This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft File: hyj0ANg9Saqm6TIMosv6k9pb55s.mft (raw, json) Hash identifier: BOG1XqGJ5pbhOR72KTOz8XAb08bioJta3GM6mBJLdDg= Subject key identifier: 82:A8:D6:02:17:09:89:25:01:2B:18:71:8B:43:CD:35:78:B6:4F:B4 Authority key identifier: 87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B Certificate issuer: /CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b Certificate serial: 019AF12F24778AFB15ADDD3090B051FCD1E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft Manifest number: 062C Signing time: Sat 06 Dec 2025 01:03:09 +0000 Manifest this update: Sat 06 Dec 2025 01:03:09 +0000 Manifest next update: Sun 07 Dec 2025 01:03:09 +0000 Files and hashes: 1: hyj0ANg9Saqm6TIMosv6k9pb55s.crl (hash: jjgQ0GSZ33nGu/Zk94b5+RowoU7CylPFIX/1hAGNU4g=) 2: iTyIEEO2sljhZiJnAx_Ko0duy2M.roa (hash: T+291sx+aTIxs6928rSAPXeV/0gq52PnDMgh9u7+DTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2f:24:77:8a:fb:15:ad:dd:30:90:b0:51:fc:d1:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8728f400d83d49aaa6e9320ca2cbfa93da5be79b Validity Not Before: Dec 6 01:03:09 2025 GMT Not After : Dec 7 01:03:09 2025 GMT Subject: CN=82a8d60217098925012b18718b43cd3578b64fb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:83:60:80:46:85:fb:5f:3a:fd:d4:10:7d:55: e7:69:37:a1:66:81:ae:df:6a:60:40:22:9d:6b:3c: e5:47:01:23:dc:91:e5:de:4d:d0:44:16:31:c2:2b: 29:8d:fe:dc:97:1b:27:4c:31:70:c9:5b:0d:ee:ce: e1:91:80:1a:9c:1b:40:e2:24:2d:67:f7:13:d4:42: 42:f0:23:12:83:e8:d5:1a:47:8c:e0:fc:95:d8:97: 1f:91:56:af:29:39:cc:31:da:b7:02:0f:a5:d8:23: a1:a0:27:14:39:22:90:db:36:37:76:9d:15:dc:cf: 00:c9:94:94:93:b8:80:ee:8c:d6:23:0d:6d:62:40: 61:c0:ee:35:5f:80:c7:92:f4:60:7f:20:88:38:8c: a0:39:b9:fa:77:bf:fa:fa:ce:39:fc:f7:b1:0d:ad: aa:2b:88:1d:2e:ac:df:13:a7:dd:66:6c:92:8c:79: 86:bb:2a:41:5d:eb:12:2b:0b:c2:da:1b:dc:46:04: e9:5b:0c:a3:70:55:21:08:3a:4d:d1:de:04:95:4b: c8:74:b4:b9:68:c5:9f:cf:bf:da:43:6e:07:a5:48: 9f:60:bd:4b:50:c2:52:ef:13:19:7c:b8:ba:c1:63: 0e:06:f2:e4:16:17:24:e1:f4:b4:9e:f2:ee:69:21: 49:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A8:D6:02:17:09:89:25:01:2B:18:71:8B:43:CD:35:78:B6:4F:B4 X509v3 Authority Key Identifier: keyid:87:28:F4:00:D8:3D:49:AA:A6:E9:32:0C:A2:CB:FA:93:DA:5B:E7:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyj0ANg9Saqm6TIMosv6k9pb55s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/33f1ab-6a35-4e63-8bdc-a25e14d539a2/1/hyj0ANg9Saqm6TIMosv6k9pb55s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:03:29:5e:49:26:fc:18:d5:19:67:1d:b3:69:c2:af:d3:2f: 12:98:41:10:18:16:a9:06:0b:cd:2c:ef:28:32:a8:bd:2a:7c: 95:87:4d:13:d5:53:6f:a1:8b:a2:f4:20:0a:51:af:e3:ab:ed: f1:59:d4:57:77:58:28:04:c6:7c:0b:2f:eb:94:2c:09:db:2e: e6:99:2e:0b:bd:5e:ab:b3:80:13:35:23:e6:8b:83:e1:70:11: 15:74:a1:c3:dd:da:dc:96:f3:24:f3:40:95:a9:48:2c:fc:3b: 7e:a7:89:c9:06:d4:21:6f:a7:42:83:96:60:71:f0:90:fe:75: cc:fe:39:6a:77:8b:0c:c0:0f:d8:d6:e6:6e:f0:b4:b5:88:c2: 52:a7:55:90:d7:48:73:fd:28:c7:52:98:fa:d8:27:0d:37:f6: 6b:5a:78:38:f8:49:2e:80:43:44:51:ba:0c:1a:48:4a:4a:b3: f7:41:97:af:cc:60:8f:e8:2b:40:ee:99:ad:d0:d2:dd:d0:0b: 6e:fc:b5:8f:15:49:ef:9e:be:c0:da:d5:b1:1e:f7:6a:ac:9e: 00:8c:cf:30:8c:d9:75:8c:70:d5:0b:3e:cf:da:a2:63:97:ee: 55:87:72:70:bd:49:6f:e2:5c:9b:bb:9f:83:65:bb:9f:f4:1e: be:ab:f4:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLyR3ivsVrd0wkLBR/NHoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MjhmNDAwZDgzZDQ5YWFhNmU5MzIwY2EyY2JmYTkzZGE1 YmU3OWIwHhcNMjUxMjA2MDEwMzA5WhcNMjUxMjA3MDEwMzA5WjAzMTEwLwYDVQQD Eyg4MmE4ZDYwMjE3MDk4OTI1MDEyYjE4NzE4YjQzY2QzNTc4YjY0ZmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4NggEaF+186/dQQfVXnaTehZoGu 32pgQCKdazzlRwEj3JHl3k3QRBYxwispjf7clxsnTDFwyVsN7s7hkYAanBtA4iQt Z/cT1EJC8CMSg+jVGkeM4PyV2JcfkVavKTnMMdq3Ag+l2COhoCcUOSKQ2zY3dp0V 3M8AyZSUk7iA7ozWIw1tYkBhwO41X4DHkvRgfyCIOIygObn6d7/6+s45/PexDa2q K4gdLqzfE6fdZmySjHmGuypBXesSKwvC2hvcRgTpWwyjcFUhCDpN0d4ElUvIdLS5 aMWfz7/aQ24HpUifYL1LUMJS7xMZfLi6wWMOBvLkFhck4fS0nvLuaSFJcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKo1gIXCYklASsYcYtDzTV4tk+0MB8GA1UdIwQY MBaAFIco9ADYPUmqpukyDKLL+pPaW+ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMt YTI1ZTE0ZDUzOWEyLzEvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8zM2YxYWItNmEzNS00ZTYzLThiZGMtYTI1ZTE0ZDUzOWEy LzEvaHlqMEFOZzlTYXFtNlRJTW9zdjZrOXBiNTVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgMpXkkm /BjVGWcds2nCr9MvEphBEBgWqQYLzSzvKDKovSp8lYdNE9VTb6GLovQgClGv46vt 8VnUV3dYKATGfAsv65QsCdsu5pkuC71eq7OAEzUj5ouD4XARFXShw93a3JbzJPNA lalILPw7fqeJyQbUIW+nQoOWYHHwkP51zP45aneLDMAP2NbmbvC0tYjCUqdVkNdI c/0ox1KY+tgnDTf2a1p4OPhJLoBDRFG6DBpISkqz90GXr8xgj+grQO6ZrdDS3dAL bvy1jxVJ756+wNrVsR73aqyeAIzPMIzZdYxw1Qs+z9qiY5fuVYdycL1Jb+Jcm7uf g2W7n/Qevqv0jQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:29:18 2025 by rpki-client