This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.mft File: hWyvHy8CkUARBe9osllX3FVVENI.mft (raw, json) Hash identifier: UxFmZ7ahCGiLsa+mgcDi6WKvlEms+6b6cx2/Ih2+vGk= Subject key identifier: D0:26:FB:41:37:9B:42:59:24:52:90:7A:E0:06:26:68:FD:93:A1:49 Authority key identifier: 85:6C:AF:1F:2F:02:91:40:11:05:EF:68:B2:59:57:DC:55:55:10:D2 Certificate issuer: /CN=856caf1f2f0291401105ef68b25957dc555510d2 Certificate serial: 019B51BD31566F8930E3167B34DE3B6B7689 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWyvHy8CkUARBe9osllX3FVVENI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.mft Manifest number: 12FE Signing time: Wed 24 Dec 2025 19:01:51 +0000 Manifest this update: Wed 24 Dec 2025 19:01:51 +0000 Manifest next update: Thu 25 Dec 2025 19:01:51 +0000 Files and hashes: 1: GpIZ4jE-9ieq_ECexQxa_m3ORPw.roa (hash: IjDJZYXavRzEltys5gXrAE3D7K9MgVcCUjh6DyqqaSM=) 2: hWyvHy8CkUARBe9osllX3FVVENI.crl (hash: RHV3SiRLmwoY67h4i31mBw3UoTYBcVSSNLP21kp3JcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.crl rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.mft rsync://rpki.ripe.net/repository/DEFAULT/hWyvHy8CkUARBe9osllX3FVVENI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bd:31:56:6f:89:30:e3:16:7b:34:de:3b:6b:76:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=856caf1f2f0291401105ef68b25957dc555510d2 Validity Not Before: Dec 24 19:01:51 2025 GMT Not After : Dec 25 19:01:51 2025 GMT Subject: CN=d026fb41379b42592452907ae0062668fd93a149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:62:13:e6:ec:0a:93:9c:d0:46:21:60:ee:4f: 07:fb:89:e3:b0:5d:4d:1c:e1:c7:53:f7:c6:e6:70: a1:fe:4d:f6:da:91:59:28:93:5a:b9:f1:47:51:8d: de:f0:f2:99:51:c9:2b:d4:ad:bb:33:1c:90:ed:11: e6:e9:3f:8a:b0:ec:21:4e:36:9d:bc:e4:f0:ae:36: b3:c4:3a:7f:5d:ba:3e:4a:d9:6f:26:99:d2:7b:77: f6:d9:30:07:94:ff:a6:81:7d:7a:44:90:cb:c1:4b: 31:cc:34:bc:bb:17:ab:25:3a:04:6e:e8:d0:88:31: 3e:49:a8:d2:af:01:b9:ae:1d:b5:ca:11:01:31:65: ed:ef:f8:4a:db:87:5d:65:53:0c:50:55:03:f9:fe: 45:31:bc:ce:74:f7:82:a9:a2:86:1b:0b:23:8c:3d: 60:1d:c5:f9:49:77:07:c4:16:38:39:1c:44:8d:39: 06:c5:ef:be:53:77:c2:dc:e0:6f:c4:7e:e7:3c:b4: 4b:d0:10:36:2c:09:97:c8:c5:62:9e:00:c4:a6:8b: 6a:8e:93:71:50:ec:26:fd:70:ce:87:38:8d:07:e1: 00:48:06:b5:ec:1a:63:0c:c8:03:47:d2:2f:20:f6: b9:5f:b8:a7:6f:52:b2:7e:ca:f6:95:90:85:7e:e9: f9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:26:FB:41:37:9B:42:59:24:52:90:7A:E0:06:26:68:FD:93:A1:49 X509v3 Authority Key Identifier: keyid:85:6C:AF:1F:2F:02:91:40:11:05:EF:68:B2:59:57:DC:55:55:10:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWyvHy8CkUARBe9osllX3FVVENI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d2c7c7-2bcc-491e-96a7-b0d0bcd90fae/1/hWyvHy8CkUARBe9osllX3FVVENI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:56:51:b6:53:e9:f0:7a:9c:09:70:79:88:ec:3c:d1:7c:8b: 03:c3:fa:f0:ef:ff:53:49:f0:fc:68:cf:e0:13:8c:2e:3b:14: fa:4a:aa:44:70:27:b3:68:cf:9d:cc:38:a1:43:3a:a0:a1:60: b9:b7:7f:b4:ca:56:c4:8a:e1:0c:1f:a9:79:08:4e:ee:5c:a6: a6:88:49:62:d5:c7:85:ba:32:27:55:0b:42:21:34:77:5c:40: d3:37:ea:f0:37:98:be:73:62:7e:b0:7b:80:3b:6c:06:db:06: 33:e2:ae:09:a0:4d:88:d9:d4:79:fe:51:72:f8:0a:e6:e0:53: 28:77:fe:21:21:d7:8a:98:58:51:1a:d7:29:86:39:cc:17:50: 38:e2:2a:90:24:6c:35:f2:41:c3:40:70:cb:c3:25:a1:fd:a0: 8c:c4:ad:92:5c:26:f8:d0:83:da:17:42:e5:dd:de:1d:d1:01: 7c:6d:b7:1c:bc:c8:29:27:b7:2c:ba:ad:85:a1:18:56:84:d3: 55:7f:a4:50:de:3c:cc:b1:d0:c4:92:c0:e9:60:f8:46:ca:84: 34:dd:d8:32:70:95:de:05:96:15:96:93:c6:ac:65:48:4d:d0: a0:c6:9b:e7:bd:d5:5f:c5:1b:32:f2:1b:0e:09:a7:1e:6a:d1: b5:74:75:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvTFWb4kw4xZ7NN47a3aJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NmNhZjFmMmYwMjkxNDAxMTA1ZWY2OGIyNTk1N2RjNTU1 NTEwZDIwHhcNMjUxMjI0MTkwMTUxWhcNMjUxMjI1MTkwMTUxWjAzMTEwLwYDVQQD EyhkMDI2ZmI0MTM3OWI0MjU5MjQ1MjkwN2FlMDA2MjY2OGZkOTNhMTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mIT5uwKk5zQRiFg7k8H+4njsF1N HOHHU/fG5nCh/k322pFZKJNaufFHUY3e8PKZUckr1K27MxyQ7RHm6T+KsOwhTjad vOTwrjazxDp/Xbo+StlvJpnSe3f22TAHlP+mgX16RJDLwUsxzDS8uxerJToEbujQ iDE+SajSrwG5rh21yhEBMWXt7/hK24ddZVMMUFUD+f5FMbzOdPeCqaKGGwsjjD1g HcX5SXcHxBY4ORxEjTkGxe++U3fC3OBvxH7nPLRL0BA2LAmXyMVingDEpotqjpNx UOwm/XDOhziNB+EASAa17BpjDMgDR9IvIPa5X7inb1Kyfsr2lZCFfun5EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAm+0E3m0JZJFKQeuAGJmj9k6FJMB8GA1UdIwQY MBaAFIVsrx8vApFAEQXvaLJZV9xVVRDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFd5dkh5OENrVUFSQmU5b3NsbFgzRlZWRU5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9kMmM3YzctMmJjYy00OTFlLTk2YTct YjBkMGJjZDkwZmFlLzEvaFd5dkh5OENrVUFSQmU5b3NsbFgzRlZWRU5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9kMmM3YzctMmJjYy00OTFlLTk2YTctYjBkMGJjZDkwZmFl LzEvaFd5dkh5OENrVUFSQmU5b3NsbFgzRlZWRU5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArlZRtlPp 8HqcCXB5iOw80XyLA8P68O//U0nw/GjP4BOMLjsU+kqqRHAns2jPncw4oUM6oKFg ubd/tMpWxIrhDB+peQhO7lympohJYtXHhboyJ1ULQiE0d1xA0zfq8DeYvnNifrB7 gDtsBtsGM+KuCaBNiNnUef5RcvgK5uBTKHf+ISHXiphYURrXKYY5zBdQOOIqkCRs NfJBw0Bwy8Mlof2gjMStklwm+NCD2hdC5d3eHdEBfG23HLzIKSe3LLqthaEYVoTT VX+kUN48zLHQxJLA6WD4RsqENN3YMnCV3gWWFZaTxqxlSE3QoMab573VX8UbMvIb DgmnHmrRtXR1MQ== -----END CERTIFICATE-----Generated at Wed Dec 24 23:18:25 2025 by rpki-client