This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft File: eY4NpPkQB7IkdorLTRMfElF9K3o.mft (raw, json) Hash identifier: /zASIUhHYl5wo0Kv5Bm1NCSCCDxC17L08/zQ5DfX/80= Subject key identifier: 50:F7:73:C3:B9:FB:43:27:7D:39:2E:21:EB:AD:1F:61:85:88:42:BB Authority key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A Certificate issuer: /CN=798e0da4f91007b224768acb4d131f12517d2b7a Certificate serial: 019B34C493EB93A6DD045CC7A5916D02F5DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft Manifest number: 09A4 Signing time: Fri 19 Dec 2025 04:00:56 +0000 Manifest this update: Fri 19 Dec 2025 04:00:56 +0000 Manifest next update: Sat 20 Dec 2025 04:00:56 +0000 Files and hashes: 1: JQGa11BJ6rW4XIkwrE2Pn3mnbCE.roa (hash: lyg6mL7hgbTWMhjKowvZCwiOw1BkDLdd336Z4BXH0aw=) 2: PY2GKalpJxh0rVeN3SNnaDuGcN8.roa (hash: SriQyHP0WB/8fwiUvKAdnNLXQ0snarIjG0cxw/V7C/w=) 3: eY4NpPkQB7IkdorLTRMfElF9K3o.crl (hash: XM8cSnzElNg8WOaRydvADwyKJnKiZfJc48sclyxKqmk=) 4: numbWnJewpdlWjFsofSPwm7IG3g.roa (hash: 14YqjZz0f+0ogH+Jj76bMz/1yDXbVz5uWlMR4KVjJRU=) 5: psQBUc0pobHwdrhlOUZzj_GPEto.roa (hash: qru8ysHHH3C4jCMlszx1z613KVN+O1eNTXPzB5PAv+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:93:eb:93:a6:dd:04:5c:c7:a5:91:6d:02:f5:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798e0da4f91007b224768acb4d131f12517d2b7a Validity Not Before: Dec 19 04:00:56 2025 GMT Not After : Dec 20 04:00:56 2025 GMT Subject: CN=50f773c3b9fb43277d392e21ebad1f61858842bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:99:1a:2f:ff:20:60:4a:50:a8:49:40:e6:6f: 73:1b:a7:43:37:07:7b:00:f5:49:5e:2f:25:c0:58: 7c:3a:aa:a7:67:63:5a:c5:5f:7d:73:b1:e7:ce:f9: 95:e0:a9:41:14:33:ac:ad:e1:01:51:88:09:32:43: ee:61:c5:29:9c:a7:5d:4d:0f:fe:cc:4e:e4:1f:62: ae:3c:89:2f:bc:cd:57:d5:c9:a1:3f:bf:ba:f6:7b: 32:cd:9e:65:ff:7a:68:48:11:87:07:fd:6b:11:3f: 1a:c2:c2:98:2a:62:cd:c4:a3:ef:b4:9b:0f:e4:b6: ca:2b:a2:12:22:12:16:3a:83:73:a9:08:8a:3d:48: 4d:ab:80:8c:ac:18:2b:62:c6:59:d6:f4:c4:68:b8: 42:6e:38:c8:b6:c1:c1:d8:26:b5:c6:4f:64:cc:97: e7:94:d6:3c:6b:87:54:e4:e2:7b:6e:46:3a:48:86: 08:cf:8d:d7:6f:d5:e6:89:71:e7:59:50:ef:a3:8f: d0:a8:d0:d7:2b:71:e8:62:fc:b9:c1:86:1a:d4:2c: 59:ba:48:15:20:9f:d2:33:ca:0d:71:8e:22:42:8e: c6:b7:34:92:6f:d7:da:fc:ff:2a:86:08:f1:74:92: 70:fa:f2:cd:16:9d:e6:90:3b:ed:66:6d:a2:f5:a0: 6b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F7:73:C3:B9:FB:43:27:7D:39:2E:21:EB:AD:1F:61:85:88:42:BB X509v3 Authority Key Identifier: keyid:79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:41:67:65:c1:fe:4d:4a:3f:9b:b2:e9:e0:e1:30:9f:4f:25: 64:96:13:00:51:69:11:f9:5e:75:ce:45:8c:19:f1:e9:b2:c1: 1e:12:04:3c:6b:10:f2:d5:10:43:79:87:62:21:c9:ec:0d:bd: 5c:71:13:f7:73:e7:05:79:17:4c:9a:29:85:eb:06:af:ee:0b: 34:bd:13:f8:f9:3a:4b:46:f6:fc:39:82:dd:1a:b3:37:dc:ac: 63:11:27:31:fa:9d:8a:98:b2:8c:5c:71:3b:37:8b:f3:b7:f7: b6:79:85:2c:f9:a5:2d:bb:b2:1a:ff:b0:e2:a2:bd:99:35:3f: 60:81:09:f4:a2:25:4e:82:53:06:1a:dd:3e:f1:7d:c1:66:da: ef:2d:b8:58:fb:6c:99:60:88:0e:1b:f4:fc:2a:ff:93:83:48: 32:97:4d:48:8a:ce:3d:cd:d8:d7:5b:83:95:10:44:af:cc:d1: f6:d8:6b:d3:2e:56:da:7a:4d:7e:6c:54:04:b2:45:a3:29:5a: 6a:b9:7f:b4:3f:a0:32:4c:8d:7a:e2:15:5b:55:bb:bd:90:a9: 90:8f:1d:c2:11:20:22:1d:88:10:97:db:f5:f0:cd:d8:9c:1a: 7f:c1:f4:13:bd:60:ed:4e:37:61:9d:70:b8:43:f0:be:9c:a0: 77:67:17:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xJPrk6bdBFzHpZFtAvXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5OGUwZGE0ZjkxMDA3YjIyNDc2OGFjYjRkMTMxZjEyNTE3 ZDJiN2EwHhcNMjUxMjE5MDQwMDU2WhcNMjUxMjIwMDQwMDU2WjAzMTEwLwYDVQQD Eyg1MGY3NzNjM2I5ZmI0MzI3N2QzOTJlMjFlYmFkMWY2MTg1ODg0MmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZkaL/8gYEpQqElA5m9zG6dDNwd7 APVJXi8lwFh8OqqnZ2NaxV99c7HnzvmV4KlBFDOsreEBUYgJMkPuYcUpnKddTQ/+ zE7kH2KuPIkvvM1X1cmhP7+69nsyzZ5l/3poSBGHB/1rET8awsKYKmLNxKPvtJsP 5LbKK6ISIhIWOoNzqQiKPUhNq4CMrBgrYsZZ1vTEaLhCbjjItsHB2Ca1xk9kzJfn lNY8a4dU5OJ7bkY6SIYIz43Xb9XmiXHnWVDvo4/QqNDXK3HoYvy5wYYa1CxZukgV IJ/SM8oNcY4iQo7GtzSSb9fa/P8qhgjxdJJw+vLNFp3mkDvtZm2i9aBrNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFD3c8O5+0MnfTkuIeutH2GFiEK7MB8GA1UdIwQY MBaAFHmODaT5EAeyJHaKy00THxJRfSt6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MDRlNjQtZjk4MS00NWI1LTljYWUt NGZiNGVmOTFhODJmLzEvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80MDRlNjQtZjk4MS00NWI1LTljYWUtNGZiNGVmOTFhODJm LzEvZVk0TnBQa1FCN0lrZG9yTFRSTWZFbEY5SzNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0FnZcH+ TUo/m7Lp4OEwn08lZJYTAFFpEfledc5FjBnx6bLBHhIEPGsQ8tUQQ3mHYiHJ7A29 XHET93PnBXkXTJophesGr+4LNL0T+Pk6S0b2/DmC3RqzN9ysYxEnMfqdipiyjFxx OzeL87f3tnmFLPmlLbuyGv+w4qK9mTU/YIEJ9KIlToJTBhrdPvF9wWba7y24WPts mWCIDhv0/Cr/k4NIMpdNSIrOPc3Y11uDlRBEr8zR9thr0y5W2npNfmxUBLJFoyla arl/tD+gMkyNeuIVW1W7vZCpkI8dwhEgIh2IEJfb9fDN2Jwaf8H0E71g7U43YZ1w uEPwvpygd2cXWA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:28:01 2025 by rpki-client