This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft File: HY6rk1MM_VDaf7faXroKpEDJ7ww.mft (raw, json) Hash identifier: 2MWAnRZCS7OH103IjKHrgIFMLjlz8lTcHHe707fSvzA= Subject key identifier: 51:99:3B:0F:93:D2:D1:3A:FD:B3:DF:3E:67:50:05:70:DE:7D:99:6D Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c Certificate serial: 019B4E4DE335C1FA64EDE272A0393DB2A2C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft Manifest number: 0F54 Signing time: Wed 24 Dec 2025 03:01:25 +0000 Manifest this update: Wed 24 Dec 2025 03:01:25 +0000 Manifest next update: Thu 25 Dec 2025 03:01:25 +0000 Files and hashes: 1: 9Es8iFXDyIiBpEBLJtDb3ICiuKQ.roa (hash: HEzkbHdkYcaNhXkFRgu0o/snijaUYbXsMj2B9AbGYOo=) 2: HY6rk1MM_VDaf7faXroKpEDJ7ww.crl (hash: 1un0fhv/GyT5E7C6NOmlhoEAs8GTUqRwpS7SpEuuR3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 03:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4e:4d:e3:35:c1:fa:64:ed:e2:72:a0:39:3d:b2:a2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c Validity Not Before: Dec 24 03:01:25 2025 GMT Not After : Dec 25 03:01:25 2025 GMT Subject: CN=51993b0f93d2d13afdb3df3e67500570de7d996d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a3:85:ce:c9:f7:4c:16:78:3b:d0:ec:8f:0c: fd:62:b5:5a:a7:bd:e5:98:56:67:d6:71:d0:02:c3: 64:47:0c:c0:af:9e:f5:d7:ed:e0:46:d2:94:49:d8: c2:35:79:9d:da:fd:6c:d0:df:3c:e1:ae:e3:d2:97: a8:3d:1a:51:bd:b4:f9:2d:ea:3d:a7:95:cb:20:d0: b7:aa:3b:17:00:48:0f:8d:87:71:36:f7:e8:14:67: 03:a2:6d:3b:66:d7:ff:d0:e0:16:64:72:d4:cb:2c: c2:73:c7:0a:aa:f6:c5:9c:0b:25:14:ed:58:ef:12: 57:42:e5:85:48:ba:fa:92:c5:10:6f:31:a9:51:15: f7:a8:58:29:3f:05:77:4f:af:01:0a:ad:28:b0:e3: 08:64:36:70:4f:1f:4a:d6:9a:c6:00:fd:6d:12:01: ba:a4:8a:a2:bc:6a:34:04:05:40:17:b2:fb:0e:1a: 60:58:6d:58:76:6a:7e:11:f2:b8:c0:b2:79:c8:74: 1d:87:64:d5:e1:1c:ff:70:82:fd:ec:1e:a3:f6:1c: 3d:e9:6b:08:e1:0d:8f:51:78:5d:ca:e0:52:73:71: 13:36:f1:dc:2c:fa:3f:30:b5:38:d2:fd:2f:5b:6a: 07:d6:27:a7:f7:b7:57:47:e9:cb:2d:ab:8d:d3:ca: 57:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:99:3B:0F:93:D2:D1:3A:FD:B3:DF:3E:67:50:05:70:DE:7D:99:6D X509v3 Authority Key Identifier: keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:c3:95:60:a7:a4:0b:2f:ea:e9:f8:7f:70:c9:33:b9:97:db: d2:fb:a7:2a:2c:c7:1d:83:b4:d9:22:d7:eb:b8:f9:4f:b5:b0: f0:7e:54:ce:8e:9c:9e:89:3a:26:73:89:bc:57:21:06:4a:b2: b1:44:2b:c6:87:c8:f1:73:46:4c:3c:2c:62:0e:1f:28:37:c9: 17:21:e9:4e:27:10:47:db:ce:46:c9:77:8c:c9:d8:16:e1:16: eb:3b:e1:08:37:aa:af:cb:89:d1:be:78:41:23:32:50:19:23: 38:12:cf:b3:9a:73:c3:82:14:77:2a:16:68:cc:4e:0d:21:77: d6:cb:94:b9:61:78:9c:0e:43:fb:0e:7a:71:da:b5:2a:2d:d8: 0a:fa:23:a5:87:cd:82:57:94:aa:7e:a6:e7:b9:1e:89:22:36: d0:ad:95:59:bb:6f:40:c6:f4:f0:3e:50:bc:9e:c5:49:ee:dd: e0:76:d1:0c:82:71:b5:89:00:af:a0:8b:95:e6:a6:e6:45:45: 12:14:6b:b4:85:d8:95:0d:fc:19:6f:76:e9:2d:a7:a0:e1:f8: c1:b2:f1:0c:7e:6b:95:94:30:05:c8:9e:db:ca:75:bd:e4:88: 0b:0b:2a:5f:04:a7:cf:cb:a3:6f:8a:6e:6c:c2:6e:59:4f:90: 5c:3e:a4:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtOTeM1wfpk7eJyoDk9sqLAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkOGVhYjkzNTMwY2ZkNTBkYTdmYjdkYTVlYmEwYWE0NDBj OWVmMGMwHhcNMjUxMjI0MDMwMTI1WhcNMjUxMjI1MDMwMTI1WjAzMTEwLwYDVQQD Eyg1MTk5M2IwZjkzZDJkMTNhZmRiM2RmM2U2NzUwMDU3MGRlN2Q5OTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaOFzsn3TBZ4O9Dsjwz9YrVap73l mFZn1nHQAsNkRwzAr5711+3gRtKUSdjCNXmd2v1s0N884a7j0peoPRpRvbT5Leo9 p5XLINC3qjsXAEgPjYdxNvfoFGcDom07Ztf/0OAWZHLUyyzCc8cKqvbFnAslFO1Y 7xJXQuWFSLr6ksUQbzGpURX3qFgpPwV3T68BCq0osOMIZDZwTx9K1prGAP1tEgG6 pIqivGo0BAVAF7L7DhpgWG1Ydmp+EfK4wLJ5yHQdh2TV4Rz/cIL97B6j9hw96WsI 4Q2PUXhdyuBSc3ETNvHcLPo/MLU40v0vW2oH1ien97dXR+nLLauN08pXLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGZOw+T0tE6/bPfPmdQBXDefZltMB8GA1UdIwQY MBaAFB2Oq5NTDP1Q2n+32l66CqRAye8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lYmI4M2EtMDEyNi00M2MwLWI5ZWEt MzJkZDUzNjQwYjljLzEvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9lYmI4M2EtMDEyNi00M2MwLWI5ZWEtMzJkZDUzNjQwYjlj LzEvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8OVYKek Cy/q6fh/cMkzuZfb0vunKizHHYO02SLX67j5T7Ww8H5Uzo6cnok6JnOJvFchBkqy sUQrxofI8XNGTDwsYg4fKDfJFyHpTicQR9vORsl3jMnYFuEW6zvhCDeqr8uJ0b54 QSMyUBkjOBLPs5pzw4IUdyoWaMxODSF31suUuWF4nA5D+w56cdq1Ki3YCvojpYfN gleUqn6m57keiSI20K2VWbtvQMb08D5QvJ7FSe7d4HbRDIJxtYkAr6CLleam5kVF EhRrtIXYlQ38GW926S2noOH4wbLxDH5rlZQwBcie28p1veSICwsqXwSnz8ujb4pu bMJuWU+QXD6kpA== -----END CERTIFICATE-----Generated at Wed Dec 24 10:52:30 2025 by rpki-client