This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json) Hash identifier: /LrFgZY06XtZH4P+FbtXNahGMJsmOqObSI74pXiNGyk= Subject key identifier: 78:21:34:36:10:B8:CE:29:8A:0F:B7:9B:42:25:3F:DE:BD:D6:37:1D Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e Certificate serial: 019B4137182151E642855033D91B7F78721C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft Manifest number: 0DB9 Signing time: Sun 21 Dec 2025 14:01:28 +0000 Manifest this update: Sun 21 Dec 2025 14:01:28 +0000 Manifest next update: Mon 22 Dec 2025 14:01:28 +0000 Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: QntGlIIVKe/5YDWVxFwQ889/qaxjzIZkgV3BNdBeSgg=) 2: KUAHtfvST5K1EckHjwHYRJlPUp4.roa (hash: xEJyISbIDbAPWfTLfoXu5sCkABLUM5AZf64I/6n92jo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:37:18:21:51:e6:42:85:50:33:d9:1b:7f:78:72:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e Validity Not Before: Dec 21 14:01:28 2025 GMT Not After : Dec 22 14:01:28 2025 GMT Subject: CN=7821343610b8ce298a0fb79b42253fdebdd6371d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:87:a8:fe:0e:59:e9:7e:86:b2:70:b5:8e:df: 5b:8a:65:43:19:a4:46:89:74:4f:1a:b5:7e:7c:67: 69:7a:7e:c8:26:01:73:11:df:25:4f:a2:68:36:fd: d0:40:42:fc:d0:b7:7f:4b:07:c7:ab:03:6c:1a:37: 40:34:c2:c8:57:be:d1:40:70:ee:13:51:ac:1f:df: 90:26:93:2c:59:b1:51:11:1b:ab:b0:0f:fc:ca:66: 52:73:89:24:9b:c4:73:7e:a6:66:33:ab:fe:77:1f: 07:71:80:28:b2:56:70:ad:ea:e3:dd:e4:0c:d3:ba: cd:a9:3a:cc:04:a4:0e:2b:76:9b:79:90:f8:26:47: 47:19:7b:f0:dc:ec:45:85:f6:9c:ca:00:74:d1:fa: 5a:ec:40:3a:2e:80:7d:be:6d:33:63:2e:49:e1:af: 82:7e:7a:a2:38:9f:6f:c7:8c:f7:40:e5:bb:ce:9d: 77:7b:18:13:a9:3c:90:39:f4:08:ab:bb:f2:68:02: bc:71:b3:9d:9a:65:cb:1e:2c:c0:0b:4f:85:8d:22: e3:37:28:ba:b3:df:a1:36:5c:be:b9:66:99:d4:03: ec:3d:19:c5:1e:70:00:10:fb:a2:40:33:42:ec:c5: 47:1f:15:a7:b2:f4:fd:18:3b:f5:bf:17:0b:ea:c6: 98:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:21:34:36:10:B8:CE:29:8A:0F:B7:9B:42:25:3F:DE:BD:D6:37:1D X509v3 Authority Key Identifier: keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:92:83:57:0c:21:c4:5f:f0:51:fc:04:6c:cc:c0:d1:29:55: 7b:8e:fe:87:03:da:ee:91:70:3b:ed:12:fb:33:08:fd:df:85: a9:be:9c:53:ec:8a:fa:d7:36:c2:20:1a:f7:33:7f:1e:bb:94: b5:51:a6:f1:68:c5:c7:e9:90:a0:ec:13:aa:9c:dd:5e:10:a5: dc:d4:5f:df:f3:21:fd:8e:8a:f3:16:a0:75:d5:f4:ad:53:3a: 9f:11:09:c3:80:d3:47:09:bb:91:62:35:60:f5:c7:7a:26:73: 82:36:bb:90:fa:9a:d3:7a:1b:19:22:a5:9a:df:60:d2:50:36: 31:13:8a:d3:9e:01:44:34:c8:9a:4a:f7:50:10:d4:4d:e6:38: 28:28:fd:cd:28:93:f2:13:15:63:df:2a:a3:39:13:27:d3:ea: d8:ed:d2:07:61:1b:9d:77:e2:a5:c0:ec:ee:f7:a5:55:61:ae: 74:a1:d3:ab:a2:3e:13:94:3f:5e:86:35:5a:8b:ac:3d:ac:ce: c7:cb:5b:36:a5:df:f8:83:0b:8b:fa:15:50:3d:ae:0c:f2:a5: a8:f7:f4:4a:d5:b1:2d:76:f6:c3:07:a6:4e:fc:d4:61:60:49: 4f:00:a7:88:4a:50:b7:f8:8b:9e:5c:c6:22:62:f5:53:11:b1: eb:ca:ce:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNxghUeZChVAz2Rt/eHIcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkODYxNzgyOTczYzM4MmNjMWNlNjcwZjVhZDUwZGY4ZmI1 M2M4MmUwHhcNMjUxMjIxMTQwMTI4WhcNMjUxMjIyMTQwMTI4WjAzMTEwLwYDVQQD Eyg3ODIxMzQzNjEwYjhjZTI5OGEwZmI3OWI0MjI1M2ZkZWJkZDYzNzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4eo/g5Z6X6GsnC1jt9bimVDGaRG iXRPGrV+fGdpen7IJgFzEd8lT6JoNv3QQEL80Ld/SwfHqwNsGjdANMLIV77RQHDu E1GsH9+QJpMsWbFRERursA/8ymZSc4kkm8RzfqZmM6v+dx8HcYAoslZwrerj3eQM 07rNqTrMBKQOK3abeZD4JkdHGXvw3OxFhfacygB00fpa7EA6LoB9vm0zYy5J4a+C fnqiOJ9vx4z3QOW7zp13exgTqTyQOfQIq7vyaAK8cbOdmmXLHizAC0+FjSLjNyi6 s9+hNly+uWaZ1APsPRnFHnAAEPuiQDNC7MVHHxWnsvT9GDv1vxcL6saYhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHghNDYQuM4pig+3m0IlP9691jcdMB8GA1UdIwQY MBaAFB2GF4KXPDgswc5nD1rVDfj7U8guMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTIt OGUwNjBjYTk2ZmFjLzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTItOGUwNjBjYTk2ZmFj LzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQZKDVwwh xF/wUfwEbMzA0SlVe47+hwPa7pFwO+0S+zMI/d+Fqb6cU+yK+tc2wiAa9zN/HruU tVGm8WjFx+mQoOwTqpzdXhCl3NRf3/Mh/Y6K8xagddX0rVM6nxEJw4DTRwm7kWI1 YPXHeiZzgja7kPqa03obGSKlmt9g0lA2MROK054BRDTImkr3UBDUTeY4KCj9zSiT 8hMVY98qozkTJ9Pq2O3SB2EbnXfipcDs7velVWGudKHTq6I+E5Q/XoY1WousPazO x8tbNqXf+IMLi/oVUD2uDPKlqPf0StWxLXb2wwemTvzUYWBJTwCniEpQt/iLnlzG ImL1UxGx68rODw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:05:52 2025 by rpki-client