This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft File: hYAvwdDz46RGJWLS8G8rPe_49Oc.mft (raw, json) Hash identifier: D4rPC6GHXA2j6VyitmbLBgmBXC3/W1G+vXRzJv9vHkA= Subject key identifier: 72:81:73:2C:FB:3A:5B:6D:EB:98:C5:B3:2E:42:52:34:C4:0B:A9:E1 Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7 Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7 Certificate serial: 019B34C5C0B73E8C76DFE16C8E1060F4AA05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft Manifest number: 0D52 Signing time: Fri 19 Dec 2025 04:02:13 +0000 Manifest this update: Fri 19 Dec 2025 04:02:13 +0000 Manifest next update: Sat 20 Dec 2025 04:02:13 +0000 Files and hashes: 1: 4UJRIsMgzbbOOl_nMZ8awomMSD8.roa (hash: HA5+hPhaR5I2iP9TQnrkM1KP48JQR4MNJZDQicrXCa8=) 2: hYAvwdDz46RGJWLS8G8rPe_49Oc.crl (hash: BlTH46O2Mz65kIoiFRsYCN0mb0cW2qxSG3RL4mjSQCM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:02:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:c0:b7:3e:8c:76:df:e1:6c:8e:10:60:f4:aa:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7 Validity Not Before: Dec 19 04:02:13 2025 GMT Not After : Dec 20 04:02:13 2025 GMT Subject: CN=7281732cfb3a5b6deb98c5b32e425234c40ba9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:de:1b:26:92:2a:43:a5:d4:bf:3f:5f:88:94: a7:03:da:e0:81:49:89:04:77:10:d7:d1:37:33:fe: 0d:e2:e6:bb:76:9e:95:95:45:92:28:40:a2:42:e4: 6b:be:49:9e:3c:d4:48:35:b0:31:a2:2c:4f:8b:6a: 45:cc:9d:2a:6a:38:0c:2d:9f:02:a4:7d:6b:91:ed: 13:1e:48:22:87:de:7b:c0:eb:cb:59:52:85:f5:23: 41:51:d4:a1:42:95:a3:5d:db:69:4d:45:8a:09:f6: 0f:ab:30:cd:38:34:6c:3d:63:8d:dc:eb:2b:68:1f: 1a:ae:4c:c3:6f:fc:fe:48:c2:1f:86:3d:14:de:62: e9:71:05:07:15:47:0b:5c:51:31:af:b0:c6:5d:74: 4b:2f:30:2f:7f:40:48:3b:5a:d3:bb:7b:e4:42:64: 5b:2f:7d:79:d7:9c:1d:32:ef:7b:f0:14:ed:e2:9c: 6c:49:57:c3:ae:f0:f8:57:d9:a8:12:91:38:16:4e: c1:c3:42:48:13:86:f0:a0:4e:f0:c4:1f:0a:ee:ea: b8:d8:72:ad:d0:c5:45:88:5b:b1:09:78:6c:cb:08: ca:d1:ab:fd:b2:a6:19:eb:b3:e3:4d:c2:07:e6:fb: a6:48:55:ef:8f:6a:61:c8:ed:50:9f:4f:a4:64:c9: 0f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:81:73:2C:FB:3A:5B:6D:EB:98:C5:B3:2E:42:52:34:C4:0B:A9:E1 X509v3 Authority Key Identifier: keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ee:01:79:72:5d:15:a2:1d:e6:18:dd:93:86:8e:9c:02:5c: 2a:9c:48:8f:a7:04:4d:50:bd:17:82:04:1a:6b:9c:d9:9c:bf: 91:86:aa:2e:07:a8:f8:3b:ed:00:be:a9:2a:bb:71:e6:fd:1e: af:66:00:d2:cb:3c:e4:4e:5d:41:d4:46:9a:af:e0:e0:c2:4d: 38:38:ea:a7:1a:ca:85:14:33:cc:fc:45:5b:26:38:90:5f:a7: fe:08:db:10:cd:6a:47:39:e4:13:38:26:f6:2c:7b:76:c7:24: fe:97:c7:01:ba:89:97:bf:f2:30:c4:6b:13:eb:a4:3c:3d:88: e7:bd:a8:2a:d0:22:1f:16:13:9e:25:b2:33:2c:9a:a4:3f:80: e9:2a:fc:17:66:e1:83:43:96:9f:84:c0:c7:41:cc:d8:36:c9: ed:1f:c2:af:b0:03:32:ab:5d:1a:36:48:be:e6:b3:1f:64:c9: f1:35:b5:92:ca:0e:3e:dc:67:63:9f:ca:45:7c:80:c5:56:50: b1:67:e5:da:71:d4:ef:f8:d9:c0:81:ab:9b:2c:e3:81:42:f8: cf:9a:19:c4:93:25:9d:fc:a6:a9:b1:ac:21:9d:99:36:17:8e: 7b:31:3a:e9:e0:e9:61:c8:09:81:3a:dc:40:65:d0:b9:f2:37: 21:00:62:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xcC3Pox23+FsjhBg9KoFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ODAyZmMxZDBmM2UzYTQ0NjI1NjJkMmYwNmYyYjNkZWZm OGY0ZTcwHhcNMjUxMjE5MDQwMjEzWhcNMjUxMjIwMDQwMjEzWjAzMTEwLwYDVQQD Eyg3MjgxNzMyY2ZiM2E1YjZkZWI5OGM1YjMyZTQyNTIzNGM0MGJhOWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA294bJpIqQ6XUvz9fiJSnA9rggUmJ BHcQ19E3M/4N4ua7dp6VlUWSKECiQuRrvkmePNRINbAxoixPi2pFzJ0qajgMLZ8C pH1rke0THkgih957wOvLWVKF9SNBUdShQpWjXdtpTUWKCfYPqzDNODRsPWON3Osr aB8arkzDb/z+SMIfhj0U3mLpcQUHFUcLXFExr7DGXXRLLzAvf0BIO1rTu3vkQmRb L31515wdMu978BTt4pxsSVfDrvD4V9moEpE4Fk7Bw0JIE4bwoE7wxB8K7uq42HKt 0MVFiFuxCXhsywjK0av9sqYZ67PjTcIH5vumSFXvj2phyO1Qn0+kZMkPNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKBcyz7Oltt65jFsy5CUjTEC6nhMB8GA1UdIwQY MBaAFIWAL8HQ8+OkRiVi0vBvKz3v+PTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFlBdndkRHo0NlJHSldMUzhHOHJQZV80OU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hZjhiMjktYjFhZi00Y2Y2LWJmMTYt YjA1ODMyYmM2OTYyLzEvaFlBdndkRHo0NlJHSldMUzhHOHJQZV80OU9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hZjhiMjktYjFhZi00Y2Y2LWJmMTYtYjA1ODMyYmM2OTYy LzEvaFlBdndkRHo0NlJHSldMUzhHOHJQZV80OU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAde4BeXJd FaId5hjdk4aOnAJcKpxIj6cETVC9F4IEGmuc2Zy/kYaqLgeo+DvtAL6pKrtx5v0e r2YA0ss85E5dQdRGmq/g4MJNODjqpxrKhRQzzPxFWyY4kF+n/gjbEM1qRznkEzgm 9ix7dsck/pfHAbqJl7/yMMRrE+ukPD2I572oKtAiHxYTniWyMyyapD+A6Sr8F2bh g0OWn4TAx0HM2DbJ7R/Cr7ADMqtdGjZIvuazH2TJ8TW1ksoOPtxnY5/KRXyAxVZQ sWfl2nHU7/jZwIGrmyzjgUL4z5oZxJMlnfymqbGsIZ2ZNheOezE66eDpYcgJgTrc QGXQufI3IQBiHg== -----END CERTIFICATE-----Generated at Fri Dec 19 12:05:32 2025 by rpki-client