This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft File: HyLAhI0wWeWuVfaMBwecuaksJ54.mft (raw, json) Hash identifier: xuYzo3hh/LEfKPg9vuk5LYTmkJSBCZVqZveNhAHClsk= Subject key identifier: 2B:E1:1E:80:BC:0E:06:DB:18:92:92:01:85:6E:4A:DF:9A:7F:97:CA Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E Certificate issuer: /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e Certificate serial: 019B5261902D3E3B9CC2FB81FD028E9154D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft Manifest number: 147F Signing time: Wed 24 Dec 2025 22:01:24 +0000 Manifest this update: Wed 24 Dec 2025 22:01:24 +0000 Manifest next update: Thu 25 Dec 2025 22:01:24 +0000 Files and hashes: 1: 42BfRq7Uq2Z4S_hnedC1PWND5eY.roa (hash: SUpoA58huBIRfI1PcJohNyNQhenW9V0GmIZXcKZjs0I=) 2: HyLAhI0wWeWuVfaMBwecuaksJ54.crl (hash: 85wAOn2+ROTZDFph6i4NvaWz6YMDSJuBg0mHVZYQ2Iw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 22:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:90:2d:3e:3b:9c:c2:fb:81:fd:02:8e:91:54:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e Validity Not Before: Dec 24 22:01:24 2025 GMT Not After : Dec 25 22:01:24 2025 GMT Subject: CN=2be11e80bc0e06db18929201856e4adf9a7f97ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:94:ff:5d:59:80:53:d5:e2:37:c4:9f:01:4b: 3b:c6:05:22:98:a2:2e:8c:9c:78:3f:70:1f:83:46: 9c:10:42:4a:7f:6b:4d:1f:7b:ce:80:39:3e:ae:53: a8:55:67:4c:64:23:0f:57:9a:d0:73:f6:ba:18:b4: b4:65:e5:7d:06:f8:d4:54:d1:64:4d:a8:39:aa:ed: a9:51:e1:2c:a6:79:33:84:a2:93:1a:9b:e8:c0:93: 99:cb:6e:75:7e:79:fd:ea:fc:df:5b:95:69:eb:d3: 91:1b:83:33:df:9b:be:e3:b1:af:c4:a7:c2:7d:6e: 6c:88:3e:5d:97:92:21:a1:ce:22:b1:62:da:0f:36: 16:7a:19:0a:d8:46:ec:9c:69:3a:47:3b:01:fb:03: 42:3b:ee:43:fc:c9:40:da:ff:d7:37:b6:5c:1c:dc: 21:ea:ae:66:a8:8a:59:dd:2b:9d:f8:7c:e3:98:57: a2:34:a2:af:f2:58:90:65:17:cd:c0:30:49:36:e0: 98:2f:c7:e5:e6:a6:ab:bc:0e:a5:73:c4:1e:d0:f2: fc:6d:5d:03:be:08:2e:c8:64:f8:03:5c:86:07:29: a8:6d:48:47:d3:4c:6c:47:35:eb:cb:a0:39:e2:bd: 34:1c:85:46:3b:b0:ee:23:ea:9a:9f:a5:96:d9:9c: 75:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E1:1E:80:BC:0E:06:DB:18:92:92:01:85:6E:4A:DF:9A:7F:97:CA X509v3 Authority Key Identifier: keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:64:1c:c5:54:cd:6f:33:0d:78:fb:14:0f:1c:d3:cb:28:01: a0:81:8c:3c:fa:fe:1e:0d:08:d5:fc:64:b7:cf:35:ca:91:97: 8a:11:57:3d:f5:57:ed:f8:0e:92:f5:ec:46:d4:e1:7d:7b:d0: 0d:77:98:3e:5d:dd:29:6f:7c:2b:9c:c0:cb:3a:82:ed:87:2b: a7:e0:8d:f1:d7:4f:4d:e4:25:67:97:0a:d3:4d:6b:f2:19:e4: d3:3e:55:84:91:5e:04:74:35:bd:54:83:16:0f:45:2e:56:9c: 2a:19:ce:62:43:01:09:ee:5f:9e:72:ad:fb:f2:11:c2:80:a1: f3:84:5b:d3:1d:ea:11:7c:53:35:53:77:4c:b3:50:f2:30:aa: 17:5b:2e:00:8a:fb:ab:e3:d6:34:7e:20:32:4f:09:0a:27:38: 77:64:82:24:d2:03:ab:f1:14:c6:75:74:19:6e:35:bb:0f:af: c7:b6:87:2e:cc:f3:d3:05:02:00:b5:30:c7:0a:6a:15:37:fd: 96:1b:c6:fa:fb:fe:59:dc:20:7f:0f:bd:5c:ea:a4:c4:1a:93: fb:e3:99:10:0b:97:17:f2:6d:6c:a6:00:26:4f:79:f0:f8:38: f4:a4:00:83:d7:e9:05:a5:f7:96:f4:b0:93:c2:72:0d:a0:7d: b3:4d:f7:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYZAtPjucwvuB/QKOkVTXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMjJjMDg0OGQzMDU5ZTVhZTU1ZjY4YzA3MDc5Y2I5YTky YzI3OWUwHhcNMjUxMjI0MjIwMTI0WhcNMjUxMjI1MjIwMTI0WjAzMTEwLwYDVQQD EygyYmUxMWU4MGJjMGUwNmRiMTg5MjkyMDE4NTZlNGFkZjlhN2Y5N2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZT/XVmAU9XiN8SfAUs7xgUimKIu jJx4P3Afg0acEEJKf2tNH3vOgDk+rlOoVWdMZCMPV5rQc/a6GLS0ZeV9BvjUVNFk Tag5qu2pUeEspnkzhKKTGpvowJOZy251fnn96vzfW5Vp69ORG4Mz35u+47GvxKfC fW5siD5dl5Ihoc4isWLaDzYWehkK2EbsnGk6RzsB+wNCO+5D/MlA2v/XN7ZcHNwh 6q5mqIpZ3Sud+HzjmFeiNKKv8liQZRfNwDBJNuCYL8fl5qarvA6lc8Qe0PL8bV0D vgguyGT4A1yGBymobUhH00xsRzXry6A54r00HIVGO7DuI+qan6WW2Zx1rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCvhHoC8DgbbGJKSAYVuSt+af5fKMB8GA1UdIwQY MBaAFB8iwISNMFnlrlX2jAcHnLmpLCeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jMTA5MTEtNDAyMi00NmZiLTkyMTQt N2M2ODU3NjQ4NjY2LzEvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jMTA5MTEtNDAyMi00NmZiLTkyMTQtN2M2ODU3NjQ4NjY2 LzEvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmQcxVTN bzMNePsUDxzTyygBoIGMPPr+Hg0I1fxkt881ypGXihFXPfVX7fgOkvXsRtThfXvQ DXeYPl3dKW98K5zAyzqC7Ycrp+CN8ddPTeQlZ5cK001r8hnk0z5VhJFeBHQ1vVSD Fg9FLlacKhnOYkMBCe5fnnKt+/IRwoCh84Rb0x3qEXxTNVN3TLNQ8jCqF1suAIr7 q+PWNH4gMk8JCic4d2SCJNIDq/EUxnV0GW41uw+vx7aHLszz0wUCALUwxwpqFTf9 lhvG+vv+Wdwgfw+9XOqkxBqT++OZEAuXF/JtbKYAJk958Pg49KQAg9fpBaX3lvSw k8JyDaB9s033OQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:02:53 2025 by rpki-client