This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft File: hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json) Hash identifier: L+Hojq3NNiYElVY6MRxgdT9Dd1+0ikKd/A/PvWDIZGI= Subject key identifier: CB:F3:1A:1F:DA:EE:E8:2C:4F:A2:7E:5A:59:D7:84:E8:D2:9B:FD:D9 Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5 Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5 Certificate serial: 019B2BC23C6144858FD103F467C6644BCF08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft Manifest number: 02A2 Signing time: Wed 17 Dec 2025 10:01:48 +0000 Manifest this update: Wed 17 Dec 2025 10:01:48 +0000 Manifest next update: Thu 18 Dec 2025 10:01:48 +0000 Files and hashes: 1: Nz0U1MS6Vp6ENiK7Qgw_NtnW0Zo.roa (hash: 4kJwTGIfTzijYFZnWzmKmdRlWFcf9MpzIIKmNecHiDM=) 2: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: 1L2Q3icqlaNU43PLAdqoaymTHKvU6TWQXDk0tZHmhjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c2:3c:61:44:85:8f:d1:03:f4:67:c6:64:4b:cf:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5 Validity Not Before: Dec 17 10:01:48 2025 GMT Not After : Dec 18 10:01:48 2025 GMT Subject: CN=cbf31a1fdaeee82c4fa27e5a59d784e8d29bfdd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:3b:ec:17:fa:36:09:77:8b:3d:45:80:a4: 64:bf:b2:79:10:3e:ca:70:bf:b3:0a:95:d9:be:74: 5a:ef:32:99:45:08:2f:e2:24:e8:0b:70:74:c8:55: 6e:50:37:44:b6:c6:5d:5a:68:af:2a:8e:c9:f3:cc: d0:bd:ed:7d:46:b9:45:90:2a:12:11:46:64:20:3f: 58:83:bd:a9:95:c0:f1:f4:19:c1:8e:1d:0c:4d:3d: 07:4f:ec:ba:e6:2c:35:ea:eb:44:f1:cf:26:2a:a6: 61:af:97:e1:3c:2e:0d:cb:03:69:64:05:14:88:aa: 9d:d3:cd:7c:d8:89:4d:3f:3c:5a:ec:81:3f:42:fa: ae:05:ed:3f:01:25:c1:c1:a4:7c:30:a8:a5:6f:07: e8:d1:d3:e2:d7:6c:ef:89:53:45:f2:10:bf:0a:f5: b6:ca:bd:09:c4:bc:1c:44:e1:d5:2e:6a:c0:f6:70: 0f:34:17:63:fb:31:72:05:ba:07:3e:9f:3b:5d:b4: 03:4f:33:d0:b6:58:03:ef:db:1c:01:75:aa:cf:f7: a5:0d:28:ed:00:62:ff:5a:5c:83:bd:77:bd:7e:8a: 63:a7:42:04:ae:3d:0c:d3:12:3e:ea:3f:26:00:51: b0:1b:bd:a6:24:5b:d7:50:53:07:c7:7a:67:36:93: c3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F3:1A:1F:DA:EE:E8:2C:4F:A2:7E:5A:59:D7:84:E8:D2:9B:FD:D9 X509v3 Authority Key Identifier: keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:3b:f8:11:52:6d:61:dd:b0:0b:b2:67:21:f0:c6:59:1c:fb: f8:4c:7d:ba:72:b2:7c:40:fe:13:02:bf:3a:9d:43:d8:c9:ca: 9a:bb:73:80:f1:d5:11:9d:3d:50:4b:24:75:05:73:7a:d1:1c: 85:d2:c4:7c:b6:8a:2b:39:41:a4:19:77:45:b3:6e:bf:e7:06: 4e:df:4f:0d:77:57:00:ce:4a:89:39:15:84:97:44:20:08:27: ad:cd:b4:3b:a9:30:a8:3d:b6:2f:a9:d0:fd:49:e4:1e:17:70: 4d:0b:f4:72:55:0f:d5:64:18:7f:d0:92:6a:24:97:84:1d:15: dd:42:bc:72:e3:e8:d8:8c:2d:d3:ba:69:f5:05:7a:15:6b:60: e8:d6:9d:c7:45:3f:b4:70:72:7b:a7:a6:9b:73:54:9b:51:5a: 27:38:25:62:d7:1e:50:72:25:c8:5c:09:01:82:f6:e3:0b:9f: 55:d3:fa:ee:e8:09:f2:77:64:49:a2:8e:63:34:14:8b:b3:e1: 88:20:42:1e:67:84:e0:5a:46:c6:23:94:84:56:fd:ed:a0:bb: f8:63:63:36:13:82:18:51:77:6f:b7:16:c7:b7:e4:99:c1:56: b5:20:1d:c6:20:b4:c9:ca:9f:18:06:9e:51:f6:ca:35:05:55: 59:2b:8b:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwjxhRIWP0QP0Z8ZkS88IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YWY5OGFlZTM3YTEyODE1YjQ0YmZkNmJlYjRiZTY0YWMw ZWY2ZTUwHhcNMjUxMjE3MTAwMTQ4WhcNMjUxMjE4MTAwMTQ4WjAzMTEwLwYDVQQD EyhjYmYzMWExZmRhZWVlODJjNGZhMjdlNWE1OWQ3ODRlOGQyOWJmZGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwU077Bf6Ngl3iz1FgKRkv7J5ED7K cL+zCpXZvnRa7zKZRQgv4iToC3B0yFVuUDdEtsZdWmivKo7J88zQve19RrlFkCoS EUZkID9Yg72plcDx9BnBjh0MTT0HT+y65iw16utE8c8mKqZhr5fhPC4NywNpZAUU iKqd08182IlNPzxa7IE/QvquBe0/ASXBwaR8MKilbwfo0dPi12zviVNF8hC/CvW2 yr0JxLwcROHVLmrA9nAPNBdj+zFyBboHPp87XbQDTzPQtlgD79scAXWqz/elDSjt AGL/WlyDvXe9fopjp0IErj0M0xI+6j8mAFGwG72mJFvXUFMHx3pnNpPDywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvzGh/a7ugsT6J+WlnXhOjSm/3ZMB8GA1UdIwQY MBaAFISvmK7jehKBW0S/1r60vmSsDvblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEstWXJ1TjZFb0ZiUkxfV3ZyUy1aS3dPOXVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lMjhhOGEtNjY0ZS00NzNjLTgyNTUt NzRlMTAwOTlmODFjLzEvaEstWXJ1TjZFb0ZiUkxfV3ZyUy1aS3dPOXVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lMjhhOGEtNjY0ZS00NzNjLTgyNTUtNzRlMTAwOTlmODFj LzEvaEstWXJ1TjZFb0ZiUkxfV3ZyUy1aS3dPOXVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTv4EVJt Yd2wC7JnIfDGWRz7+Ex9unKyfED+EwK/Op1D2MnKmrtzgPHVEZ09UEskdQVzetEc hdLEfLaKKzlBpBl3RbNuv+cGTt9PDXdXAM5KiTkVhJdEIAgnrc20O6kwqD22L6nQ /UnkHhdwTQv0clUP1WQYf9CSaiSXhB0V3UK8cuPo2Iwt07pp9QV6FWtg6Nadx0U/ tHBye6emm3NUm1FaJzglYtceUHIlyFwJAYL24wufVdP67ugJ8ndkSaKOYzQUi7Ph iCBCHmeE4FpGxiOUhFb97aC7+GNjNhOCGFF3b7cWx7fkmcFWtSAdxiC0ycqfGAae UfbKNQVVWSuL+g== -----END CERTIFICATE-----Generated at Wed Dec 17 13:29:19 2025 by rpki-client