This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft File: hYAvwdDz46RGJWLS8G8rPe_49Oc.mft (raw, json) Hash identifier: UbpTSvWlCFbdAzxoDplRYItFDaAHnB9jgGZp2IZvfLw= Subject key identifier: 22:9E:1A:E5:4E:63:10:67:2B:7C:46:37:5E:1F:6B:0E:A1:96:BF:70 Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7 Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7 Certificate serial: 019B5D52BE65E0D009FB456261F0F9C0DBBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft Manifest number: 0D67 Signing time: Sat 27 Dec 2025 01:01:02 +0000 Manifest this update: Sat 27 Dec 2025 01:01:02 +0000 Manifest next update: Sun 28 Dec 2025 01:01:02 +0000 Files and hashes: 1: 4UJRIsMgzbbOOl_nMZ8awomMSD8.roa (hash: HA5+hPhaR5I2iP9TQnrkM1KP48JQR4MNJZDQicrXCa8=) 2: hYAvwdDz46RGJWLS8G8rPe_49Oc.crl (hash: nGNIW5LQjVWtNqq5ZwTZtZM2Sb4XpVlK/23A0vYFkkc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:52:be:65:e0:d0:09:fb:45:62:61:f0:f9:c0:db:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7 Validity Not Before: Dec 27 01:01:02 2025 GMT Not After : Dec 28 01:01:02 2025 GMT Subject: CN=229e1ae54e6310672b7c46375e1f6b0ea196bf70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:42:0d:5a:f3:46:2b:15:f8:1b:7a:6c:92:bd: 8b:1e:50:2c:25:d0:3f:29:b8:a0:32:48:e3:fb:da: ff:41:9e:d0:ba:dc:4a:32:c8:23:d0:3f:82:f0:d4: 2d:65:30:f3:5f:b7:51:04:ce:b1:d3:1b:4d:b7:b5: 46:18:ff:1d:c7:00:5a:b8:f4:76:2b:be:fb:f2:3e: 90:f8:0a:63:44:a7:4c:1a:b5:77:6b:54:8b:e3:1f: 04:3f:13:bf:06:fb:63:c3:0d:91:fc:3c:49:3d:7c: a0:12:7b:37:ed:39:5c:e4:ad:b2:9c:89:09:cd:2b: 13:9e:e0:d2:08:f1:11:d3:04:54:e4:68:a2:c2:05: 99:fc:23:c5:15:59:c6:f1:42:7f:e4:8d:8c:8f:55: e2:81:cf:44:18:60:44:6f:10:38:e3:1b:8a:b6:d4: 0b:df:22:71:b3:bd:72:d0:89:4e:9c:9d:0d:c6:4a: 8e:47:53:7f:8e:4b:94:a6:03:56:72:ac:fe:75:cd: 7d:22:32:53:2d:7f:ce:b9:67:06:ef:75:7d:c6:3f: b3:33:a8:aa:c1:69:9d:c9:dc:75:83:cd:34:b9:b9: fe:61:86:31:0e:12:aa:07:8f:9c:cc:8f:f9:2e:64: ad:ce:52:77:ef:4a:ad:05:94:cf:00:70:59:23:de: 9b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9E:1A:E5:4E:63:10:67:2B:7C:46:37:5E:1F:6B:0E:A1:96:BF:70 X509v3 Authority Key Identifier: keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ad:8f:6f:86:e5:16:66:a9:88:e5:00:22:7b:bd:6f:20:85: 3b:fc:59:21:ce:f6:73:6a:eb:7b:65:3d:1f:14:7e:c7:24:a8: 57:fc:51:18:d3:c8:e6:ca:4e:53:95:40:a0:20:6b:0e:97:d5: a1:8b:80:c6:e0:cc:c2:d6:79:13:e4:a3:b4:a8:fa:91:b7:a5: 65:05:81:e0:74:f4:af:72:4c:6c:6a:34:c2:fb:a1:be:ed:e8: 28:d7:1e:6f:fc:32:79:9b:f7:4f:d8:ce:c7:34:64:d7:05:a4: 4e:fe:0a:25:9a:8f:b0:fb:a1:26:b4:79:6c:13:e1:be:a3:1e: 3e:43:d5:28:80:20:67:c2:41:68:69:b2:14:60:aa:c3:82:e9: f5:47:b9:21:5c:a9:a6:f8:e5:65:bd:e5:c2:ed:22:4c:93:ba: 49:0e:a8:72:47:2a:f7:7e:3c:42:1b:b1:c0:e9:3c:73:b7:08: 60:59:bf:ce:33:d4:46:d0:2a:1b:da:63:e2:af:a7:80:79:b2: 9c:ba:97:d9:65:56:8d:cd:d4:e5:93:63:27:4d:f4:60:ef:3d: e2:eb:47:8c:ef:10:a0:b4:d2:a7:27:06:26:10:60:d1:43:4f: b4:f7:98:ff:a2:0c:35:f7:fc:39:e3:d6:27:ad:f8:75:55:e3: 27:c4:8a:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdUr5l4NAJ+0ViYfD5wNu8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ODAyZmMxZDBmM2UzYTQ0NjI1NjJkMmYwNmYyYjNkZWZm OGY0ZTcwHhcNMjUxMjI3MDEwMTAyWhcNMjUxMjI4MDEwMTAyWjAzMTEwLwYDVQQD EygyMjllMWFlNTRlNjMxMDY3MmI3YzQ2Mzc1ZTFmNmIwZWExOTZiZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UINWvNGKxX4G3pskr2LHlAsJdA/ KbigMkjj+9r/QZ7QutxKMsgj0D+C8NQtZTDzX7dRBM6x0xtNt7VGGP8dxwBauPR2 K7778j6Q+ApjRKdMGrV3a1SL4x8EPxO/Bvtjww2R/DxJPXygEns37Tlc5K2ynIkJ zSsTnuDSCPER0wRU5GiiwgWZ/CPFFVnG8UJ/5I2Mj1Xigc9EGGBEbxA44xuKttQL 3yJxs71y0IlOnJ0NxkqOR1N/jkuUpgNWcqz+dc19IjJTLX/OuWcG73V9xj+zM6iq wWmdydx1g800ubn+YYYxDhKqB4+czI/5LmStzlJ370qtBZTPAHBZI96bFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKeGuVOYxBnK3xGN14faw6hlr9wMB8GA1UdIwQY MBaAFIWAL8HQ8+OkRiVi0vBvKz3v+PTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFlBdndkRHo0NlJHSldMUzhHOHJQZV80OU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hZjhiMjktYjFhZi00Y2Y2LWJmMTYt YjA1ODMyYmM2OTYyLzEvaFlBdndkRHo0NlJHSldMUzhHOHJQZV80OU9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hZjhiMjktYjFhZi00Y2Y2LWJmMTYtYjA1ODMyYmM2OTYy LzEvaFlBdndkRHo0NlJHSldMUzhHOHJQZV80OU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADa2Pb4bl FmapiOUAInu9byCFO/xZIc72c2rre2U9HxR+xySoV/xRGNPI5spOU5VAoCBrDpfV oYuAxuDMwtZ5E+SjtKj6kbelZQWB4HT0r3JMbGo0wvuhvu3oKNceb/wyeZv3T9jO xzRk1wWkTv4KJZqPsPuhJrR5bBPhvqMePkPVKIAgZ8JBaGmyFGCqw4Lp9Ue5IVyp pvjlZb3lwu0iTJO6SQ6ockcq9348QhuxwOk8c7cIYFm/zjPURtAqG9pj4q+ngHmy nLqX2WVWjc3U5ZNjJ030YO894utHjO8QoLTSpycGJhBg0UNPtPeY/6IMNff8OePW J634dVXjJ8SK8A== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:30 2025 by rpki-client