This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft File: hyd386vnZf-Is-jm24PSfDxiYTg.mft (raw, json) Hash identifier: Di2reaGu3mNBQGm0DQXSiRfi9tWVTHc/EIW0RjNXwFs= Subject key identifier: 42:50:5E:E0:A5:6F:9C:81:59:CA:AC:92:64:B9:A8:7F:4B:4E:94:1A Authority key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38 Certificate issuer: /CN=872777f3abe765ff88b3e8e6db83d27c3c626138 Certificate serial: 019B20994E6342BFAB4B1CBCEDFF87ADF382 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft Manifest number: 039C Signing time: Mon 15 Dec 2025 06:01:16 +0000 Manifest this update: Mon 15 Dec 2025 06:01:16 +0000 Manifest next update: Tue 16 Dec 2025 06:01:16 +0000 Files and hashes: 1: hyd386vnZf-Is-jm24PSfDxiYTg.crl (hash: PiqzPhzEJ9f3Kqs6BkRf7BuBEVKiXg78ZGw/l82lMtc=) 2: uLnIOwRkGxrsBbDo0gQE4-hCZ48.roa (hash: s37fBcagBo3TMxYLMpYCF62YuISi5XxqQMy7wxYlEsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 06:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:99:4e:63:42:bf:ab:4b:1c:bc:ed:ff:87:ad:f3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872777f3abe765ff88b3e8e6db83d27c3c626138 Validity Not Before: Dec 15 06:01:16 2025 GMT Not After : Dec 16 06:01:16 2025 GMT Subject: CN=42505ee0a56f9c8159caac9264b9a87f4b4e941a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:54:9b:5e:9a:19:3d:e3:e4:e2:52:5d:23:48: 64:53:43:74:90:ed:7d:0c:13:44:7d:e1:77:4a:a0: 94:98:c5:0d:9d:14:8b:07:f9:5b:ee:3d:d7:91:71: 48:07:70:ed:d9:f9:e3:69:9a:31:12:bd:7e:79:2a: 2d:c6:ad:21:03:97:f8:b2:69:d1:ab:e7:82:42:c8: 42:39:63:0e:ee:94:be:91:15:54:e4:12:0f:c1:7e: cc:27:be:16:94:b7:7c:19:aa:55:ab:5e:aa:87:f1: 97:a5:23:7b:8b:fb:c2:32:ca:1b:40:ce:32:1e:72: ad:9d:38:4d:48:a7:4b:bc:ac:44:52:bc:67:8b:cb: db:6a:6f:48:8a:1c:21:2e:a3:a6:19:33:14:7a:81: 74:98:58:28:dc:de:1a:82:d8:72:b9:73:5c:1a:69: 4d:a8:ba:b1:22:3b:9c:98:92:1f:3f:72:e3:6c:a9: fd:d2:ae:ac:92:8e:de:68:e9:7a:75:45:ab:e4:dc: 90:7c:f0:34:44:44:d6:23:ef:4b:b0:f6:46:61:2f: 13:ac:63:83:55:83:6c:05:14:d5:bd:18:39:bf:fd: c6:87:6c:06:b7:f4:dc:3e:bf:b7:49:00:a3:e8:fe: fe:c4:16:8e:33:b1:44:cc:b0:82:b2:a7:3a:b0:3c: c0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:50:5E:E0:A5:6F:9C:81:59:CA:AC:92:64:B9:A8:7F:4B:4E:94:1A X509v3 Authority Key Identifier: keyid:87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:7b:a9:88:a6:45:e9:09:4d:79:20:92:23:76:bb:09:ca:8f: 2d:34:86:8d:39:4c:f9:ea:e7:3b:72:76:83:8c:c8:c4:8b:3e: b6:24:ca:b9:30:45:f0:3b:e6:8b:66:6b:29:d8:50:2a:7e:5a: ad:36:7c:cd:da:5d:a5:20:ba:b5:3f:15:7f:6b:18:0d:5d:34: 74:14:af:21:cb:12:d9:94:9e:4e:bd:05:ab:b4:95:91:ac:7e: 48:7b:8c:9f:39:e0:fd:f8:8f:59:d2:d8:5b:c5:f2:5b:ea:82: e9:dd:7a:56:38:d6:0e:f0:8d:06:a8:34:c6:22:73:fc:47:f9: 5c:3f:61:fe:5b:e3:c0:e2:4a:8e:00:26:7f:bf:5d:3c:a8:c2: 4f:ff:1c:2b:e6:ff:01:17:ca:16:bd:6d:59:56:ec:f5:04:34: 75:f2:cc:66:13:84:17:e5:c2:1e:62:d9:f7:c5:38:f4:e2:70: 3e:16:de:75:e9:e5:ee:b2:09:72:bd:08:46:36:e7:a3:55:82: ff:3e:2d:6a:5c:77:2b:ec:62:e3:ec:56:2e:69:93:90:ce:4a: 50:a9:be:c8:62:3c:b4:e2:e1:d5:17:ac:3a:d5:7e:00:41:b6: 90:10:b6:64:b4:e6:f3:1d:e4:25:cc:1e:94:2e:7a:29:d8:c7: ee:c6:64:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgmU5jQr+rSxy87f+HrfOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3Mjc3N2YzYWJlNzY1ZmY4OGIzZThlNmRiODNkMjdjM2M2 MjYxMzgwHhcNMjUxMjE1MDYwMTE2WhcNMjUxMjE2MDYwMTE2WjAzMTEwLwYDVQQD Eyg0MjUwNWVlMGE1NmY5YzgxNTljYWFjOTI2NGI5YTg3ZjRiNGU5NDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1SbXpoZPePk4lJdI0hkU0N0kO19 DBNEfeF3SqCUmMUNnRSLB/lb7j3XkXFIB3Dt2fnjaZoxEr1+eSotxq0hA5f4smnR q+eCQshCOWMO7pS+kRVU5BIPwX7MJ74WlLd8GapVq16qh/GXpSN7i/vCMsobQM4y HnKtnThNSKdLvKxEUrxni8vbam9IihwhLqOmGTMUeoF0mFgo3N4agthyuXNcGmlN qLqxIjucmJIfP3LjbKn90q6sko7eaOl6dUWr5NyQfPA0RETWI+9LsPZGYS8TrGOD VYNsBRTVvRg5v/3Gh2wGt/TcPr+3SQCj6P7+xBaOM7FEzLCCsqc6sDzACwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJQXuClb5yBWcqskmS5qH9LTpQaMB8GA1UdIwQY MBaAFIcnd/Or52X/iLPo5tuD0nw8YmE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83YTdlZjYtMzcyYS00Yjc0LTkyZjIt NDFiNDY4ZjNhYWIwLzEvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC83YTdlZjYtMzcyYS00Yjc0LTkyZjItNDFiNDY4ZjNhYWIw LzEvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHupiKZF 6QlNeSCSI3a7CcqPLTSGjTlM+ernO3J2g4zIxIs+tiTKuTBF8Dvmi2ZrKdhQKn5a rTZ8zdpdpSC6tT8Vf2sYDV00dBSvIcsS2ZSeTr0Fq7SVkax+SHuMnzng/fiPWdLY W8XyW+qC6d16VjjWDvCNBqg0xiJz/Ef5XD9h/lvjwOJKjgAmf79dPKjCT/8cK+b/ ARfKFr1tWVbs9QQ0dfLMZhOEF+XCHmLZ98U49OJwPhbedenl7rIJcr0IRjbno1WC /z4talx3K+xi4+xWLmmTkM5KUKm+yGI8tOLh1ResOtV+AEG2kBC2ZLTm8x3kJcwe lC56KdjH7sZkyQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:15:02 2025 by rpki-client