This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft File: hyj0ANg9Saqm6TIMosv6k9pb55s.mft (raw, json) Hash identifier: Nh9+tRV45VZFB3Z+OOKNSqHAMe16jHFbKBO9YGbYTE4= Subject key identifier: 9E:DE:AA:B3:2B:0C:29:0F:84:9A:2C:A4:47:63:8F:AA:E3:D2:22:F0 Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b Certificate serial: 019B38A1B21BBB466A855C265B81E150071C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft Manifest number: 0651 Signing time: Fri 19 Dec 2025 22:01:19 +0000 Manifest this update: Fri 19 Dec 2025 22:01:19 +0000 Manifest next update: Sat 20 Dec 2025 22:01:19 +0000 Files and hashes: 1: hyj0ANg9Saqm6TIMosv6k9pb55s.crl (hash: SXvCjUwXKs68a1qlI9XtlNkYKxGu7kVcd4xVFGzrHNA=) 2: iTyIEEO2sljhZiJnAx_Ko0duy2M.roa (hash: T+291sx+aTIxs6928rSAPXeV/0gq52PnDMgh9u7+DTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a1:b2:1b:bb:46:6a:85:5c:26:5b:81:e1:50:07:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b Validity Not Before: Dec 19 22:01:19 2025 GMT Not After : Dec 20 22:01:19 2025 GMT Subject: CN=9edeaab32b0c290f849a2ca447638faae3d222f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f9:14:58:80:32:2b:f0:0c:b1:03:af:ef:9e: e6:35:2c:cf:97:4f:67:2f:30:71:b9:4f:73:08:52: 41:17:54:ea:c6:1a:35:7c:e3:57:54:a3:4d:60:35: 5c:b6:c9:14:5b:c9:65:b9:4a:a4:4e:ba:be:bc:80: 00:a8:aa:24:62:72:0a:3c:50:e4:a1:e3:00:53:50: 82:23:c5:84:86:3b:63:fb:7f:66:7d:1e:49:58:12: 4c:bd:00:e2:23:0d:8c:78:2c:fc:78:6c:c4:4c:2b: 2c:19:8e:16:b4:43:ec:d4:42:d2:97:54:d0:7c:e1: 3f:e3:e3:fe:bb:d0:dd:eb:d7:99:7d:17:86:85:dd: 67:c5:15:87:24:5f:49:17:c2:d5:84:85:9d:8c:20: 03:2b:29:f0:d1:0a:2b:be:56:a3:ec:1e:85:f8:e1: 24:06:f8:5a:f9:51:ef:93:64:0f:4a:75:19:92:23: 24:71:ac:25:21:21:9f:48:ad:0a:d4:71:fa:9f:d2: 4f:08:05:9b:86:4b:5d:0d:f6:19:3f:74:d2:90:b3: de:45:88:47:4f:ac:92:a9:a6:85:56:83:e0:3a:3b: 73:b4:7e:b5:09:d8:22:72:74:80:09:1a:e3:9e:89: 02:79:b3:d8:26:ea:b8:9f:4a:90:27:54:73:5f:0e: 08:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:DE:AA:B3:2B:0C:29:0F:84:9A:2C:A4:47:63:8F:AA:E3:D2:22:F0 X509v3 Authority Key Identifier: keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b5:69:7e:f6:bc:ec:9b:c1:26:27:14:7a:69:79:c9:b6:0e: 31:72:96:7d:31:fb:f0:af:a9:be:74:0b:d2:23:be:d5:88:42: e2:1a:eb:0b:25:de:dc:90:e5:8f:9f:cc:7e:8b:b9:94:67:db: e3:8e:af:c8:c5:cd:55:8b:47:38:10:07:ce:b7:06:c1:c8:ff: 8b:7f:07:5d:02:cf:00:ba:d0:89:a0:6c:3d:6b:45:7e:b7:03: 46:d4:a1:27:d3:93:3b:21:70:8a:86:21:63:cd:05:9d:f8:f4: 4d:e9:4c:54:f6:52:68:4e:9d:76:3c:a1:d3:87:ef:8f:8e:47: 6c:10:43:a1:4a:ab:df:ad:0b:92:71:98:7a:8b:2e:57:d5:2a: 04:4e:cd:80:58:0a:dc:46:15:a1:cd:07:8d:04:63:24:d5:65: 89:3d:56:02:04:c6:56:1c:c2:6d:37:d5:f6:59:67:b5:a0:ba: b2:67:9b:62:13:2c:1b:69:23:db:a4:65:78:b6:8a:e1:ee:db: 28:6f:e7:b0:f3:2c:71:bf:79:0c:d6:8e:dd:8a:93:9b:00:98: 13:89:95:b4:37:e8:08:c5:45:10:1a:84:2f:01:d6:c8:63:49: b1:80:95:44:b7:98:72:20:70:e2:e5:2e:c0:a4:90:27:14:9d: 25:4e:06:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4obIbu0ZqhVwmW4HhUAccMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MjhmNDAwZDgzZDQ5YWFhNmU5MzIwY2EyY2JmYTkzZGE1 YmU3OWIwHhcNMjUxMjE5MjIwMTE5WhcNMjUxMjIwMjIwMTE5WjAzMTEwLwYDVQQD Eyg5ZWRlYWFiMzJiMGMyOTBmODQ5YTJjYTQ0NzYzOGZhYWUzZDIyMmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPkUWIAyK/AMsQOv757mNSzPl09n LzBxuU9zCFJBF1Tqxho1fONXVKNNYDVctskUW8lluUqkTrq+vIAAqKokYnIKPFDk oeMAU1CCI8WEhjtj+39mfR5JWBJMvQDiIw2MeCz8eGzETCssGY4WtEPs1ELSl1TQ fOE/4+P+u9Dd69eZfReGhd1nxRWHJF9JF8LVhIWdjCADKynw0Qorvlaj7B6F+OEk Bvha+VHvk2QPSnUZkiMkcawlISGfSK0K1HH6n9JPCAWbhktdDfYZP3TSkLPeRYhH T6ySqaaFVoPgOjtztH61CdgicnSACRrjnokCebPYJuq4n0qQJ1RzXw4IbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7eqrMrDCkPhJospEdjj6rj0iLwMB8GA1UdIwQY MBaAFIco9ADYPUmqpukyDKLL+pPaW+ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMt YTI1ZTE0ZDUzOWEyLzEvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMtYTI1ZTE0ZDUzOWEy LzEvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsbVpfva8 7JvBJicUeml5ybYOMXKWfTH78K+pvnQL0iO+1YhC4hrrCyXe3JDlj5/Mfou5lGfb 446vyMXNVYtHOBAHzrcGwcj/i38HXQLPALrQiaBsPWtFfrcDRtShJ9OTOyFwioYh Y80Fnfj0TelMVPZSaE6ddjyh04fvj45HbBBDoUqr360LknGYeosuV9UqBE7NgFgK 3EYVoc0HjQRjJNVliT1WAgTGVhzCbTfV9llntaC6smebYhMsG2kj26RleLaK4e7b KG/nsPMscb95DNaO3YqTmwCYE4mVtDfoCMVFEBqELwHWyGNJsYCVRLeYciBw4uUu wKSQJxSdJU4G0g== -----END CERTIFICATE-----Generated at Fri Dec 19 23:25:31 2025 by rpki-client