This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json) Hash identifier: 1wv/sO2/UT3OR5eofF8BIUUAsXG/Xu2FvhWuOZKD6bk= Subject key identifier: F8:7E:98:60:58:07:0C:3F:62:95:96:69:68:D7:A2:BE:26:E3:BB:3A Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e Certificate serial: 019B8128593DDE2B043BFE9C1E0602A625B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft Manifest number: 0DDB Signing time: Sat 03 Jan 2026 00:01:03 +0000 Manifest this update: Sat 03 Jan 2026 00:01:03 +0000 Manifest next update: Sun 04 Jan 2026 00:01:03 +0000 Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: HHWSGllvXJubxReD/3BBE0Ud9kkuJhpgudRe8mvb6jk=) 2: WNVQM3rF0upB772-caKrCDXCoWg.roa (hash: LRTmq6WPI/+2g0t0k7Z57A9ICoogy4YmPQH2aun+PO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:28:59:3d:de:2b:04:3b:fe:9c:1e:06:02:a6:25:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e Validity Not Before: Jan 3 00:01:03 2026 GMT Not After : Jan 4 00:01:03 2026 GMT Subject: CN=f87e986058070c3f6295966968d7a2be26e3bb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:60:6e:82:f4:60:43:f3:b2:1d:39:b0:19:51: 00:cd:e1:47:41:1b:68:3b:57:61:67:7c:9e:37:43: 3f:7a:c6:33:52:2e:ba:fc:8b:a9:67:82:20:31:75: 78:d2:9d:d0:69:26:2c:0b:ef:79:b8:fe:e7:ab:d6: b5:91:ad:28:1d:f2:e2:89:60:19:de:10:a4:1e:70: 08:32:7b:f0:c9:8b:6e:26:a4:c1:bc:f9:c9:04:ff: 17:ad:8f:80:de:5b:8b:a4:a5:75:a9:ab:21:0f:d5: 7a:49:6f:3e:27:0d:df:7d:cc:c1:f9:83:68:ea:27: 32:46:c6:18:55:aa:62:35:01:1d:83:cb:09:40:c4: d1:5f:f1:f6:62:e3:59:c7:44:16:10:6a:4a:da:d4: 63:77:22:87:b7:f3:40:76:d3:b2:d3:a9:ab:a9:0e: ff:53:15:da:31:ad:a2:ca:90:06:39:6d:b1:a1:d4: 7e:c1:8d:dd:60:aa:e9:36:6c:6d:15:88:82:bd:ba: 0b:32:ed:b2:c4:9a:92:33:6d:9a:68:ea:3a:87:8f: 66:45:93:8a:83:94:74:5a:11:2c:11:e1:10:3f:7f: 04:a7:27:56:71:00:ce:74:9c:d0:d8:5f:58:8d:81: ab:1c:31:e1:07:f9:bf:9a:8d:0a:31:9d:e7:d9:38: 31:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7E:98:60:58:07:0C:3F:62:95:96:69:68:D7:A2:BE:26:E3:BB:3A X509v3 Authority Key Identifier: keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:ef:c0:d5:39:74:e0:eb:13:1d:58:aa:39:d4:1b:db:ff:0e: 49:3c:95:f8:fd:e4:1a:b8:5d:ca:e9:7d:2a:2f:2c:86:e0:6f: 6c:df:7b:72:c8:c3:f0:6b:63:a9:fa:98:26:a9:4f:86:9d:80: b0:98:01:75:92:09:49:bb:31:cf:55:79:f2:00:7b:ad:7c:12: ec:cc:7b:bd:d1:a9:9e:6d:e2:ef:fe:31:48:c7:7f:76:eb:6e: 65:ad:d4:c7:c0:ba:2d:67:93:64:2f:03:e5:9b:13:85:b1:0d: 4d:8e:fa:10:7b:65:ba:63:98:f4:41:a7:5c:6f:2b:94:85:ff: d0:7d:35:73:57:cd:9e:e6:9b:9b:df:36:56:b2:7c:4c:cf:3e: e1:50:3b:54:f8:6c:b3:ae:c9:70:ce:f8:a7:f7:48:7a:d3:64: d1:f1:2c:c8:90:4d:1d:e3:98:4a:a4:12:9e:1c:62:8f:76:56: 41:66:37:42:8e:60:0a:7c:81:f6:68:b9:c6:82:07:63:7a:fa: 52:4b:08:33:e6:34:4c:1a:91:a8:c9:9f:8c:db:1a:9d:3d:0b: 66:55:be:ec:8d:b6:ef:f5:36:40:ea:6d:ca:21:ae:ee:4e:93: b4:43:f8:92:36:55:d8:64:3e:08:c0:90:f2:26:c6:31:81:aa: 7a:ea:25:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuBKFk93isEO/6cHgYCpiW4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkODYxNzgyOTczYzM4MmNjMWNlNjcwZjVhZDUwZGY4ZmI1 M2M4MmUwHhcNMjYwMTAzMDAwMTAzWhcNMjYwMTA0MDAwMTAzWjAzMTEwLwYDVQQD EyhmODdlOTg2MDU4MDcwYzNmNjI5NTk2Njk2OGQ3YTJiZTI2ZTNiYjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmBugvRgQ/OyHTmwGVEAzeFHQRto O1dhZ3yeN0M/esYzUi66/IupZ4IgMXV40p3QaSYsC+95uP7nq9a1ka0oHfLiiWAZ 3hCkHnAIMnvwyYtuJqTBvPnJBP8XrY+A3luLpKV1qashD9V6SW8+Jw3ffczB+YNo 6icyRsYYVapiNQEdg8sJQMTRX/H2YuNZx0QWEGpK2tRjdyKHt/NAdtOy06mrqQ7/ UxXaMa2iypAGOW2xodR+wY3dYKrpNmxtFYiCvboLMu2yxJqSM22aaOo6h49mRZOK g5R0WhEsEeEQP38EpydWcQDOdJzQ2F9YjYGrHDHhB/m/mo0KMZ3n2TgxxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPh+mGBYBww/YpWWaWjXor4m47s6MB8GA1UdIwQY MBaAFB2GF4KXPDgswc5nD1rVDfj7U8guMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTIt OGUwNjBjYTk2ZmFjLzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTItOGUwNjBjYTk2ZmFj LzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALO/A1Tl0 4OsTHViqOdQb2/8OSTyV+P3kGrhdyul9Ki8shuBvbN97csjD8GtjqfqYJqlPhp2A sJgBdZIJSbsxz1V58gB7rXwS7Mx7vdGpnm3i7/4xSMd/dutuZa3Ux8C6LWeTZC8D 5ZsThbENTY76EHtlumOY9EGnXG8rlIX/0H01c1fNnuabm982VrJ8TM8+4VA7VPhs s67JcM74p/dIetNk0fEsyJBNHeOYSqQSnhxij3ZWQWY3Qo5gCnyB9mi5xoIHY3r6 UksIM+Y0TBqRqMmfjNsanT0LZlW+7I227/U2QOptyiGu7k6TtEP4kjZV2GQ+CMCQ 8ibGMYGqeuolCw== -----END CERTIFICATE-----Generated at Sat Jan 3 02:33:56 2026 by rpki-client