RHNDwlq1k9iub5dxUrFv5q8FjUTbkNsfuh2Uzo=) 22: bzmfxm3S5hbe6Gaa6wvgeLEiaNA.roa (hash: Ar56s14Axf0ioHIstHBEGHX85IVOcRUFRcIehjO4vNI=) 23: fBlvBTMJM3ddqp2rUiQB8ldjkd0.roa (hash: ETihZGojVJlaCJwQ0UQbamp7h1DxH8Yq4UnyjKrHjTY=) 24: k1RkiO-oYIsdIxPMb4yp4wi06vw.roa (hash: MCgag/nnrriwvetJZ3hm9uP9KJjRl+UaPWHYQ89ULn8=) 25: oBKt6fMr87e-rFOhXitc_DWZtdg.roa (hash: qJjvrPZfU1anKZ4X1zOc4+1vwatadPrAJ6kaez7yYks=) 26: pKg9Eulzznq_Xmusn2tCljsUFm0.roa (hash: ZV91D/vMdBvdabbs6xfKbOYCwCqfj4mEA5NzU3QNIzA=) 27: pN1QTddIk2qdFe_mOVuHdGmP3Z4.roa (hash: CywtU84R198uQ8xF6BjJqnsNgApLacLlntN4HmgGHZM=) 28: rE9cybiH6oB4mGa5EHSN9cceqWE.roa (hash: YG48gdDn/SUyc3i/+XHJ5HagqvRplqEN/up/vYOmvBI=) 29: uYzA14o4SLgVDIUH1V-hG4krcmM.roa (hash: AAmmFasdZzQbOIJJuAxM6M66jvg5N0KdzbSbTAsq2+w=) 30: waIdBiyQcZY5S3UHlSgYjhWy3yA.roa (hash: B01bIchSEkzdF5UX/NW8F0eHIFCkAlYI9AyRAZwvgUg=) 31: yphDYCojIc0PisUPqGFzcSpaHr4.roa (hash: kueA64oPFnuqfOUJ8KFf+GceWa+kI7exnedP73+jI8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:c5:b9:bb:c9:e7:ee:f5:a8:8f:81:93:ea:ac:97:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Dec 19 18:01:03 2025 GMT Not After : Dec 20 18:01:03 2025 GMT Subject: CN=1011a22ab0654966135abeb01c5b7965cf82563e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:16:17:b1:9f:3c:14:9c:c1:5b:5c:18:d3:6c: 89:99:bf:aa:dc:c9:2e:51:a9:7b:59:21:a1:ce:5b: e5:01:94:17:3c:5c:3f:58:e5:b5:ee:26:76:a5:1c: 5f:b2:89:87:b4:d0:47:72:8b:47:6f:a6:51:dc:60: 78:0b:68:b4:74:7e:8d:9d:d5:ac:08:73:2f:dd:fc: 51:67:b7:62:08:eb:0e:b0:19:98:d1:d6:02:b1:b6: 3b:73:d2:aa:f6:9a:80:22:19:01:e4:54:bb:4f:96: 83:99:bf:a6:b5:47:0c:f1:59:b3:11:a6:5c:dd:c8: 23:36:6b:f6:de:31:79:10:75:63:58:70:1e:7f:2a: 1a:8e:ce:58:50:4f:9b:5d:c5:4d:99:1d:0f:28:b7: 92:cf:57:98:53:a5:ad:b7:6e:8f:1b:67:78:67:14: 60:eb:b9:7c:fe:0e:5e:02:ac:bd:db:aa:41:c3:71: 3e:69:d6:77:00:db:07:4f:17:24:0b:70:6b:fa:5d: 85:d1:7b:7b:ac:a8:55:69:cc:2b:1f:79:2b:bc:c6: 7d:44:38:33:a3:b7:66:72:f4:26:96:13:87:4a:b4: 4a:a2:a7:02:07:e3:bb:35:f1:89:d2:94:5d:75:30: 97:5f:42:64:cf:be:0e:aa:1f:a9:30:b9:a4:ba:89: 2d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:11:A2:2A:B0:65:49:66:13:5A:BE:B0:1C:5B:79:65:CF:82:56:3E X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:b8:15:58:fe:a2:fe:4b:a0:d6:6c:9c:14:9f:0e:1c:16:8f: d5:f0:4c:f6:72:17:45:c2:f6:e5:1e:3b:a0:5e:6c:73:b0:5d: fe:6e:9c:6e:74:91:f9:53:90:b9:9f:5f:ec:e9:5e:42:a2:72: e9:07:9e:c3:ec:bc:52:d3:86:c7:43:94:c5:a7:85:80:ab:22: 0a:a2:0b:75:1d:b5:8c:58:2a:e8:db:dd:36:b2:15:bd:5f:9a: 4a:fc:5c:01:f5:56:c6:55:f4:d3:63:d0:d6:78:e4:4c:2f:bf: 4f:fa:46:e4:5b:49:c6:2a:71:81:ec:db:a1:12:33:48:aa:1e: 45:2c:1e:7f:15:c8:00:5d:da:7e:6b:03:73:95:cc:48:a2:fb: d6:9d:55:a9:aa:d3:a4:1b:e3:ac:21:9d:38:95:24:3f:00:45: 49:92:b2:aa:e3:cb:23:57:7c:41:b6:ae:f6:38:c0:50:eb:6e: 35:6d:64:43:55:d9:61:d0:c9:4b:04:b6:ed:fc:31:2c:fa:ec: dc:62:2a:94:f7:5e:88:40:73:1b:5b:21:49:2b:16:1d:79:e7: 33:9b:ff:fc:81:fb:ce:af:8e:bb:b7:c8:15:60:aa:2c:c7:27: ab:5b:cf:99:45:74:eb:26:3c:0e:9d:47:2f:35:e1:63:05:c3: e5:fb:84:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3xbm7yefu9aiPgZPqrJeRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjUxMjE5MTgwMTAzWhcNMjUxMjIwMTgwMTAzWjAzMTEwLwYDVQQD EygxMDExYTIyYWIwNjU0OTY2MTM1YWJlYjAxYzViNzk2NWNmODI1NjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hYXsZ88FJzBW1wY02yJmb+q3Mku Ual7WSGhzlvlAZQXPFw/WOW17iZ2pRxfsomHtNBHcotHb6ZR3GB4C2i0dH6NndWs CHMv3fxRZ7diCOsOsBmY0dYCsbY7c9Kq9pqAIhkB5FS7T5aDmb+mtUcM8VmzEaZc 3cgjNmv23jF5EHVjWHAefyoajs5YUE+bXcVNmR0PKLeSz1eYU6Wtt26PG2d4ZxRg 67l8/g5eAqy926pBw3E+adZ3ANsHTxckC3Br+l2F0Xt7rKhVacwrH3krvMZ9RDgz o7dmcvQmlhOHSrRKoqcCB+O7NfGJ0pRddTCXX0Jkz74Oqh+pMLmkuokt9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBARoiqwZUlmE1q+sBxbeWXPglY+MB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxbgVWP6i /kug1mycFJ8OHBaP1fBM9nIXRcL25R47oF5sc7Bd/m6cbnSR+VOQuZ9f7OleQqJy 6Qeew+y8UtOGx0OUxaeFgKsiCqILdR21jFgq6NvdNrIVvV+aSvxcAfVWxlX002PQ 1njkTC+/T/pG5FtJxipxgezboRIzSKoeRSwefxXIAF3afmsDc5XMSKL71p1VqarT pBvjrCGdOJUkPwBFSZKyquPLI1d8Qbau9jjAUOtuNW1kQ1XZYdDJSwS27fwxLPrs 3GIqlPdeiEBzG1shSSsWHXnnM5v//IH7zq+Ou7fIFWCqLMcnq1vPmUV06yY8Dp1H LzXhYwXD5fuEfw== -----END CERTIFICATE-----Generated at Fri Dec 19 23:39:54 2025 by rpki-client