This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json) Hash identifier: BXxOFLTKki42IzAxorkQRtu++5zdD57mi4AKx53YCiE= Subject key identifier: 0B:4F:B4:40:FD:0F:6C:42:9F:C1:5A:B9:10:B2:73:D9:46:86:03:7C Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e Certificate serial: 019B4ADEC079F3CE9C36F2488E468A36AFE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft Manifest number: 0DBE Signing time: Tue 23 Dec 2025 11:01:10 +0000 Manifest this update: Tue 23 Dec 2025 11:01:10 +0000 Manifest next update: Wed 24 Dec 2025 11:01:10 +0000 Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: trkfuBISFLrYdfNcYGpcVIuNfG+S4sf9ri15EHANLP4=) 2: KUAHtfvST5K1EckHjwHYRJlPUp4.roa (hash: xEJyISbIDbAPWfTLfoXu5sCkABLUM5AZf64I/6n92jo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:de:c0:79:f3:ce:9c:36:f2:48:8e:46:8a:36:af:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e Validity Not Before: Dec 23 11:01:10 2025 GMT Not After : Dec 24 11:01:10 2025 GMT Subject: CN=0b4fb440fd0f6c429fc15ab910b273d94686037c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8c:be:9c:60:10:a9:bd:f7:0f:2b:b3:f4:b3: 77:cc:76:fe:d3:e9:fe:2e:c5:15:35:87:7c:e8:9e: f1:f8:21:07:de:ec:83:83:a2:36:0e:ba:fb:15:98: 96:b3:cd:47:70:46:11:37:0d:e9:82:5e:6e:34:d0: 7a:8b:54:58:89:7b:bf:35:19:87:f8:af:31:b8:7f: d8:d1:21:dd:fb:45:02:4c:e7:28:b6:c3:a2:ab:30: 9d:a1:de:7f:1d:ec:ee:1e:7a:20:4e:0c:d5:01:3c: 6e:fb:81:5a:ae:95:43:ba:36:20:a1:0a:fc:aa:d2: c6:77:4c:22:21:c2:bc:8a:e8:c9:b0:94:3f:39:bb: 6e:49:7c:d9:57:70:a4:53:70:1c:9b:aa:d6:1f:2e: 9d:ed:b3:3e:23:3a:12:4e:63:61:6e:27:0f:a1:e0: e7:45:bc:a7:36:6b:f6:6b:df:4e:4d:ef:ff:ad:d1: 7d:20:37:83:21:5b:d8:e8:49:2c:55:5b:9d:de:3a: e5:ff:ba:ab:71:9d:ca:8f:f5:c1:d9:ee:d0:51:99: 01:bb:b7:58:5f:7e:0c:65:c4:18:b3:08:7d:b8:9e: f8:94:23:60:7c:04:dd:cb:b1:82:7c:d0:6e:21:2c: bc:83:94:83:c0:b4:69:be:aa:1a:2a:99:68:c1:05: a5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4F:B4:40:FD:0F:6C:42:9F:C1:5A:B9:10:B2:73:D9:46:86:03:7C X509v3 Authority Key Identifier: keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:ef:91:c7:a6:3b:88:97:23:ff:83:9c:dd:e1:b9:65:33:0b: 76:5a:1e:b0:9f:e8:47:b9:1f:83:21:85:79:2f:19:de:03:a6: 89:77:d4:81:50:f8:a1:28:66:3e:12:c0:22:53:42:5f:18:12: 52:a3:aa:e5:fa:90:5d:09:44:0a:77:cd:65:9e:27:b5:8e:6c: 40:67:ae:3e:31:be:ec:90:b5:28:27:af:d7:5b:44:20:13:52: 2b:d8:2e:fb:b2:d6:ce:05:ce:20:45:ba:54:4e:a5:5a:98:75: 14:37:55:ef:f1:5f:54:df:f1:44:fa:46:25:07:de:bd:52:3d: 86:ec:41:13:6e:2c:9d:25:9a:4d:15:b7:18:f6:1a:fa:8a:0f: 5c:86:b1:b9:ff:6b:e5:27:4b:ec:de:a5:2c:f9:ab:d8:18:92: 55:00:bd:7c:09:5c:35:ca:38:aa:ed:ec:34:a5:19:58:94:01: e1:19:4c:37:27:87:4c:90:1e:1f:58:95:57:f0:ab:55:76:2c: c5:43:6b:20:c9:92:dd:c6:a1:0d:a1:b4:3c:d9:4c:1c:24:a8: a0:11:a1:45:b3:5f:e0:0b:24:fb:10:58:9c:94:84:4e:cd:03: 40:02:7a:4e:2a:c4:ee:3f:1c:dc:f3:32:07:64:ab:35:10:3e: 89:02:8b:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtK3sB5886cNvJIjkaKNq/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkODYxNzgyOTczYzM4MmNjMWNlNjcwZjVhZDUwZGY4ZmI1 M2M4MmUwHhcNMjUxMjIzMTEwMTEwWhcNMjUxMjI0MTEwMTEwWjAzMTEwLwYDVQQD EygwYjRmYjQ0MGZkMGY2YzQyOWZjMTVhYjkxMGIyNzNkOTQ2ODYwMzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYy+nGAQqb33Dyuz9LN3zHb+0+n+ LsUVNYd86J7x+CEH3uyDg6I2Drr7FZiWs81HcEYRNw3pgl5uNNB6i1RYiXu/NRmH +K8xuH/Y0SHd+0UCTOcotsOiqzCdod5/HezuHnogTgzVATxu+4FarpVDujYgoQr8 qtLGd0wiIcK8iujJsJQ/ObtuSXzZV3CkU3Acm6rWHy6d7bM+IzoSTmNhbicPoeDn RbynNmv2a99OTe//rdF9IDeDIVvY6EksVVud3jrl/7qrcZ3Kj/XB2e7QUZkBu7dY X34MZcQYswh9uJ74lCNgfATdy7GCfNBuISy8g5SDwLRpvqoaKplowQWlXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtPtED9D2xCn8FauRCyc9lGhgN8MB8GA1UdIwQY MBaAFB2GF4KXPDgswc5nD1rVDfj7U8guMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTIt OGUwNjBjYTk2ZmFjLzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTItOGUwNjBjYTk2ZmFj LzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs++Rx6Y7 iJcj/4Oc3eG5ZTMLdloesJ/oR7kfgyGFeS8Z3gOmiXfUgVD4oShmPhLAIlNCXxgS UqOq5fqQXQlECnfNZZ4ntY5sQGeuPjG+7JC1KCev11tEIBNSK9gu+7LWzgXOIEW6 VE6lWph1FDdV7/FfVN/xRPpGJQfevVI9huxBE24snSWaTRW3GPYa+ooPXIaxuf9r 5SdL7N6lLPmr2BiSVQC9fAlcNco4qu3sNKUZWJQB4RlMNyeHTJAeH1iVV/CrVXYs xUNrIMmS3cahDaG0PNlMHCSooBGhRbNf4Ask+xBYnJSETs0DQAJ6TirE7j8c3PMy B2SrNRA+iQKLTQ== -----END CERTIFICATE-----Generated at Tue Dec 23 13:03:23 2025 by rpki-client