This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft File: hyELNM4ALjCgpU-r-ivKxG36cig.mft (raw, json) Hash identifier: WCsin+oL7W0sghgOjQ36jldwjK6LXiOT3N0XAuCmsYw= Subject key identifier: 9A:DB:ED:79:4F:77:AF:D9:AD:44:7B:D9:B6:AE:35:FC:64:53:58:0F Authority key identifier: 87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28 Certificate issuer: /CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228 Certificate serial: 019B2C9D753EB0DBBE926FD80D336D5A9461 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft Manifest number: 059E Signing time: Wed 17 Dec 2025 14:01:15 +0000 Manifest this update: Wed 17 Dec 2025 14:01:15 +0000 Manifest next update: Thu 18 Dec 2025 14:01:15 +0000 Files and hashes: 1: Oi0Mexif2IU5YWgRrWRDGcE4Aw4.roa (hash: hcI8ATUfRYduE8yCuLSr8RsjKUn++KtzCI3lWbIhr1A=) 2: RNEIzNGbtOLDhiuIlbx5LtZxiHA.roa (hash: YH3jUp9Z5jmgiTgvLayfiplIuhfqDKTG69/LcYMXnX0=) 3: hyELNM4ALjCgpU-r-ivKxG36cig.crl (hash: VWofds8teVZQQjuJeOhAjA7Z1/x4Qmam26NIcOpLW+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:75:3e:b0:db:be:92:6f:d8:0d:33:6d:5a:94:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87210b34ce002e30a0a54fabfa2bcac46dfa7228 Validity Not Before: Dec 17 14:01:15 2025 GMT Not After : Dec 18 14:01:15 2025 GMT Subject: CN=9adbed794f77afd9ad447bd9b6ae35fc6453580f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:86:46:e4:40:76:f4:15:6e:2f:10:b1:b0:af: 55:d2:71:c8:5f:8f:1f:39:d6:84:14:4d:87:c1:5f: 6f:a9:32:31:62:9d:d7:97:35:0e:b4:46:45:68:a9: 77:b8:99:f6:85:f9:21:de:92:d1:b7:17:32:ea:71: ce:6d:4a:59:13:a9:60:75:b3:68:f1:4e:43:af:69: e7:27:cd:c3:c7:45:e8:fa:90:0b:c1:97:f7:6e:37: d3:c3:e5:56:23:f1:a7:d3:eb:61:8d:80:be:22:ac: df:b3:02:30:91:c9:4f:58:20:83:59:76:14:6a:11: d4:e0:57:cd:27:0b:d3:c5:e6:6e:bf:8d:16:b6:4f: 7e:04:04:ff:ad:29:fb:b0:9e:3b:2a:66:a1:8e:95: 59:0f:de:57:bb:ac:70:6d:f2:c7:8f:33:f5:ea:0a: f9:eb:80:25:6f:64:ee:e3:cf:52:a9:61:22:0b:03: fb:4b:39:a9:a3:96:d5:3a:54:ba:e8:0f:4b:4f:cc: 2d:b9:ef:78:2c:ed:f5:78:a4:0a:ee:41:4e:54:a1: 6d:cc:97:ba:e8:0b:b0:25:30:36:d2:6a:7d:2d:f1: c8:56:e5:40:fd:d6:86:de:e6:63:b4:3f:43:d0:90: 4a:37:53:3f:b5:b5:2b:4f:d3:a9:42:82:02:ec:47: 0a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DB:ED:79:4F:77:AF:D9:AD:44:7B:D9:B6:AE:35:FC:64:53:58:0F X509v3 Authority Key Identifier: keyid:87:21:0B:34:CE:00:2E:30:A0:A5:4F:AB:FA:2B:CA:C4:6D:FA:72:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyELNM4ALjCgpU-r-ivKxG36cig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/29a0dc-20af-437e-9870-3669d1b569d6/1/hyELNM4ALjCgpU-r-ivKxG36cig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:f3:b6:c8:78:bd:2a:b9:24:46:c6:aa:41:51:09:c1:4c:40: 0d:fd:73:5c:de:0a:8b:79:54:b9:33:a8:a0:fa:76:89:d3:16: 9a:e8:a0:59:45:04:4d:f1:89:25:36:f1:b7:29:eb:6b:87:4f: 1f:b7:64:f6:09:f0:9b:0e:bb:23:b6:83:73:bf:7f:de:3d:49: c6:ae:60:fc:c7:51:a3:1e:19:d8:a4:a3:06:91:1b:90:a3:68: f1:f4:4b:6c:75:ae:92:4e:c8:a1:9f:23:f7:3e:c6:2f:8c:a9: c7:d7:19:79:96:0c:98:a7:b6:f5:31:64:e7:90:69:87:35:e8: 19:df:33:02:3f:38:95:8c:27:bc:cb:c5:25:34:19:23:0b:e2: 14:a7:80:1f:9d:6c:93:1f:fc:88:c9:5b:63:6a:d3:3e:f1:36: 00:d6:e9:da:72:27:2a:52:8d:74:7f:76:cb:ff:ab:b8:fd:0d: ae:1b:a2:f3:b7:d0:37:62:21:22:75:59:e4:97:99:82:e0:f1: 81:2a:e6:e6:6f:c5:2c:af:7b:e6:4e:f0:7a:10:e4:7c:ac:05: a2:b9:5a:69:8c:37:b7:82:d6:3f:af:8c:83:35:fc:bd:82:f6: 0d:ef:d5:ef:83:43:5d:a6:93:9b:54:4e:ce:96:a2:a7:4c:f6: 83:ca:96:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnXU+sNu+km/YDTNtWpRhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MjEwYjM0Y2UwMDJlMzBhMGE1NGZhYmZhMmJjYWM0NmRm YTcyMjgwHhcNMjUxMjE3MTQwMTE1WhcNMjUxMjE4MTQwMTE1WjAzMTEwLwYDVQQD Eyg5YWRiZWQ3OTRmNzdhZmQ5YWQ0NDdiZDliNmFlMzVmYzY0NTM1ODBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoZG5EB29BVuLxCxsK9V0nHIX48f OdaEFE2HwV9vqTIxYp3XlzUOtEZFaKl3uJn2hfkh3pLRtxcy6nHObUpZE6lgdbNo 8U5Dr2nnJ83Dx0Xo+pALwZf3bjfTw+VWI/Gn0+thjYC+IqzfswIwkclPWCCDWXYU ahHU4FfNJwvTxeZuv40Wtk9+BAT/rSn7sJ47KmahjpVZD95Xu6xwbfLHjzP16gr5 64Alb2Tu489SqWEiCwP7Szmpo5bVOlS66A9LT8wtue94LO31eKQK7kFOVKFtzJe6 6AuwJTA20mp9LfHIVuVA/daG3uZjtD9D0JBKN1M/tbUrT9OpQoIC7EcKlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrb7XlPd6/ZrUR72bauNfxkU1gPMB8GA1UdIwQY MBaAFIchCzTOAC4woKVPq/orysRt+nIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yOWEwZGMtMjBhZi00MzdlLTk4NzAt MzY2OWQxYjU2OWQ2LzEvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8yOWEwZGMtMjBhZi00MzdlLTk4NzAtMzY2OWQxYjU2OWQ2 LzEvaHlFTE5NNEFMakNncFUtci1pdkt4RzM2Y2lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/O2yHi9 KrkkRsaqQVEJwUxADf1zXN4Ki3lUuTOooPp2idMWmuigWUUETfGJJTbxtynra4dP H7dk9gnwmw67I7aDc79/3j1Jxq5g/MdRox4Z2KSjBpEbkKNo8fRLbHWukk7IoZ8j 9z7GL4ypx9cZeZYMmKe29TFk55BphzXoGd8zAj84lYwnvMvFJTQZIwviFKeAH51s kx/8iMlbY2rTPvE2ANbp2nInKlKNdH92y/+ruP0Nrhui87fQN2IhInVZ5JeZguDx gSrm5m/FLK975k7wehDkfKwForlaaYw3t4LWP6+MgzX8vYL2De/V74NDXaaTm1RO zpaip0z2g8qWNg== -----END CERTIFICATE-----Generated at Wed Dec 17 18:39:07 2025 by rpki-client