This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft File: hpY9ADE0zNpW_t_rJ496dop_QC8.mft (raw, json) Hash identifier: H9OeYf9VcUeuuV32Tp++rqEv5JTrTlDW2Umq9VSYU+4= Subject key identifier: AF:F8:D9:49:AC:8F:95:02:82:A3:47:7C:A2:A6:A8:D3:45:00:68:73 Authority key identifier: 86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F Certificate issuer: /CN=86963d003134ccda56fedfeb278f7a768a7f402f Certificate serial: 019AF49C39C377A8FFE4CE1F42993392E13E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft Manifest number: 0910 Signing time: Sat 06 Dec 2025 17:01:10 +0000 Manifest this update: Sat 06 Dec 2025 17:01:10 +0000 Manifest next update: Sun 07 Dec 2025 17:01:10 +0000 Files and hashes: 1: Wz8gpxFEqCzA2qAsOF9aMTaoyYY.roa (hash: 8Yp0I8zuDn5gEhy8EguTTzeHbg2UtzMf6sSJEuTPZH4=) 2: hpY9ADE0zNpW_t_rJ496dop_QC8.crl (hash: /9SgQdtftDcxecQ0MUP6e/+DjDr99kYttaScEmJKAJc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:39:c3:77:a8:ff:e4:ce:1f:42:99:33:92:e1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86963d003134ccda56fedfeb278f7a768a7f402f Validity Not Before: Dec 6 17:01:10 2025 GMT Not After : Dec 7 17:01:10 2025 GMT Subject: CN=aff8d949ac8f950282a3477ca2a6a8d345006873 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a4:1e:9c:c1:cb:91:be:5a:f8:87:26:cf:99: 75:9c:37:ff:8b:a4:62:d9:c7:ad:80:ba:12:d7:7a: db:c5:fe:77:75:d6:ed:25:f3:93:2d:f6:da:e0:23: 8f:b0:76:66:92:ba:d8:82:8a:92:a1:b9:f6:03:19: e4:9e:70:28:71:1b:02:93:af:98:5e:25:fe:fd:ab: 2e:fa:ab:bd:eb:e0:9e:86:5e:3f:cb:a6:6e:8a:b2: 4f:d3:60:5a:04:7a:de:86:42:61:7f:ca:17:a5:bb: 8c:52:75:e3:16:8f:b4:4b:c4:e7:e3:50:67:9e:92: b3:0b:f5:12:37:99:cf:07:3d:d0:00:c6:40:2c:e8: 39:7d:33:41:c9:0d:77:66:da:8e:72:a1:e9:83:7e: 07:aa:d8:ba:02:dd:c4:b0:8f:2f:f7:e9:5d:b8:d9: 9d:be:45:5e:d4:94:59:13:91:1e:27:a9:52:10:45: ff:da:b8:57:65:e2:96:4b:2b:4f:01:c9:65:56:2b: f1:07:ff:7f:e4:68:24:68:48:ba:32:a7:7e:c4:60: ba:c8:a9:38:86:b8:a2:2c:8f:db:f6:5c:97:84:30: 9f:90:c1:b1:7e:da:a3:e5:2d:c3:e8:bd:61:00:6b: 9d:8e:04:fa:98:32:0f:8a:39:86:c1:ee:6b:0d:59: 0b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:F8:D9:49:AC:8F:95:02:82:A3:47:7C:A2:A6:A8:D3:45:00:68:73 X509v3 Authority Key Identifier: keyid:86:96:3D:00:31:34:CC:DA:56:FE:DF:EB:27:8F:7A:76:8A:7F:40:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpY9ADE0zNpW_t_rJ496dop_QC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2c0971-aeef-417e-8b54-121d2cbb21d6/1/hpY9ADE0zNpW_t_rJ496dop_QC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:70:90:e6:47:43:b8:8f:bd:b5:29:88:7c:09:c7:3b:3b:c3: 93:ca:43:09:21:a5:d5:eb:5e:ee:c5:a1:6f:ad:fa:a9:60:f0: 4f:c7:a7:0f:67:fe:a5:af:db:12:6f:26:37:14:18:f8:47:90: b6:19:83:1b:17:b3:6c:65:9f:50:10:5f:0c:4e:b3:75:d1:cf: 5c:4d:84:57:60:6f:ae:99:ea:e5:56:62:65:cf:14:89:6f:e8: 8c:e1:2a:b8:22:98:8c:6a:23:07:72:7f:f4:24:b1:07:8b:28: d4:5c:dd:5e:df:e9:71:93:67:46:94:68:94:d8:c8:4a:ad:68: 3f:56:f5:b8:d2:3d:cb:58:5c:ed:26:4a:25:bf:3a:02:c4:25: ba:6e:e1:e0:a7:31:cc:b1:3f:0e:07:e8:68:ed:0e:1c:1a:50: b7:50:9f:57:28:1a:84:18:1d:f0:40:c4:09:21:7a:af:4b:a9: 92:91:01:b5:7f:a3:0a:5f:65:da:c0:5e:7e:ca:5d:05:62:74: c2:c9:78:6d:34:14:22:51:1c:de:fe:62:41:9e:a0:5e:26:de: ef:dc:b8:0c:17:57:67:7e:60:84:03:17:cc:3f:24:a0:1a:c6: 5b:bf:a5:56:8f:45:45:c2:78:44:98:93:ed:ec:cc:ea:3d:89: 34:9d:fe:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nDnDd6j/5M4fQpkzkuE+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OTYzZDAwMzEzNGNjZGE1NmZlZGZlYjI3OGY3YTc2OGE3 ZjQwMmYwHhcNMjUxMjA2MTcwMTEwWhcNMjUxMjA3MTcwMTEwWjAzMTEwLwYDVQQD EyhhZmY4ZDk0OWFjOGY5NTAyODJhMzQ3N2NhMmE2YThkMzQ1MDA2ODczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qQenMHLkb5a+Icmz5l1nDf/i6Ri 2cetgLoS13rbxf53ddbtJfOTLfba4COPsHZmkrrYgoqSobn2AxnknnAocRsCk6+Y XiX+/asu+qu96+Cehl4/y6ZuirJP02BaBHrehkJhf8oXpbuMUnXjFo+0S8Tn41Bn npKzC/USN5nPBz3QAMZALOg5fTNByQ13ZtqOcqHpg34Hqti6At3EsI8v9+lduNmd vkVe1JRZE5EeJ6lSEEX/2rhXZeKWSytPAcllVivxB/9/5GgkaEi6Mqd+xGC6yKk4 hriiLI/b9lyXhDCfkMGxftqj5S3D6L1hAGudjgT6mDIPijmGwe5rDVkLyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/42Umsj5UCgqNHfKKmqNNFAGhzMB8GA1UdIwQY MBaAFIaWPQAxNMzaVv7f6yePenaKf0AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHBZOUFERTB6TnBXX3Rfcko0OTZkb3BfUUM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yYzA5NzEtYWVlZi00MTdlLThiNTQt MTIxZDJjYmIyMWQ2LzEvaHBZOUFERTB6TnBXX3Rfcko0OTZkb3BfUUM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yYzA5NzEtYWVlZi00MTdlLThiNTQtMTIxZDJjYmIyMWQ2 LzEvaHBZOUFERTB6TnBXX3Rfcko0OTZkb3BfUUM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHCQ5kdD uI+9tSmIfAnHOzvDk8pDCSGl1ete7sWhb636qWDwT8enD2f+pa/bEm8mNxQY+EeQ thmDGxezbGWfUBBfDE6zddHPXE2EV2Bvrpnq5VZiZc8UiW/ojOEquCKYjGojB3J/ 9CSxB4so1FzdXt/pcZNnRpRolNjISq1oP1b1uNI9y1hc7SZKJb86AsQlum7h4Kcx zLE/DgfoaO0OHBpQt1CfVygahBgd8EDECSF6r0upkpEBtX+jCl9l2sBefspdBWJ0 wsl4bTQUIlEc3v5iQZ6gXibe79y4DBdXZ35ghAMXzD8koBrGW7+lVo9FRcJ4RJiT 7ezM6j2JNJ3+Rg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:33:21 2025 by rpki-client