This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft File: hY6VYi_VRF1u00P4DgU-r_sRiyw.mft (raw, json) Hash identifier: 4UPNAt1Ss0sY/jP4rvtQd13q9rLiZYab1CFAsAjZlNA= Subject key identifier: 4C:D3:2A:D6:34:D0:6F:A6:4E:3F:AB:D3:0D:5A:33:C3:B9:03:BB:C4 Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c Certificate serial: 019B42B6F7676B41E30820B3F8669C69D6FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 21:00:45 +0000 Manifest this update: Sun 21 Dec 2025 21:00:45 +0000 Manifest next update: Mon 22 Dec 2025 21:00:45 +0000 Files and hashes: 1: hY6VYi_VRF1u00P4DgU-r_sRiyw.crl (hash: 8Ny8PTdq++9N2N9C5nc1Wpy3kN7vOwWLZJKR1S4bTCg=) 2: s8ohh6B9MPW6Ei_9Z3ptsTMa_B0.roa (hash: u62iZk13BoIGBLhc8QtldmpQibWClfB9WRM3VJxu+Vs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b6:f7:67:6b:41:e3:08:20:b3:f8:66:9c:69:d6:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c Validity Not Before: Dec 21 21:00:45 2025 GMT Not After : Dec 22 21:00:45 2025 GMT Subject: CN=4cd32ad634d06fa64e3fabd30d5a33c3b903bbc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:21:e8:a6:d5:ec:45:88:97:3e:e8:69:71:bc: dd:0a:5b:3f:fd:c4:e4:c4:b9:25:b8:5a:a2:e7:75: c8:d1:b6:8c:df:03:09:48:41:24:8f:a9:01:f7:51: 59:85:95:79:61:dd:19:20:b5:ff:ca:9b:75:6a:8f: 55:b5:4f:6d:4e:77:18:f8:d2:bc:4c:58:b3:b5:b0: cc:06:4c:72:37:db:55:fd:bb:50:5c:67:ba:9d:1c: 31:7b:62:13:fa:5c:6e:01:c6:c4:af:2c:d5:4b:8f: 4c:27:1b:4e:81:75:1a:dd:0f:86:25:de:b9:df:e8: 41:11:b5:f8:8b:7b:76:92:32:51:19:6c:0e:03:c4: 06:ed:91:52:b1:e9:d6:26:cb:6b:3b:f9:d0:12:65: a3:cb:63:ab:2e:d4:83:dc:a3:2a:ec:2c:2c:1f:10: 63:78:0c:25:5a:59:30:99:c7:67:6e:77:9d:f3:08: 91:c8:1e:14:ce:e4:49:8b:5b:71:07:e2:cc:75:17: 85:24:2a:4e:0f:18:2a:69:71:2c:80:8e:cd:dc:67: 51:a1:f8:2b:7d:35:2e:92:9f:00:2d:87:47:03:99: 14:dc:20:1b:94:7c:87:46:e0:f0:fb:27:7a:6a:a7: 22:fe:8c:c8:07:d6:83:b9:66:c8:4f:ac:08:c2:f6: ed:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D3:2A:D6:34:D0:6F:A6:4E:3F:AB:D3:0D:5A:33:C3:B9:03:BB:C4 X509v3 Authority Key Identifier: keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:58:9c:d7:91:db:77:a2:60:b3:ad:5b:3c:3a:d4:ca:ce:52: d5:d5:ae:e3:9e:85:4d:bc:f8:8c:24:5c:90:e3:d9:d5:0a:e3: 5c:6e:d3:dd:69:82:0b:cc:17:0c:14:f4:39:fc:91:97:82:c7: b9:fe:b7:45:2e:9c:42:a4:19:49:2d:9e:1b:cb:9e:fb:1d:e8: 35:85:d1:4f:57:b0:3a:9c:87:b3:cd:a1:71:1c:b5:bf:28:3c: 65:c9:2e:4b:5a:42:50:8a:ec:5c:2b:2e:35:b5:92:41:41:f0: f8:c5:df:86:3e:00:90:33:a7:94:bf:00:a6:52:89:9c:2d:77: 9b:89:40:39:8c:04:70:90:d0:6e:16:72:ab:3c:e5:bc:3f:d3: 3d:4e:59:c5:49:91:97:07:49:a0:07:38:2f:8d:0f:b6:22:ea: 6c:a0:72:9a:4d:f0:e5:c6:a8:87:f7:6e:6a:28:7d:d1:61:69: 88:7d:4d:82:68:82:ef:b0:2f:b8:f8:19:1b:16:df:3e:62:06: fa:fa:73:bc:38:1f:d3:0c:09:4e:cd:41:c0:93:bc:3d:95:d4: aa:2c:6a:9e:0d:eb:52:0a:68:f2:7b:1b:f5:73:67:d9:ad:e1: 28:e7:42:f9:c8:77:d4:3f:48:de:05:f8:06:04:60:18:9a:e3: d4:ed:2a:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtvdna0HjCCCz+Gacadb+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1OGU5NTYyMmZkNTQ0NWQ2ZWQzNDNmODBlMDUzZWFmZmIx MThiMmMwHhcNMjUxMjIxMjEwMDQ1WhcNMjUxMjIyMjEwMDQ1WjAzMTEwLwYDVQQD Eyg0Y2QzMmFkNjM0ZDA2ZmE2NGUzZmFiZDMwZDVhMzNjM2I5MDNiYmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iHoptXsRYiXPuhpcbzdCls//cTk xLkluFqi53XI0baM3wMJSEEkj6kB91FZhZV5Yd0ZILX/ypt1ao9VtU9tTncY+NK8 TFiztbDMBkxyN9tV/btQXGe6nRwxe2IT+lxuAcbEryzVS49MJxtOgXUa3Q+GJd65 3+hBEbX4i3t2kjJRGWwOA8QG7ZFSsenWJstrO/nQEmWjy2OrLtSD3KMq7CwsHxBj eAwlWlkwmcdnbned8wiRyB4UzuRJi1txB+LMdReFJCpODxgqaXEsgI7N3GdRofgr fTUukp8ALYdHA5kU3CAblHyHRuDw+yd6aqci/ozIB9aDuWbIT6wIwvbtVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzTKtY00G+mTj+r0w1aM8O5A7vEMB8GA1UdIwQY MBaAFIWOlWIv1URdbtND+A4FPq/7EYssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9kN2IwMDYtMjUyNy00NGU1LWE0MDEt NWJkNGRjYzVkNmVkLzEvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9kN2IwMDYtMjUyNy00NGU1LWE0MDEtNWJkNGRjYzVkNmVk LzEvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblic15Hb d6Jgs61bPDrUys5S1dWu456FTbz4jCRckOPZ1QrjXG7T3WmCC8wXDBT0OfyRl4LH uf63RS6cQqQZSS2eG8ue+x3oNYXRT1ewOpyHs82hcRy1vyg8ZckuS1pCUIrsXCsu NbWSQUHw+MXfhj4AkDOnlL8AplKJnC13m4lAOYwEcJDQbhZyqzzlvD/TPU5ZxUmR lwdJoAc4L40PtiLqbKBymk3w5caoh/duaih90WFpiH1NgmiC77AvuPgZGxbfPmIG +vpzvDgf0wwJTs1BwJO8PZXUqixqng3rUgpo8nsb9XNn2a3hKOdC+ch31D9I3gX4 BgRgGJrj1O0qJg== -----END CERTIFICATE-----Generated at Mon Dec 22 01:03:01 2025 by rpki-client