This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft File: Hay9x9yHS9i-Izb1Znzfd72YDHc.mft (raw, json) Hash identifier: ZUhHtt6zJX2nmj3ALhXKIF4El1Ztp6HHayz8nNYNiQI= Subject key identifier: 31:D7:F9:8D:92:80:34:7C:7F:D9:38:23:2D:75:52:48:70:CD:55:90 Authority key identifier: 1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77 Certificate issuer: /CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77 Certificate serial: 019B27AE245C32E3F0C2D87C114506D95B64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft Manifest number: 09CB Signing time: Tue 16 Dec 2025 15:01:22 +0000 Manifest this update: Tue 16 Dec 2025 15:01:22 +0000 Manifest next update: Wed 17 Dec 2025 15:01:22 +0000 Files and hashes: 1: Hay9x9yHS9i-Izb1Znzfd72YDHc.crl (hash: pWAbOkybnwJCLTH/2Fel8cxFVMshmiHAhTHg+9AAZ1A=) 2: KwnSHUkKazWxA-UlGNkJfBx24J8.roa (hash: L00uKvypQvr4qR3XRikAa5NG4pJ2Ay5tML7IJ1FMIbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:ae:24:5c:32:e3:f0:c2:d8:7c:11:45:06:d9:5b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dacbdc7dc874bd8be2336f5667cdf77bd980c77 Validity Not Before: Dec 16 15:01:22 2025 GMT Not After : Dec 17 15:01:22 2025 GMT Subject: CN=31d7f98d9280347c7fd938232d75524870cd5590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:6b:17:b8:5c:6f:70:98:62:f1:e3:59:d6:8b: a9:5a:59:83:36:f1:bf:6c:91:36:a2:45:79:99:80: 65:6b:b2:ec:f8:21:95:cd:b8:6f:80:d6:05:a0:78: a1:dd:9a:45:66:0d:65:de:78:95:08:03:5a:d5:96: b9:57:11:5e:0a:b7:52:d8:3d:07:f8:fc:c9:90:5f: e3:67:5d:f5:3f:bf:ad:ef:56:62:64:94:c7:a9:02: 72:7b:87:98:f1:27:ec:0e:93:18:6d:fb:77:67:00: c2:90:1c:8d:a2:ce:8c:88:9a:1b:9e:6e:4d:e0:f5: 73:a6:dc:dc:23:41:b7:66:d9:49:80:5d:b3:f6:a8: b9:7d:b4:aa:c9:02:7d:18:ef:1c:94:d9:63:cf:92: 36:b7:28:a1:52:a4:b0:08:e9:d6:ec:10:c8:84:21: ef:90:97:61:b3:16:bc:30:e5:2e:19:d4:b1:8a:95: 12:49:c6:1f:45:66:a5:9b:2c:f7:87:5a:9d:93:39: 70:e8:72:a1:fb:2d:84:e2:78:85:96:3a:aa:97:a4: 71:3a:1a:70:27:4a:d3:1a:90:4f:af:c3:26:c2:6a: 9c:ba:ca:36:c6:43:b4:88:89:60:58:80:54:db:57: d5:94:b8:73:94:09:9c:f6:ec:69:eb:62:6e:58:c0: 5d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D7:F9:8D:92:80:34:7C:7F:D9:38:23:2D:75:52:48:70:CD:55:90 X509v3 Authority Key Identifier: keyid:1D:AC:BD:C7:DC:87:4B:D8:BE:23:36:F5:66:7C:DF:77:BD:98:0C:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hay9x9yHS9i-Izb1Znzfd72YDHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/f04f85-7b04-487c-a1e7-f71a22145d4e/1/Hay9x9yHS9i-Izb1Znzfd72YDHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:27:df:39:b6:3b:eb:ab:79:d8:62:f4:0e:61:b7:e9:d1:6a: 2f:34:ca:72:27:0b:05:3c:7c:76:01:2e:59:ac:5c:78:91:4d: 3b:4b:d6:59:61:c3:cf:85:a6:75:cb:ff:e3:8d:9d:01:18:a0: a7:26:47:6d:93:9d:9c:36:c9:d7:d9:d1:4f:17:45:c7:5e:8b: 65:b1:6b:da:a3:98:6a:80:1d:32:d9:f8:3f:ab:ca:da:b6:fb: 5b:0c:61:aa:74:d6:3c:15:af:1e:37:a6:c8:c5:3a:b7:0f:56: 75:92:a5:47:1c:00:ee:0a:e3:4d:ba:c4:4f:cc:89:44:de:ef: a4:3d:4c:28:77:9c:11:b8:36:46:83:25:43:04:b7:3f:a3:a2: ba:f4:f9:30:a8:f0:b9:76:76:42:89:16:0b:09:2c:4c:57:64: 28:e1:cd:9e:06:cf:f6:a0:de:25:ab:4b:08:84:0f:c1:cc:b5: 79:a3:e9:2d:09:f4:a0:b5:66:2d:0d:0c:3a:35:49:a5:60:aa: f4:cb:e9:c2:c1:ff:ed:b9:6d:fc:95:6c:7c:3d:6e:00:37:1b: 33:60:5d:f6:5f:22:c4:c8:3f:b4:2c:f2:11:9e:d2:7a:7c:e0: 88:a3:07:b1:6d:23:c2:e3:be:5c:57:d7:12:76:26:48:d2:cf: 90:ab:0a:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnriRcMuPwwth8EUUG2VtkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWNiZGM3ZGM4NzRiZDhiZTIzMzZmNTY2N2NkZjc3YmQ5 ODBjNzcwHhcNMjUxMjE2MTUwMTIyWhcNMjUxMjE3MTUwMTIyWjAzMTEwLwYDVQQD EygzMWQ3Zjk4ZDkyODAzNDdjN2ZkOTM4MjMyZDc1NTI0ODcwY2Q1NTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GsXuFxvcJhi8eNZ1oupWlmDNvG/ bJE2okV5mYBla7Ls+CGVzbhvgNYFoHih3ZpFZg1l3niVCANa1Za5VxFeCrdS2D0H +PzJkF/jZ131P7+t71ZiZJTHqQJye4eY8SfsDpMYbft3ZwDCkByNos6MiJobnm5N 4PVzptzcI0G3ZtlJgF2z9qi5fbSqyQJ9GO8clNljz5I2tyihUqSwCOnW7BDIhCHv kJdhsxa8MOUuGdSxipUSScYfRWalmyz3h1qdkzlw6HKh+y2E4niFljqql6RxOhpw J0rTGpBPr8Mmwmqcuso2xkO0iIlgWIBU21fVlLhzlAmc9uxp62JuWMBdCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDHX+Y2SgDR8f9k4Iy11UkhwzVWQMB8GA1UdIwQY MBaAFB2svcfch0vYviM29WZ833e9mAx3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGF5OXg5eUhTOWktSXpiMVpuemZkNzJZREhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9mMDRmODUtN2IwNC00ODdjLWExZTct ZjcxYTIyMTQ1ZDRlLzEvSGF5OXg5eUhTOWktSXpiMVpuemZkNzJZREhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9mMDRmODUtN2IwNC00ODdjLWExZTctZjcxYTIyMTQ1ZDRl LzEvSGF5OXg5eUhTOWktSXpiMVpuemZkNzJZREhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMyffObY7 66t52GL0DmG36dFqLzTKcicLBTx8dgEuWaxceJFNO0vWWWHDz4Wmdcv/442dARig pyZHbZOdnDbJ19nRTxdFx16LZbFr2qOYaoAdMtn4P6vK2rb7WwxhqnTWPBWvHjem yMU6tw9WdZKlRxwA7grjTbrET8yJRN7vpD1MKHecEbg2RoMlQwS3P6OiuvT5MKjw uXZ2QokWCwksTFdkKOHNngbP9qDeJatLCIQPwcy1eaPpLQn0oLVmLQ0MOjVJpWCq 9MvpwsH/7blt/JVsfD1uADcbM2Bd9l8ixMg/tCzyEZ7SenzgiKMHsW0jwuO+XFfX EnYmSNLPkKsKeQ== -----END CERTIFICATE-----Generated at Tue Dec 16 17:54:46 2025 by rpki-client