This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft File: hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json) Hash identifier: DQCWn7Rz2LMETjjjo2hIcWwxxEjylpT2V3b8MXvI1s0= Subject key identifier: 2D:C6:CD:6D:75:00:36:36:79:22:E5:96:AC:71:2D:E3:83:31:2E:2C Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5 Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5 Certificate serial: 019B1A5FDC9A68BDEF4F2EE2314556BF3231 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft Manifest number: 0299 Signing time: Sun 14 Dec 2025 01:00:48 +0000 Manifest this update: Sun 14 Dec 2025 01:00:48 +0000 Manifest next update: Mon 15 Dec 2025 01:00:48 +0000 Files and hashes: 1: Nz0U1MS6Vp6ENiK7Qgw_NtnW0Zo.roa (hash: 4kJwTGIfTzijYFZnWzmKmdRlWFcf9MpzIIKmNecHiDM=) 2: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: dKxpPK2bezhOLuenRMpFxiD4NlV0N6SHmrHz2K00LpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 01:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:5f:dc:9a:68:bd:ef:4f:2e:e2:31:45:56:bf:32:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5 Validity Not Before: Dec 14 01:00:48 2025 GMT Not After : Dec 15 01:00:48 2025 GMT Subject: CN=2dc6cd6d750036367922e596ac712de383312e2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:57:38:dc:c4:d3:aa:07:f9:7b:18:79:6b: 72:10:b0:d8:ef:6f:61:38:c5:df:ce:4e:b2:bf:77: e7:e0:05:5b:62:c6:60:bf:ee:4b:d2:89:e8:2d:a9: aa:7e:8c:45:56:6b:61:bb:9b:fc:4d:a2:3b:97:3e: 92:26:8b:4c:b9:35:c8:21:9e:42:84:d3:73:e1:45: 81:d2:14:78:04:cb:08:ca:76:12:81:f4:7e:a5:93: 12:6b:30:db:fa:fd:9d:55:8e:16:b3:6b:e4:4f:3a: 94:f4:ee:54:d8:e2:ba:fe:dc:56:8f:b8:ee:a9:17: b9:6c:16:25:fa:7c:35:82:29:a9:33:8c:75:cf:48: a7:a0:05:ab:44:46:ec:dd:e2:d7:bc:63:33:52:1b: aa:30:34:15:de:9d:d3:bc:b6:e2:5f:c0:07:a7:e6: 3c:6b:33:a4:82:b9:ed:62:04:37:eb:90:2f:25:b3: c4:e1:74:b4:88:45:bb:a8:48:9b:81:1a:8e:a5:6a: ce:97:77:6d:95:c9:59:35:a4:88:65:ae:53:ac:5a: 1d:48:42:36:75:fc:75:a7:c7:3b:19:49:e2:84:fd: 64:27:ca:66:f7:14:71:b2:3f:73:47:80:78:b5:ca: 86:3e:4f:04:c8:03:8a:b0:3c:1c:41:b8:86:ed:b6: bd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C6:CD:6D:75:00:36:36:79:22:E5:96:AC:71:2D:E3:83:31:2E:2C X509v3 Authority Key Identifier: keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:eb:26:be:8c:bd:f2:c5:06:26:a2:14:16:f7:b3:db:e0:24: 68:f3:a2:c6:65:ef:57:fc:36:57:7a:11:4b:e6:fd:67:4c:01: 20:c8:e3:ff:62:26:e0:9f:59:a2:17:4a:bd:31:a5:81:9b:c9: 82:dc:43:2d:7d:9f:82:9b:75:30:bf:51:ae:34:0a:3e:b0:ac: 59:f3:d3:2a:10:58:51:36:dd:b9:56:26:cb:05:e4:3e:81:e1: 86:99:4a:9a:5f:6e:58:07:c2:97:96:66:71:8d:3b:f1:ea:cb: 8b:1e:51:c6:70:6e:45:ee:8d:f6:cd:53:21:5a:92:21:ec:bd: 0e:ec:57:50:4d:29:3c:40:13:5a:27:ea:2f:e4:2c:e5:f2:e7: 92:9a:64:db:ef:fe:23:29:eb:a4:bf:18:81:56:6d:14:62:c4: fd:b5:0f:95:ab:e8:46:25:02:8e:cd:7b:72:aa:78:32:1a:a4: b3:df:60:6c:73:b4:c4:11:ce:b2:e1:57:36:c5:35:2d:4c:b6: 19:02:9a:8a:ef:74:b4:7d:25:23:f7:51:91:97:45:01:c6:e1: 07:05:bb:c9:e4:74:17:4c:72:ed:31:a8:ac:55:10:e2:13:a7: c8:4c:7e:6b:5c:98:e5:f2:41:d4:cb:c0:bf:11:84:b1:c8:ea: 7d:01:2d:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsaX9yaaL3vTy7iMUVWvzIxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YWY5OGFlZTM3YTEyODE1YjQ0YmZkNmJlYjRiZTY0YWMw ZWY2ZTUwHhcNMjUxMjE0MDEwMDQ4WhcNMjUxMjE1MDEwMDQ4WjAzMTEwLwYDVQQD EygyZGM2Y2Q2ZDc1MDAzNjM2NzkyMmU1OTZhYzcxMmRlMzgzMzEyZTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwlXONzE06oH+XsYeWtyELDY729h OMXfzk6yv3fn4AVbYsZgv+5L0onoLamqfoxFVmthu5v8TaI7lz6SJotMuTXIIZ5C hNNz4UWB0hR4BMsIynYSgfR+pZMSazDb+v2dVY4Ws2vkTzqU9O5U2OK6/txWj7ju qRe5bBYl+nw1gimpM4x1z0inoAWrREbs3eLXvGMzUhuqMDQV3p3TvLbiX8AHp+Y8 azOkgrntYgQ365AvJbPE4XS0iEW7qEibgRqOpWrOl3dtlclZNaSIZa5TrFodSEI2 dfx1p8c7GUnihP1kJ8pm9xRxsj9zR4B4tcqGPk8EyAOKsDwcQbiG7ba9pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3GzW11ADY2eSLllqxxLeODMS4sMB8GA1UdIwQY MBaAFISvmK7jehKBW0S/1r60vmSsDvblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEstWXJ1TjZFb0ZiUkxfV3ZyUy1aS3dPOXVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lMjhhOGEtNjY0ZS00NzNjLTgyNTUt NzRlMTAwOTlmODFjLzEvaEstWXJ1TjZFb0ZiUkxfV3ZyUy1aS3dPOXVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lMjhhOGEtNjY0ZS00NzNjLTgyNTUtNzRlMTAwOTlmODFj LzEvaEstWXJ1TjZFb0ZiUkxfV3ZyUy1aS3dPOXVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeusmvoy9 8sUGJqIUFvez2+AkaPOixmXvV/w2V3oRS+b9Z0wBIMjj/2Im4J9ZohdKvTGlgZvJ gtxDLX2fgpt1ML9RrjQKPrCsWfPTKhBYUTbduVYmywXkPoHhhplKml9uWAfCl5Zm cY078erLix5RxnBuRe6N9s1TIVqSIey9DuxXUE0pPEATWifqL+Qs5fLnkppk2+/+ IynrpL8YgVZtFGLE/bUPlavoRiUCjs17cqp4Mhqks99gbHO0xBHOsuFXNsU1LUy2 GQKaiu90tH0lI/dRkZdFAcbhBwW7yeR0F0xy7TGorFUQ4hOnyEx+a1yY5fJB1MvA vxGEscjqfQEt+w== -----END CERTIFICATE-----Generated at Sun Dec 14 07:49:38 2025 by rpki-client