This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft File: hdycVeFZfohWTa9WflpGZZeMe4U.mft (raw, json) Hash identifier: IoSGmm/wHZERYv/1ITRVtgz6cJMUkTNsivHAO17C/O8= Subject key identifier: 56:BF:8B:57:E0:D6:FA:02:42:DF:48:1C:80:55:33:91:AE:A9:B8:5E Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85 Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85 Certificate serial: 019B3BD97C8605B95F7F920797B4CA1F92B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft Manifest number: 11CA Signing time: Sat 20 Dec 2025 13:01:07 +0000 Manifest this update: Sat 20 Dec 2025 13:01:07 +0000 Manifest next update: Sun 21 Dec 2025 13:01:07 +0000 Files and hashes: 1: 0pi9IaQq2fBWcGfcpKeC_IHzvEQ.roa (hash: 7NVRHz/yavsbwJXBgfeDxYrCqDuUxp9nZbgGaZLZ9oA=) 2: 3wW5MOLSStojI9xiPbeDzYTIyjU.roa (hash: 2XAYsLytjrXYCpBJtfGxqKAam2Z4NRRhSRFoEEd4Llk=) 3: bpfV9qpUqRU7ZbL5m4qH_-0K2rg.roa (hash: 4P0zOtuiLjjQhgT/25d48jeUAEanfYakXWIUUX0ljiU=) 4: hdycVeFZfohWTa9WflpGZZeMe4U.crl (hash: FU+YjFdGSBUT/h63Op/5+I1e6vbeeNfYgL6PxyLwLLU=) 5: mPqcgtGb2yf9In758ERINrkMypo.roa (hash: NIdkZJadBz8qYXRNbhuo0LCb4YMZcnXeOqxZtSChOrc=) 6: yXjHrq-s43_JYr0rLELUWWQUfRw.roa (hash: 4zzMUSCqPCS+1DFvUjbQidVA6cErC1SxAP7lBmahGck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:d9:7c:86:05:b9:5f:7f:92:07:97:b4:ca:1f:92:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85 Validity Not Before: Dec 20 13:01:07 2025 GMT Not After : Dec 21 13:01:07 2025 GMT Subject: CN=56bf8b57e0d6fa0242df481c80553391aea9b85e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a1:48:e4:2d:df:91:04:10:69:8e:bd:3b:2d: 44:f5:5f:9f:2f:13:c7:a4:3c:9c:87:db:32:15:1d: 9d:b7:4e:b7:7d:74:6f:f3:aa:2a:fd:6e:32:ea:c9: db:c9:21:fa:98:8c:d2:3c:c1:5d:28:29:7f:95:f4: 62:4c:76:8e:60:2b:97:7b:0e:80:65:28:ec:f3:ad: 8b:ce:3c:d3:b2:e0:3c:67:11:4f:2a:02:4b:cb:c2: 6b:51:b1:33:5b:9d:0e:00:07:9d:90:0a:12:9c:f9: cf:67:ca:a8:8d:94:db:1b:0d:8d:f0:cc:15:93:09: 6a:6f:47:e8:f7:8e:da:2e:c3:a0:78:0f:2a:5b:0f: d5:8d:d8:bf:d8:ec:5e:10:d9:8f:8d:63:9d:ec:56: bc:13:36:0c:e0:20:dd:aa:8c:f5:78:4a:a6:c0:e5: e1:08:f4:67:05:fa:a9:82:db:2f:81:70:3c:c8:4b: cf:48:87:8d:72:a0:96:23:e3:3b:04:2e:82:5b:fe: 69:5f:4e:d6:d2:3c:f7:5a:48:13:f6:16:61:e7:6c: 8e:f3:5a:6a:33:01:2d:1c:85:a0:e7:73:4a:75:73: 8a:b4:a5:19:de:d9:3e:70:70:cf:63:c0:5f:7a:5b: 9c:32:ee:a5:ae:2d:7e:50:e0:f5:ff:2a:8e:29:a6: fd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:BF:8B:57:E0:D6:FA:02:42:DF:48:1C:80:55:33:91:AE:A9:B8:5E X509v3 Authority Key Identifier: keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:31:00:a6:05:e0:2c:f4:ae:67:c3:55:cc:ec:e1:04:05:a0: d7:ec:bd:05:b5:8e:d0:47:d4:eb:54:60:12:aa:94:6c:4f:56: fa:d8:b8:0b:7e:53:d4:32:ce:19:3c:c8:59:99:d5:30:a1:16: 12:38:98:40:aa:21:19:81:fd:b6:e0:a1:06:df:c3:eb:8a:37: ad:e5:06:c5:af:43:5b:9b:4e:c1:5c:63:97:4a:90:11:41:f1: 5a:90:56:2d:56:2b:21:ca:26:37:d5:30:08:20:f0:a8:13:6c: 1a:97:89:4a:61:cf:4b:d6:7a:39:cf:48:80:aa:cf:9a:5f:f7: 43:b5:41:5d:c1:82:9f:75:5d:c2:44:6c:20:43:83:be:ed:7d: 48:85:fa:d0:41:ad:dc:50:74:56:bf:2c:b6:4e:b5:a1:c2:57: d4:33:5b:8d:66:e8:bd:5c:8a:60:7e:97:4e:0a:bc:dd:ff:dd: b6:82:a2:80:b7:0e:8a:78:fc:e7:80:fd:26:ac:04:2c:1e:f0: 32:34:c6:0e:46:9a:5f:25:48:bc:b2:3f:56:93:27:ce:88:2b: 17:dd:05:16:35:2a:e7:80:06:a2:80:f3:4c:b4:6e:70:3e:2a: 7d:d3:66:a4:ec:08:bc:9f:04:7c:d0:38:80:9d:b1:c4:81:53: df:47:bd:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs72XyGBblff5IHl7TKH5KxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZGM5YzU1ZTE1OTdlODg1NjRkYWY1NjdlNWE0NjY1OTc4 YzdiODUwHhcNMjUxMjIwMTMwMTA3WhcNMjUxMjIxMTMwMTA3WjAzMTEwLwYDVQQD Eyg1NmJmOGI1N2UwZDZmYTAyNDJkZjQ4MWM4MDU1MzM5MWFlYTliODVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6FI5C3fkQQQaY69Oy1E9V+fLxPH pDych9syFR2dt063fXRv86oq/W4y6snbySH6mIzSPMFdKCl/lfRiTHaOYCuXew6A ZSjs862LzjzTsuA8ZxFPKgJLy8JrUbEzW50OAAedkAoSnPnPZ8qojZTbGw2N8MwV kwlqb0fo947aLsOgeA8qWw/Vjdi/2OxeENmPjWOd7Fa8EzYM4CDdqoz1eEqmwOXh CPRnBfqpgtsvgXA8yEvPSIeNcqCWI+M7BC6CW/5pX07W0jz3WkgT9hZh52yO81pq MwEtHIWg53NKdXOKtKUZ3tk+cHDPY8BfelucMu6lri1+UOD1/yqOKab9RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFa/i1fg1voCQt9IHIBVM5GuqbheMB8GA1UdIwQY MBaAFIXcnFXhWX6IVk2vVn5aRmWXjHuFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mMDdmYmMtNGMzMi00ZDg3LWE0Mjkt ODZlYTE5ZDI5MTYzLzEvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mMDdmYmMtNGMzMi00ZDg3LWE0MjktODZlYTE5ZDI5MTYz LzEvaGR5Y1ZlRlpmb2hXVGE5V2ZscEdaWmVNZTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzEApgXg LPSuZ8NVzOzhBAWg1+y9BbWO0EfU61RgEqqUbE9W+ti4C35T1DLOGTzIWZnVMKEW EjiYQKohGYH9tuChBt/D64o3reUGxa9DW5tOwVxjl0qQEUHxWpBWLVYrIcomN9Uw CCDwqBNsGpeJSmHPS9Z6Oc9IgKrPml/3Q7VBXcGCn3VdwkRsIEODvu19SIX60EGt 3FB0Vr8stk61ocJX1DNbjWbovVyKYH6XTgq83f/dtoKigLcOinj854D9JqwELB7w MjTGDkaaXyVIvLI/VpMnzogrF90FFjUq54AGooDzTLRucD4qfdNmpOwIvJ8EfNA4 gJ2xxIFT30e9wQ== -----END CERTIFICATE-----Generated at Sat Dec 20 15:18:15 2025 by rpki-client