This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft File: HYuTI81Mksddg9NG8NJp5cLVqAg.mft (raw, json) Hash identifier: tBma242rIbWrE/lirykkY9PrgmsBNdV/9Gu3w47NmZw= Subject key identifier: BD:83:D0:70:D9:EC:27:C9:E0:17:85:5E:6F:2E:04:9D:B7:CB:81:AA Authority key identifier: 1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08 Certificate issuer: /CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808 Certificate serial: 019B3DC75C7C9A97FB76A3ACC8F25CEDE3B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft Manifest number: 033D Signing time: Sat 20 Dec 2025 22:00:34 +0000 Manifest this update: Sat 20 Dec 2025 22:00:34 +0000 Manifest next update: Sun 21 Dec 2025 22:00:34 +0000 Files and hashes: 1: EbkibLILSHjAv1JvYeoD8fCFGEE.roa (hash: /Ofe9Y13cX6ULVD3fa4GKAU4rwOizM42Q9uH3zy41Wc=) 2: HYuTI81Mksddg9NG8NJp5cLVqAg.crl (hash: +HWKRi3H8VfcPOtLwo56stI4T5zBkEeZFLUCrM4VsDw=) 3: Qte0y98Y9LrHrXTOy7e_WZVED5A.roa (hash: FqjEi0MQwCtulDy3FoGliTQJvoHi+j/oxOseKBz9nDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:5c:7c:9a:97:fb:76:a3:ac:c8:f2:5c:ed:e3:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8b9323cd4c92c75d83d346f0d269e5c2d5a808 Validity Not Before: Dec 20 22:00:34 2025 GMT Not After : Dec 21 22:00:34 2025 GMT Subject: CN=bd83d070d9ec27c9e017855e6f2e049db7cb81aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ff:71:88:e2:b3:b3:12:25:d1:73:3f:58:ed: de:90:11:a1:46:88:9d:d6:3b:dd:74:8c:87:44:8c: a6:95:42:0e:2c:fe:54:75:71:b8:4f:f5:7e:72:36: bd:1c:20:05:2e:4d:12:d7:8e:bf:db:f4:94:d0:0d: 77:5a:0c:ac:ac:44:88:54:41:07:e7:ba:4f:f2:e3: b2:23:58:9f:9e:14:1d:2c:bc:3a:fe:f0:13:29:b3: 2f:47:ed:b3:37:28:9a:33:9c:7e:86:97:87:54:2f: d2:cd:2f:d2:5d:91:94:bf:ab:1d:0c:3b:ba:78:1c: 27:7b:c8:f2:f3:6d:ae:9b:45:eb:4e:4b:80:39:05: b1:86:36:6c:fd:7b:5f:f3:11:86:98:61:25:fc:ee: 41:1d:4b:52:b9:e2:f0:ce:8a:61:c0:b4:6e:00:34: 7a:42:0f:d5:4f:a2:8c:ce:6f:17:f8:cd:99:9d:fe: 65:80:16:47:fb:22:c4:0c:1b:ef:c4:ec:7d:73:e2: dd:5a:c4:73:af:94:87:d8:8b:74:be:6e:d5:54:55: eb:bf:fa:c0:22:53:cd:85:e8:61:2f:12:72:1e:4a: c3:3e:af:07:f7:c6:52:ea:22:98:66:e9:01:0b:49: 7b:16:70:41:04:8e:58:68:56:04:85:7c:1a:95:91: 86:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:83:D0:70:D9:EC:27:C9:E0:17:85:5E:6F:2E:04:9D:B7:CB:81:AA X509v3 Authority Key Identifier: keyid:1D:8B:93:23:CD:4C:92:C7:5D:83:D3:46:F0:D2:69:E5:C2:D5:A8:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYuTI81Mksddg9NG8NJp5cLVqAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8c7a34-538d-4314-aaf4-04dd80d5b72d/1/HYuTI81Mksddg9NG8NJp5cLVqAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:66:01:c1:ae:5c:b7:2a:68:89:45:29:7b:c0:27:ad:6e:3b: 4f:36:dd:0c:c3:dd:d3:dc:89:95:15:ac:17:9e:ec:c4:ce:98: 8e:1e:ba:5f:4f:22:2c:08:72:c8:fc:97:76:a5:b4:9f:2a:ef: d8:0b:29:97:c2:8f:c0:b3:a5:46:da:61:1b:62:b6:6b:75:d9: 5a:40:4e:5c:c7:73:5e:73:17:63:41:3e:7a:dc:36:5c:13:1b: d1:e0:e0:a3:6d:c7:6b:e5:6b:95:4b:7d:1e:7c:d8:0d:47:24: 9a:8a:95:4d:42:56:76:d6:f9:07:bc:a0:ea:96:78:e5:40:a3: 42:3f:e7:32:38:2a:8e:8a:a7:a9:b4:3c:3c:be:30:c2:2e:aa: 77:2b:44:13:41:5b:fb:cd:dd:a9:0f:93:1c:85:56:53:a9:c1: 13:72:9e:b6:b1:8f:70:be:0c:50:3e:e1:e2:9f:73:b6:a0:0f: 71:48:d7:a9:ff:ed:a2:c6:d5:f5:98:7b:26:99:8c:6e:3c:03: 03:ca:0c:4b:11:55:08:5a:3f:7b:67:a1:ac:ee:e7:73:ca:e0: 44:e5:33:4b:61:a2:69:6d:9e:6f:20:a0:b7:ed:2d:0b:c6:0b: 79:18:85:ef:0b:65:2a:c1:22:07:e0:7e:05:b8:10:0c:a9:b4: 12:40:66:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x1x8mpf7dqOsyPJc7eO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkOGI5MzIzY2Q0YzkyYzc1ZDgzZDM0NmYwZDI2OWU1YzJk NWE4MDgwHhcNMjUxMjIwMjIwMDM0WhcNMjUxMjIxMjIwMDM0WjAzMTEwLwYDVQQD EyhiZDgzZDA3MGQ5ZWMyN2M5ZTAxNzg1NWU2ZjJlMDQ5ZGI3Y2I4MWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/9xiOKzsxIl0XM/WO3ekBGhRoid 1jvddIyHRIymlUIOLP5UdXG4T/V+cja9HCAFLk0S146/2/SU0A13WgysrESIVEEH 57pP8uOyI1ifnhQdLLw6/vATKbMvR+2zNyiaM5x+hpeHVC/SzS/SXZGUv6sdDDu6 eBwne8jy822um0XrTkuAOQWxhjZs/Xtf8xGGmGEl/O5BHUtSueLwzophwLRuADR6 Qg/VT6KMzm8X+M2Znf5lgBZH+yLEDBvvxOx9c+LdWsRzr5SH2It0vm7VVFXrv/rA IlPNhehhLxJyHkrDPq8H98ZS6iKYZukBC0l7FnBBBI5YaFYEhXwalZGG1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2D0HDZ7CfJ4BeFXm8uBJ23y4GqMB8GA1UdIwQY MBaAFB2LkyPNTJLHXYPTRvDSaeXC1agIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFl1VEk4MU1rc2RkZzlORzhOSnA1Y0xWcUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84YzdhMzQtNTM4ZC00MzE0LWFhZjQt MDRkZDgwZDViNzJkLzEvSFl1VEk4MU1rc2RkZzlORzhOSnA1Y0xWcUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84YzdhMzQtNTM4ZC00MzE0LWFhZjQtMDRkZDgwZDViNzJk LzEvSFl1VEk4MU1rc2RkZzlORzhOSnA1Y0xWcUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmYBwa5c typoiUUpe8AnrW47TzbdDMPd09yJlRWsF57sxM6Yjh66X08iLAhyyPyXdqW0nyrv 2Aspl8KPwLOlRtphG2K2a3XZWkBOXMdzXnMXY0E+etw2XBMb0eDgo23Ha+VrlUt9 HnzYDUckmoqVTUJWdtb5B7yg6pZ45UCjQj/nMjgqjoqnqbQ8PL4wwi6qdytEE0Fb +83dqQ+THIVWU6nBE3KetrGPcL4MUD7h4p9ztqAPcUjXqf/tosbV9Zh7JpmMbjwD A8oMSxFVCFo/e2ehrO7nc8rgROUzS2GiaW2ebyCgt+0tC8YLeRiF7wtlKsEiB+B+ BbgQDKm0EkBm2g== -----END CERTIFICATE-----Generated at Sun Dec 21 04:42:39 2025 by rpki-client