This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft File: hUyBdtnELHBLMQkTMJRwNRu1meU.mft (raw, json) Hash identifier: Rn5eD4blmvEkdMdXQow9M4I9TAXEWoQx9q6iFtAIiR8= Subject key identifier: 2A:ED:96:39:26:BD:EA:82:91:6F:04:BE:4B:67:A8:E1:68:A3:25:28 Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5 Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5 Certificate serial: 019B69FBABD1819468BB5A4FA23A496D3069 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft Manifest number: 12C8 Signing time: Mon 29 Dec 2025 12:00:59 +0000 Manifest this update: Mon 29 Dec 2025 12:00:59 +0000 Manifest next update: Tue 30 Dec 2025 12:00:59 +0000 Files and hashes: 1: d12qVgxDPPHiE2ljm9qZxxkNLxQ.roa (hash: zX9r1B9nDeSmX0ma2mBmx6eNhz70tybIXv2tasEp9Z0=) 2: hUyBdtnELHBLMQkTMJRwNRu1meU.crl (hash: AwNVz0V8aO6lI8zHUX+bzlvpXzunBltEETDNCY/13sA=) 3: j-Ef-_ZUrA-AY6ZXYzU0wKA0MAE.roa (hash: xMubkcRgzBEAU63sGA3yqVsJQIJj2JYDdMpLJL8yY80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 12:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:fb:ab:d1:81:94:68:bb:5a:4f:a2:3a:49:6d:30:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854c8176d9c42c704b310913309470351bb599e5 Validity Not Before: Dec 29 12:00:59 2025 GMT Not After : Dec 30 12:00:59 2025 GMT Subject: CN=2aed963926bdea82916f04be4b67a8e168a32528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:69:d1:55:43:18:37:11:43:e3:df:44:1b:6f: be:c0:fd:1b:cb:9f:74:29:ab:8a:1b:43:54:83:6c: b5:d7:9c:a1:37:b5:4f:bd:3d:8e:10:a2:f9:6e:68: 3b:6b:24:85:05:fd:53:71:10:27:f3:8e:5b:55:fb: b3:c9:1b:12:62:3e:ed:6e:15:84:27:20:73:73:e9: dd:5d:dd:a0:32:eb:bf:9c:c6:e2:6c:72:d9:e7:d2: b5:15:4f:2e:09:85:94:7f:17:f2:1d:b1:ab:b5:22: 07:d4:38:16:ec:ec:f4:58:28:8e:f8:20:0a:fc:2e: 47:02:b1:a3:b6:10:d1:62:15:80:29:91:f8:4c:e3: da:0e:f2:0f:72:8c:44:31:b6:e0:24:ff:26:1f:ae: 8e:4c:3d:47:20:ab:d0:f3:19:bb:b7:7c:65:15:a2: 13:aa:5f:32:04:91:b1:cd:28:70:c4:95:82:35:7c: 26:b4:fb:c1:85:f1:14:c5:ab:a2:d5:e7:54:dd:fa: 3a:a9:d1:bc:90:b4:5a:17:f9:58:76:8a:72:b3:e7: 8e:4e:04:93:72:93:4a:2a:c1:87:76:bb:b8:66:78: 83:3a:6a:a1:a4:af:3d:5c:2f:95:36:ea:53:7f:f6: cc:01:99:a0:97:fd:b8:2e:db:09:86:e8:d8:01:92: 39:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:ED:96:39:26:BD:EA:82:91:6F:04:BE:4B:67:A8:E1:68:A3:25:28 X509v3 Authority Key Identifier: keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:eb:88:ad:39:58:ab:c7:ea:74:de:9d:ad:ad:2f:a0:54:d9: bd:ac:2f:2d:cc:91:23:00:cb:3a:c6:ea:71:18:07:40:b5:66: 9f:0e:be:4e:4a:99:41:7d:69:8a:18:b5:b3:8c:28:35:73:ee: 5e:6a:26:a6:3a:5f:48:1b:92:97:f6:8a:09:6a:ac:e7:13:0e: 1c:df:0c:e6:bf:76:61:bc:e7:9e:16:1e:52:aa:57:a1:90:9f: 84:14:cf:9d:ff:35:8e:c1:89:e8:18:2c:c0:c1:98:7f:52:a9: 75:26:52:a0:0b:1a:50:50:28:90:47:97:f0:f1:d8:31:c6:c0: 5c:66:d6:80:67:06:1c:78:69:f1:4f:b3:df:d5:a0:b8:57:df: 39:b2:d9:f8:96:b5:a2:9a:3e:04:c7:68:bb:8f:03:b4:17:f7: 31:c8:f2:c1:17:85:c5:bf:ca:7c:3b:9a:ca:87:0e:de:07:da: 4a:92:9d:c6:b7:db:a4:f3:50:59:06:8a:41:81:0c:5b:74:66: 4f:49:08:14:4c:60:fd:d3:52:34:85:46:37:09:82:6b:13:32: e0:cd:ab:8c:77:76:fb:99:7b:8c:f4:28:51:bd:95:67:5d:ff: 88:0b:14:f7:57:78:96:26:62:be:60:cd:6e:ce:72:6d:04:c4: 00:eb:3e:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtp+6vRgZRou1pPojpJbTBpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGM4MTc2ZDljNDJjNzA0YjMxMDkxMzMwOTQ3MDM1MWJi NTk5ZTUwHhcNMjUxMjI5MTIwMDU5WhcNMjUxMjMwMTIwMDU5WjAzMTEwLwYDVQQD EygyYWVkOTYzOTI2YmRlYTgyOTE2ZjA0YmU0YjY3YThlMTY4YTMyNTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGnRVUMYNxFD499EG2++wP0by590 KauKG0NUg2y115yhN7VPvT2OEKL5bmg7aySFBf1TcRAn845bVfuzyRsSYj7tbhWE JyBzc+ndXd2gMuu/nMbibHLZ59K1FU8uCYWUfxfyHbGrtSIH1DgW7Oz0WCiO+CAK /C5HArGjthDRYhWAKZH4TOPaDvIPcoxEMbbgJP8mH66OTD1HIKvQ8xm7t3xlFaIT ql8yBJGxzShwxJWCNXwmtPvBhfEUxaui1edU3fo6qdG8kLRaF/lYdopys+eOTgST cpNKKsGHdru4ZniDOmqhpK89XC+VNupTf/bMAZmgl/24LtsJhujYAZI5SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrtljkmveqCkW8EvktnqOFooyUoMB8GA1UdIwQY MBaAFIVMgXbZxCxwSzEJEzCUcDUbtZnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jZmY2MzAtNmM4YS00M2JkLWFmYjkt YjA3ZjAxNmExNzYyLzEvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jZmY2MzAtNmM4YS00M2JkLWFmYjktYjA3ZjAxNmExNzYy LzEvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiuuIrTlY q8fqdN6dra0voFTZvawvLcyRIwDLOsbqcRgHQLVmnw6+TkqZQX1pihi1s4woNXPu XmompjpfSBuSl/aKCWqs5xMOHN8M5r92YbznnhYeUqpXoZCfhBTPnf81jsGJ6Bgs wMGYf1KpdSZSoAsaUFAokEeX8PHYMcbAXGbWgGcGHHhp8U+z39WguFffObLZ+Ja1 opo+BMdou48DtBf3McjywReFxb/KfDuayocO3gfaSpKdxrfbpPNQWQaKQYEMW3Rm T0kIFExg/dNSNIVGNwmCaxMy4M2rjHd2+5l7jPQoUb2VZ13/iAsU91d4liZivmDN bs5ybQTEAOs+PA== -----END CERTIFICATE-----Generated at Mon Dec 29 16:27:47 2025 by rpki-client