This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft File: hyd386vnZf-Is-jm24PSfDxiYTg.mft (raw, json) Hash identifier: BISJ8vwuxe3jKTZxi6BfdlzPgsbKLPoOcnPM9KKta08= Subject key identifier: 95:3E:9E:03:82:47:C1:CA:8E:60:D1:90:7A:66:1E:E8:20:79:B3:FE Authority key identifier: 87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38 Certificate issuer: /CN=872777f3abe765ff88b3e8e6db83d27c3c626138 Certificate serial: 019B416DCB4789F28B32E4A2E6FEEA125284 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft Manifest number: 03AD Signing time: Sun 21 Dec 2025 15:01:13 +0000 Manifest this update: Sun 21 Dec 2025 15:01:13 +0000 Manifest next update: Mon 22 Dec 2025 15:01:13 +0000 Files and hashes: 1: hyd386vnZf-Is-jm24PSfDxiYTg.crl (hash: 4lB/gvQrGPZl0VyNcD0uqup3VWSmJP8SX0iXZpxs+tU=) 2: uLnIOwRkGxrsBbDo0gQE4-hCZ48.roa (hash: s37fBcagBo3TMxYLMpYCF62YuISi5XxqQMy7wxYlEsQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:cb:47:89:f2:8b:32:e4:a2:e6:fe:ea:12:52:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872777f3abe765ff88b3e8e6db83d27c3c626138 Validity Not Before: Dec 21 15:01:13 2025 GMT Not After : Dec 22 15:01:13 2025 GMT Subject: CN=953e9e038247c1ca8e60d1907a661ee82079b3fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:03:c3:7d:f3:6e:76:aa:54:2e:f8:44:ac:27: 67:00:b3:83:23:43:8c:6a:2c:f3:0f:45:6a:3f:dd: 54:05:3e:99:85:04:78:dc:c1:63:54:c4:c4:84:19: 05:a9:cb:88:b0:61:ce:9d:e2:98:9a:2c:dc:30:51: 60:53:65:f0:35:87:c9:26:78:f2:f4:32:85:bd:bb: 94:2a:8c:61:fd:21:53:f6:3b:7d:04:5a:27:12:aa: 88:46:9e:9b:06:c6:a2:b0:6b:40:41:7d:1a:db:10: 58:83:6c:d7:ee:76:10:65:a5:54:07:44:75:65:eb: 65:a5:b2:03:13:f0:71:dd:8f:47:d5:07:b3:bc:2d: 17:36:92:01:82:5a:4a:ed:16:e3:48:55:a8:68:eb: 88:8d:93:97:fa:49:92:2b:c6:d7:6d:0c:f9:8d:9a: 57:9d:8e:1f:d6:b0:7c:01:13:43:31:90:19:79:90: 3f:b1:45:f3:ac:89:d7:27:14:1d:9d:10:80:cf:ec: 38:d7:34:3f:63:d7:08:56:20:a5:48:0d:32:b8:21: 32:30:d5:69:bf:a7:79:77:61:49:17:b3:36:4a:6d: 2d:7f:1a:f0:be:73:f4:2e:68:f4:b4:5e:38:d0:f4: b6:00:60:65:cd:d7:9a:16:e3:9b:e4:ce:4c:8e:d0: 87:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3E:9E:03:82:47:C1:CA:8E:60:D1:90:7A:66:1E:E8:20:79:B3:FE X509v3 Authority Key Identifier: keyid:87:27:77:F3:AB:E7:65:FF:88:B3:E8:E6:DB:83:D2:7C:3C:62:61:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyd386vnZf-Is-jm24PSfDxiYTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7a7ef6-372a-4b74-92f2-41b468f3aab0/1/hyd386vnZf-Is-jm24PSfDxiYTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:0f:47:51:4f:cb:43:0e:22:19:3a:92:d0:1a:20:7c:ed:24: c6:7a:e5:95:bc:c3:41:39:01:8a:9c:05:a1:aa:57:d7:07:8d: f2:a4:57:53:5f:4b:00:2b:ca:b0:07:c3:52:b0:37:7d:7d:d7: 51:f3:92:39:16:18:c6:8a:88:11:6e:d7:94:1e:a3:f8:8a:1c: f3:17:8b:00:0d:46:50:d7:1d:d3:3b:42:ec:61:c9:5a:87:8d: a0:f3:5c:28:26:ec:cb:8c:38:87:d3:43:84:a6:89:ad:f6:37: 9c:c4:95:e5:e6:a3:b8:87:86:81:5a:d4:ef:28:33:8e:37:1d: 9d:93:15:ed:9c:73:ff:61:12:59:d9:3b:73:d3:41:14:cc:41: 02:87:c2:86:d9:26:59:e8:50:eb:01:dc:84:3d:32:36:7b:d0: 73:3c:85:4f:4a:89:bf:76:2d:0d:a1:c8:7f:83:76:6c:cd:5f: ae:a7:d5:97:c2:2d:64:81:be:42:1a:a2:54:77:4e:5e:44:0f: 9c:53:2c:a0:48:52:a9:7f:bc:8e:f6:04:e6:7a:52:59:12:24: 21:0a:4e:97:f9:92:5e:90:81:78:18:4f:39:9f:92:8b:ed:af: e5:5a:98:4d:08:88:36:da:db:df:72:61:67:03:e6:f0:9f:b7: 41:7b:44:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbctHifKLMuSi5v7qElKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3Mjc3N2YzYWJlNzY1ZmY4OGIzZThlNmRiODNkMjdjM2M2 MjYxMzgwHhcNMjUxMjIxMTUwMTEzWhcNMjUxMjIyMTUwMTEzWjAzMTEwLwYDVQQD Eyg5NTNlOWUwMzgyNDdjMWNhOGU2MGQxOTA3YTY2MWVlODIwNzliM2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQPDffNudqpULvhErCdnALODI0OM aizzD0VqP91UBT6ZhQR43MFjVMTEhBkFqcuIsGHOneKYmizcMFFgU2XwNYfJJnjy 9DKFvbuUKoxh/SFT9jt9BFonEqqIRp6bBsaisGtAQX0a2xBYg2zX7nYQZaVUB0R1 ZetlpbIDE/Bx3Y9H1QezvC0XNpIBglpK7RbjSFWoaOuIjZOX+kmSK8bXbQz5jZpX nY4f1rB8ARNDMZAZeZA/sUXzrInXJxQdnRCAz+w41zQ/Y9cIViClSA0yuCEyMNVp v6d5d2FJF7M2Sm0tfxrwvnP0Lmj0tF440PS2AGBlzdeaFuOb5M5MjtCHgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJU+ngOCR8HKjmDRkHpmHuggebP+MB8GA1UdIwQY MBaAFIcnd/Or52X/iLPo5tuD0nw8YmE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83YTdlZjYtMzcyYS00Yjc0LTkyZjIt NDFiNDY4ZjNhYWIwLzEvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC83YTdlZjYtMzcyYS00Yjc0LTkyZjItNDFiNDY4ZjNhYWIw LzEvaHlkMzg2dm5aZi1Jcy1qbTI0UFNmRHhpWVRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApw9HUU/L Qw4iGTqS0BogfO0kxnrllbzDQTkBipwFoapX1weN8qRXU19LACvKsAfDUrA3fX3X UfOSORYYxoqIEW7XlB6j+Ioc8xeLAA1GUNcd0ztC7GHJWoeNoPNcKCbsy4w4h9ND hKaJrfY3nMSV5eajuIeGgVrU7ygzjjcdnZMV7Zxz/2ESWdk7c9NBFMxBAofChtkm WehQ6wHchD0yNnvQczyFT0qJv3YtDaHIf4N2bM1frqfVl8ItZIG+QhqiVHdOXkQP nFMsoEhSqX+8jvYE5npSWRIkIQpOl/mSXpCBeBhPOZ+Si+2v5VqYTQiINtrb33Jh ZwPm8J+3QXtEyg== -----END CERTIFICATE-----Generated at Sun Dec 21 22:28:33 2025 by rpki-client