This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json) Hash identifier: 9Tx/b5/CEwOJe++J5hhGoNrDvnln5F5sVHQcUCpGufg= Subject key identifier: 72:6F:62:9B:C1:8F:FF:FB:CB:1D:59:42:BB:D8:88:EA:A8:7A:76:42 Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e Certificate serial: 019B262D57EC47667D459B57157578BB7DD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft Manifest number: 0DAB Signing time: Tue 16 Dec 2025 08:01:04 +0000 Manifest this update: Tue 16 Dec 2025 08:01:04 +0000 Manifest next update: Wed 17 Dec 2025 08:01:04 +0000 Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: 8A13qY/O1BJWPDU144u5cfBaYu3LitOosz0orMzjFic=) 2: KUAHtfvST5K1EckHjwHYRJlPUp4.roa (hash: xEJyISbIDbAPWfTLfoXu5sCkABLUM5AZf64I/6n92jo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:2d:57:ec:47:66:7d:45:9b:57:15:75:78:bb:7d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e Validity Not Before: Dec 16 08:01:04 2025 GMT Not After : Dec 17 08:01:04 2025 GMT Subject: CN=726f629bc18ffffbcb1d5942bbd888eaa87a7642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fc:02:d1:e7:5f:e8:04:6c:5e:35:7b:0e:e3: dc:dc:79:b7:85:31:e1:ec:6d:f0:a8:84:ef:80:1b: 0d:13:09:44:34:0f:8d:da:54:06:bb:62:33:17:d4: 49:d7:84:4e:a8:5e:ed:70:30:b2:09:44:da:40:d8: 59:65:e5:a9:a3:b8:57:48:e1:5d:c6:ea:2e:82:11: 05:1f:44:2b:6c:4d:d6:22:7d:d6:ee:58:c3:96:cb: 6b:8c:a8:bc:b4:56:d6:b9:c2:bd:19:b4:31:c7:a6: 3b:00:71:1a:e1:12:1b:52:0e:96:79:df:88:23:14: 38:9d:3a:6f:e1:23:dd:dd:00:8f:8f:79:5b:13:a4: 19:51:32:bf:6a:2d:69:20:e8:33:b8:63:b6:ba:48: 86:97:b9:b8:25:48:77:14:33:f5:70:7a:f5:fc:bb: 0c:4c:3e:c6:a5:63:be:46:05:77:1a:40:ca:c0:45: 6d:42:d4:a0:b2:26:c2:01:2c:e9:dd:62:60:4a:80: 2b:f2:f0:d9:27:6e:c0:6c:fc:07:73:70:04:60:c8: 40:10:b3:ec:02:36:fc:76:e8:3b:b1:af:94:3e:9a: 01:81:ba:23:58:dd:f2:d5:90:09:c9:b6:41:bb:2b: 44:8f:73:29:38:f4:fd:48:32:26:36:02:79:f2:ac: ec:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6F:62:9B:C1:8F:FF:FB:CB:1D:59:42:BB:D8:88:EA:A8:7A:76:42 X509v3 Authority Key Identifier: keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:27:c0:76:29:35:12:f7:ef:f8:85:7d:0d:26:a9:74:91:aa: f0:42:fa:9d:ae:07:5b:33:95:19:9d:ca:93:4f:66:46:cf:5f: e9:49:28:42:d5:de:1e:89:41:a9:f1:f1:1f:97:59:cd:5c:7f: 70:8e:6a:df:ca:c0:36:a0:ef:1e:4a:a8:e9:ff:80:ed:1f:93: 34:6a:6d:b2:62:f8:1c:db:96:8d:31:3f:21:e0:67:a1:66:c8: 72:40:ba:9e:82:bb:2b:ff:a8:fb:c8:b5:bc:46:ea:2c:58:40: d7:1a:47:b8:b1:64:71:94:e5:5d:9c:d2:6b:cb:7e:1b:6c:d9: f6:a7:da:c4:e9:44:2e:45:78:32:e5:d2:bd:77:8c:a1:04:c3: 19:9e:27:8d:43:5e:2f:e7:ef:6b:ab:b9:cd:8b:82:e8:83:86: a8:e0:25:3d:ee:95:2e:1d:bf:05:21:97:06:9c:48:09:52:30: 1d:ae:02:90:fb:a1:98:4c:ae:93:e6:03:de:b0:f0:af:a6:cb: 78:d8:a1:55:80:f4:1e:ff:74:ef:03:04:ba:6c:82:43:86:c7: 8d:63:77:e2:2b:35:53:1d:92:a7:ae:ae:45:f6:96:17:1c:15: 9c:77:cf:56:ed:e8:22:17:4a:44:36:50:5f:c9:5f:37:44:b6: 1f:aa:e9:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmLVfsR2Z9RZtXFXV4u33UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkODYxNzgyOTczYzM4MmNjMWNlNjcwZjVhZDUwZGY4ZmI1 M2M4MmUwHhcNMjUxMjE2MDgwMTA0WhcNMjUxMjE3MDgwMTA0WjAzMTEwLwYDVQQD Eyg3MjZmNjI5YmMxOGZmZmZiY2IxZDU5NDJiYmQ4ODhlYWE4N2E3NjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/wC0edf6ARsXjV7DuPc3Hm3hTHh 7G3wqITvgBsNEwlENA+N2lQGu2IzF9RJ14ROqF7tcDCyCUTaQNhZZeWpo7hXSOFd xuoughEFH0QrbE3WIn3W7ljDlstrjKi8tFbWucK9GbQxx6Y7AHEa4RIbUg6Wed+I IxQ4nTpv4SPd3QCPj3lbE6QZUTK/ai1pIOgzuGO2ukiGl7m4JUh3FDP1cHr1/LsM TD7GpWO+RgV3GkDKwEVtQtSgsibCASzp3WJgSoAr8vDZJ27AbPwHc3AEYMhAELPs Ajb8dug7sa+UPpoBgbojWN3y1ZAJybZBuytEj3MpOPT9SDImNgJ58qzsNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJvYpvBj//7yx1ZQrvYiOqoenZCMB8GA1UdIwQY MBaAFB2GF4KXPDgswc5nD1rVDfj7U8guMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTIt OGUwNjBjYTk2ZmFjLzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTItOGUwNjBjYTk2ZmFj LzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECfAdik1 Evfv+IV9DSapdJGq8EL6na4HWzOVGZ3Kk09mRs9f6UkoQtXeHolBqfHxH5dZzVx/ cI5q38rANqDvHkqo6f+A7R+TNGptsmL4HNuWjTE/IeBnoWbIckC6noK7K/+o+8i1 vEbqLFhA1xpHuLFkcZTlXZzSa8t+G2zZ9qfaxOlELkV4MuXSvXeMoQTDGZ4njUNe L+fva6u5zYuC6IOGqOAlPe6VLh2/BSGXBpxICVIwHa4CkPuhmEyuk+YD3rDwr6bL eNihVYD0Hv907wMEumyCQ4bHjWN34is1Ux2Sp66uRfaWFxwVnHfPVu3oIhdKRDZQ X8lfN0S2H6rpNg== -----END CERTIFICATE-----Generated at Tue Dec 16 09:47:21 2025 by rpki-client