This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft File: HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft (raw, json) Hash identifier: u1ALSG5bvpkJIX8uzq7VHBXWBOJIcK3R1W5XkBkSV0k= Subject key identifier: 21:08:16:6F:F1:9A:90:21:62:8C:CC:E9:A6:3B:1A:8C:DD:7A:DF:15 Authority key identifier: 1C:16:18:E0:43:72:D9:B2:7F:41:7D:22:9F:82:61:40:27:BC:3C:60 Certificate issuer: /CN=1c1618e04372d9b27f417d229f82614027bc3c60 Certificate serial: 019AF31BF31B337C55B7CAE46D1D4609060C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft Manifest number: 0ABE Signing time: Sat 06 Dec 2025 10:01:26 +0000 Manifest this update: Sat 06 Dec 2025 10:01:26 +0000 Manifest next update: Sun 07 Dec 2025 10:01:26 +0000 Files and hashes: 1: HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl (hash: LaENyinmjTniJCACnpO1uNKwmo0FuNSxEeHfYTagPeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:f3:1b:33:7c:55:b7:ca:e4:6d:1d:46:09:06:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c1618e04372d9b27f417d229f82614027bc3c60 Validity Not Before: Dec 6 10:01:26 2025 GMT Not After : Dec 7 10:01:26 2025 GMT Subject: CN=2108166ff19a9021628ccce9a63b1a8cdd7adf15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b4:08:cc:c2:c8:90:da:5a:92:73:4f:5f:cc: 22:c3:b9:6a:b5:8c:60:d0:1c:60:1e:c9:29:91:13: 5a:88:23:7f:74:a0:1b:d0:c8:05:a8:88:18:2c:29: bd:0f:05:8c:7b:95:78:7e:0d:47:1f:66:c5:42:af: a6:67:f3:b4:ff:46:42:7b:36:9a:4f:a6:93:5c:ed: d7:dc:ae:25:f6:bc:49:87:b1:89:62:56:9e:d0:d5: 2d:f2:f6:71:0b:38:b2:1f:e3:d9:c5:8d:26:32:db: e4:7c:05:b7:2c:41:31:7d:4b:26:9d:dc:bd:73:b0: 00:6a:20:f9:03:b9:6b:d1:3c:bd:22:8b:36:06:03: e1:c8:57:20:bd:b5:fc:5b:67:31:30:1d:a3:73:e4: 3e:71:c2:61:64:6d:d6:64:bd:65:3a:8c:1c:a7:02: 1d:9e:12:4c:d6:bc:56:f1:af:c0:e1:95:59:06:e9: 2e:13:74:5d:fc:34:45:c7:a2:b2:4c:f6:fa:28:ac: 01:2a:8c:55:52:64:69:29:87:a1:28:11:f6:4a:3e: 37:45:a8:2e:a5:ad:ae:5f:91:98:cd:a9:e8:83:e7: 30:58:91:e9:32:52:d0:10:17:fd:10:46:0f:99:c7: 18:8f:5f:3d:59:d4:94:93:60:2d:02:d6:44:5c:0d: f2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:08:16:6F:F1:9A:90:21:62:8C:CC:E9:A6:3B:1A:8C:DD:7A:DF:15 X509v3 Authority Key Identifier: keyid:1C:16:18:E0:43:72:D9:B2:7F:41:7D:22:9F:82:61:40:27:BC:3C:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HBYY4ENy2bJ_QX0in4JhQCe8PGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/cbfa04-e95a-45b2-9a7d-a395ab35d8ea/1/HBYY4ENy2bJ_QX0in4JhQCe8PGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:14:f2:71:c1:a2:6b:b9:1f:5f:d1:1f:ad:cf:e7:57:92:f7: 37:85:ae:05:03:06:7d:db:6b:ca:cf:6b:c3:97:a1:10:e2:1c: 58:5f:d4:61:ef:5e:d1:1e:49:ee:40:b6:aa:3d:59:6e:64:55: 10:18:24:f6:c5:87:17:7d:a9:d3:6a:41:11:7f:9c:fd:72:89: 30:dd:ab:a4:97:df:0e:76:9d:84:8c:ca:e6:7c:6e:88:88:05: 28:eb:56:ca:16:01:6b:1c:fc:ca:96:d3:67:12:c0:27:9a:26: ae:84:cf:9a:96:59:80:3e:b1:ae:6b:60:94:6d:e4:2e:99:65: 90:17:00:a0:00:73:d1:e9:43:f7:07:0b:51:1e:f0:b0:31:74: 22:e4:c0:57:dc:98:80:b5:10:75:6b:28:78:8b:dd:ee:40:0f: 15:cc:d4:fb:88:ab:82:45:48:6e:00:d1:18:ee:0e:5f:11:50: db:07:77:08:46:d9:fc:cc:a0:b3:53:bb:b8:a8:4a:5e:94:64: 7d:99:bd:92:d8:34:98:a9:59:91:15:a8:60:d3:65:5a:fa:f6: c0:4d:06:2b:96:17:b1:0a:04:6c:8c:96:6e:ce:23:df:0f:19: ec:3b:a5:71:52:60:94:bf:9f:88:36:ac:9a:59:d4:f6:79:82: 3c:f7:c1:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG/MbM3xVt8rkbR1GCQYMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMTYxOGUwNDM3MmQ5YjI3ZjQxN2QyMjlmODI2MTQwMjdi YzNjNjAwHhcNMjUxMjA2MTAwMTI2WhcNMjUxMjA3MTAwMTI2WjAzMTEwLwYDVQQD EygyMTA4MTY2ZmYxOWE5MDIxNjI4Y2NjZTlhNjNiMWE4Y2RkN2FkZjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rQIzMLIkNpaknNPX8wiw7lqtYxg 0BxgHskpkRNaiCN/dKAb0MgFqIgYLCm9DwWMe5V4fg1HH2bFQq+mZ/O0/0ZCezaa T6aTXO3X3K4l9rxJh7GJYlae0NUt8vZxCziyH+PZxY0mMtvkfAW3LEExfUsmndy9 c7AAaiD5A7lr0Ty9Ios2BgPhyFcgvbX8W2cxMB2jc+Q+ccJhZG3WZL1lOowcpwId nhJM1rxW8a/A4ZVZBukuE3Rd/DRFx6KyTPb6KKwBKoxVUmRpKYehKBH2Sj43Ragu pa2uX5GYzanog+cwWJHpMlLQEBf9EEYPmccYj189WdSUk2AtAtZEXA3yYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEIFm/xmpAhYozM6aY7Gozdet8VMB8GA1UdIwQY MBaAFBwWGOBDctmyf0F9Ip+CYUAnvDxgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEJZWTRFTnkyYkpfUVgwaW40SmhRQ2U4UEdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jYmZhMDQtZTk1YS00NWIyLTlhN2Qt YTM5NWFiMzVkOGVhLzEvSEJZWTRFTnkyYkpfUVgwaW40SmhRQ2U4UEdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9jYmZhMDQtZTk1YS00NWIyLTlhN2QtYTM5NWFiMzVkOGVh LzEvSEJZWTRFTnkyYkpfUVgwaW40SmhRQ2U4UEdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhTyccGi a7kfX9Efrc/nV5L3N4WuBQMGfdtrys9rw5ehEOIcWF/UYe9e0R5J7kC2qj1ZbmRV EBgk9sWHF32p02pBEX+c/XKJMN2rpJffDnadhIzK5nxuiIgFKOtWyhYBaxz8ypbT ZxLAJ5omroTPmpZZgD6xrmtglG3kLpllkBcAoABz0elD9wcLUR7wsDF0IuTAV9yY gLUQdWsoeIvd7kAPFczU+4irgkVIbgDRGO4OXxFQ2wd3CEbZ/Mygs1O7uKhKXpRk fZm9ktg0mKlZkRWoYNNlWvr2wE0GK5YXsQoEbIyWbs4j3w8Z7DulcVJglL+fiDas mlnU9nmCPPfBaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:15:27 2025 by rpki-client