This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft File: hyELNM4ALjCgpU-r-ivKxG36cig.mft (raw, json) Hash identifier: 1qbKWNQ0pcRecg8q06udWsx+rPvad19XiKlCk1YxwOY= Subject key identifier: EE:D8:7A:F8:31:49:6C:5D:91:4B:BA:EF:84:65:DB:59:90:FD:12:F4 Authority key identifier: 87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28 Certificate issuer: /CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228 Certificate serial: 019AF49BC5F03CE0FA2DCFBD074ED2BEA525 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft Manifest number: 0581 Signing time: Sat 06 Dec 2025 17:00:40 +0000 Manifest this update: Sat 06 Dec 2025 17:00:40 +0000 Manifest next update: Sun 07 Dec 2025 17:00:40 +0000 Files and hashes: 1: Oi0Mexif2IU5YWgRrWRDGcE4Aw4.roa (hash: hcI8ATUfRYduE8yCuLSr8RsjKUn++KtzCI3lWbIhr1A=) 2: RNEIzNGbtOLDhiuIlbx5LtZxiHA.roa (hash: YH3jUp9Z5jmgiTgvLayfiplIuhfqDKTG69/LcYMXnX0=) 3: hyELNM4ALjCgpU-r-ivKxG36cig.crl (hash: 85zY9T4cVnvTy68fAi+lIowe3dTzlfLaM43a7bWMBGM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:c5:f0:3c:e0:fa:2d:cf:bd:07:4e:d2:be:a5:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228 Validity Not Before: Dec 6 17:00:40 2025 GMT Not After : Dec 7 17:00:40 2025 GMT Subject: CN=eed87af831496c5d914bbaef8465db5990fd12f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:33:67:fc:e4:15:1d:72:01:1d:35:f6:af: ba:05:73:fc:7d:9c:c7:d9:f9:53:c7:29:82:50:96: 06:ee:8b:87:62:70:e7:38:ef:de:3e:0c:0f:20:e3: 47:9a:a2:af:5a:c1:f2:54:67:e1:02:fb:47:c1:68: 4b:aa:6b:29:05:06:3c:94:99:89:af:ab:ce:7d:e1: 4e:c6:a8:1f:94:61:7d:f5:cf:8b:16:12:e7:75:d6: 0a:14:62:90:7e:b4:e6:c4:97:23:14:c0:b1:aa:7a: df:7f:64:21:2e:45:f4:8b:30:42:dd:85:b8:87:0e: 54:87:d2:de:1a:f6:20:75:34:12:fe:54:9c:c6:40: 04:53:8b:f4:35:4f:18:d9:3f:6b:7d:79:46:1d:0a: 32:d5:ec:19:4a:8b:b5:92:2a:55:ca:27:81:f1:a5: 0e:ea:8b:1f:4d:6d:82:0e:37:08:9b:cf:f1:f5:3a: b6:59:d0:c6:7f:e3:c9:5e:04:8e:a2:7a:6d:1d:51: 5c:e5:19:8a:5b:a1:03:a8:cc:2e:39:a5:ff:1f:b7: 73:58:3e:36:0e:dc:62:f7:3f:e1:35:a6:6e:a7:5b: 68:fa:be:96:41:5d:ea:d3:11:82:04:d0:ac:4f:f5: 8b:4c:25:6f:48:5c:9f:45:82:33:45:e7:db:69:bc: be:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D8:7A:F8:31:49:6C:5D:91:4B:BA:EF:84:65:DB:59:90:FD:12:F4 X509v3 Authority Key Identifier: keyid:87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:79:01:97:01:6d:50:f4:2f:0b:45:2f:95:6c:5a:65:9e:85: 25:6e:b6:12:cc:4a:8a:e8:40:1c:89:34:67:a0:15:d0:5d:23: 36:b1:d5:e3:b9:a7:83:45:8e:02:70:d6:c3:1e:50:e3:80:76: e4:b0:01:a9:e9:b6:d5:2d:72:d9:a6:b5:7e:08:4e:ca:ea:27: 52:ff:b1:03:31:5d:42:1a:87:68:60:83:75:ed:b5:3c:58:34: 5b:9f:d7:c3:8a:4a:29:48:1c:8f:50:62:4e:15:ff:e5:b9:e6: da:d4:e2:fd:39:78:88:eb:82:be:55:fc:df:4e:4a:08:aa:32: b8:11:e7:de:fd:3d:15:e4:8d:1f:d7:04:a1:8b:cd:0d:26:41: 7b:69:4f:b4:41:21:88:f1:3e:de:90:5b:34:73:cc:c6:50:fd: fa:78:f0:c9:c7:2b:14:2b:a8:2f:01:24:ab:bf:4f:ae:59:08: 7f:f2:95:41:f9:45:48:9f:6e:26:a0:66:be:8c:1b:5b:a6:cd: 0c:59:7b:f6:ee:a6:de:c3:f9:9f:41:d5:99:1e:4c:5d:b1:58: 01:75:42:ff:e2:16:b0:89:69:c9:98:67:1d:ce:82:5c:74:36: 3b:a1:09:cf:f6:ec:65:4a:bf:95:06:a0:45:4e:db:c4:97:43: 2a:36:98:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m8XwPOD6Lc+9B07SvqUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MjEwYjM0Y2UwMDJlMzBhMGE1NGZhYmZhMmJjYWM0NmRm YTcyMjgwHhcNMjUxMjA2MTcwMDQwWhcNMjUxMjA3MTcwMDQwWjAzMTEwLwYDVQQD EyhlZWQ4N2FmODMxNDk2YzVkOTE0YmJhZWY4NDY1ZGI1OTkwZmQxMmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHkzZ/zkFR1yAR019q+6BXP8fZzH 2flTxymCUJYG7ouHYnDnOO/ePgwPIONHmqKvWsHyVGfhAvtHwWhLqmspBQY8lJmJ r6vOfeFOxqgflGF99c+LFhLnddYKFGKQfrTmxJcjFMCxqnrff2QhLkX0izBC3YW4 hw5Uh9LeGvYgdTQS/lScxkAEU4v0NU8Y2T9rfXlGHQoy1ewZSou1kipVyieB8aUO 6osfTW2CDjcIm8/x9Tq2WdDGf+PJXgSOonptHVFc5RmKW6EDqMwuOaX/H7dzWD42 Dtxi9z/hNaZup1to+r6WQV3q0xGCBNCsT/WLTCVvSFyfRYIzRefbaby+LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7YevgxSWxdkUu674Rl21mQ/RL0MB8GA1UdIwQY MBaAFIchCzTOAC4woKVPq/orysRt+nIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yOWEwZGMtMjBhZi00MzdlLTk4NzAt MzY2OWQxYjU2OWQ2LzEvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8yOWEwZGMtMjBhZi00MzdlLTk4NzAtMzY2OWQxYjU2OWQ2 LzEvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt3kBlwFt UPQvC0UvlWxaZZ6FJW62EsxKiuhAHIk0Z6AV0F0jNrHV47mng0WOAnDWwx5Q44B2 5LABqem21S1y2aa1fghOyuonUv+xAzFdQhqHaGCDde21PFg0W5/Xw4pKKUgcj1Bi ThX/5bnm2tTi/Tl4iOuCvlX8305KCKoyuBHn3v09FeSNH9cEoYvNDSZBe2lPtEEh iPE+3pBbNHPMxlD9+njwyccrFCuoLwEkq79PrlkIf/KVQflFSJ9uJqBmvowbW6bN DFl79u6m3sP5n0HVmR5MXbFYAXVC/+IWsIlpyZhnHc6CXHQ2O6EJz/bsZUq/lQag RU7bxJdDKjaYoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:39:11 2025 by rpki-client