This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft File: HyAOBxBBRee6mHap0-55Kgc2TTY.mft (raw, json) Hash identifier: rVdpBfR7AirBP+4hOB4hXeSgKqzTtTC5fCFZXRwVIM0= Subject key identifier: 2E:E7:C1:FD:67:C2:2A:8B:C3:1C:A9:58:EE:2E:B2:3E:18:9A:B0:DB Authority key identifier: 1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36 Certificate issuer: /CN=1f200e07104145e7ba9876a9d3ee792a07364d36 Certificate serial: 019B597601AED62DB8B72051CF129F261E30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft Manifest number: 04BD Signing time: Fri 26 Dec 2025 07:01:04 +0000 Manifest this update: Fri 26 Dec 2025 07:01:04 +0000 Manifest next update: Sat 27 Dec 2025 07:01:04 +0000 Files and hashes: 1: HyAOBxBBRee6mHap0-55Kgc2TTY.crl (hash: psX7CdTNuUGvJOFmrOIMfqYoKoRgSLwqXDxwfeko/Zw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:01:ae:d6:2d:b8:b7:20:51:cf:12:9f:26:1e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f200e07104145e7ba9876a9d3ee792a07364d36 Validity Not Before: Dec 26 07:01:04 2025 GMT Not After : Dec 27 07:01:04 2025 GMT Subject: CN=2ee7c1fd67c22a8bc31ca958ee2eb23e189ab0db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ed:12:07:c1:e8:04:4a:d9:6a:48:2c:21:af: 01:a4:30:48:3a:2a:c1:80:29:8e:1e:2e:cb:0f:bb: 9d:17:ce:b7:30:d3:b7:71:57:d6:0e:f2:f6:16:c1: 44:b9:d2:f1:4f:b0:ed:89:5a:ec:c8:50:18:b7:ef: 69:f9:13:22:2d:b5:f3:65:a4:83:5a:95:f4:75:72: c2:ee:38:82:f4:ab:64:e5:9e:03:71:54:ca:02:d7: f8:ee:8f:29:c1:9b:5f:e9:53:63:1e:b7:3f:d3:42: ca:ef:1d:35:b3:3e:01:ee:58:66:06:62:c8:79:80: ee:eb:43:1e:2f:15:95:dc:75:e3:c4:a1:41:64:ad: 44:fa:3a:da:b6:ed:26:59:8b:f6:db:db:26:6e:ab: cc:09:3a:34:01:49:48:81:f3:83:48:8a:17:dc:25: 48:4b:e8:da:48:f6:c5:35:ca:d3:5b:55:08:f7:7a: a1:5a:d6:89:84:50:71:0f:49:50:cf:91:37:23:ac: 82:07:bf:e2:07:77:18:02:84:7a:53:6b:18:20:e8: ff:44:0f:cc:17:b2:c5:0e:43:7e:0a:ca:a0:9a:ad: a1:ea:22:1c:3d:d7:72:b6:8c:88:82:1d:93:e1:87: b9:a9:09:cf:ae:37:81:8f:f4:da:d3:0b:7a:c2:33: 5a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E7:C1:FD:67:C2:2A:8B:C3:1C:A9:58:EE:2E:B2:3E:18:9A:B0:DB X509v3 Authority Key Identifier: keyid:1F:20:0E:07:10:41:45:E7:BA:98:76:A9:D3:EE:79:2A:07:36:4D:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyAOBxBBRee6mHap0-55Kgc2TTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/46dabf-9626-4d1f-a89e-775a7ec1ca33/1/HyAOBxBBRee6mHap0-55Kgc2TTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:8a:09:1a:ff:f6:d3:d7:18:a9:42:28:e7:cb:e7:19:09:cf: e5:b1:2a:38:ac:71:8b:5f:d8:cc:25:2e:23:cf:a5:18:5e:86: 04:60:3e:eb:4a:7b:52:bc:68:0c:cc:24:fc:22:e3:43:d0:07: 4b:51:4d:b7:bf:2e:f6:35:64:d2:b7:6a:ee:f7:20:c5:91:47: 74:17:4c:58:6c:45:49:a4:58:1d:6b:b0:88:2a:4f:1f:ca:ef: df:9a:d4:6b:7b:27:e6:a0:4e:5b:47:5b:83:35:52:d4:15:69: 05:36:41:34:d9:bd:9c:0b:e7:93:bb:78:03:96:42:86:6e:8c: 63:fb:eb:59:b9:fd:c8:67:9f:ae:26:e5:1e:9b:b3:b3:08:e3: 80:8f:48:f3:02:b1:ab:3e:97:75:0b:a7:8e:55:e5:2f:0a:5f: 1b:3f:f5:28:62:84:f9:1e:58:de:81:65:61:fe:e3:ea:be:94: 31:4b:08:d1:c2:7c:d1:3c:65:ba:7f:86:78:75:f4:d6:b3:49: 03:c0:91:10:82:30:11:74:eb:39:2e:c3:0a:71:00:06:a6:6f: 67:6d:5c:f2:45:5f:f8:ed:4a:ea:11:15:04:f7:3d:54:49:80: 3b:12:86:1e:d3:39:3a:0d:b8:25:4b:21:11:1f:9e:72:65:f0: be:ce:b4:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdgGu1i24tyBRzxKfJh4wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMjAwZTA3MTA0MTQ1ZTdiYTk4NzZhOWQzZWU3OTJhMDcz NjRkMzYwHhcNMjUxMjI2MDcwMTA0WhcNMjUxMjI3MDcwMTA0WjAzMTEwLwYDVQQD EygyZWU3YzFmZDY3YzIyYThiYzMxY2E5NThlZTJlYjIzZTE4OWFiMGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyu0SB8HoBErZakgsIa8BpDBIOirB gCmOHi7LD7udF863MNO3cVfWDvL2FsFEudLxT7DtiVrsyFAYt+9p+RMiLbXzZaSD WpX0dXLC7jiC9Ktk5Z4DcVTKAtf47o8pwZtf6VNjHrc/00LK7x01sz4B7lhmBmLI eYDu60MeLxWV3HXjxKFBZK1E+jratu0mWYv229smbqvMCTo0AUlIgfODSIoX3CVI S+jaSPbFNcrTW1UI93qhWtaJhFBxD0lQz5E3I6yCB7/iB3cYAoR6U2sYIOj/RA/M F7LFDkN+Csqgmq2h6iIcPddytoyIgh2T4Ye5qQnPrjeBj/Ta0wt6wjNaEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC7nwf1nwiqLwxypWO4usj4YmrDbMB8GA1UdIwQY MBaAFB8gDgcQQUXnuph2qdPueSoHNk02MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHlBT0J4QkJSZWU2bUhhcDAtNTVLZ2MyVFRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80NmRhYmYtOTYyNi00ZDFmLWE4OWUt Nzc1YTdlYzFjYTMzLzEvSHlBT0J4QkJSZWU2bUhhcDAtNTVLZ2MyVFRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi80NmRhYmYtOTYyNi00ZDFmLWE4OWUtNzc1YTdlYzFjYTMz LzEvSHlBT0J4QkJSZWU2bUhhcDAtNTVLZ2MyVFRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIoJGv/2 09cYqUIo58vnGQnP5bEqOKxxi1/YzCUuI8+lGF6GBGA+60p7UrxoDMwk/CLjQ9AH S1FNt78u9jVk0rdq7vcgxZFHdBdMWGxFSaRYHWuwiCpPH8rv35rUa3sn5qBOW0db gzVS1BVpBTZBNNm9nAvnk7t4A5ZChm6MY/vrWbn9yGefriblHpuzswjjgI9I8wKx qz6XdQunjlXlLwpfGz/1KGKE+R5Y3oFlYf7j6r6UMUsI0cJ80Txlun+GeHX01rNJ A8CREIIwEXTrOS7DCnEABqZvZ21c8kVf+O1K6hEVBPc9VEmAOxKGHtM5Og24JUsh ER+ecmXwvs60bA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:00 2025 by rpki-client