This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft File: HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft (raw, json) Hash identifier: WnamqWi1fJb0nTdb0qFeU/+9U4cfAMz+4Tz8Gbe8D+Y= Subject key identifier: 03:F3:7C:50:80:87:07:E0:39:33:D9:92:9A:3D:1C:CA:12:57:92:85 Authority key identifier: 1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3 Certificate issuer: /CN=1d361d7f1f5f823977502606351fd48dfbee11e3 Certificate serial: 019B59AC8AAFDF39B1054B83768F3FA28B07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft Manifest number: 087D Signing time: Fri 26 Dec 2025 08:00:38 +0000 Manifest this update: Fri 26 Dec 2025 08:00:38 +0000 Manifest next update: Sat 27 Dec 2025 08:00:38 +0000 Files and hashes: 1: DIbZDqcpM4qcOhMF8eKXFmsPvQ0.roa (hash: lG6irPrrENioJbdZNCV7dvSlaOPs7EcYHQ3gatCpu5Y=) 2: HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl (hash: oWdTB12hoLH+Kc6CmIWjxhe1hBf8lkHSFuHRJ3dhibY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:8a:af:df:39:b1:05:4b:83:76:8f:3f:a2:8b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d361d7f1f5f823977502606351fd48dfbee11e3 Validity Not Before: Dec 26 08:00:38 2025 GMT Not After : Dec 27 08:00:38 2025 GMT Subject: CN=03f37c50808707e03933d9929a3d1cca12579285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:28:1c:ee:cf:20:42:01:eb:df:9d:45:c7:f5: 61:c3:9d:f9:6a:0f:d9:1a:7b:a3:fa:a5:15:dd:ec: 04:cb:5d:9d:f9:81:b5:68:8c:a5:de:7e:1f:46:ee: 6c:53:96:95:84:46:77:36:d1:d8:1b:47:88:92:b8: 0f:b8:fa:ab:d7:0d:6c:1a:8f:47:cb:a5:fe:b0:3e: 8c:af:4b:12:b5:8e:64:52:96:fd:68:3c:56:71:79: 08:53:c9:4e:a6:ed:8c:40:78:74:37:9e:81:eb:1b: 20:28:35:9c:eb:59:b5:b1:fa:e1:2f:a1:cd:55:17: 26:71:28:bf:b7:a8:2a:a4:cf:a5:0b:7a:5e:49:ee: f5:01:f1:33:a9:6d:e3:0b:24:bc:ed:7a:63:4c:29: 5b:0e:b5:df:b6:be:f9:83:de:ae:e1:58:2a:ed:41: 9b:b5:a6:90:91:0a:ec:a3:64:9b:1f:4a:cd:38:92: 02:86:0b:11:64:a0:a7:7a:c4:a6:c5:30:c7:e8:94: 59:22:9e:83:8f:8e:44:c4:8f:56:67:31:e9:8f:d6: 6e:bb:2a:e0:b6:5a:56:73:09:45:b6:52:98:68:a9: c3:1f:97:34:ab:dd:bc:de:b2:41:ca:2b:5c:81:d6: 66:35:fc:57:98:1f:39:08:c6:25:74:76:c9:2c:53: a2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F3:7C:50:80:87:07:E0:39:33:D9:92:9A:3D:1C:CA:12:57:92:85 X509v3 Authority Key Identifier: keyid:1D:36:1D:7F:1F:5F:82:39:77:50:26:06:35:1F:D4:8D:FB:EE:11:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HTYdfx9fgjl3UCYGNR_UjfvuEeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d78f6a-76e7-4ef4-82ba-e9188bcec0c5/1/HTYdfx9fgjl3UCYGNR_UjfvuEeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:dc:3f:ae:71:4f:b0:da:2c:32:36:84:b2:da:01:1e:bf:f8: 4e:76:31:97:e6:5f:ec:dc:f6:22:48:3a:27:f0:b8:19:0f:38: 36:0e:17:a5:2f:b5:c1:a6:30:e4:ea:9e:9e:35:98:9f:26:55: 4b:6c:c1:a4:c0:84:83:b2:b9:34:5b:54:28:26:b5:0a:aa:2a: 25:1f:de:0a:4b:d1:ee:69:44:2d:12:1a:4b:b6:c4:7d:36:44: ea:7a:fc:a0:06:18:61:cf:a5:bf:2c:2f:13:35:47:36:ad:e7: f5:ca:af:00:f8:e9:95:ee:81:25:e5:a2:ae:a0:2e:05:ee:41: b3:97:4f:b1:7e:a9:23:c2:6c:b3:66:3e:02:67:0f:8f:ca:6b: a7:6f:a4:a1:db:22:91:76:70:fe:06:44:d8:78:e2:15:dd:90: b2:e8:1f:e2:a7:98:d1:2f:c6:36:ce:72:ba:bb:51:50:c1:3b: 2e:3e:40:22:e0:f5:b7:1d:a2:99:43:75:03:1b:ae:cc:87:de: 0f:42:10:3c:5a:bb:ba:4e:e4:41:cf:36:75:4c:31:97:2d:93: 7e:e5:a9:fe:22:b9:b5:cb:aa:89:7b:a0:86:0f:50:a7:ec:4c: 36:47:f1:7e:0f:39:87:0b:7a:b4:d5:f6:0a:c0:aa:ff:4a:3a: 8d:ca:62:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrIqv3zmxBUuDdo8/oosHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMzYxZDdmMWY1ZjgyMzk3NzUwMjYwNjM1MWZkNDhkZmJl ZTExZTMwHhcNMjUxMjI2MDgwMDM4WhcNMjUxMjI3MDgwMDM4WjAzMTEwLwYDVQQD EygwM2YzN2M1MDgwODcwN2UwMzkzM2Q5OTI5YTNkMWNjYTEyNTc5Mjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSgc7s8gQgHr351Fx/Vhw535ag/Z Gnuj+qUV3ewEy12d+YG1aIyl3n4fRu5sU5aVhEZ3NtHYG0eIkrgPuPqr1w1sGo9H y6X+sD6Mr0sStY5kUpb9aDxWcXkIU8lOpu2MQHh0N56B6xsgKDWc61m1sfrhL6HN VRcmcSi/t6gqpM+lC3peSe71AfEzqW3jCyS87XpjTClbDrXftr75g96u4Vgq7UGb taaQkQrso2SbH0rNOJIChgsRZKCnesSmxTDH6JRZIp6Dj45ExI9WZzHpj9Zuuyrg tlpWcwlFtlKYaKnDH5c0q9283rJByitcgdZmNfxXmB85CMYldHbJLFOilwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPzfFCAhwfgOTPZkpo9HMoSV5KFMB8GA1UdIwQY MBaAFB02HX8fX4I5d1AmBjUf1I377hHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEt ZTkxODhiY2VjMGM1LzEvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kNzhmNmEtNzZlNy00ZWY0LTgyYmEtZTkxODhiY2VjMGM1 LzEvSFRZZGZ4OWZnamwzVUNZR05SX1VqZnZ1RWVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9w/rnFP sNosMjaEstoBHr/4TnYxl+Zf7Nz2Ikg6J/C4GQ84Ng4XpS+1waYw5OqenjWYnyZV S2zBpMCEg7K5NFtUKCa1CqoqJR/eCkvR7mlELRIaS7bEfTZE6nr8oAYYYc+lvywv EzVHNq3n9cqvAPjple6BJeWirqAuBe5Bs5dPsX6pI8Jss2Y+AmcPj8prp2+kodsi kXZw/gZE2HjiFd2Qsugf4qeY0S/GNs5yurtRUME7Lj5AIuD1tx2imUN1AxuuzIfe D0IQPFq7uk7kQc82dUwxly2TfuWp/iK5tcuqiXughg9Qp+xMNkfxfg85hwt6tNX2 CsCq/0o6jcpikw== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:43 2025 by rpki-client