This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json) Hash identifier: LJ9pOQKwNFDQ+9YEFPBLQTJUquzSo5O4WyJAPKVoPnM= Subject key identifier: 79:9E:F7:57:3B:E0:A2:61:5D:97:89:C4:6D:ED:5D:15:6D:53:33:0C Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4 Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4 Certificate serial: 019B3456E418ADFF0C26A93D3557E6D1B688 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft Manifest number: 14C5 Signing time: Fri 19 Dec 2025 02:01:08 +0000 Manifest this update: Fri 19 Dec 2025 02:01:08 +0000 Manifest next update: Sat 20 Dec 2025 02:01:08 +0000 Files and hashes: 1: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: TGDCWEKtB32+5dPF2xjfDW6Z8FFD/Nkr5tKBLt7gpe4=) 2: _TB_DSwnuCOKtWool6QsRH-BI2c.roa (hash: IfCRqnm3tSTnJ1oqOSYusfB1IFZQtEWpYBfMbK20Izo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 02:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:56:e4:18:ad:ff:0c:26:a9:3d:35:57:e6:d1:b6:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4 Validity Not Before: Dec 19 02:01:08 2025 GMT Not After : Dec 20 02:01:08 2025 GMT Subject: CN=799ef7573be0a2615d9789c46ded5d156d53330c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:23:87:45:14:6c:0a:69:7f:7b:33:09:16:4c: a5:34:a6:ff:7e:ea:bf:9d:da:20:3f:ed:ee:74:42: 2f:b7:55:e7:75:35:33:9a:66:43:72:9d:34:e0:64: 12:3e:41:c6:2f:cb:3e:5b:04:7c:53:33:62:33:ac: e0:d5:09:4b:2f:09:74:1b:04:13:ab:12:df:0b:e4: 15:1b:0a:c1:f8:02:be:d7:6c:34:9c:36:26:57:0b: fe:09:90:ad:d7:a1:84:7e:76:b5:32:f7:fb:da:d8: 63:92:04:13:f1:6a:df:8a:ba:8c:cd:ec:e7:fe:bc: 54:a7:a0:09:af:88:44:0f:d6:b1:ab:19:c5:fa:d4: 87:63:01:90:a1:e3:91:9a:a4:da:c5:f0:3b:dc:71: e5:b8:2d:d5:ed:7f:8f:78:6e:01:a8:6c:9c:a1:4f: 9e:ff:bb:22:68:9b:e2:56:40:c7:1c:53:5c:34:21: 6b:df:e9:33:a5:7f:d1:b3:ff:c4:4f:e2:93:81:0d: 6b:64:20:81:4c:8c:6a:a1:76:f5:a0:90:dc:11:fc: 69:4c:dc:a9:4b:88:f5:74:4f:7c:3b:aa:4a:d5:79: d5:16:4d:22:59:0c:c8:35:dc:5e:68:2d:c9:2a:d2: 4b:ce:fb:f6:34:05:10:d3:92:52:3d:ab:f6:a9:cf: ef:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:9E:F7:57:3B:E0:A2:61:5D:97:89:C4:6D:ED:5D:15:6D:53:33:0C X509v3 Authority Key Identifier: keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:5b:95:8c:23:8b:ee:84:ac:8f:fe:7a:8d:a9:19:50:60:46: c0:a6:99:5d:d9:84:2f:9c:a4:6e:73:c1:b7:52:36:58:fc:4e: 75:c4:e1:62:e1:58:89:01:fd:f3:6e:34:a9:f3:d5:ff:57:1d: 89:1b:e6:6e:1a:1d:54:8f:88:52:98:7b:70:e1:32:c7:5b:0b: dc:a8:0e:93:4c:bd:70:e4:13:7e:5e:ee:e3:fc:46:e3:4f:99: ad:f6:9c:1b:84:62:35:6d:bd:96:d0:39:44:bd:3a:80:fb:6e: e5:c0:34:c5:ec:cd:48:55:a8:f7:54:0a:74:1e:c2:d5:15:3f: 4d:d1:8c:54:8e:fc:4f:7a:86:27:83:9f:93:67:18:3b:a5:b1: 4d:85:fa:cf:63:00:8e:0a:71:4c:a9:21:e5:cd:de:f0:16:4a: d0:c8:22:05:d3:7c:c1:73:4c:6a:b1:4d:c5:ee:dc:4e:81:9b: 47:64:d1:71:65:b6:aa:1e:56:3d:62:9b:dd:d6:49:3b:d3:8b: 7b:c2:cb:fd:56:8e:b5:e0:ef:bb:b9:ab:0a:1d:05:8a:5b:ef: 96:fd:6c:cc:39:c5:ed:47:da:49:16:40:01:05:b5:b8:16:83: 40:a8:4d:40:ba:87:61:89:70:6f:c9:78:0d:70:ba:ff:85:b0: 54:6a:cb:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0VuQYrf8MJqk9NVfm0baIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMjliY2JkNWNmY2MxOTVlNzZiNzBhMWJmMGRkOTkxZWM3 ZTMzZDQwHhcNMjUxMjE5MDIwMTA4WhcNMjUxMjIwMDIwMTA4WjAzMTEwLwYDVQQD Eyg3OTllZjc1NzNiZTBhMjYxNWQ5Nzg5YzQ2ZGVkNWQxNTZkNTMzMzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSOHRRRsCml/ezMJFkylNKb/fuq/ ndogP+3udEIvt1XndTUzmmZDcp004GQSPkHGL8s+WwR8UzNiM6zg1QlLLwl0GwQT qxLfC+QVGwrB+AK+12w0nDYmVwv+CZCt16GEfna1Mvf72thjkgQT8WrfirqMzezn /rxUp6AJr4hED9axqxnF+tSHYwGQoeORmqTaxfA73HHluC3V7X+PeG4BqGycoU+e /7siaJviVkDHHFNcNCFr3+kzpX/Rs//ET+KTgQ1rZCCBTIxqoXb1oJDcEfxpTNyp S4j1dE98O6pK1XnVFk0iWQzINdxeaC3JKtJLzvv2NAUQ05JSPav2qc/vQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHme91c74KJhXZeJxG3tXRVtUzMMMB8GA1UdIwQY MBaAFB8pvL1c/MGV52twob8N2ZHsfjPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEt ZDRkMzVkOTk5ODFkLzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEtZDRkMzVkOTk5ODFk LzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUluVjCOL 7oSsj/56jakZUGBGwKaZXdmEL5ykbnPBt1I2WPxOdcThYuFYiQH98240qfPV/1cd iRvmbhodVI+IUph7cOEyx1sL3KgOk0y9cOQTfl7u4/xG40+ZrfacG4RiNW29ltA5 RL06gPtu5cA0xezNSFWo91QKdB7C1RU/TdGMVI78T3qGJ4Ofk2cYO6WxTYX6z2MA jgpxTKkh5c3e8BZK0MgiBdN8wXNMarFNxe7cToGbR2TRcWW2qh5WPWKb3dZJO9OL e8LL/VaOteDvu7mrCh0Filvvlv1szDnF7UfaSRZAAQW1uBaDQKhNQLqHYYlwb8l4 DXC6/4WwVGrLxQ== -----END CERTIFICATE-----Generated at Fri Dec 19 11:19:57 2025 by rpki-client