This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft File: hY6VYi_VRF1u00P4DgU-r_sRiyw.mft (raw, json) Hash identifier: DYmn4uwgItmtz7S1LgHbj7bFgUxHOUiBpeMnyvabs2A= Subject key identifier: 1F:3A:64:0A:7C:8F:C5:A0:BD:7F:88:20:60:08:15:2C:F7:6D:8F:DD Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c Certificate serial: 019B2F6729DD239B47CC475E6FCD5D8B8714 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 03:00:48 +0000 Manifest this update: Thu 18 Dec 2025 03:00:48 +0000 Manifest next update: Fri 19 Dec 2025 03:00:48 +0000 Files and hashes: 1: hY6VYi_VRF1u00P4DgU-r_sRiyw.crl (hash: 4j2aTiZFDWxdH7mbn51aVutEjqIsnWxvyq/4/DBSh00=) 2: s8ohh6B9MPW6Ei_9Z3ptsTMa_B0.roa (hash: u62iZk13BoIGBLhc8QtldmpQibWClfB9WRM3VJxu+Vs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:29:dd:23:9b:47:cc:47:5e:6f:cd:5d:8b:87:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c Validity Not Before: Dec 18 03:00:48 2025 GMT Not After : Dec 19 03:00:48 2025 GMT Subject: CN=1f3a640a7c8fc5a0bd7f88206008152cf76d8fdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a7:f7:3f:7f:44:f8:9c:55:e6:dd:eb:bd:c3: 54:02:8e:9a:a4:a7:66:b2:7d:1a:42:0c:31:0b:75: 5f:0a:fd:09:d2:0a:01:3d:f7:5f:ba:50:42:04:70: 53:89:80:38:aa:96:b2:ee:6d:27:aa:69:09:73:6c: 93:e8:18:12:0d:bf:37:08:97:1c:3b:e2:c9:e1:46: dd:51:59:70:90:67:0f:e7:3b:d1:b9:ab:cb:88:ae: 2c:f4:bb:61:21:20:4a:2f:4a:d0:e4:32:2a:6c:34: f7:cb:e4:e2:c9:57:f5:cc:41:65:09:90:8d:5b:58: c5:a4:fc:e0:89:77:f4:dd:43:b2:67:25:a7:ff:ea: f8:da:3d:4e:40:fe:f2:37:c2:1e:22:98:10:89:9c: f0:ce:dc:61:70:15:6f:62:66:e6:f5:89:9d:2e:31: 9a:4a:e4:ce:8a:5c:93:36:98:f6:e5:7e:7e:b0:6e: 50:b0:ef:93:ac:5f:37:d7:ca:90:52:6f:5a:f4:bb: 1d:4e:ff:66:7c:7e:14:ff:b7:c4:fe:af:ec:f0:25: bf:88:0f:c7:ce:72:70:75:cd:cc:5c:38:da:74:ed: 72:12:3c:77:67:f6:43:7b:bd:de:52:d3:95:de:3b: 66:82:5d:39:30:39:58:2c:49:6e:b7:bc:fc:57:c6: d1:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:3A:64:0A:7C:8F:C5:A0:BD:7F:88:20:60:08:15:2C:F7:6D:8F:DD X509v3 Authority Key Identifier: keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c9:e3:d4:d2:4f:fd:37:bd:16:3d:a0:bb:1f:89:72:d7:3e: 48:50:90:bf:01:a2:07:89:64:08:c0:01:3d:51:02:0d:a2:7e: da:e6:9d:4b:ff:aa:d5:2b:9f:c4:2f:21:c5:df:cb:21:5c:c9: 00:5e:43:69:54:84:85:a0:31:23:bc:a8:b3:05:e8:10:2f:10: 80:45:e2:f2:3b:c3:36:f2:bb:8f:eb:f6:fb:d6:96:33:c7:0d: 2c:b3:29:0d:63:e9:76:80:88:31:ee:3b:15:02:81:52:5e:a9: 17:b9:1b:23:0c:8d:7c:89:57:c4:66:77:ea:aa:ee:76:0c:79: 80:3b:9d:35:60:51:51:77:b8:c0:70:ab:8f:2a:48:5f:00:88: 5e:ac:a8:cb:35:f4:71:71:8d:1d:37:72:a8:35:cc:7f:91:e2: aa:d4:a1:1f:0a:10:c3:56:f6:ab:5e:27:97:5d:bb:cc:de:de: 32:58:dd:12:19:29:eb:54:82:51:6b:c3:88:2b:83:73:0a:89: c7:16:03:ee:78:ba:8a:3b:ee:7e:60:58:73:49:d7:13:c6:76: 54:4d:a8:dc:12:f0:68:5a:7f:28:75:58:00:35:9a:4c:e7:2e: a4:66:0e:6b:b0:64:bb:33:68:dc:de:47:d1:c6:9d:84:86:c4: 16:c9:a1:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZyndI5tHzEdeb81di4cUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1OGU5NTYyMmZkNTQ0NWQ2ZWQzNDNmODBlMDUzZWFmZmIx MThiMmMwHhcNMjUxMjE4MDMwMDQ4WhcNMjUxMjE5MDMwMDQ4WjAzMTEwLwYDVQQD EygxZjNhNjQwYTdjOGZjNWEwYmQ3Zjg4MjA2MDA4MTUyY2Y3NmQ4ZmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56f3P39E+JxV5t3rvcNUAo6apKdm sn0aQgwxC3VfCv0J0goBPfdfulBCBHBTiYA4qpay7m0nqmkJc2yT6BgSDb83CJcc O+LJ4UbdUVlwkGcP5zvRuavLiK4s9LthISBKL0rQ5DIqbDT3y+TiyVf1zEFlCZCN W1jFpPzgiXf03UOyZyWn/+r42j1OQP7yN8IeIpgQiZzwztxhcBVvYmbm9YmdLjGa SuTOilyTNpj25X5+sG5QsO+TrF8318qQUm9a9LsdTv9mfH4U/7fE/q/s8CW/iA/H znJwdc3MXDjadO1yEjx3Z/ZDe73eUtOV3jtmgl05MDlYLElut7z8V8bREwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB86ZAp8j8WgvX+IIGAIFSz3bY/dMB8GA1UdIwQY MBaAFIWOlWIv1URdbtND+A4FPq/7EYssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9kN2IwMDYtMjUyNy00NGU1LWE0MDEt NWJkNGRjYzVkNmVkLzEvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9kN2IwMDYtMjUyNy00NGU1LWE0MDEtNWJkNGRjYzVkNmVk LzEvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiMnj1NJP /Te9Fj2gux+Jctc+SFCQvwGiB4lkCMABPVECDaJ+2uadS/+q1SufxC8hxd/LIVzJ AF5DaVSEhaAxI7yoswXoEC8QgEXi8jvDNvK7j+v2+9aWM8cNLLMpDWPpdoCIMe47 FQKBUl6pF7kbIwyNfIlXxGZ36qrudgx5gDudNWBRUXe4wHCrjypIXwCIXqyoyzX0 cXGNHTdyqDXMf5HiqtShHwoQw1b2q14nl127zN7eMljdEhkp61SCUWvDiCuDcwqJ xxYD7ni6ijvufmBYc0nXE8Z2VE2o3BLwaFp/KHVYADWaTOcupGYOa7BkuzNo3N5H 0cadhIbEFsmhHQ== -----END CERTIFICATE-----Generated at Thu Dec 18 08:03:06 2025 by rpki-client