This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft File: HYfzAnSVHK37W3N-EzPHPWSwQlY.mft (raw, json) Hash identifier: 0mQutW4B9iR6LxGxF2I4GARTfRnAYM00mR6D+177YyU= Subject key identifier: 84:B4:63:41:86:02:A8:53:9E:08:64:E1:63:DD:C9:7F:9B:78:36:51 Authority key identifier: 1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56 Certificate issuer: /CN=1d87f30274951cadfb5b737e1333c73d64b04256 Certificate serial: 019B3156253C36ACEC453B1601A83FE9F315 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft Manifest number: 167F Signing time: Thu 18 Dec 2025 12:01:27 +0000 Manifest this update: Thu 18 Dec 2025 12:01:27 +0000 Manifest next update: Fri 19 Dec 2025 12:01:27 +0000 Files and hashes: 1: HYfzAnSVHK37W3N-EzPHPWSwQlY.crl (hash: in14wmRU50nmDgmKEGQ3dKQYM9hebSKe3Fwi68y7Zi4=) 2: UQWiGVcgQBfpwcuKo7fbJa4RaEE.roa (hash: ZgT0t6kUhUht6heJI0SpC59LD5/+nffxYQMEyobuM6Y=) 3: vld0ebErMCPKI9Y4LD8_cLIWaOM.roa (hash: wzpFx+k2Gs1HYxiCiFKxLWQewXLLyvLVnzEmKOsRn8M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:25:3c:36:ac:ec:45:3b:16:01:a8:3f:e9:f3:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d87f30274951cadfb5b737e1333c73d64b04256 Validity Not Before: Dec 18 12:01:27 2025 GMT Not After : Dec 19 12:01:27 2025 GMT Subject: CN=84b463418602a8539e0864e163ddc97f9b783651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4c:d8:8b:e0:ea:4e:95:12:9d:42:f6:6a:cd: 4e:96:1c:65:6f:17:81:ef:d3:d9:6e:6a:4f:c2:78: 39:4e:2a:94:6b:62:32:0e:69:ec:91:b9:8a:b3:fb: 66:66:6b:4c:9c:7f:90:dc:81:5e:1e:42:ca:f3:2b: 1b:1c:68:44:df:7c:fb:18:60:b2:41:66:ac:3c:b7: ff:ce:18:dd:d4:16:a8:e7:3a:02:2f:ba:ac:35:30: 75:02:0e:84:25:86:23:89:8c:01:40:e4:c5:ad:97: ae:ce:4f:b7:40:ca:a6:1c:76:86:66:30:dc:25:68: 85:5b:b5:3c:21:3e:87:af:ae:19:64:e4:06:0a:bb: 27:f0:62:3f:6c:b2:76:32:49:f4:9e:94:4f:63:97: 20:35:b1:a7:8d:90:95:07:2f:09:19:66:da:71:67: fc:75:ef:55:85:a0:e2:f7:ba:bc:8f:55:84:5c:f3: 34:4e:51:68:4e:f8:74:9b:3e:41:5f:0f:28:a4:06: a9:85:f9:de:33:cb:58:41:e5:29:88:ef:dc:e5:64: 32:60:64:69:77:84:a2:ba:0e:0f:70:84:bf:6a:7a: d8:85:84:06:18:67:f8:92:f6:92:7b:57:84:b0:c5: 75:b9:6e:56:e7:c3:5d:a9:0d:17:13:2e:4d:bd:ac: 8a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B4:63:41:86:02:A8:53:9E:08:64:E1:63:DD:C9:7F:9B:78:36:51 X509v3 Authority Key Identifier: keyid:1D:87:F3:02:74:95:1C:AD:FB:5B:73:7E:13:33:C7:3D:64:B0:42:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYfzAnSVHK37W3N-EzPHPWSwQlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2485f5-df3e-4dba-810e-fe440111d807/1/HYfzAnSVHK37W3N-EzPHPWSwQlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:84:a8:da:ff:70:cf:a0:06:b9:14:6b:4c:35:d3:18:8f:30: 86:51:22:42:9e:d1:55:9e:c9:66:0d:5c:ec:ff:07:94:69:7f: 36:90:2a:84:1a:a2:20:69:67:7f:a9:d7:c1:90:bb:52:a1:18: 1e:db:13:59:2e:03:67:bd:cf:5c:73:d3:bd:02:ca:0f:b5:c5: 40:29:9c:7c:97:5a:9b:04:6b:04:b9:76:e8:ce:19:de:b6:2c: 15:df:2f:07:47:95:6a:6f:fd:e0:c6:c9:7b:b3:08:68:c9:30: b9:9b:16:7a:8f:15:b7:85:5f:17:02:63:dc:f3:e4:70:be:48: 68:09:fa:7e:ee:74:ff:a4:8e:6d:7b:ec:a3:65:40:35:8e:b1: 9d:71:fb:e2:aa:51:7a:29:3d:96:2f:5f:d0:57:30:65:9f:d6: 25:69:41:41:fe:21:48:2b:4e:53:66:83:fb:03:95:47:b1:0d: 3e:62:5e:8d:88:f5:6a:40:0d:c4:2f:e9:83:97:4f:d5:34:86: 69:82:a7:f6:7b:89:26:5f:82:69:68:b1:ac:22:e8:e8:3a:2b: e5:be:73:8e:f5:39:06:6e:d2:4b:0b:12:a9:b8:aa:f0:6c:e9: 4e:0c:ab:c7:a9:a4:1f:fd:34:e2:cc:10:b0:49:0b:7a:96:4b: 4c:40:81:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxViU8NqzsRTsWAag/6fMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkODdmMzAyNzQ5NTFjYWRmYjViNzM3ZTEzMzNjNzNkNjRi MDQyNTYwHhcNMjUxMjE4MTIwMTI3WhcNMjUxMjE5MTIwMTI3WjAzMTEwLwYDVQQD Eyg4NGI0NjM0MTg2MDJhODUzOWUwODY0ZTE2M2RkYzk3ZjliNzgzNjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5EzYi+DqTpUSnUL2as1OlhxlbxeB 79PZbmpPwng5TiqUa2IyDmnskbmKs/tmZmtMnH+Q3IFeHkLK8ysbHGhE33z7GGCy QWasPLf/zhjd1Bao5zoCL7qsNTB1Ag6EJYYjiYwBQOTFrZeuzk+3QMqmHHaGZjDc JWiFW7U8IT6Hr64ZZOQGCrsn8GI/bLJ2Mkn0npRPY5cgNbGnjZCVBy8JGWbacWf8 de9VhaDi97q8j1WEXPM0TlFoTvh0mz5BXw8opAaphfneM8tYQeUpiO/c5WQyYGRp d4Siug4PcIS/anrYhYQGGGf4kvaSe1eEsMV1uW5W58NdqQ0XEy5NvayKowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIS0Y0GGAqhTnghk4WPdyX+beDZRMB8GA1UdIwQY MBaAFB2H8wJ0lRyt+1tzfhMzxz1ksEJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yNDg1ZjUtZGYzZS00ZGJhLTgxMGUt ZmU0NDAxMTFkODA3LzEvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8yNDg1ZjUtZGYzZS00ZGJhLTgxMGUtZmU0NDAxMTFkODA3 LzEvSFlmekFuU1ZISzM3VzNOLUV6UEhQV1N3UWxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYSo2v9w z6AGuRRrTDXTGI8whlEiQp7RVZ7JZg1c7P8HlGl/NpAqhBqiIGlnf6nXwZC7UqEY HtsTWS4DZ73PXHPTvQLKD7XFQCmcfJdamwRrBLl26M4Z3rYsFd8vB0eVam/94MbJ e7MIaMkwuZsWeo8Vt4VfFwJj3PPkcL5IaAn6fu50/6SObXvso2VANY6xnXH74qpR eik9li9f0FcwZZ/WJWlBQf4hSCtOU2aD+wOVR7ENPmJejYj1akANxC/pg5dP1TSG aYKn9nuJJl+CaWixrCLo6Dor5b5zjvU5Bm7SSwsSqbiq8GzpTgyrx6mkH/004swQ sEkLepZLTECByA== -----END CERTIFICATE-----Generated at Thu Dec 18 14:22:06 2025 by rpki-client