This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft File: HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json) Hash identifier: D+tCcJl9t9yvZ/gTE8X3X9C7AbtRaQnNLceFZjLx94k= Subject key identifier: 1E:E7:D5:D8:C7:A5:22:4A:53:88:17:2A:56:11:ED:47:29:25:E1:96 Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4 Certificate issuer: /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4 Certificate serial: 019B3C7E9505E47C186244381A4CAA4F2731 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 16:01:27 +0000 Manifest this update: Sat 20 Dec 2025 16:01:27 +0000 Manifest next update: Sun 21 Dec 2025 16:01:27 +0000 Files and hashes: 1: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: SERQruiZdyoEncurRWJ6s0RWIcYYI0DeCykpm8w1Ack=) 2: avKWbxlz__x39cDhO2Y69LSUiG0.roa (hash: zHguv0slI/PQ12Wd3BSPrR9a4DZWJkflBQ3L6OL1wFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:95:05:e4:7c:18:62:44:38:1a:4c:aa:4f:27:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4 Validity Not Before: Dec 20 16:01:27 2025 GMT Not After : Dec 21 16:01:27 2025 GMT Subject: CN=1ee7d5d8c7a5224a5388172a5611ed472925e196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1c:0f:7c:2a:4d:5a:9e:6b:ca:97:26:10:7d: 86:ba:a2:ab:d5:07:64:9f:bf:b9:bc:41:a1:98:88: 36:4d:1b:8e:71:b7:23:bc:70:b4:96:a4:f0:f1:48: ba:f9:4a:a2:73:85:91:19:65:0a:a5:94:ca:dc:eb: cc:72:7d:01:87:96:f4:a5:19:88:d8:fa:dc:f2:19: 68:b0:4d:b7:9d:39:ce:aa:7f:fe:44:64:c9:b8:c8: da:53:55:9d:da:15:8f:71:75:c0:22:08:ad:65:a4: d7:43:63:07:00:12:ad:75:32:9c:38:ea:4c:3f:23: 3b:bb:36:cc:64:18:8e:db:43:82:ed:d6:88:4d:95: d1:ba:ce:25:0a:51:a3:ff:54:4e:f9:fa:91:2e:cc: bf:a8:e8:44:77:4c:9d:98:44:4a:ff:6e:0e:ea:11: 33:09:a6:a6:6f:f9:ae:95:a8:b1:37:d9:40:95:8f: 0b:fb:4e:8a:ab:dc:5f:e6:11:e2:22:08:e7:f1:79: 9e:c0:10:e5:ea:64:63:bb:39:71:b1:62:52:91:eb: 51:b0:e3:bf:6f:17:1e:ba:9c:5d:fb:b2:6b:93:7e: 07:65:a1:84:4a:db:e3:5d:a3:32:99:7b:0a:95:88: a3:f7:a4:bf:e9:89:63:77:d6:9e:18:7c:bd:dd:86: 33:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E7:D5:D8:C7:A5:22:4A:53:88:17:2A:56:11:ED:47:29:25:E1:96 X509v3 Authority Key Identifier: keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:16:96:a3:61:c0:bd:a9:ce:cd:62:a7:c7:d8:16:30:45:66: 30:8d:c3:e9:bc:86:0c:2b:2d:8d:03:65:d3:00:cb:c6:81:b2: d6:b9:67:42:f6:58:55:8e:4d:1a:53:78:7d:87:d5:ea:1c:47: 62:6c:1d:69:85:8d:27:29:89:5c:b6:9c:cb:af:e9:3a:35:f7: 6e:61:2e:e5:5d:1d:db:57:f1:e3:50:69:ad:06:13:76:ff:d4: bb:0f:92:f5:62:ff:58:af:6f:aa:e5:88:8b:e1:c8:60:8b:ba: fb:35:19:71:49:d6:c2:4b:11:cc:5d:ae:1d:d0:32:20:59:a7: 52:8c:bb:1d:08:5b:83:5f:d5:8c:14:3a:b8:8d:66:e4:ce:33: c5:02:61:fb:da:28:42:04:5f:f2:bf:1c:35:c9:af:31:6d:11: 77:98:79:d4:68:bc:20:e1:48:5c:a7:a7:18:1c:56:83:53:4e: 67:24:07:79:22:e8:81:49:32:f1:54:9b:93:0b:a1:e1:eb:d3: b1:1e:db:6a:1a:c9:85:37:ae:e1:e6:26:19:0d:0f:e1:80:df: 81:da:95:fb:19:75:b0:09:30:22:e3:7f:2b:fc:3e:f8:10:7c: 49:b3:8d:ec:e7:ed:59:86:6e:fd:2c:1d:47:72:82:49:ca:1e: 75:a3:0e:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fpUF5HwYYkQ4GkyqTycxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkODI4Yjc4MWIwNzlmYjQzZGRiMGNhNzVkYzAyNmU3NWQ3 ZjI1ZTQwHhcNMjUxMjIwMTYwMTI3WhcNMjUxMjIxMTYwMTI3WjAzMTEwLwYDVQQD EygxZWU3ZDVkOGM3YTUyMjRhNTM4ODE3MmE1NjExZWQ0NzI5MjVlMTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBwPfCpNWp5rypcmEH2GuqKr1Qdk n7+5vEGhmIg2TRuOcbcjvHC0lqTw8Ui6+Uqic4WRGWUKpZTK3OvMcn0Bh5b0pRmI 2Prc8hlosE23nTnOqn/+RGTJuMjaU1Wd2hWPcXXAIgitZaTXQ2MHABKtdTKcOOpM PyM7uzbMZBiO20OC7daITZXRus4lClGj/1RO+fqRLsy/qOhEd0ydmERK/24O6hEz Caamb/mulaixN9lAlY8L+06Kq9xf5hHiIgjn8XmewBDl6mRjuzlxsWJSketRsOO/ bxceupxd+7Jrk34HZaGEStvjXaMymXsKlYij96S/6Yljd9aeGHy93YYzpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB7n1djHpSJKU4gXKlYR7UcpJeGWMB8GA1UdIwQY MBaAFB2Ci3gbB5+0PdsMp13AJuddfyXkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUt ZjA2Y2VkNTIxMTJhLzEvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUtZjA2Y2VkNTIxMTJh LzEvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRaWo2HA vanOzWKnx9gWMEVmMI3D6byGDCstjQNl0wDLxoGy1rlnQvZYVY5NGlN4fYfV6hxH YmwdaYWNJymJXLacy6/pOjX3bmEu5V0d21fx41BprQYTdv/Uuw+S9WL/WK9vquWI i+HIYIu6+zUZcUnWwksRzF2uHdAyIFmnUoy7HQhbg1/VjBQ6uI1m5M4zxQJh+9oo QgRf8r8cNcmvMW0Rd5h51Gi8IOFIXKenGBxWg1NOZyQHeSLogUky8VSbkwuh4evT sR7bahrJhTeu4eYmGQ0P4YDfgdqV+xl1sAkwIuN/K/w++BB8SbON7OftWYZu/Swd R3KCScoedaMO8w== -----END CERTIFICATE-----Generated at Sat Dec 20 23:12:34 2025 by rpki-client