This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json) Hash identifier: M9wV46cOtKjV0p9cSWqCVj4qESROuxCB2SuFgZt2Skw= Subject key identifier: 01:BE:5D:DE:99:30:89:B9:13:CF:76:07:71:7F:4C:6B:87:00:92:95 Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0 Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0 Certificate serial: 019B0E93629431B563C6E5BEB7DE6BA0AF78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft Manifest number: 05CF Signing time: Thu 11 Dec 2025 18:01:38 +0000 Manifest this update: Thu 11 Dec 2025 18:01:38 +0000 Manifest next update: Fri 12 Dec 2025 18:01:38 +0000 Files and hashes: 1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: z8Jk4guprD14fvDgOsktDQLwUMbZBbTtZTZ9YeHm2KQ=) 2: s0bJG6Qp94T0ozPjLlAbRCJfTFs.roa (hash: qwFiBqb0rHrSmTwD9b+7ecXoNWtZfg8qRArEug26wV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:93:62:94:31:b5:63:c6:e5:be:b7:de:6b:a0:af:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0 Validity Not Before: Dec 11 18:01:38 2025 GMT Not After : Dec 12 18:01:38 2025 GMT Subject: CN=01be5dde993089b913cf7607717f4c6b87009295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ac:51:ca:e9:81:4a:6f:d3:79:20:d7:92:ac: 00:e6:58:19:d3:55:78:9b:01:79:f2:81:d9:9d:79: 96:00:2a:f7:9a:33:e2:79:0b:e4:c2:35:48:ea:e9: 86:51:2d:ea:dd:66:c5:5e:a9:50:25:b2:3b:89:03: f2:7c:2e:b2:dc:2f:8f:8a:4b:b0:d3:f5:4d:cc:a1: ec:23:24:73:b0:de:24:aa:05:bb:12:1a:84:c7:63: 5e:64:18:62:e0:cd:5d:cc:c2:ba:f3:92:81:f8:76: 2a:ba:2b:31:1b:52:f0:e5:e6:7c:38:9c:12:dc:72: 8a:cb:b2:d9:54:15:a6:1f:f2:72:ba:79:a1:fb:ea: b1:f9:d1:30:f5:4b:99:11:be:5e:62:2f:a3:e6:00: a5:bb:1a:23:f6:14:5b:0a:11:14:e9:14:8d:13:1b: 77:51:24:64:1f:d0:a8:22:c3:9b:3a:eb:29:ec:19: 69:af:0b:a3:0b:74:9b:75:ff:87:7e:1f:62:d8:0a: 5a:85:3d:a3:68:4c:99:83:3d:2b:d0:12:58:7c:88: 77:56:a6:43:53:fc:05:c0:21:a7:05:d4:d8:1e:41: f5:99:f7:4c:b7:24:0f:04:f0:04:ad:01:21:5c:98: 85:4b:64:62:6d:0d:90:a0:17:63:14:22:22:2b:a1: 4e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:BE:5D:DE:99:30:89:B9:13:CF:76:07:71:7F:4C:6B:87:00:92:95 X509v3 Authority Key Identifier: keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:df:85:1c:c5:f9:f2:da:7d:5d:2e:e4:ba:6c:09:e4:b0:c9: fb:56:db:bf:c5:06:b4:5b:8d:42:5e:9c:6f:c7:3d:6f:06:41: 1c:6f:a0:b9:30:c4:e7:06:47:d3:26:1f:c8:9c:6e:6c:b0:48: a1:31:24:d5:cc:92:bb:91:70:3e:f5:ab:a5:0f:79:08:84:46: 1d:1a:8f:9d:38:2d:ba:14:23:e5:84:5b:a4:4e:24:15:75:66: 97:58:6c:10:af:d2:1f:52:88:1a:05:5f:39:ae:69:cd:f9:90: 52:dd:51:e2:98:f5:1f:ae:ba:12:98:f3:ee:32:a5:f8:ae:49: 84:d8:c3:e4:27:4d:8d:15:f7:36:93:e3:7a:0b:45:27:5e:0f: f9:9c:d6:68:a5:38:95:a0:92:fa:d5:31:96:24:56:9c:21:28: 80:ce:32:36:e2:33:c4:33:f1:b7:b6:67:8d:84:5f:68:0a:07: f3:d4:fa:40:57:1c:25:73:31:7a:36:89:ce:d5:6c:41:b3:07: 49:2e:67:e3:74:cb:63:bb:c7:fc:b6:90:b7:2b:a1:7c:29:26: e6:96:27:fa:92:bf:b4:b7:dc:a4:ef:99:27:4f:72:00:16:bf: a7:c6:f0:28:4e:09:31:3e:73:9a:e6:e7:ef:0e:8b:02:e6:68: bd:e2:9b:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOk2KUMbVjxuW+t95roK94MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMjZjZTkyYzJjZDgzYjVlY2NmNDk3MzNmM2E3YmU3N2Fk ZDQ5YTAwHhcNMjUxMjExMTgwMTM4WhcNMjUxMjEyMTgwMTM4WjAzMTEwLwYDVQQD EygwMWJlNWRkZTk5MzA4OWI5MTNjZjc2MDc3MTdmNGM2Yjg3MDA5Mjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaxRyumBSm/TeSDXkqwA5lgZ01V4 mwF58oHZnXmWACr3mjPieQvkwjVI6umGUS3q3WbFXqlQJbI7iQPyfC6y3C+Pikuw 0/VNzKHsIyRzsN4kqgW7EhqEx2NeZBhi4M1dzMK685KB+HYquisxG1Lw5eZ8OJwS 3HKKy7LZVBWmH/Jyunmh++qx+dEw9UuZEb5eYi+j5gCluxoj9hRbChEU6RSNExt3 USRkH9CoIsObOusp7BlprwujC3Sbdf+Hfh9i2ApahT2jaEyZgz0r0BJYfIh3VqZD U/wFwCGnBdTYHkH1mfdMtyQPBPAErQEhXJiFS2RibQ2QoBdjFCIiK6FOhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAG+Xd6ZMIm5E892B3F/TGuHAJKVMB8GA1UdIwQY MBaAFB8mzpLCzYO17M9Jcz86e+d63UmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8xZDBmNDEtNTE5YS00YzQyLWFhNmYt YzcxZDJiOTJjMzk3LzEvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8xZDBmNDEtNTE5YS00YzQyLWFhNmYtYzcxZDJiOTJjMzk3 LzEvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvt+FHMX5 8tp9XS7kumwJ5LDJ+1bbv8UGtFuNQl6cb8c9bwZBHG+guTDE5wZH0yYfyJxubLBI oTEk1cySu5FwPvWrpQ95CIRGHRqPnTgtuhQj5YRbpE4kFXVml1hsEK/SH1KIGgVf Oa5pzfmQUt1R4pj1H666Epjz7jKl+K5JhNjD5CdNjRX3NpPjegtFJ14P+ZzWaKU4 laCS+tUxliRWnCEogM4yNuIzxDPxt7ZnjYRfaAoH89T6QFccJXMxejaJztVsQbMH SS5n43TLY7vH/LaQtyuhfCkm5pYn+pK/tLfcpO+ZJ09yABa/p8bwKE4JMT5zmubn 7w6LAuZoveKbvQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:54:42 2025 by rpki-client