This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
File: 474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft (raw, json)
Hash identifier: acyb79jkCWmrnzhHljwE4ovCU8YuXFTonIiDoH6Jqso=
Subject key identifier: 77:5B:C7:3A:C9:C3:6E:1B:E2:90:55:C3:59:A0:20:55:78:6C:93:08
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial: 019B3B6B79257F3434C2830B6B9D0BDCBADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
Manifest number: 17C0
Signing time: Sat 20 Dec 2025 11:00:57 +0000
Manifest this update: Sat 20 Dec 2025 11:00:57 +0000
Manifest next update: Sun 21 Dec 2025 11:00:57 +0000
Files and hashes: 1: 0Vm4cX6YNbHxzFLnP8S_Xz79e60.roa (hash: z12oUPSOG13FcwYLFSfnV8yb28jrBK8ysQV1RuK/D9A=)
2: 0ZmwzDi9ST6yTMR1xXCSe82hGRY.roa (hash: dGqxOkm54xDXsK0ILBl4dciRG+K6tvyd90lfvlMS6wo=)
3: 0e76pYN1rHBm-Lq5nyouwfj-h4I.roa (hash: YymeJZTQRLFobGcWWfPm9IxoYzpN4dUw1Tamr3iE8s4=)
4: 0o5dXK4teZmoiGQgvpWwUxq6RVg.roa (hash: 0+HgYEkLy5ZCWPnMekmzGRYaUjVe04U/0CfdC5tbgzo=)
5: 1cNi7Isg5cJaiDTMUwBAcbP6ogY.roa (hash: TOe1ViLMe9cAqZnIdN0M1QA3B05mTU7Xce20qOD3spU=)
6: 2QJ17Cg-iA-jwsauauXXALRLwf0.roa (hash: DQdxmaXuwHMdnnDjIcbaPedoaDApBxCGtVKVBlgTSPQ=)
7: 3aVRP7JWmlQeS6GMnwExznrGXvk.roa (hash: iw4httKjY4KjzYFx4fJCKYqI36dyq/lGMEi+lqn8nD8=)
8: 474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl (hash: YknoL7EPILOM8UBzxlY9npbvJn2uqU4Sep38g/hMyyU=)
9: 584SAPvYLLfkKzkLONB-h5sT-gY.roa (hash: t2gryRqgtFXG9MqyLmvKfbXpt9McqJw5rgbi7QzEXIE=)
10: 8o-Xtz22wK0aqcxTR7JaE19wWYQ.roa (hash: +HXfCxO8q1Z50yqNMfU4IjvWQJ1OZF4ZJr2oEPLmqm8=)
11: A-NOF7ohtTs1o9WlPoOPsTVZ7Bw.roa (hash: bAV/oPbKXx/XbZWBMSjE+ura/jfib94IELlpZdTWAK0=)
12: AHLcyWCsjd2B_EoZ0fz3veOOMtc.roa (hash: XQ1Z+LRIGbc8ClzvTUKYJ8sqNlzkxNpaSjqHU2o4xO0=)
13: BY7ZmjTDEFB7p5jjpRyap1E5DPY.roa (hash: Z901Qh0PnkNmeAw89VjiSB+Jb7KJJhv1n7KKl2fBVYw=)
14: CHjfPMIo9udM2B6VSsVbeur15wM.roa (hash: EqhGvvJRArvaTgTbuS9TZs8sNNeqauMTVK8b4SLQrGY=)
15: FclCk1_CBp0JxXGPxrT2y7ogYuQ.roa (hash: 7m6s0YqRu6JhgzaWjNJZWFPQu86gQ7U8P/2sbEwtxD8=)
16: G8bE9rNhOTpRz7BYRiZMhbdnbn8.roa (hash: 6KI9UsXQQ5OyZaXivomWzYZMD8RMxoC0XXuaunBcSmQ=)
17: HD0xQh9IWlUrlR71GaW9PxwE9T0.roa (hash: 2s9aq/zFfZz9TjbLg3FncKHczgPvWEogx9efzz4T8V4=)
18: JB3l4VQuYx4Yg--AMXAOeonWATw.roa (hash: F6P42NZdNyijqnFH4Qe+3KE7eq4NaGlBJfz3rllDR4E=)
19: KUUP1nwRnmngZFUK0Dmd9G4FFlM.roa (hash: zaVkbw/JRCCj7bgxjOvTPAw439pZjsAYHelqlndBpHA=)
20: LsDv-O1id1Z_r-P1VDDoKMp-HFs.roa (hash: S7695EKXW5oE911b275MWPbjxN0m3ZToZZcyj6qkn8c=)
21: Om69jzfURFTvRPYXdUhJ3Rl2ef4.roa (hash: zHsv2Qx4P9HuLGcOckXiS9M1hUykTxDulgHm6SC0pXk=)
22: RDTdjbJg1qTVfFtTZ-xXhSBN99I.roa (hash: A9z5XIanIjrUMyECwysuQe3iZDIecovFq+2MI5tX1Aw=)
23: RhAJIs3t6ZDP1kCCf5rBzXI6xRI.roa (hash: yrA8sGtr9S2p7psacvL9mOrBnXLcLTeidto5jcSv+js=)
24: SX0SSdlhu0d_hWz_CFux6RbsTSo.roa (hash: /fIScUu5FIDna/FI0o1bvvwQ+BVC4Yir+CHk4+1BpTc=)
25: USikurc53Rj21I_r1wDe4xom0_k.roa (hash: M+h0syMhn0PBs/I1Ew6SooZigAzef/f2+u4fxWN0qTU=)
26: VVCnLOWmrSBaKWErHe5c5G5KPF8.roa (hash: QVdzF2bvVuv9/sxNrSzdos/HPDvwjhdyNyE3VUg9Acg=)
27: ZcpjtStd_w8BRIt8TqTYfTpdsKw.roa (hash: zHNJDDwOGxBXPf3WZNEJ+sgExHvdbfFfWxzOgMUwLic=)
28: _ZfQ6dJA6of97owenJCWnROIAZE.roa (hash: CDWd9PeFS0iUXnSBw0TM1e/3HBncYTs81yVTF6Ew178=)
29: _ce2-H8ORJy5IMcG6NzwfcCJvoQ.roa (hash: a3l2cZMc3c3NCGiU9y17nZjdAdQ2nqkWmINPjJh9bTY=)
30: bszL0stDcyz_l5U1K9lVQW3fxWg.roa (hash: UePUg8z4Nbn52X3Ba/A3SV6y+3steFWLqknSKCFRTdM=)
31: ctERoijjRCNgTOhPFDF7hW1Naf8.roa (hash: GbSLH9srsGuep9CwiZh28mn1I9/CFbfGSUD4FvnKSeM=)
32: eY-UGZSTVukPVNUPYtti3vLhBJE.roa (hash: dfotzkpTyAo04u9HJOD4NQ6DENGjVCMeFLRZZ05vvzI=)
33: fBnCLVe2bnm5egcosIhxFK-lxtQ.roa (hash: nytTVyNKBQUH0NKaEG4UM5/sOP2eE+RfizrGRcH4D1M=)
34: hEJl8G7xYNL4qy8d-uONT7fH6pg.roa (hash: lCbxkEMzF/MvYs2erOvwhQCMpIdvjZnFzBI5Pdlm0kQ=)
35: iVgwNY2xcBVdnYyIg7vPB3GqgE8.roa (hash: xVGQDEDXfYHXstvo9TtUeUJrGrVQ5OMU8feq6IMTOf8=)
36: mIsCKSdHUxdZ0ggV47Rj6f305Ig.roa (hash: Ngf+J1Z40O66NaIC0MZl0zOFwz7bh5eAuW3THMKuCYA=)
37: n25w7ONWy79FTBTwW1Ke36N-ks4.roa (hash: Ul6u2eDSbRtUTKVyx7zRQF8iz7tjwnKE08aw+E8W+vQ=)
38: qeJhwRolZedpkCxXnZuDimG9XhQ.roa (hash: 1HMQSyR8lSXFSkykERRATC3N4pJBGfgKRyKh45PBHEk=)
39: qeVRyMRpIRTCiyhGNW5TvImuLoU.roa (hash: Bhrzoir6Tlp9wvICiMqlrrB2pSweMYoRLQcA6V92TT8=)
40: qypZ3nSxQtXiVvavkUgIAdVG3mQ.roa (hash: WdHMrRv9/Oy4XyhqDVPJcV+fmEYBgX+DEZf8BATVt0U=)
41: rBDRLcwh1f0T1KlMGkdFdInbwCk.roa (hash: 0OUUIzNQRBnvsPMA/R6ALJjDqe0IPbisdowTgt44Zoo=)
42: rcmSq9DZPLvqbl5OqBJVS4tbD6U.roa (hash: t3i5pl3lYtDrXFcxINhCtvbAMQgOYOPG5gPXpJwNGZw=)
43: uw1Qzt0lAgPJ7YrwdkE00u0jRmg.roa (hash: NACJSj54f9XKUKSbXrb0yYHYcWs6pQC8qvmkVDEJpYQ=)
44: vm3Dl8PWnyQRCRl-g25LEr6Yumc.roa (hash: fg1f8lzAXvWg8xURxOtkNfq5GyeXeTy/J7/16qNzsfI=)
45: wrGQCK2Fkf_HrSakPEC4G5fhBSk.roa (hash: s5zV0GzhESP1KxcsC/P+2whcvncNreQ4p1rUNwJaaes=)
46: zGwWrkSRQZP2IpWi5-NjcilHQh8.roa (hash: SIMBYvu3SCnsZgfhXaRLO5XQKkZloilVxiX0vDack9g=)
47: zQntRlPXn6m0h_lsWqEDvpv9Nss.roa (hash: n6kQ2ykeEerQlSmiDgcV4B4mkcJAPtusBoaiQ9fyVS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Dec 2025 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:3b:6b:79:25:7f:34:34:c2:83:0b:6b:9d:0b:dc:ba:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Validity
Not Before: Dec 20 11:00:57 2025 GMT
Not After : Dec 21 11:00:57 2025 GMT
Subject: CN=775bc73ac9c36e1be29055c359a02055786c9308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:6f:fa:42:89:f0:14:83:c0:f4:96:5f:fc:
06:24:e7:56:e7:82:cc:e1:2a:50:84:04:8e:4c:db:
20:31:f1:40:f4:23:b2:c2:18:7d:97:44:03:58:87:
c8:96:7e:33:f0:db:54:70:b8:2f:ae:13:85:dc:5b:
3a:02:a5:eb:af:66:69:0b:41:87:b9:ec:2f:e3:41:
d8:35:ca:61:55:a5:d7:22:7c:fa:f9:06:de:24:41:
42:76:30:12:0e:39:55:9b:25:46:30:c6:7c:31:44:
e2:8e:61:1e:42:d5:84:d0:40:e6:6b:c8:dd:9c:d9:
00:26:df:0e:b9:ab:e1:a1:b7:b3:e7:02:4c:73:b3:
68:8a:d8:4c:cc:dc:39:4a:a2:ba:ef:89:ef:d5:25:
88:e4:0c:11:95:8a:50:e8:63:de:b2:34:9a:e5:a3:
9f:2c:bf:74:83:81:50:28:92:14:cd:3a:d6:40:4c:
f1:8f:bf:94:c6:74:92:e9:68:73:a1:5e:40:a9:ac:
76:52:a1:0a:02:c9:85:c5:57:aa:3c:6d:e2:40:d0:
48:64:29:e5:e3:b3:b7:4e:bb:16:37:6f:18:39:cd:
a5:23:17:a8:dd:41:5c:33:07:1e:3e:70:b3:1a:e9:
28:6d:85:73:a4:23:ca:6a:85:98:8e:0f:60:d6:02:
36:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5B:C7:3A:C9:C3:6E:1B:E2:90:55:C3:59:A0:20:55:78:6C:93:08
X509v3 Authority Key Identifier:
keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4c:ee:e3:19:6d:54:d0:c1:0f:49:44:08:80:6c:40:7b:4b:
04:1a:a1:73:90:68:8a:61:01:f6:b1:20:41:92:eb:08:88:e3:
d5:62:b8:96:f0:ec:16:47:9f:0b:2b:04:da:0f:0c:32:32:95:
1a:f8:31:69:6d:0a:d7:a2:32:12:eb:eb:f1:5c:b8:5d:2c:32:
59:1a:57:03:be:b5:80:91:1d:93:a8:dd:41:de:83:43:8c:c2:
14:e7:e1:a5:6f:f8:85:26:73:5d:89:f9:60:5d:f2:00:44:71:
04:fd:f9:3c:0b:c3:6c:65:8e:e3:d1:b0:fc:1b:04:1f:c6:f3:
11:f6:71:19:75:3a:f2:c2:4c:ef:86:e6:57:06:ed:ec:e3:6d:
08:f9:7b:a6:20:03:c5:63:9f:72:aa:10:1d:d0:35:69:a1:8b:
b7:71:bf:66:a0:e7:74:63:95:04:27:20:d8:f3:1d:6b:81:d3:
6f:c5:63:2a:f3:10:ba:77:59:1b:2e:da:c4:30:fe:2a:9c:b6:
28:7d:4d:b8:17:f8:10:2d:b3:30:d5:1f:25:87:92:93:41:85:
2d:fa:90:b7:dc:a3:38:da:b3:32:e1:0c:16:28:18:35:eb:6a:
cf:9d:c7:5e:fa:06:ce:89:a5:c3:4b:09:f3:24:b1:cc:9e:1c:
1a:de:ca:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 18:10:52 2025 by rpki-client