This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json) Hash identifier: mH41uRXjAD7W6D+WdGy7Y+ycIF+RtAiL00iBl4A/2ZI= Subject key identifier: 3A:C4:C0:B5:6F:15:61:E9:B1:48:3C:3D:1D:7E:A0:59:73:93:4A:14 Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56 Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256 Certificate serial: 019B5BD2827471B39ADE33C0FD958C0F6708 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft Manifest number: 1695 Signing time: Fri 26 Dec 2025 18:01:21 +0000 Manifest this update: Fri 26 Dec 2025 18:01:21 +0000 Manifest next update: Sat 27 Dec 2025 18:01:21 +0000 Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: C1xIFXlYkts5TLrmCimN/flfdHT5ZjUu97ZocmF0q6k=) 2: UQWiGVcgQBfpwcuKo7fbJa4RaEE.roa (hash: ZgT0t6kUhUht6heJI0SpC59LD5/+nffxYQMEyobuM6Y=) 3: vld0ebErMCPKI9Y4LD8_cLIWaOM.roa (hash: wzpFx+k2Gs1HYxiCiFKxLWQewXLLyvLVnzEmKOsRn8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:82:74:71:b3:9a:de:33:c0:fd:95:8c:0f:67:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256 Validity Not Before: Dec 26 18:01:21 2025 GMT Not After : Dec 27 18:01:21 2025 GMT Subject: CN=3ac4c0b56f1561e9b1483c3d1d7ea05973934a14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:41:7e:c3:50:8b:ce:93:08:46:2e:5b:fe:ed: 08:43:aa:6d:2c:ea:fe:d0:ad:e8:38:04:2e:c8:27: a7:b3:49:db:00:7a:fc:82:1a:d6:81:ff:8f:ad:39: 04:00:b8:1c:a7:32:1e:9d:c4:fe:0a:75:82:77:64: 2c:df:7b:a3:32:c3:70:ab:42:47:03:67:92:da:f9: 5e:5d:c6:e7:76:61:1d:cd:73:7d:95:e0:ca:e4:51: 9d:c6:12:d7:f4:08:27:87:f5:c7:f2:93:bc:6a:fd: b1:b9:2c:7d:10:9e:51:07:29:d9:92:0f:bb:e1:17: c2:bc:3d:7f:3f:72:dd:03:e7:89:45:ca:67:58:fd: 2f:56:91:82:71:b4:4a:60:62:49:62:f4:ef:69:21: 34:54:51:97:4c:70:00:7a:7e:23:cc:03:9b:c3:36: c4:87:52:cc:83:70:ac:a6:72:2a:e0:7d:a2:2d:ce: f2:18:cc:c9:1c:36:50:a8:92:9d:5a:c2:5f:6f:24: 2b:0b:be:1a:0d:0a:36:6a:74:55:71:fe:b6:c9:be: d6:0e:cc:21:a5:87:8d:aa:39:ed:bb:9c:e7:93:1c: 1e:bf:96:01:9a:d9:1e:f6:ba:2e:14:96:4b:55:53: 96:9e:a6:dd:dd:f8:50:b6:9d:8e:d8:a4:4f:30:89: ad:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C4:C0:B5:6F:15:61:E9:B1:48:3C:3D:1D:7E:A0:59:73:93:4A:14 X509v3 Authority Key Identifier: keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:d9:27:7c:66:01:e6:cb:71:df:a1:c4:ab:48:27:1f:15:f1: f6:7a:2a:5d:89:a0:3b:b2:f6:f9:76:44:20:2d:7f:7e:ca:3a: 42:89:a0:94:29:b2:0e:d0:c1:6a:48:dd:b2:b0:28:03:09:38: 72:a1:dc:83:61:5f:0b:0a:35:35:bf:61:db:6a:13:a7:27:38: 4b:34:f2:07:d4:23:5a:13:3b:f5:80:25:ab:f8:51:25:3f:de: 99:2f:1e:93:9a:53:09:a5:3c:a8:ab:77:45:e6:a2:14:c3:7d: 20:a3:8f:0e:1b:40:c8:12:b9:ad:b3:e9:38:2a:bd:6e:21:48: 49:39:c1:2d:87:d4:ad:9e:8c:1c:31:41:55:09:83:70:1e:83: b2:84:c7:6b:74:35:50:cf:92:9a:30:fc:98:03:b0:c7:c4:1b: 33:c8:43:b4:e1:78:28:87:a2:cc:ad:c0:0b:7d:cb:b9:18:dc: 6b:b1:62:6e:a3:29:a1:7c:3e:87:3a:8e:9b:e5:8e:8d:c5:f0: f6:ba:eb:81:a1:7f:f8:d2:ed:d1:ac:bd:d9:30:e8:46:c8:19: 89:f5:c8:94:fd:e4:66:d6:44:3f:da:5a:14:10:a1:a3:20:0f: e2:72:21:fa:49:c9:0c:c4:c2:e6:7f:79:d7:72:b3:98:07:9f: 2e:83:12:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0oJ0cbOa3jPA/ZWMD2cIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkODdmMzAyNzQ5NTFjYWRmYjViNzM3ZTEzMzNjNzNkNjRi MDQyNTYwHhcNMjUxMjI2MTgwMTIxWhcNMjUxMjI3MTgwMTIxWjAzMTEwLwYDVQQD EygzYWM0YzBiNTZmMTU2MWU5YjE0ODNjM2QxZDdlYTA1OTczOTM0YTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EF+w1CLzpMIRi5b/u0IQ6ptLOr+ 0K3oOAQuyCens0nbAHr8ghrWgf+PrTkEALgcpzIencT+CnWCd2Qs33ujMsNwq0JH A2eS2vleXcbndmEdzXN9leDK5FGdxhLX9Agnh/XH8pO8av2xuSx9EJ5RBynZkg+7 4RfCvD1/P3LdA+eJRcpnWP0vVpGCcbRKYGJJYvTvaSE0VFGXTHAAen4jzAObwzbE h1LMg3CspnIq4H2iLc7yGMzJHDZQqJKdWsJfbyQrC74aDQo2anRVcf62yb7WDswh pYeNqjntu5znkxwev5YBmtke9rouFJZLVVOWnqbd3fhQtp2O2KRPMImtBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrEwLVvFWHpsUg8PR1+oFlzk0oUMB8GA1UdIwQY MBaAFB2H8wJ0lRyt+1tzfhMzxz1ksEJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yNDg1ZjUtZGYzZS00ZGJhLTgxMGUt ZmU0NDAxMTFkODA3LzEvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8yNDg1ZjUtZGYzZS00ZGJhLTgxMGUtZmU0NDAxMTFkODA3 LzEvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNknfGYB 5stx36HEq0gnHxXx9noqXYmgO7L2+XZEIC1/fso6QomglCmyDtDBakjdsrAoAwk4 cqHcg2FfCwo1Nb9h22oTpyc4SzTyB9QjWhM79YAlq/hRJT/emS8ek5pTCaU8qKt3 ReaiFMN9IKOPDhtAyBK5rbPpOCq9biFISTnBLYfUrZ6MHDFBVQmDcB6DsoTHa3Q1 UM+SmjD8mAOwx8QbM8hDtOF4KIeizK3AC33LuRjca7FibqMpoXw+hzqOm+WOjcXw 9rrrgaF/+NLt0ay92TDoRsgZifXIlP3kZtZEP9paFBChoyAP4nIh+knJDMTC5n95 13KzmAefLoMSZQ== -----END CERTIFICATE-----Generated at Fri Dec 26 21:09:30 2025 by rpki-client