This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft File: Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft (raw, json) Hash identifier: 3h+lEmWaO+kLWVRYDOMvvPB3hVH3a3Yk3jkAwxrCkH0= Subject key identifier: C2:A8:C1:05:5F:C5:CB:18:17:72:6B:72:E0:B1:51:C1:87:E1:FC:60 Authority key identifier: 1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2 Certificate issuer: /CN=1dde7463ed8498020dd392322459d2cf40f226b2 Certificate serial: 019B25BF2DD38176BE0778644F8C3E14295D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft Manifest number: 0BB1 Signing time: Tue 16 Dec 2025 06:00:44 +0000 Manifest this update: Tue 16 Dec 2025 06:00:44 +0000 Manifest next update: Wed 17 Dec 2025 06:00:44 +0000 Files and hashes: 1: Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl (hash: YTxMfBRhhTjdmDenXr6B3moeEgOUtzWpns0YFmJLw8E=) 2: ZeLziwVcKFCzlXV46oF95sJgQFI.roa (hash: YJb2jXI2aFgonHfwW6/ZhSjIG0Uw2jOF0vpZ55dF3+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 06:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:2d:d3:81:76:be:07:78:64:4f:8c:3e:14:29:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dde7463ed8498020dd392322459d2cf40f226b2 Validity Not Before: Dec 16 06:00:44 2025 GMT Not After : Dec 17 06:00:44 2025 GMT Subject: CN=c2a8c1055fc5cb1817726b72e0b151c187e1fc60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:eb:e6:ac:be:32:80:2e:74:35:ba:60:79:4d: 00:9e:4e:65:28:81:e4:d7:34:d4:30:9c:7a:64:d4: 48:09:8d:83:74:3c:ef:22:b0:18:e1:fa:0c:25:1d: 37:62:20:d7:13:df:94:52:dd:ad:3a:04:cf:ee:41: e9:3e:89:a9:15:55:3b:a7:f7:e9:56:64:48:69:ab: 7c:a4:83:3b:39:2d:f1:de:79:d9:9b:f9:03:04:68: 21:4d:d6:a4:7b:f9:d2:65:e6:69:3c:87:d5:87:9a: 07:ee:06:85:eb:78:95:46:15:36:14:51:41:00:30: dc:a0:11:06:5c:fb:08:14:64:15:1f:66:08:dd:d1: fe:9a:b6:5b:11:1c:a8:63:1e:d8:a8:a6:23:f3:f1: 65:44:12:5f:f6:03:e9:8a:e7:d7:b4:f0:d9:5d:cd: f0:ea:94:73:4b:52:24:37:65:1e:6a:f9:77:34:3d: a8:f7:e3:64:fd:6f:10:90:7f:72:88:f3:38:70:b6: 09:74:a5:7e:93:96:83:78:e3:78:0b:b4:2f:42:88: 84:4c:22:f4:e3:ff:85:a4:b7:2b:ac:34:be:bb:78: ff:7e:55:51:a2:d2:53:19:4a:69:64:97:9e:bd:fb: 61:8d:d4:9a:38:c2:7d:52:b9:37:5b:67:64:c0:02: 54:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A8:C1:05:5F:C5:CB:18:17:72:6B:72:E0:B1:51:C1:87:E1:FC:60 X509v3 Authority Key Identifier: keyid:1D:DE:74:63:ED:84:98:02:0D:D3:92:32:24:59:D2:CF:40:F2:26:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hd50Y-2EmAIN05IyJFnSz0DyJrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/55283a-09a0-4da8-a968-43c7f027c6e4/1/Hd50Y-2EmAIN05IyJFnSz0DyJrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:10:1a:f0:50:19:8c:59:19:f9:a8:0c:ce:0d:0c:08:79:63: 32:cb:9d:30:05:be:98:89:47:66:61:dc:a3:3f:81:39:e5:c5: 0c:ed:bd:c0:64:3c:97:0b:ed:2d:06:22:0f:95:34:23:9b:09: 07:45:b5:41:b9:f6:d0:93:2e:dd:c0:98:26:4a:24:f2:15:7c: a0:38:6a:6d:91:18:75:16:3e:8a:df:9c:66:89:12:76:f4:5f: ab:96:10:2b:42:8c:bb:96:4e:4f:23:9a:d6:ae:c0:c0:fd:73: 9b:d0:38:35:98:89:a8:f0:48:77:2c:27:62:a9:aa:b6:09:39: e3:a7:f2:60:44:2d:37:a6:84:c1:de:88:db:79:46:45:91:e7: a9:c8:1a:39:85:7e:ed:46:30:7c:2e:e1:01:5e:de:41:08:0a: d7:13:9c:2c:6f:5c:0f:ef:b1:6e:b4:75:89:32:af:04:fa:68: e5:e4:0b:e1:bb:08:3c:c3:6e:4c:8c:7e:b7:32:87:1e:bc:48: 8b:54:86:b6:a8:ae:9c:1e:d3:a6:29:07:c3:21:68:20:42:4b: 08:21:86:ad:ff:0c:1a:ca:9d:03:4d:1d:e3:f8:19:50:75:27: df:5e:9b:0b:02:c7:4a:08:26:23:1f:59:7f:58:d7:59:2b:9b: 92:2a:b6:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslvy3TgXa+B3hkT4w+FCldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZGU3NDYzZWQ4NDk4MDIwZGQzOTIzMjI0NTlkMmNmNDBm MjI2YjIwHhcNMjUxMjE2MDYwMDQ0WhcNMjUxMjE3MDYwMDQ0WjAzMTEwLwYDVQQD EyhjMmE4YzEwNTVmYzVjYjE4MTc3MjZiNzJlMGIxNTFjMTg3ZTFmYzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uvmrL4ygC50NbpgeU0Ank5lKIHk 1zTUMJx6ZNRICY2DdDzvIrAY4foMJR03YiDXE9+UUt2tOgTP7kHpPompFVU7p/fp VmRIaat8pIM7OS3x3nnZm/kDBGghTdake/nSZeZpPIfVh5oH7gaF63iVRhU2FFFB ADDcoBEGXPsIFGQVH2YI3dH+mrZbERyoYx7YqKYj8/FlRBJf9gPpiufXtPDZXc3w 6pRzS1IkN2Ueavl3ND2o9+Nk/W8QkH9yiPM4cLYJdKV+k5aDeON4C7QvQoiETCL0 4/+FpLcrrDS+u3j/flVRotJTGUppZJeevfthjdSaOMJ9Urk3W2dkwAJU4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMKowQVfxcsYF3JrcuCxUcGH4fxgMB8GA1UdIwQY MBaAFB3edGPthJgCDdOSMiRZ0s9A8iayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGQ1MFktMkVtQUlOMDVJeUpGblN6MER5SnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81NTI4M2EtMDlhMC00ZGE4LWE5Njgt NDNjN2YwMjdjNmU0LzEvSGQ1MFktMkVtQUlOMDVJeUpGblN6MER5SnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81NTI4M2EtMDlhMC00ZGE4LWE5NjgtNDNjN2YwMjdjNmU0 LzEvSGQ1MFktMkVtQUlOMDVJeUpGblN6MER5SnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWBAa8FAZ jFkZ+agMzg0MCHljMsudMAW+mIlHZmHcoz+BOeXFDO29wGQ8lwvtLQYiD5U0I5sJ B0W1Qbn20JMu3cCYJkok8hV8oDhqbZEYdRY+it+cZokSdvRfq5YQK0KMu5ZOTyOa 1q7AwP1zm9A4NZiJqPBIdywnYqmqtgk546fyYEQtN6aEwd6I23lGRZHnqcgaOYV+ 7UYwfC7hAV7eQQgK1xOcLG9cD++xbrR1iTKvBPpo5eQL4bsIPMNuTIx+tzKHHrxI i1SGtqiunB7TpikHwyFoIEJLCCGGrf8MGsqdA00d4/gZUHUn316bCwLHSggmIx9Z f1jXWSubkiq2vg== -----END CERTIFICATE-----Generated at Tue Dec 16 12:09:58 2025 by rpki-client