This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft File: hYAvwdDz46RGJWLS8G8rPe_49Oc.mft (raw, json) Hash identifier: I1ojCeJP+GTv48ppEbXo1BXJc1o6dctClc4gyNyf6g8= Subject key identifier: EA:97:A6:60:50:95:AC:20:2E:D5:8C:12:3E:EB:BD:CE:B9:37:61:50 Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7 Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7 Certificate serial: 019AF12D2C075740077979D0749FB00501D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft Manifest number: 0D2F Signing time: Sat 06 Dec 2025 01:01:00 +0000 Manifest this update: Sat 06 Dec 2025 01:01:00 +0000 Manifest next update: Sun 07 Dec 2025 01:01:00 +0000 Files and hashes: 1: 4UJRIsMgzbbOOl_nMZ8awomMSD8.roa (hash: HA5+hPhaR5I2iP9TQnrkM1KP48JQR4MNJZDQicrXCa8=) 2: hYAvwdDz46RGJWLS8G8rPe_49Oc.crl (hash: DwmWDPcRka0nGqOL5p2x4oReT2Xv/hgDHjdfK1t9J78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:2c:07:57:40:07:79:79:d0:74:9f:b0:05:01:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7 Validity Not Before: Dec 6 01:01:00 2025 GMT Not After : Dec 7 01:01:00 2025 GMT Subject: CN=ea97a6605095ac202ed58c123eebbdceb9376150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2e:45:8e:72:83:75:46:32:42:93:5e:1b:96: 26:38:ea:e9:3d:f6:9e:5d:73:a0:39:41:fb:a8:54: 59:82:1f:58:d6:eb:2c:a7:8b:c9:89:95:05:8f:04: 21:f8:ac:4e:c4:bc:8c:59:18:e4:7d:78:c8:1f:c7: 55:90:d2:42:d5:65:35:b0:12:47:83:85:8e:48:3e: 49:87:a2:fe:de:ee:37:1e:6a:e0:96:e7:85:0d:f8: e6:d8:f5:00:3b:e8:8b:1b:6d:cf:2f:02:3c:36:b9: 37:77:fd:ea:db:be:27:ea:c2:30:55:2c:72:de:a1: 6a:ee:9f:4c:00:f6:d1:29:20:1d:ae:fc:ff:05:d5: 18:04:ec:fa:7d:03:51:38:0e:94:df:59:cc:ea:28: 63:fe:e4:ce:91:f8:cb:53:09:d2:e6:5e:8a:52:4f: f2:13:6b:a8:38:8f:f3:8d:c9:a7:ce:11:25:68:f2: 17:5c:0c:03:91:cb:dc:37:c3:9f:d7:e6:34:82:7a: 2b:de:31:d8:15:db:b1:4e:b0:ef:22:46:f0:0c:03: f4:4c:47:e3:45:f0:f0:09:d8:6b:d1:5d:23:72:c6: 8d:88:de:39:3f:dd:27:21:46:3a:b2:8e:b5:27:7f: a9:01:3c:7e:a5:e3:87:b0:4a:4a:a8:7c:6b:a8:36: b5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:97:A6:60:50:95:AC:20:2E:D5:8C:12:3E:EB:BD:CE:B9:37:61:50 X509v3 Authority Key Identifier: keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:82:21:4f:bd:8f:7d:33:ae:6f:8e:87:0d:24:84:bd:61:a4: 2b:37:13:db:4b:8c:1c:b3:bf:61:30:3d:dd:96:94:7e:3f:eb: d3:8e:e1:1c:ce:85:77:c6:67:f9:a0:3b:b2:77:8b:10:58:58: 5d:37:f0:11:7c:e1:65:39:bf:48:9b:2e:5a:b8:19:d1:f0:f1: 97:82:9e:56:75:03:dd:b7:eb:a5:e4:b6:49:79:d5:d2:b8:13: cd:1f:5c:54:26:1a:b5:94:f7:72:4f:ba:54:55:0f:3f:df:10: 8f:c1:ab:01:c8:aa:dd:98:a9:f6:d0:d5:ed:53:c0:60:8e:34: ee:77:39:67:47:24:9b:65:ce:15:bb:06:48:6b:97:58:1b:4e: f5:86:f7:5f:10:ec:ce:2a:56:ab:b4:a7:66:96:1a:6e:7c:49: 24:1f:0c:06:8d:f8:9a:28:f4:2d:3e:ca:bf:46:fd:22:1c:5f: cd:1a:c8:3e:b5:7a:45:5f:99:17:ce:8f:aa:79:86:42:ca:e5: 38:d7:6b:8f:5b:0c:05:d3:5b:e0:15:2c:ea:33:3f:2a:17:d3: a7:e3:b3:7e:a6:1b:ba:8f:a3:be:cf:a7:6e:57:e7:50:ad:11: 06:e5:8b:e8:69:1e:a3:a3:a4:25:f1:d1:54:54:87:d1:af:72: 31:50:ed:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLSwHV0AHeXnQdJ+wBQHVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ODAyZmMxZDBmM2UzYTQ0NjI1NjJkMmYwNmYyYjNkZWZm OGY0ZTcwHhcNMjUxMjA2MDEwMTAwWhcNMjUxMjA3MDEwMTAwWjAzMTEwLwYDVQQD EyhlYTk3YTY2MDUwOTVhYzIwMmVkNThjMTIzZWViYmRjZWI5Mzc2MTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry5FjnKDdUYyQpNeG5YmOOrpPfae XXOgOUH7qFRZgh9Y1ussp4vJiZUFjwQh+KxOxLyMWRjkfXjIH8dVkNJC1WU1sBJH g4WOSD5Jh6L+3u43HmrglueFDfjm2PUAO+iLG23PLwI8Nrk3d/3q274n6sIwVSxy 3qFq7p9MAPbRKSAdrvz/BdUYBOz6fQNROA6U31nM6ihj/uTOkfjLUwnS5l6KUk/y E2uoOI/zjcmnzhElaPIXXAwDkcvcN8Of1+Y0gnor3jHYFduxTrDvIkbwDAP0TEfj RfDwCdhr0V0jcsaNiN45P90nIUY6so61J3+pATx+peOHsEpKqHxrqDa14QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqXpmBQlawgLtWMEj7rvc65N2FQMB8GA1UdIwQY MBaAFIWAL8HQ8+OkRiVi0vBvKz3v+PTnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFlBdndkRHo0NlJHSldMUzhHOHJQZV80OU9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hZjhiMjktYjFhZi00Y2Y2LWJmMTYt YjA1ODMyYmM2OTYyLzEvaFlBdndkRHo0NlJHSldMUzhHOHJQZV80OU9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9hZjhiMjktYjFhZi00Y2Y2LWJmMTYtYjA1ODMyYmM2OTYy LzEvaFlBdndkRHo0NlJHSldMUzhHOHJQZV80OU9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZYIhT72P fTOub46HDSSEvWGkKzcT20uMHLO/YTA93ZaUfj/r047hHM6Fd8Zn+aA7sneLEFhY XTfwEXzhZTm/SJsuWrgZ0fDxl4KeVnUD3bfrpeS2SXnV0rgTzR9cVCYatZT3ck+6 VFUPP98Qj8GrAciq3Zip9tDV7VPAYI407nc5Z0ckm2XOFbsGSGuXWBtO9Yb3XxDs zipWq7SnZpYabnxJJB8MBo34mij0LT7Kv0b9IhxfzRrIPrV6RV+ZF86PqnmGQsrl ONdrj1sMBdNb4BUs6jM/KhfTp+OzfqYbuo+jvs+nblfnUK0RBuWL6Gkeo6OkJfHR VFSH0a9yMVDt9w== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:24 2025 by rpki-client