This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft File: HYKLeBsHn7Q92wynXcAm511_JeQ.mft (raw, json) Hash identifier: TemnRSMx+qB/nwWeN1s766+f3afmaLUZFZ0qLE11Tss= Subject key identifier: C7:A2:F9:D9:89:C2:87:58:A6:C9:E5:A4:3C:71:51:38:A9:A8:56:EE Authority key identifier: 1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4 Certificate issuer: /CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4 Certificate serial: 019B4249CCA353F0ED3D68E12AFC18B7D5A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 19:01:31 +0000 Manifest this update: Sun 21 Dec 2025 19:01:31 +0000 Manifest next update: Mon 22 Dec 2025 19:01:31 +0000 Files and hashes: 1: HYKLeBsHn7Q92wynXcAm511_JeQ.crl (hash: +zP3ll2DxCGNyq93maYLyCg1tesvuss945cS8nKZqI0=) 2: avKWbxlz__x39cDhO2Y69LSUiG0.roa (hash: zHguv0slI/PQ12Wd3BSPrR9a4DZWJkflBQ3L6OL1wFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:cc:a3:53:f0:ed:3d:68:e1:2a:fc:18:b7:d5:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d828b781b079fb43ddb0ca75dc026e75d7f25e4 Validity Not Before: Dec 21 19:01:31 2025 GMT Not After : Dec 22 19:01:31 2025 GMT Subject: CN=c7a2f9d989c28758a6c9e5a43c715138a9a856ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:05:30:fa:23:89:49:90:a7:4b:2c:ec:92:5b: 7d:85:5b:08:45:1e:76:25:6d:aa:ae:e0:7b:91:97: 9f:b5:11:b4:c1:3d:b4:10:ca:40:e8:bc:04:b8:66: d0:37:99:80:c6:66:e7:a5:b8:46:c1:69:88:9d:68: 16:09:78:8b:e6:15:b3:92:25:cd:88:84:d8:fa:b2: 2a:57:16:e0:bc:73:78:82:e2:28:0c:0d:35:5f:c0: 08:75:01:13:5f:7f:42:cd:2f:b3:68:b8:e5:b7:4c: 1d:14:ca:ea:26:a5:31:2e:3e:48:18:0c:47:08:29: 5d:9c:ad:35:8e:dc:a5:ba:e4:2b:b9:e2:15:26:e3: 93:bf:ae:6f:e9:3b:0d:9c:2c:81:17:e3:ff:06:49: 20:ff:61:ee:3c:92:75:4e:b7:b0:73:17:d6:a0:b1: 9d:bd:bc:48:5f:2b:a6:e4:c9:9a:d8:d8:80:ce:38: 51:29:c4:f1:d0:28:de:34:6e:00:2a:8e:cd:9a:a8: de:ec:cd:45:50:df:ad:f5:2d:6e:2b:8c:95:6b:bf: 18:c7:3f:e8:1e:3a:a9:6d:cf:79:27:44:d5:90:19: 95:73:7a:8b:c0:2c:e4:e3:81:28:cd:b8:04:e7:4d: ab:9a:80:8c:d7:2f:54:ea:51:f9:a0:17:e4:b8:83: 61:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A2:F9:D9:89:C2:87:58:A6:C9:E5:A4:3C:71:51:38:A9:A8:56:EE X509v3 Authority Key Identifier: keyid:1D:82:8B:78:1B:07:9F:B4:3D:DB:0C:A7:5D:C0:26:E7:5D:7F:25:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYKLeBsHn7Q92wynXcAm511_JeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7e719d-75ae-4fd1-b145-f06ced52112a/1/HYKLeBsHn7Q92wynXcAm511_JeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:06:9a:09:31:a6:36:05:86:1f:7c:92:57:ea:ef:ab:28:f3: be:dc:a4:94:e7:d2:af:23:e2:84:72:24:5a:99:63:60:73:25: 18:91:e7:68:98:c7:4e:b7:e1:36:9b:68:70:9d:8d:09:d5:2a: cf:4e:ae:4a:78:f6:0f:79:0e:3c:81:c3:8a:bf:91:fa:e2:5d: a4:17:b2:0b:dd:15:29:9a:c2:58:9c:6f:ba:68:ff:07:d8:a7: 53:68:42:5f:69:60:9f:c6:0d:a0:af:ed:bf:74:ce:70:4a:76: c0:41:34:37:86:30:25:56:58:26:a8:1a:b8:1e:a9:ae:16:2a: bb:2e:fe:0e:bf:22:46:dc:94:ac:4e:3d:ac:e1:1a:70:1d:a3: 90:0a:fe:ec:46:ee:00:50:05:c0:96:62:b8:c3:3d:5c:86:78: 6f:1d:08:48:88:57:06:dd:ca:da:70:a7:5b:66:4c:f9:26:26: ba:ff:b4:76:98:11:6c:4c:a2:40:78:36:bb:9d:c8:5e:06:bd: 22:bf:a0:16:2f:18:c4:7f:8a:1b:0e:b7:bc:af:de:95:a1:85: 00:12:4c:cb:fe:13:f1:a7:0c:94:7c:da:f7:98:7b:c8:cf:b7: 78:18:5d:52:8e:59:5c:0e:5e:d3:58:d4:30:81:c8:74:fe:fd: 92:09:c2:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCScyjU/DtPWjhKvwYt9WhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkODI4Yjc4MWIwNzlmYjQzZGRiMGNhNzVkYzAyNmU3NWQ3 ZjI1ZTQwHhcNMjUxMjIxMTkwMTMxWhcNMjUxMjIyMTkwMTMxWjAzMTEwLwYDVQQD EyhjN2EyZjlkOTg5YzI4NzU4YTZjOWU1YTQzYzcxNTEzOGE5YTg1NmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQUw+iOJSZCnSyzsklt9hVsIRR52 JW2qruB7kZeftRG0wT20EMpA6LwEuGbQN5mAxmbnpbhGwWmInWgWCXiL5hWzkiXN iITY+rIqVxbgvHN4guIoDA01X8AIdQETX39CzS+zaLjlt0wdFMrqJqUxLj5IGAxH CCldnK01jtyluuQrueIVJuOTv65v6TsNnCyBF+P/Bkkg/2HuPJJ1TrewcxfWoLGd vbxIXyum5Mma2NiAzjhRKcTx0CjeNG4AKo7Nmqje7M1FUN+t9S1uK4yVa78Yxz/o Hjqpbc95J0TVkBmVc3qLwCzk44EozbgE502rmoCM1y9U6lH5oBfkuINhmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMei+dmJwodYpsnlpDxxUTipqFbuMB8GA1UdIwQY MBaAFB2Ci3gbB5+0PdsMp13AJuddfyXkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUt ZjA2Y2VkNTIxMTJhLzEvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83ZTcxOWQtNzVhZS00ZmQxLWIxNDUtZjA2Y2VkNTIxMTJh LzEvSFlLTGVCc0huN1E5Mnd5blhjQW01MTFfSmVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAaaCTGm NgWGH3ySV+rvqyjzvtyklOfSryPihHIkWpljYHMlGJHnaJjHTrfhNptocJ2NCdUq z06uSnj2D3kOPIHDir+R+uJdpBeyC90VKZrCWJxvumj/B9inU2hCX2lgn8YNoK/t v3TOcEp2wEE0N4YwJVZYJqgauB6prhYquy7+Dr8iRtyUrE49rOEacB2jkAr+7Ebu AFAFwJZiuMM9XIZ4bx0ISIhXBt3K2nCnW2ZM+SYmuv+0dpgRbEyiQHg2u53IXga9 Ir+gFi8YxH+KGw63vK/elaGFABJMy/4T8acMlHza95h7yM+3eBhdUo5ZXA5e01jU MIHIdP79kgnCrw== -----END CERTIFICATE-----Generated at Mon Dec 22 04:39:54 2025 by rpki-client