This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft File: hUyBdtnELHBLMQkTMJRwNRu1meU.mft (raw, json) Hash identifier: sZJySU1tTcNtTpu3O5tA2CFrOueKC+Y05B6zogeMx4M= Subject key identifier: 9D:2F:11:2F:E4:D1:FB:DC:08:2A:8E:84:76:02:85:75:37:9B:A7:6D Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5 Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5 Certificate serial: 019B35D77EAD76D7AC4DF2648774EED6548E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft Manifest number: 12AD Signing time: Fri 19 Dec 2025 09:01:13 +0000 Manifest this update: Fri 19 Dec 2025 09:01:13 +0000 Manifest next update: Sat 20 Dec 2025 09:01:13 +0000 Files and hashes: 1: d12qVgxDPPHiE2ljm9qZxxkNLxQ.roa (hash: zX9r1B9nDeSmX0ma2mBmx6eNhz70tybIXv2tasEp9Z0=) 2: hUyBdtnELHBLMQkTMJRwNRu1meU.crl (hash: KY40AYkDQb4y8ZzmAW9sIfZLzmVSBsrtMg88JKr7ITU=) 3: j-Ef-_ZUrA-AY6ZXYzU0wKA0MAE.roa (hash: xMubkcRgzBEAU63sGA3yqVsJQIJj2JYDdMpLJL8yY80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:7e:ad:76:d7:ac:4d:f2:64:87:74:ee:d6:54:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854c8176d9c42c704b310913309470351bb599e5 Validity Not Before: Dec 19 09:01:13 2025 GMT Not After : Dec 20 09:01:13 2025 GMT Subject: CN=9d2f112fe4d1fbdc082a8e8476028575379ba76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:88:45:b1:fe:60:97:68:83:6b:18:4d:47:ad: 8c:bd:b1:47:b3:f3:48:0b:6f:5f:17:5d:62:7f:03: 5f:8d:63:6f:bf:f9:16:b1:55:a0:1c:90:3f:62:3c: 9c:75:95:1f:fe:fc:7d:64:4c:ae:23:5d:fa:16:70: dd:db:5f:c6:5d:2a:2b:91:b8:83:82:02:d0:e5:cc: 5b:c6:11:cc:42:d7:8c:5f:0a:fb:57:7d:fa:a0:7c: da:ae:86:9f:d9:b4:5d:1b:dd:8f:ac:ce:9f:20:da: e0:8b:76:b8:5b:43:a3:2b:35:fa:47:e0:a4:80:3f: dc:09:20:53:25:90:31:84:70:b3:29:60:a5:9b:fc: 59:5e:45:9a:8c:2c:04:34:00:5a:e0:9e:e9:3b:6a: 31:71:7a:60:cd:50:59:56:3c:9d:1e:97:c8:b5:25: cf:47:40:ab:79:0a:42:27:ef:38:d8:c9:cd:be:db: ed:fc:23:54:83:f2:3a:9f:93:66:b8:21:f0:a1:d6: 5e:42:a2:03:b1:a6:ce:30:9f:fa:52:26:86:ed:84: 44:a1:12:09:43:df:ab:59:4b:46:cc:17:13:bf:f4: 83:58:c7:cb:3d:56:7b:f1:21:9f:73:59:91:10:9d: 6b:8c:a0:f6:2d:8a:0c:18:5e:02:10:e8:1d:5a:a6: 9e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2F:11:2F:E4:D1:FB:DC:08:2A:8E:84:76:02:85:75:37:9B:A7:6D X509v3 Authority Key Identifier: keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:04:b1:f6:61:ca:4e:3c:9e:d3:1f:ef:3d:79:86:c7:21:86: ea:5e:ac:73:8b:d0:63:39:ca:99:8a:f6:7c:2d:08:20:74:40: 70:30:a5:7a:62:f6:e6:1f:f9:db:b4:6c:57:e6:39:f4:6c:f6: 38:09:46:52:10:18:79:70:02:09:34:6b:f0:08:d2:66:4a:dd: 2d:da:8f:be:10:0b:b3:15:b1:9b:eb:ca:98:9b:99:46:33:97: a0:b5:11:84:c0:be:a6:5f:dd:54:5a:bb:3a:a4:f7:61:fe:78: 26:c2:66:48:88:ad:a8:e8:bb:85:ea:09:70:84:48:20:6f:96: 1b:bd:aa:1e:31:db:4e:99:40:1f:b0:32:02:e1:59:f9:cd:e5: ee:8e:a8:d5:37:52:01:d4:bc:4e:f1:dd:76:96:b1:05:01:52: 10:e5:76:36:6a:a3:76:f8:11:6f:70:b6:37:83:9c:4a:be:82: c4:59:df:67:21:d8:ba:e8:ad:f2:a5:ec:03:92:89:d1:a3:8f: 43:85:ca:5c:4e:03:4e:8a:26:5f:f5:3a:b7:af:44:0a:a7:a0: 55:46:69:40:95:ef:61:98:be:4e:3d:02:e6:d8:8e:94:92:25: dc:cf:bb:9c:5a:29:7b:21:8b:7c:e9:22:28:0b:cd:1e:6f:89: 9c:ec:03:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1136tdtesTfJkh3Tu1lSOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGM4MTc2ZDljNDJjNzA0YjMxMDkxMzMwOTQ3MDM1MWJi NTk5ZTUwHhcNMjUxMjE5MDkwMTEzWhcNMjUxMjIwMDkwMTEzWjAzMTEwLwYDVQQD Eyg5ZDJmMTEyZmU0ZDFmYmRjMDgyYThlODQ3NjAyODU3NTM3OWJhNzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIhFsf5gl2iDaxhNR62MvbFHs/NI C29fF11ifwNfjWNvv/kWsVWgHJA/YjycdZUf/vx9ZEyuI136FnDd21/GXSorkbiD ggLQ5cxbxhHMQteMXwr7V336oHzaroaf2bRdG92PrM6fINrgi3a4W0OjKzX6R+Ck gD/cCSBTJZAxhHCzKWClm/xZXkWajCwENABa4J7pO2oxcXpgzVBZVjydHpfItSXP R0CreQpCJ+842MnNvtvt/CNUg/I6n5NmuCHwodZeQqIDsabOMJ/6UiaG7YREoRIJ Q9+rWUtGzBcTv/SDWMfLPVZ78SGfc1mREJ1rjKD2LYoMGF4CEOgdWqaeaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0vES/k0fvcCCqOhHYChXU3m6dtMB8GA1UdIwQY MBaAFIVMgXbZxCxwSzEJEzCUcDUbtZnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jZmY2MzAtNmM4YS00M2JkLWFmYjkt YjA3ZjAxNmExNzYyLzEvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jZmY2MzAtNmM4YS00M2JkLWFmYjktYjA3ZjAxNmExNzYy LzEvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQSx9mHK Tjye0x/vPXmGxyGG6l6sc4vQYznKmYr2fC0IIHRAcDClemL25h/527RsV+Y59Gz2 OAlGUhAYeXACCTRr8AjSZkrdLdqPvhALsxWxm+vKmJuZRjOXoLURhMC+pl/dVFq7 OqT3Yf54JsJmSIitqOi7heoJcIRIIG+WG72qHjHbTplAH7AyAuFZ+c3l7o6o1TdS AdS8TvHddpaxBQFSEOV2NmqjdvgRb3C2N4OcSr6CxFnfZyHYuuit8qXsA5KJ0aOP Q4XKXE4DToomX/U6t69ECqegVUZpQJXvYZi+Tj0C5tiOlJIl3M+7nFopeyGLfOki KAvNHm+JnOwD9A== -----END CERTIFICATE-----Generated at Fri Dec 19 14:36:29 2025 by rpki-client