This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft File: Hay9x9yHS9i-Izb1Znzfd72YDHc.mft (raw, json) Hash identifier: ZaOQZX1LiOf22zOaQpBsWMkoNmpyYPWyHKGO7vpENZQ= Subject key identifier: F2:F7:DC:FB:CB:13:0D:90:8E:01:75:2E:29:3C:06:2C:DC:42:5B:AD Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77 Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77 Certificate serial: 019B522A9E9A4BC802842DFA644D4E37F4A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft Manifest number: 09E1 Signing time: Wed 24 Dec 2025 21:01:23 +0000 Manifest this update: Wed 24 Dec 2025 21:01:23 +0000 Manifest next update: Thu 25 Dec 2025 21:01:23 +0000 Files and hashes: 1: Hay9x9yHS9i-Izb1Znzfd72YDHc.crl (hash: kX157XQsC3yJngmQu3d5WTCYM22sY7DG784L7IQQD4A=) 2: KwnSHUkKazWxA-UlGNkJfBx24J8.roa (hash: L00uKvypQvr4qR3XRikAa5NG4pJ2Ay5tML7IJ1FMIbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 21:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:9e:9a:4b:c8:02:84:2d:fa:64:4d:4e:37:f4:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77 Validity Not Before: Dec 24 21:01:23 2025 GMT Not After : Dec 25 21:01:23 2025 GMT Subject: CN=f2f7dcfbcb130d908e01752e293c062cdc425bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f6:d8:fa:bf:11:84:be:fc:04:df:d8:38:ab: 20:5c:de:8b:4c:22:41:0a:71:15:4f:85:b4:7a:ae: 60:c7:05:6a:db:8d:54:0e:22:d4:69:8a:f0:83:ac: ed:35:c0:bf:6a:90:25:0a:0e:55:30:98:24:1b:49: 69:19:d7:a4:85:37:ad:9e:cd:8b:15:75:a6:1a:1b: 98:bc:ee:cc:e7:40:38:60:44:93:a7:1d:47:13:40: b6:69:fc:74:66:a6:f4:c7:f3:e8:28:5e:19:86:d6: 16:30:45:aa:1f:ab:21:ca:f7:b2:86:92:87:d4:31: d1:66:82:ed:2a:c3:67:93:7c:1f:e0:4c:63:d8:52: aa:02:58:4c:c8:0b:ca:c8:5a:44:7e:08:4f:2d:82: 7d:7a:82:61:d4:8f:85:37:5c:e2:61:dd:18:65:29: ae:b5:7e:28:cd:90:49:09:d9:7a:a2:99:86:ca:5b: 21:06:b8:9a:78:81:53:d0:8b:80:88:c8:4d:71:f7: da:10:de:41:0d:f0:8c:27:d8:1d:14:1e:e7:57:62: f5:24:39:6b:24:85:57:83:b0:9e:f0:f7:35:68:c1: e0:e5:83:fc:6e:c2:ee:1e:64:37:c9:db:44:42:e0: 81:a2:72:bb:8e:44:11:a1:ca:03:74:ed:65:bf:e7: 01:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:F7:DC:FB:CB:13:0D:90:8E:01:75:2E:29:3C:06:2C:DC:42:5B:AD X509v3 Authority Key Identifier: keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:a8:81:16:11:df:84:de:ae:7f:a7:f6:28:54:dc:c0:49:40: 4a:04:71:23:69:85:82:1e:96:c0:13:ba:dc:db:82:ca:f0:91: a1:98:78:60:44:64:cc:64:10:58:22:56:61:91:65:6f:05:2d: 85:35:bc:e5:6d:f7:64:6d:90:07:c3:62:31:14:c9:f0:49:a5: 4c:c2:e4:a0:c5:d0:38:6c:01:52:d2:44:0f:4c:f6:c9:6e:50: 25:25:97:9d:3a:d7:ec:d6:c1:da:a7:64:1a:a6:9b:32:d7:d8: 6f:ef:38:63:10:69:c0:8c:ff:db:ee:66:d2:22:60:2d:24:46: d5:c9:25:88:58:39:11:ee:cb:a4:3a:50:a4:d7:98:39:ea:89: 92:5a:78:f4:a3:6f:9e:6b:0a:02:eb:7b:65:27:b2:cd:7c:c9: 4c:6a:75:00:67:ee:4d:87:8a:4f:c8:02:97:8f:02:f7:b4:a1: 81:85:92:79:60:38:b9:70:ca:f2:60:7c:7e:91:9e:0a:f7:18: 1e:ad:11:bb:e6:fa:37:41:c7:67:6e:f3:74:dc:de:a2:04:5f: 83:79:4f:46:28:9a:1d:64:e7:66:50:18:21:08:e8:47:4e:da: 87:d3:37:73:e7:42:05:df:10:df:04:cf:e6:ce:fa:42:2e:32: f4:2b:5d:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKp6aS8gChC36ZE1ON/SjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWNiZGM3ZGM4NzRiZDhiZTIzMzZmNTY2N2NkZjc3YmQ5 ODBjNzcwHhcNMjUxMjI0MjEwMTIzWhcNMjUxMjI1MjEwMTIzWjAzMTEwLwYDVQQD EyhmMmY3ZGNmYmNiMTMwZDkwOGUwMTc1MmUyOTNjMDYyY2RjNDI1YmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPbY+r8RhL78BN/YOKsgXN6LTCJB CnEVT4W0eq5gxwVq241UDiLUaYrwg6ztNcC/apAlCg5VMJgkG0lpGdekhTetns2L FXWmGhuYvO7M50A4YESTpx1HE0C2afx0Zqb0x/PoKF4ZhtYWMEWqH6shyveyhpKH 1DHRZoLtKsNnk3wf4Exj2FKqAlhMyAvKyFpEfghPLYJ9eoJh1I+FN1ziYd0YZSmu tX4ozZBJCdl6opmGylshBriaeIFT0IuAiMhNcffaEN5BDfCMJ9gdFB7nV2L1JDlr JIVXg7Ce8Pc1aMHg5YP8bsLuHmQ3ydtEQuCBonK7jkQRocoDdO1lv+cBYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPL33PvLEw2QjgF1Lik8BizcQlutMB8GA1UdIwQY MBaAFB2svcfch0vYviM29WZ833e9mAx3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGF5OXg5eUhTOWktSXpiMVpuemZkNzJZREhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9mMDRmODUtN2IwNC00ODdjLWExZTct ZjcxYTIyMTQ1ZDRlLzEvSGF5OXg5eUhTOWktSXpiMVpuemZkNzJZREhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9mMDRmODUtN2IwNC00ODdjLWExZTctZjcxYTIyMTQ1ZDRl LzEvSGF5OXg5eUhTOWktSXpiMVpuemZkNzJZREhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApqiBFhHf hN6uf6f2KFTcwElASgRxI2mFgh6WwBO63NuCyvCRoZh4YERkzGQQWCJWYZFlbwUt hTW85W33ZG2QB8NiMRTJ8EmlTMLkoMXQOGwBUtJED0z2yW5QJSWXnTrX7NbB2qdk GqabMtfYb+84YxBpwIz/2+5m0iJgLSRG1ckliFg5Ee7LpDpQpNeYOeqJklp49KNv nmsKAut7ZSeyzXzJTGp1AGfuTYeKT8gCl48C97ShgYWSeWA4uXDK8mB8fpGeCvcY Hq0Ru+b6N0HHZ27zdNzeogRfg3lPRiiaHWTnZlAYIQjoR07ah9M3c+dCBd8Q3wTP 5s76Qi4y9CtdpA== -----END CERTIFICATE-----Generated at Thu Dec 25 05:14:41 2025 by rpki-client