This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft File: mHyvDLazMBzAhKJdXCFBCpLKfjY.mft (raw, json) Hash identifier: e2bafoCkvPOioBNoybh6LTK09qcYq4NhzAaCrcAxL4Q= Subject key identifier: 2A:C0:15:02:DF:11:AF:68:E1:C7:E8:0A:EC:5B:D8:80:9F:B7:9F:BA Authority key identifier: 98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36 Certificate issuer: /CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36 Certificate serial: 019B3BA28BBB46E0AACCDA940E7C87C4AF3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft Manifest number: 08FA Signing time: Sat 20 Dec 2025 12:01:06 +0000 Manifest this update: Sat 20 Dec 2025 12:01:06 +0000 Manifest next update: Sun 21 Dec 2025 12:01:06 +0000 Files and hashes: 1: mANtdvjrwJb7CPzwvDq9bTI0qtY.roa (hash: bxccQm8ZlD2A8QhBkFeAoasQeWmGc7036H8m3hd3seo=) 2: mHyvDLazMBzAhKJdXCFBCpLKfjY.crl (hash: p+rf5GXoJw5DuJGHHQWijZOCC3zIZY3pyJhKxq3vCV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:8b:bb:46:e0:aa:cc:da:94:0e:7c:87:c4:af:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36 Validity Not Before: Dec 20 12:01:06 2025 GMT Not After : Dec 21 12:01:06 2025 GMT Subject: CN=2ac01502df11af68e1c7e80aec5bd8809fb79fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:05:54:4f:8b:f5:1f:84:0e:58:aa:75:ce:f1: ec:be:19:21:3c:15:07:aa:54:47:fe:e7:3e:9b:00: 76:af:83:ee:f7:bc:0b:c1:34:48:2d:ef:34:f4:6b: 7b:5a:50:e2:4a:14:35:61:c9:77:71:84:92:4a:e2: b0:2b:0b:ab:9a:b0:9c:5c:7d:1c:44:f1:ce:f8:31: 0d:1d:f7:67:76:70:4c:19:ee:d1:f0:79:6f:7f:57: a8:dd:31:92:3d:8f:8f:89:12:60:ba:22:d9:2e:8e: 94:eb:15:e3:8c:51:24:41:b0:61:51:13:de:29:4b: 8f:24:59:53:ff:68:a7:8e:13:d2:12:e7:0e:3a:07: fa:32:c0:31:de:7b:bf:c2:87:fc:0d:42:69:9e:9a: e4:86:e3:39:23:0a:05:f4:f1:a6:d3:5e:2e:86:1c: e2:6c:26:37:18:6d:3c:0a:bd:61:5f:3a:ae:5b:f2: 56:d1:aa:83:e1:83:d6:2c:de:66:e6:e2:a5:f8:b2: 47:50:5a:79:37:dc:b6:4c:e5:51:a1:ea:86:d6:fc: a2:0d:a7:c9:6f:c7:73:07:60:32:2f:7c:26:76:74: 2a:3f:19:90:a7:85:7e:b2:9e:aa:85:bb:df:8f:ce: 23:c0:b0:b8:6e:da:5d:80:3d:31:5d:1a:75:ca:38: 7d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C0:15:02:DF:11:AF:68:E1:C7:E8:0A:EC:5B:D8:80:9F:B7:9F:BA X509v3 Authority Key Identifier: keyid:98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:65:8f:2f:56:36:90:17:aa:96:66:6d:3b:21:fd:a2:48:d8: d7:96:32:23:fc:72:16:4c:fc:1c:06:b6:61:72:51:96:12:b9: bb:dd:9d:7d:a3:ab:38:2d:42:fa:f9:ca:bd:c7:8b:81:53:60: 64:e8:29:6e:5a:85:d9:d9:bb:a7:d1:2b:a4:bc:d1:38:ba:68: 48:3e:e1:bd:d6:f0:cf:ca:61:c3:cd:1b:d7:10:8f:33:cc:7a: d2:18:cf:3d:14:07:b3:57:b2:a7:4e:14:4d:ee:75:bd:58:63: 16:85:50:d0:57:a4:6f:2e:3e:15:ff:1c:31:7e:53:4d:bb:f1: e6:6f:7b:28:1a:f3:4d:df:21:76:b4:a2:02:d4:b3:21:cd:dd: af:aa:94:b5:ef:f0:0d:25:f2:bf:fe:96:94:c2:7b:43:17:25: fd:87:b4:de:93:91:4c:ef:01:f7:b4:d8:97:8a:24:69:b3:39: 27:e1:7a:fb:48:2a:75:7d:27:f2:fd:cf:e8:44:24:91:46:4d: 68:d5:41:5e:42:e4:a4:f0:dc:7d:5b:af:e2:b1:14:a1:79:f2: f6:a3:4e:00:c4:74:e3:bd:72:ea:dc:52:6b:f9:10:d0:8c:44: 68:d0:b3:e1:eb:09:b7:74:65:61:90:e5:c6:74:04:88:d2:3f: 73:f8:a0:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7oou7RuCqzNqUDnyHxK89MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4N2NhZjBjYjZiMzMwMWNjMDg0YTI1ZDVjMjE0MTBhOTJj YTdlMzYwHhcNMjUxMjIwMTIwMTA2WhcNMjUxMjIxMTIwMTA2WjAzMTEwLwYDVQQD EygyYWMwMTUwMmRmMTFhZjY4ZTFjN2U4MGFlYzViZDg4MDlmYjc5ZmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAVUT4v1H4QOWKp1zvHsvhkhPBUH qlRH/uc+mwB2r4Pu97wLwTRILe809Gt7WlDiShQ1Ycl3cYSSSuKwKwurmrCcXH0c RPHO+DENHfdndnBMGe7R8Hlvf1eo3TGSPY+PiRJguiLZLo6U6xXjjFEkQbBhURPe KUuPJFlT/2injhPSEucOOgf6MsAx3nu/wof8DUJpnprkhuM5IwoF9PGm014uhhzi bCY3GG08Cr1hXzquW/JW0aqD4YPWLN5m5uKl+LJHUFp5N9y2TOVRoeqG1vyiDafJ b8dzB2AyL3wmdnQqPxmQp4V+sp6qhbvfj84jwLC4btpdgD0xXRp1yjh9HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrAFQLfEa9o4cfoCuxb2ICft5+6MB8GA1UdIwQY MBaAFJh8rwy2szAcwISiXVwhQQqSyn42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUh5dkRMYXpNQnpBaEtKZFhDRkJDcExLZmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mNThkYTAtZGZiZS00MTZhLWJmYWEt MzYxNzBjZDgxMzMwLzEvbUh5dkRMYXpNQnpBaEtKZFhDRkJDcExLZmpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mNThkYTAtZGZiZS00MTZhLWJmYWEtMzYxNzBjZDgxMzMw LzEvbUh5dkRMYXpNQnpBaEtKZFhDRkJDcExLZmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImWPL1Y2 kBeqlmZtOyH9okjY15YyI/xyFkz8HAa2YXJRlhK5u92dfaOrOC1C+vnKvceLgVNg ZOgpblqF2dm7p9ErpLzROLpoSD7hvdbwz8phw80b1xCPM8x60hjPPRQHs1eyp04U Te51vVhjFoVQ0Fekby4+Ff8cMX5TTbvx5m97KBrzTd8hdrSiAtSzIc3dr6qUte/w DSXyv/6WlMJ7Qxcl/Ye03pORTO8B97TYl4okabM5J+F6+0gqdX0n8v3P6EQkkUZN aNVBXkLkpPDcfVuv4rEUoXny9qNOAMR0471y6txSa/kQ0IxEaNCz4esJt3RlYZDl xnQEiNI/c/igmg== -----END CERTIFICATE-----Generated at Sat Dec 20 19:34:30 2025 by rpki-client