This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json) Hash identifier: eikp6SnSJV12yC2FOEDJvC2+QTUk0yNOrXsqDEXWJhc= Subject key identifier: E9:3D:1F:13:BA:F0:68:41:E6:4E:63:E5:F2:48:64:67:7E:DB:41:2A Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4 Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4 Certificate serial: 019B3A2239926E19A143EF32766C49898E97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft Manifest number: 14C8 Signing time: Sat 20 Dec 2025 05:01:19 +0000 Manifest this update: Sat 20 Dec 2025 05:01:19 +0000 Manifest next update: Sun 21 Dec 2025 05:01:19 +0000 Files and hashes: 1: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: xVkVgvBbzbn7TWTgijDxU/M5zOpPuhd3fnX7yJIk7wA=) 2: _TB_DSwnuCOKtWool6QsRH-BI2c.roa (hash: IfCRqnm3tSTnJ1oqOSYusfB1IFZQtEWpYBfMbK20Izo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:22:39:92:6e:19:a1:43:ef:32:76:6c:49:89:8e:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4 Validity Not Before: Dec 20 05:01:19 2025 GMT Not After : Dec 21 05:01:19 2025 GMT Subject: CN=e93d1f13baf06841e64e63e5f24864677edb412a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f6:19:27:d0:37:b0:14:4b:73:ef:b6:cf:82: 4f:2a:fe:be:40:ec:43:b4:15:6d:c6:5d:0e:80:db: 36:65:a0:63:c3:cc:d6:19:24:95:36:98:86:c5:4b: 93:4d:0a:69:6c:7b:46:4a:ab:1c:2e:3a:aa:01:28: 35:18:21:ba:88:4c:12:6c:e3:28:06:ba:1b:ab:aa: a2:1e:5e:2a:8a:de:9c:1b:7a:8a:ad:14:be:8f:32: 5c:0a:a0:a3:4d:5e:d1:f6:40:17:0f:6d:c4:3d:d9: 7c:54:17:5c:69:d0:f0:ed:1b:b3:10:b5:d9:73:31: 8a:d9:5d:bb:80:a1:85:9d:0e:1f:82:4f:de:53:6d: 0c:26:69:bf:ea:17:ae:c5:66:ec:f6:53:03:79:0b: 54:82:bc:6e:fc:bf:b7:5a:4e:ab:12:fe:c0:17:48: 11:2b:0c:9e:98:81:e0:22:8e:e6:40:fe:aa:fa:42: ad:7f:01:8b:b6:8e:1e:29:cb:fb:c1:b8:2e:82:eb: 5e:92:3e:7c:a2:d7:14:fa:ee:4f:1d:f0:e6:5a:75: 00:3f:0c:d2:45:2f:21:31:8a:07:0f:01:13:9c:6d: 56:1d:19:b8:39:df:6b:18:a8:07:fb:21:4d:01:5f: 90:bb:57:ef:6f:fc:60:45:3f:6c:c8:39:99:ca:b8: f1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3D:1F:13:BA:F0:68:41:E6:4E:63:E5:F2:48:64:67:7E:DB:41:2A X509v3 Authority Key Identifier: keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:1e:67:69:2a:cd:fa:c9:75:f7:08:77:cc:97:cf:55:e1:15: a8:0c:0c:c0:c3:c5:6a:ab:77:78:7e:a4:8f:75:c3:c0:47:1b: ab:af:cd:c5:0d:22:77:49:57:5d:fd:a0:3a:0a:5c:81:03:cc: 7e:a6:86:de:70:0b:a3:fa:c2:44:c2:57:ee:37:a8:0f:ab:8f: f0:25:4e:6e:2b:bc:4f:6a:98:f7:6d:4f:47:5e:a8:9f:dc:f0: b0:55:69:26:6d:79:b0:25:71:9c:25:f7:93:fb:16:c1:36:51: 13:64:4d:43:0f:b3:45:91:7d:b4:24:87:ba:b1:6a:e8:f4:79: af:cb:bd:2a:f3:88:f8:a8:9d:c9:f4:1c:73:e9:8a:01:49:51: 3b:0b:58:e0:69:f7:d8:4c:99:8a:e0:e8:69:e4:d3:2d:de:9d: 39:5d:b0:04:f1:55:a2:f7:1c:6e:12:d7:67:a5:38:10:e3:00: cc:49:74:12:f4:97:71:ed:46:4d:84:65:4c:74:86:c7:0d:e0: 31:9e:10:5b:eb:a3:6f:2b:8b:8b:06:6c:23:aa:4f:e4:4b:39: 88:dc:1c:61:53:50:24:8f:a2:c1:55:99:34:bd:94:8f:b0:a3: d3:0b:31:0e:99:a1:ed:30:4e:32:fb:8f:87:ee:5d:c9:c5:ce: ab:88:43:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IjmSbhmhQ+8ydmxJiY6XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMjliY2JkNWNmY2MxOTVlNzZiNzBhMWJmMGRkOTkxZWM3 ZTMzZDQwHhcNMjUxMjIwMDUwMTE5WhcNMjUxMjIxMDUwMTE5WjAzMTEwLwYDVQQD EyhlOTNkMWYxM2JhZjA2ODQxZTY0ZTYzZTVmMjQ4NjQ2NzdlZGI0MTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfYZJ9A3sBRLc++2z4JPKv6+QOxD tBVtxl0OgNs2ZaBjw8zWGSSVNpiGxUuTTQppbHtGSqscLjqqASg1GCG6iEwSbOMo Brobq6qiHl4qit6cG3qKrRS+jzJcCqCjTV7R9kAXD23EPdl8VBdcadDw7RuzELXZ czGK2V27gKGFnQ4fgk/eU20MJmm/6heuxWbs9lMDeQtUgrxu/L+3Wk6rEv7AF0gR KwyemIHgIo7mQP6q+kKtfwGLto4eKcv7wbgugutekj58otcU+u5PHfDmWnUAPwzS RS8hMYoHDwETnG1WHRm4Od9rGKgH+yFNAV+Qu1fvb/xgRT9syDmZyrjx1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOk9HxO68GhB5k5j5fJIZGd+20EqMB8GA1UdIwQY MBaAFB8pvL1c/MGV52twob8N2ZHsfjPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEt ZDRkMzVkOTk5ODFkLzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEtZDRkMzVkOTk5ODFk LzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWh5naSrN +sl19wh3zJfPVeEVqAwMwMPFaqt3eH6kj3XDwEcbq6/NxQ0id0lXXf2gOgpcgQPM fqaG3nALo/rCRMJX7jeoD6uP8CVObiu8T2qY921PR16on9zwsFVpJm15sCVxnCX3 k/sWwTZRE2RNQw+zRZF9tCSHurFq6PR5r8u9KvOI+KidyfQcc+mKAUlROwtY4Gn3 2EyZiuDoaeTTLd6dOV2wBPFVovccbhLXZ6U4EOMAzEl0EvSXce1GTYRlTHSGxw3g MZ4QW+ujbyuLiwZsI6pP5Es5iNwcYVNQJI+iwVWZNL2Uj7Cj0wsxDpmh7TBOMvuP h+5dycXOq4hDUA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:17:09 2025 by rpki-client