This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft File: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft (raw, json) Hash identifier: CHvVm5mpE85xSAZiknimz3mlVBe3/qo/FBTWeUz6o6U= Subject key identifier: E7:C6:02:68:52:70:5B:07:CC:25:9D:A5:1A:13:39:FA:6D:74:05:59 Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Certificate serial: 019B47DD276EC2A7858B9BEA1A4F90B78EBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft Manifest number: 17DB Signing time: Mon 22 Dec 2025 21:00:34 +0000 Manifest this update: Mon 22 Dec 2025 21:00:34 +0000 Manifest next update: Tue 23 Dec 2025 21:00:34 +0000 Files and hashes: 1: 07ZXjsdxsFuEtdgHwbOq-R5G76E.roa (hash: 1M9pQCAfVRT7MQ/Zj4tT9AVlQVRcilmGlJyGKK/xyXM=) 2: 1-qG54akf4ZK4Vn2nJAtq8qKMB-M.roa (hash: +KrvgwuNM4eT5l98LWe/CjZjFxSOKRz6fj1mSGz0IgM=) 3: 4PQhz7MOxuhGtS_nPubpyXMJOcI.roa (hash: BnJSvsApOD8luZipfIRx4R+p7IT8Z+rfRgGtpM8nPhY=) 4: 7_xHvFH9z1lTBMmCYCZyfOMLpCE.roa (hash: Dy9Ep1VuSlW1UwNypkd8T87oMpJakHz3KhMW+QvcJps=) 5: AlQ9s5QZK2NSuAym9BFFOrJaC0g.roa (hash: QAchfxqcPxu44vFEqxRKf6wyg72hfH4/rebn2BcHbus=) 6: EtxviVbWxZHW3GY9Eg3DxIPxZlE.roa (hash: bRg6rAX6ozY/cxX9qEAqt3CoEJd6d0wIKRkDLAOHV4s=) 7: GYDa6uF4PXtvgFCZif9U8DfyJhs.roa (hash: x9pM/mAY2BLb1r8R45XN3qmt1Gw8vPBkNTNsNDjS6Jk=) 8: ISiMd8SOBUmeZ3l9pfTrNrRMVZ4.roa (hash: jX1VL1H9HdYzBbWtVwBVZy9/vxHTwytZF8IGlvhq3Yc=) 9: JXUpuOiDJbpAQ6wJyegYg23uwQY.roa (hash: IcXnbwWR3QdHkuBHHjMtVeQKCG9JaMJJR88n+O+Lv4g=) 10: K3gtWKami_XUUUtVwrQwwcMOVAg.roa (hash: 01aEVs3iMb11GEQQScA48mgu1ByLdBE37Eq3V2mjiGQ=) 11: Kn5AOeIvqDj0QyY0a6gvSVOYK04.roa (hash: /7QM63bFC+CBTXnuyFwX9/7nQ/C+RhIxyYwX13EXYS0=) 12: LL7AEgR132RnJITVXb1v0I3LCyw.roa (hash: gwRFxp3BgZCfzCqdNDK/XuHwvvhdYQt+5LD2lZsPRaU=) 13: NaXmOsDpDUrJU-L3cR4MsoyMUQA.roa (hash: dVVNZQbSo8+6scs7Gd+Q59/WTz4n0kcfFCZ13Y+qz7s=) 14: UryH-7kbyXWUJTfxmD8_iKhQToA.roa (hash: 9X1VOT+y467gWK0X8aw0s4QPOjoJGbo5qGz+HUSG1OM=) 15: V4iFmGmpuX9vmwKfCIL4MHq3iJo.roa (hash: I7wr4UYfNx1god3F0V72adpmlcw8clHUqo883JUOo54=) 16: XR-_EEDwF8zWqFnUJesI7P4suXw.roa (hash: 5Fp6z6r3AdWNjIT316J/wStOBp8ELRHvRNd1XNc9tso=) 17: ZtIB391wA96ODwULxOuaUb3zKjw.roa (hash: iYFjXUPN6915L3avwAU1BHDz24hStz0uZXCywgYk214=) 18: ZyYK-k77F1xgjjVfUFKWc3u5FMg.roa (hash: A8osarOaXuQWeZx8KQYjMoJwdcPiXJPczE87ARsfRqI=) 19: _4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl (hash: LLLL5z7SAqiOyu5DF5Z1ppj1jMYijGr97zgeExQAc3o=) 20: bke-YJ-tbDLGpp3kvZGH2TLdlOI.roa (hash: NXBX9RHNDwlq1k9iub5dxUrFv5q8FjUTbkNsfuh2Uzo=) 21: bzmfxm3S5hbe6Gaa6wvgeLEiaNA.roa (hash: Ar56s14Axf0ioHIstHBEGHX85IVOcRUFRcIehjO4vNI=) 22: fBlvBTMJM3ddqp2rUiQB8ldjkd0.roa (hash: ETihZGojVJlaCJwQ0UQbamp7h1DxH8Yq4UnyjKrHjTY=) 23: k1RkiO-oYIsdIxPMb4yp4wi06vw.roa (hash: MCgag/nnrriwvetJZ3hm9uP9KJjRl+UaPWHYQ89ULn8=) 24: oBKt6fMr87e-rFOhXitc_DWZtdg.roa (hash: qJjvrPZfU1anKZ4X1zOc4+1vwatadPrAJ6kaez7yYks=) 25: pKg9Eulzznq_Xmusn2tCljsUFm0.roa (hash: ZV91D/vMdBvdabbs6xfKbOYCwCqfj4mEA5NzU3QNIzA=) 26: pN1QTddIk2qdFe_mOVuHdGmP3Z4.roa (hash: CywtU84R198uQ8xF6BjJqnsNgApLacLlntN4HmgGHZM=) 27: rE9cybiH6oB4mGa5EHSN9cceqWE.roa (hash: YG48gdDn/SUyc3i/+XHJ5HagqvRplqEN/up/vYOmvBI=) 28: uYzA14o4SLgVDIUH1V-hG4krcmM.roa (hash: AAmmFasdZzQbOIJJuAxM6M66jvg5N0KdzbSbTAsq2+w=) 29: waIdBiyQcZY5S3UHlSgYjhWy3yA.roa (hash: B01bIchSEkzdF5UX/NW8F0eHIFCkAlYI9AyRAZwvgUg=) 30: yphDYCojIc0PisUPqGFzcSpaHr4.roa (hash: kueA64oPFnuqfOUJ8KFf+GceWa+kI7exnedP73+jI8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 21:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:dd:27:6e:c2:a7:85:8b:9b:ea:1a:4f:90:b7:8e:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986 Validity Not Before: Dec 22 21:00:34 2025 GMT Not After : Dec 23 21:00:34 2025 GMT Subject: CN=e7c6026852705b07cc259da51a1339fa6d740559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8d:f9:c2:10:b5:8b:59:e5:3a:a2:04:90:bf: 2b:06:e9:97:74:20:30:02:e6:16:ae:3a:24:e0:92: 7b:fd:05:a1:72:b8:f5:e0:ae:21:73:62:ec:21:09: 65:4d:4d:db:c2:af:16:0b:c2:99:08:e9:05:fe:47: bd:d1:b4:be:74:3b:77:c0:a5:6b:c9:d1:63:3e:53: 68:bb:2a:57:e6:ed:9c:c1:9d:fa:bb:32:9b:0c:57: 4e:43:9b:d1:b8:c9:3a:c0:a4:ae:27:30:3b:78:5f: 8a:32:2a:d5:d8:26:ad:d9:13:04:d3:65:08:52:56: 29:94:8a:45:f3:0b:a7:22:41:30:eb:15:52:72:53: f7:77:33:a6:d6:4e:03:7c:d4:0f:62:80:ba:ea:d9: 8a:a2:fe:8a:09:48:3a:0a:98:28:95:15:07:aa:f5: b7:a7:44:70:46:6d:0b:2a:93:f2:52:21:88:21:a6: e2:59:80:b6:51:ae:45:b2:4f:36:99:57:f8:d9:ff: 40:ef:9e:10:08:39:06:aa:3d:09:0f:87:39:74:74: 40:75:34:8f:c5:b6:bd:5e:c0:c3:6d:b4:77:2c:c6: e4:0f:5f:07:12:b4:1f:17:0c:85:aa:67:2c:8f:0b: a6:43:45:81:72:31:0a:76:5c:3b:f5:e8:22:6b:8b: 4a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C6:02:68:52:70:5B:07:CC:25:9D:A5:1A:13:39:FA:6D:74:05:59 X509v3 Authority Key Identifier: keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:e0:f8:16:69:dd:4f:6b:c1:7f:57:7c:98:a6:82:4f:e7:dd: 1d:28:f9:83:f0:ba:92:a2:e0:79:af:9c:db:4f:4d:3a:dd:48: 41:b2:65:70:d1:97:07:51:8e:4a:eb:cf:bf:0a:fa:d9:41:4e: fd:f8:fa:45:3a:48:1e:72:fc:19:21:99:0c:12:6f:02:ba:ed: a2:12:b8:2d:21:1c:e7:1b:a1:ae:99:52:a5:28:af:56:36:e9: 7b:84:6e:5e:02:38:91:dd:c0:08:8c:f4:21:33:05:03:80:68: 5f:65:93:dc:0b:3b:4f:6f:ac:16:5e:21:7a:51:02:4e:2e:9c: 36:22:b9:a1:fd:41:3d:b1:1f:f9:8c:f6:35:fd:48:9c:c7:2e: 30:5a:a5:c2:24:38:c9:d1:30:42:6a:3c:cd:b6:43:61:34:94: e7:d1:7f:20:10:13:5b:04:b5:f9:c3:8e:27:e1:9d:19:63:a3: 2b:b1:8d:47:9a:85:7b:6c:ca:6d:44:3c:be:89:b4:b1:5b:83: b0:d6:9e:b9:d1:78:77:51:96:df:2c:8f:fd:64:fc:ad:a9:f7: 8d:06:ab:38:8c:b7:e4:d7:00:61:b5:e9:a9:ff:81:d2:c5:03: 6f:7e:4b:f1:6c:45:64:1e:26:93:57:38:29:ff:c5:19:d0:66: c6:e1:d9:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtH3SduwqeFi5vqGk+Qt468MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw YmQ5ODYwHhcNMjUxMjIyMjEwMDM0WhcNMjUxMjIzMjEwMDM0WjAzMTEwLwYDVQQD EyhlN2M2MDI2ODUyNzA1YjA3Y2MyNTlkYTUxYTEzMzlmYTZkNzQwNTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY35whC1i1nlOqIEkL8rBumXdCAw AuYWrjok4JJ7/QWhcrj14K4hc2LsIQllTU3bwq8WC8KZCOkF/ke90bS+dDt3wKVr ydFjPlNouypX5u2cwZ36uzKbDFdOQ5vRuMk6wKSuJzA7eF+KMirV2Cat2RME02UI UlYplIpF8wunIkEw6xVSclP3dzOm1k4DfNQPYoC66tmKov6KCUg6CpgolRUHqvW3 p0RwRm0LKpPyUiGIIabiWYC2Ua5Fsk82mVf42f9A754QCDkGqj0JD4c5dHRAdTSP xba9XsDDbbR3LMbkD18HErQfFwyFqmcsjwumQ0WBcjEKdlw79egia4tKKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfGAmhScFsHzCWdpRoTOfptdAVZMB8GA1UdIwQY MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt ZjUyNTgxNjQwMmJkLzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzuD4Fmnd T2vBf1d8mKaCT+fdHSj5g/C6kqLgea+c209NOt1IQbJlcNGXB1GOSuvPvwr62UFO /fj6RTpIHnL8GSGZDBJvArrtohK4LSEc5xuhrplSpSivVjbpe4RuXgI4kd3ACIz0 ITMFA4BoX2WT3As7T2+sFl4helECTi6cNiK5of1BPbEf+Yz2Nf1InMcuMFqlwiQ4 ydEwQmo8zbZDYTSU59F/IBATWwS1+cOOJ+GdGWOjK7GNR5qFe2zKbUQ8vom0sVuD sNaeudF4d1GW3yyP/WT8ran3jQarOIy35NcAYbXpqf+B0sUDb35L8WxFZB4mk1c4 Kf/FGdBmxuHZKg== -----END CERTIFICATE-----Generated at Tue Dec 23 03:47:40 2025 by rpki-client