This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft File: HYFeKwc-sEV2vLJN3k341Ot8nwg.mft (raw, json) Hash identifier: 6ybRj/M7NlM1t0VPyHvXEKZpXqE2eVVk7DqSaqs4Zyw= Subject key identifier: A2:DE:73:53:51:88:06:A3:52:A1:9D:F6:6E:3B:8A:AE:05:D2:A4:CB Authority key identifier: 1D:81:5E:2B:07:3E:B0:45:76:BC:B2:4D:DE:4D:F8:D4:EB:7C:9F:08 Certificate issuer: /CN=1d815e2b073eb04576bcb24dde4df8d4eb7c9f08 Certificate serial: 019B1E0685A900F7D028FB89CDE2B5FB6EDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft Manifest number: 0C5F Signing time: Sun 14 Dec 2025 18:01:42 +0000 Manifest this update: Sun 14 Dec 2025 18:01:42 +0000 Manifest next update: Mon 15 Dec 2025 18:01:42 +0000 Files and hashes: 1: HYFeKwc-sEV2vLJN3k341Ot8nwg.crl (hash: XMsBbKlfF7qD9m2kAaGMGjSmgDKMPvwx7lzG6IjwH2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft rsync://rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 18:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:06:85:a9:00:f7:d0:28:fb:89:cd:e2:b5:fb:6e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d815e2b073eb04576bcb24dde4df8d4eb7c9f08 Validity Not Before: Dec 14 18:01:42 2025 GMT Not After : Dec 15 18:01:42 2025 GMT Subject: CN=a2de7353518806a352a19df66e3b8aae05d2a4cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1b:a0:11:25:6b:42:82:13:a7:77:6f:bc:f5: ce:e3:e9:45:e2:0e:d8:f4:d5:94:62:5d:36:da:c8: 2b:6c:42:d8:39:87:61:13:5b:da:76:8b:36:88:37: bb:6e:13:0c:96:66:58:bf:79:8e:e8:47:4a:2a:f7: 15:c2:3c:5b:14:3f:2b:f8:64:24:82:c3:e5:46:a9: a7:09:6a:66:0a:cd:b4:e0:26:f6:a4:cc:13:91:e7: 40:d2:a4:ad:f6:81:02:6b:5a:cf:b9:8d:28:fe:17: df:c6:f2:82:ac:57:ba:45:b2:cc:7b:b0:81:10:d6: fe:09:cd:10:02:cb:bd:58:ba:cb:e6:fa:ff:4b:9a: 1a:07:c0:a4:5c:cb:69:a0:42:65:c2:b7:69:11:51: 27:b9:4f:53:38:6b:b0:75:f0:24:77:d5:82:05:4c: db:ba:da:33:0a:99:9f:05:23:09:8b:a7:60:5e:21: 0b:3b:c9:72:ce:db:81:70:c6:78:87:a6:f9:23:20: e8:a6:05:05:63:07:bd:c3:4e:19:d6:4f:bd:b0:11: da:4e:58:6b:69:3f:0a:4c:74:69:da:01:ed:dd:8f: 91:b3:59:0b:fc:68:c0:3b:c8:02:c3:c4:92:17:dc: b9:e5:4f:9f:7f:30:7f:c1:9f:b9:58:a1:f7:16:bd: a4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DE:73:53:51:88:06:A3:52:A1:9D:F6:6E:3B:8A:AE:05:D2:A4:CB X509v3 Authority Key Identifier: keyid:1D:81:5E:2B:07:3E:B0:45:76:BC:B2:4D:DE:4D:F8:D4:EB:7C:9F:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYFeKwc-sEV2vLJN3k341Ot8nwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6a5d42-717b-4fbb-a4d0-add2ba82c276/1/HYFeKwc-sEV2vLJN3k341Ot8nwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:53:9a:e6:2d:a0:b5:c9:fc:48:1e:46:66:3c:26:44:c1:8c: 63:10:6d:9a:b0:05:81:e9:d2:25:08:65:d6:3e:1b:ce:10:9b: 4b:5b:55:a3:b6:4f:dd:e9:bc:07:d8:17:76:4d:b8:43:d4:de: f9:7e:a0:01:1e:10:ab:af:9a:3b:49:7c:0c:d3:00:22:4b:16: 3e:c3:f5:6f:ec:cc:2c:e0:a8:b9:74:1b:e7:b7:db:62:c3:6d: 39:fc:88:64:2c:e0:d3:62:d5:81:98:7d:7f:2b:d8:0b:3e:fc: 8c:79:94:d9:a6:2a:18:69:f4:21:12:96:ba:29:b3:39:c2:89: 75:1f:52:e7:16:4d:9d:56:af:6b:32:1b:ea:6b:3d:e2:9f:0d: 05:a1:e9:03:f7:bc:0e:5b:7f:14:48:41:0b:e2:2f:49:a1:a4: 01:7a:f1:52:02:27:0e:cb:81:bf:c1:43:58:52:7a:fc:f8:63: ed:a4:42:de:c0:f9:3f:09:b6:af:c3:98:02:df:53:40:78:9d: 11:59:4c:64:4f:df:15:6b:94:77:ce:1f:39:9f:7e:44:98:7d: bd:9f:86:b3:1f:f2:34:b5:ec:7d:d7:87:ef:60:63:35:e5:b5: 4e:7b:d3:f2:96:66:a4:51:f2:f6:81:9f:38:dd:03:d9:59:5a: 36:73:20:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZseBoWpAPfQKPuJzeK1+27bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkODE1ZTJiMDczZWIwNDU3NmJjYjI0ZGRlNGRmOGQ0ZWI3 YzlmMDgwHhcNMjUxMjE0MTgwMTQyWhcNMjUxMjE1MTgwMTQyWjAzMTEwLwYDVQQD EyhhMmRlNzM1MzUxODgwNmEzNTJhMTlkZjY2ZTNiOGFhZTA1ZDJhNGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRugESVrQoITp3dvvPXO4+lF4g7Y 9NWUYl022sgrbELYOYdhE1vados2iDe7bhMMlmZYv3mO6EdKKvcVwjxbFD8r+GQk gsPlRqmnCWpmCs204Cb2pMwTkedA0qSt9oECa1rPuY0o/hffxvKCrFe6RbLMe7CB ENb+Cc0QAsu9WLrL5vr/S5oaB8CkXMtpoEJlwrdpEVEnuU9TOGuwdfAkd9WCBUzb utozCpmfBSMJi6dgXiELO8lyztuBcMZ4h6b5IyDopgUFYwe9w04Z1k+9sBHaTlhr aT8KTHRp2gHt3Y+Rs1kL/GjAO8gCw8SSF9y55U+ffzB/wZ+5WKH3Fr2kjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKLec1NRiAajUqGd9m47iq4F0qTLMB8GA1UdIwQY MBaAFB2BXisHPrBFdryyTd5N+NTrfJ8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFlGZUt3Yy1zRVYydkxKTjNrMzQxT3Q4bndnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YTVkNDItNzE3Yi00ZmJiLWE0ZDAt YWRkMmJhODJjMjc2LzEvSFlGZUt3Yy1zRVYydkxKTjNrMzQxT3Q4bndnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82YTVkNDItNzE3Yi00ZmJiLWE0ZDAtYWRkMmJhODJjMjc2 LzEvSFlGZUt3Yy1zRVYydkxKTjNrMzQxT3Q4bndnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1Oa5i2g tcn8SB5GZjwmRMGMYxBtmrAFgenSJQhl1j4bzhCbS1tVo7ZP3em8B9gXdk24Q9Te +X6gAR4Qq6+aO0l8DNMAIksWPsP1b+zMLOCouXQb57fbYsNtOfyIZCzg02LVgZh9 fyvYCz78jHmU2aYqGGn0IRKWuimzOcKJdR9S5xZNnVavazIb6ms94p8NBaHpA/e8 Dlt/FEhBC+IvSaGkAXrxUgInDsuBv8FDWFJ6/Phj7aRC3sD5Pwm2r8OYAt9TQHid EVlMZE/fFWuUd84fOZ9+RJh9vZ+Gsx/yNLXsfdeH72BjNeW1TnvT8pZmpFHy9oGf ON0D2VlaNnMg/Q== -----END CERTIFICATE-----Generated at Mon Dec 15 04:58:55 2025 by rpki-client