This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft File: hUyBdtnELHBLMQkTMJRwNRu1meU.mft (raw, json) Hash identifier: COzA1rvQmE3tDS1eHg5/xBEZZfjg+zGl3U/zLJ1OxAY= Subject key identifier: 9B:63:33:0D:8D:E7:99:43:FE:49:0E:5F:F5:36:CB:2D:AF:9A:B9:B8 Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5 Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5 Certificate serial: 019B52CF071F50888B3830BCB6FC1C4E50EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft Manifest number: 12BC Signing time: Thu 25 Dec 2025 00:00:58 +0000 Manifest this update: Thu 25 Dec 2025 00:00:58 +0000 Manifest next update: Fri 26 Dec 2025 00:00:58 +0000 Files and hashes: 1: d12qVgxDPPHiE2ljm9qZxxkNLxQ.roa (hash: zX9r1B9nDeSmX0ma2mBmx6eNhz70tybIXv2tasEp9Z0=) 2: hUyBdtnELHBLMQkTMJRwNRu1meU.crl (hash: gcf0K1rTzSEdEPMqBaTeTCo3FnTcJFh+FgNAvB0TbMY=) 3: j-Ef-_ZUrA-AY6ZXYzU0wKA0MAE.roa (hash: xMubkcRgzBEAU63sGA3yqVsJQIJj2JYDdMpLJL8yY80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:cf:07:1f:50:88:8b:38:30:bc:b6:fc:1c:4e:50:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854c8176d9c42c704b310913309470351bb599e5 Validity Not Before: Dec 25 00:00:58 2025 GMT Not After : Dec 26 00:00:58 2025 GMT Subject: CN=9b63330d8de79943fe490e5ff536cb2daf9ab9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ba:24:6d:eb:80:c5:04:b1:e1:04:7f:f0:f6: da:3e:9b:99:57:b2:21:f0:d5:9f:ef:d5:a5:7b:20: 0e:ec:f7:d3:92:49:71:ee:5a:2d:09:c3:7b:52:4c: 12:98:48:21:61:6d:0b:ec:3c:fc:47:41:20:2f:36: 4f:25:44:d8:66:df:ef:5b:ad:0d:7e:52:e6:82:fe: cf:0c:68:46:ae:bb:af:c4:8d:c8:9a:f9:28:92:f6: f7:36:c8:6a:56:76:57:16:71:ff:85:68:a1:08:15: 85:02:17:3f:14:64:6c:ba:d2:ec:7e:90:b5:27:6a: f7:a6:d9:c2:8a:ff:e9:4a:11:05:98:03:fa:e6:60: 55:b3:6e:48:6d:46:1e:51:35:ec:0f:39:f5:f6:d4: 20:2a:d7:34:00:50:40:f2:3e:d9:31:97:11:26:b9: 1c:57:a7:b7:80:eb:50:0e:7f:c5:bb:9a:43:1c:c0: 20:a2:13:f8:3e:ae:e7:85:4a:47:64:f4:44:07:11: e4:6c:3f:ad:b8:7a:03:71:eb:a3:23:4b:9d:2b:10: a0:5b:0f:0e:fc:98:d3:ab:3c:36:d7:a6:6f:c5:05: cc:81:a7:70:0a:05:a4:fa:b4:5e:7a:90:22:a8:0a: 39:3c:2f:d3:a7:25:68:c7:dc:43:0a:d0:08:21:d0: ee:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:63:33:0D:8D:E7:99:43:FE:49:0E:5F:F5:36:CB:2D:AF:9A:B9:B8 X509v3 Authority Key Identifier: keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:e7:fa:67:2c:0e:c9:12:b4:43:0d:e9:5e:6b:c2:78:a9:74: dc:27:34:92:1f:b8:3b:e6:06:45:0f:20:61:db:8b:76:fc:0d: d5:72:bf:1e:17:bb:b7:a6:0c:42:5f:68:af:29:85:79:88:d0: 26:ba:32:e8:d8:f1:f1:b4:40:10:8f:bc:2e:35:ac:90:17:73: 93:b1:bb:ce:67:8d:d5:4d:d3:a8:72:c1:ef:2e:a7:ad:bd:04: 2f:3b:a5:bd:f1:b0:66:b3:12:50:28:5a:17:01:ec:c2:47:4c: ae:1e:54:c8:aa:f2:f4:cd:86:2b:cb:76:4a:81:68:bb:28:10: a7:5d:82:36:84:d1:d1:80:79:6d:ac:7a:d9:20:3c:28:13:39: 13:d6:4a:41:c0:fc:eb:38:c3:12:91:c1:87:4a:91:9a:f3:14: b5:4b:46:43:f4:c7:34:67:cd:78:ff:95:91:3b:1f:35:e0:20: e5:5f:c3:d5:62:1a:2a:01:cc:51:c4:43:5f:8e:da:be:26:0d: 55:96:eb:48:00:ab:ae:33:48:f4:b6:a6:39:91:75:96:d0:a6: 57:a2:37:56:0c:52:bb:b2:50:a0:d7:69:cd:97:99:c8:c1:1f: fe:2c:09:59:81:27:da:4a:c8:ab:4f:77:ac:62:99:28:db:ea: 2b:c2:ed:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSzwcfUIiLODC8tvwcTlDrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGM4MTc2ZDljNDJjNzA0YjMxMDkxMzMwOTQ3MDM1MWJi NTk5ZTUwHhcNMjUxMjI1MDAwMDU4WhcNMjUxMjI2MDAwMDU4WjAzMTEwLwYDVQQD Eyg5YjYzMzMwZDhkZTc5OTQzZmU0OTBlNWZmNTM2Y2IyZGFmOWFiOWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbokbeuAxQSx4QR/8PbaPpuZV7Ih 8NWf79WleyAO7PfTkklx7lotCcN7UkwSmEghYW0L7Dz8R0EgLzZPJUTYZt/vW60N flLmgv7PDGhGrruvxI3Imvkokvb3NshqVnZXFnH/hWihCBWFAhc/FGRsutLsfpC1 J2r3ptnCiv/pShEFmAP65mBVs25IbUYeUTXsDzn19tQgKtc0AFBA8j7ZMZcRJrkc V6e3gOtQDn/Fu5pDHMAgohP4Pq7nhUpHZPREBxHkbD+tuHoDceujI0udKxCgWw8O /JjTqzw216ZvxQXMgadwCgWk+rReepAiqAo5PC/TpyVox9xDCtAIIdDuIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtjMw2N55lD/kkOX/U2yy2vmrm4MB8GA1UdIwQY MBaAFIVMgXbZxCxwSzEJEzCUcDUbtZnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jZmY2MzAtNmM4YS00M2JkLWFmYjkt YjA3ZjAxNmExNzYyLzEvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jZmY2MzAtNmM4YS00M2JkLWFmYjktYjA3ZjAxNmExNzYy LzEvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACef6ZywO yRK0Qw3pXmvCeKl03Cc0kh+4O+YGRQ8gYduLdvwN1XK/Hhe7t6YMQl9orymFeYjQ Jroy6Njx8bRAEI+8LjWskBdzk7G7zmeN1U3TqHLB7y6nrb0ELzulvfGwZrMSUCha FwHswkdMrh5UyKry9M2GK8t2SoFouygQp12CNoTR0YB5bax62SA8KBM5E9ZKQcD8 6zjDEpHBh0qRmvMUtUtGQ/THNGfNeP+VkTsfNeAg5V/D1WIaKgHMUcRDX47aviYN VZbrSACrrjNI9LamOZF1ltCmV6I3VgxSu7JQoNdpzZeZyMEf/iwJWYEn2krIq093 rGKZKNvqK8Lt/A== -----END CERTIFICATE-----Generated at Thu Dec 25 04:34:16 2025 by rpki-client