This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft File: HyLAhI0wWeWuVfaMBwecuaksJ54.mft (raw, json) Hash identifier: l97x2iR9NMJJTAswBbJT28/M9SaOpmaB/ZJ0D9x86aE= Subject key identifier: 89:CC:57:38:27:05:44:98:F3:F7:E0:FA:FD:1C:5B:DD:02:85:0F:86 Authority key identifier: 1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E Certificate issuer: /CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e Certificate serial: 019AF3C0609CBF13EBFF322EF12AD802D466 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft Manifest number: 144E Signing time: Sat 06 Dec 2025 13:01:02 +0000 Manifest this update: Sat 06 Dec 2025 13:01:02 +0000 Manifest next update: Sun 07 Dec 2025 13:01:02 +0000 Files and hashes: 1: 42BfRq7Uq2Z4S_hnedC1PWND5eY.roa (hash: SUpoA58huBIRfI1PcJohNyNQhenW9V0GmIZXcKZjs0I=) 2: HyLAhI0wWeWuVfaMBwecuaksJ54.crl (hash: I/1KRNhEIjHXQxn6v9D7bV3ZWlfupaO37Lq7Q5p+SDw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:60:9c:bf:13:eb:ff:32:2e:f1:2a:d8:02:d4:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f22c0848d3059e5ae55f68c07079cb9a92c279e Validity Not Before: Dec 6 13:01:02 2025 GMT Not After : Dec 7 13:01:02 2025 GMT Subject: CN=89cc573827054498f3f7e0fafd1c5bdd02850f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9c:00:37:66:5d:4c:d3:9b:5a:8a:f8:d2:50: aa:ed:60:9e:3a:8c:e6:f4:07:88:d8:bb:74:5a:9d: 37:8f:a1:ca:de:0a:fd:39:86:a4:6e:bd:9d:6b:d3: b3:ca:00:aa:7e:2c:e4:ff:f0:77:8a:f2:79:b2:93: ee:6f:d8:b4:c8:78:57:2e:8f:08:7b:4a:d3:e7:bb: 5b:9f:6d:d5:c0:fd:86:29:92:3b:e6:d9:6a:bc:06: 0f:dd:92:3e:c1:b3:e4:e0:f0:7b:49:55:7a:d0:5f: 05:82:4a:cb:67:27:52:98:85:94:81:4e:ac:d9:39: 3d:c0:19:cb:c9:3d:af:49:59:15:2c:3c:0c:9c:1d: ba:69:6f:2e:e3:b3:98:c3:8a:08:69:3e:c8:2e:6b: 0a:41:0a:c3:d4:cd:bc:ef:e4:2d:bf:d6:a5:b2:f8: 85:c1:41:b5:a0:83:e0:38:f3:a3:74:70:3f:8e:77: 2b:b0:13:03:65:2f:4b:d2:dc:1f:83:94:9d:8e:96: 86:2b:5e:13:ae:9b:e9:53:4b:38:d7:ee:f8:6e:e4: 19:d4:d3:11:82:ec:d5:fe:22:fe:11:4c:0d:b9:5f: 22:83:f6:d1:20:79:21:c2:f3:ae:3b:bc:a0:8a:fd: 0e:7f:8f:2b:e6:cb:94:cc:3e:7d:ef:7c:95:ed:ac: 30:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CC:57:38:27:05:44:98:F3:F7:E0:FA:FD:1C:5B:DD:02:85:0F:86 X509v3 Authority Key Identifier: keyid:1F:22:C0:84:8D:30:59:E5:AE:55:F6:8C:07:07:9C:B9:A9:2C:27:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HyLAhI0wWeWuVfaMBwecuaksJ54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c10911-4022-46fb-9214-7c6857648666/1/HyLAhI0wWeWuVfaMBwecuaksJ54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a0:cc:b3:56:e1:4c:7c:03:cd:9c:33:40:a8:24:ae:5f:52: d1:58:8a:67:ad:89:51:ce:f3:41:ab:5a:0c:f1:95:16:77:d7: 33:3b:79:c8:14:51:5a:cd:9c:4e:c7:99:33:14:04:c5:7f:1e: a9:fb:5d:0e:b6:b4:5c:fa:31:d7:ce:50:83:78:98:01:96:5c: b5:9b:21:00:3d:e7:5f:05:d9:6c:9e:c4:ca:43:03:33:d2:45: ef:7f:a8:6d:5c:b9:75:fb:5c:f6:bd:bc:1b:2b:2f:ca:bb:15: db:ad:34:a8:d4:3d:b2:e3:e3:3c:f4:28:19:66:8c:4d:41:f2: 18:06:75:95:da:88:fa:14:65:74:4e:cf:7b:d3:16:eb:74:5f: 7d:6d:5e:cf:cf:ab:d1:0c:2e:e0:51:55:de:ce:4f:e0:ca:7e: b3:a2:b1:0a:51:54:2c:2f:7e:47:d0:23:2a:60:f1:1a:0f:69: b9:02:fc:9d:88:2b:be:ee:99:10:cf:c4:51:d2:8b:30:9f:50: c1:d4:0b:d1:a4:a5:5e:29:78:b8:1d:bf:a8:63:1a:d5:9a:f4: a4:d1:3d:bc:04:30:2f:8b:f5:b9:09:f1:5b:b6:6a:f3:ce:ab: 6b:75:96:b8:55:53:db:c6:c6:ef:42:10:8a:fa:ae:e3:8f:dc: e1:e4:bd:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwGCcvxPr/zIu8SrYAtRmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMjJjMDg0OGQzMDU5ZTVhZTU1ZjY4YzA3MDc5Y2I5YTky YzI3OWUwHhcNMjUxMjA2MTMwMTAyWhcNMjUxMjA3MTMwMTAyWjAzMTEwLwYDVQQD Eyg4OWNjNTczODI3MDU0NDk4ZjNmN2UwZmFmZDFjNWJkZDAyODUwZjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpwAN2ZdTNObWor40lCq7WCeOozm 9AeI2Lt0Wp03j6HK3gr9OYakbr2da9OzygCqfizk//B3ivJ5spPub9i0yHhXLo8I e0rT57tbn23VwP2GKZI75tlqvAYP3ZI+wbPk4PB7SVV60F8FgkrLZydSmIWUgU6s 2Tk9wBnLyT2vSVkVLDwMnB26aW8u47OYw4oIaT7ILmsKQQrD1M287+Qtv9alsviF wUG1oIPgOPOjdHA/jncrsBMDZS9L0twfg5SdjpaGK14TrpvpU0s41+74buQZ1NMR guzV/iL+EUwNuV8ig/bRIHkhwvOuO7ygiv0Of48r5suUzD5973yV7awwqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInMVzgnBUSY8/fg+v0cW90ChQ+GMB8GA1UdIwQY MBaAFB8iwISNMFnlrlX2jAcHnLmpLCeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jMTA5MTEtNDAyMi00NmZiLTkyMTQt N2M2ODU3NjQ4NjY2LzEvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9jMTA5MTEtNDAyMi00NmZiLTkyMTQtN2M2ODU3NjQ4NjY2 LzEvSHlMQWhJMHdXZVd1VmZhTUJ3ZWN1YWtzSjU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKDMs1bh THwDzZwzQKgkrl9S0ViKZ62JUc7zQataDPGVFnfXMzt5yBRRWs2cTseZMxQExX8e qftdDra0XPox185Qg3iYAZZctZshAD3nXwXZbJ7EykMDM9JF73+obVy5dftc9r28 GysvyrsV2600qNQ9suPjPPQoGWaMTUHyGAZ1ldqI+hRldE7Pe9MW63RffW1ez8+r 0Qwu4FFV3s5P4Mp+s6KxClFULC9+R9AjKmDxGg9puQL8nYgrvu6ZEM/EUdKLMJ9Q wdQL0aSlXil4uB2/qGMa1Zr0pNE9vAQwL4v1uQnxW7Zq886ra3WWuFVT28bG70IQ ivqu44/c4eS9nQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:57:22 2025 by rpki-client