This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft File: Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft (raw, json) Hash identifier: nY0BxwryLLoFjeYE9mXwrIBruXn2EuGyNcnLOBhithY= Subject key identifier: 0A:D5:9F:DB:75:4F:62:D7:F2:5D:90:29:08:F6:BD:74:88:24:FA:89 Authority key identifier: 1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4 Certificate issuer: /CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4 Certificate serial: 019AF0BF9DA4FAAC784F94A1701B129AE409 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft Manifest number: 14A2 Signing time: Fri 05 Dec 2025 23:01:20 +0000 Manifest this update: Fri 05 Dec 2025 23:01:20 +0000 Manifest next update: Sat 06 Dec 2025 23:01:20 +0000 Files and hashes: 1: Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl (hash: BcXbHYMRmX2srknvKLoQmKF7JAWIa8Zb9pf75brSdAI=) 2: _TB_DSwnuCOKtWool6QsRH-BI2c.roa (hash: IfCRqnm3tSTnJ1oqOSYusfB1IFZQtEWpYBfMbK20Izo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:9d:a4:fa:ac:78:4f:94:a1:70:1b:12:9a:e4:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f29bcbd5cfcc195e76b70a1bf0dd991ec7e33d4 Validity Not Before: Dec 5 23:01:20 2025 GMT Not After : Dec 6 23:01:20 2025 GMT Subject: CN=0ad59fdb754f62d7f25d902908f6bd748824fa89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e4:11:d4:9c:5c:d7:c9:62:26:1f:a0:9c:e8: fa:56:bb:62:ce:1f:79:f2:89:a2:58:c3:29:79:d1: cb:d1:71:03:a9:26:c7:79:fe:54:53:3b:97:6f:03: 99:b1:41:47:4a:16:35:f4:55:19:48:ea:f4:eb:e4: 89:ae:7e:d5:49:84:2d:d3:bc:bb:3f:bb:75:f1:ef: d9:09:b4:7d:c5:ef:b6:96:bd:aa:8e:4f:fb:21:95: e6:85:a4:80:49:02:8b:77:2b:f4:39:2a:a0:83:e6: 05:ee:77:7c:f1:da:01:8f:b1:72:63:30:49:6d:36: 6e:29:7f:9f:01:aa:c5:6b:f2:04:12:49:5e:96:3b: 16:af:2d:56:8b:47:19:23:22:35:80:8e:b6:3e:0e: 72:7a:a4:80:fc:2a:4f:63:91:53:de:6a:44:0b:a3: fc:45:ea:73:29:d6:41:8b:5c:65:7d:3f:53:fa:43: 37:cd:42:8e:79:72:cf:10:d8:c9:23:6b:bd:81:70: 37:73:19:8b:74:7b:36:53:ad:78:6c:d3:2f:f6:d8: f0:5c:6a:58:74:7b:e3:d0:8a:1f:70:36:e4:76:4c: 3b:4b:bd:0f:44:ff:30:86:fb:40:01:07:4c:16:8f: b4:d5:54:ac:2f:83:c6:1a:f2:96:77:5a:94:c7:c2: c9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D5:9F:DB:75:4F:62:D7:F2:5D:90:29:08:F6:BD:74:88:24:FA:89 X509v3 Authority Key Identifier: keyid:1F:29:BC:BD:5C:FC:C1:95:E7:6B:70:A1:BF:0D:D9:91:EC:7E:33:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hym8vVz8wZXna3Chvw3Zkex-M9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7422fe-f013-43e3-be91-d4d35d99981d/1/Hym8vVz8wZXna3Chvw3Zkex-M9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:71:bd:ca:c1:6f:52:52:9a:d8:cf:1d:02:68:2a:8f:46:94: e2:ff:5d:13:f7:ef:0e:79:af:1c:07:51:0b:b9:1b:33:25:9f: 8c:10:98:2e:4d:ed:0f:1c:f7:7a:52:c7:2b:4c:78:37:99:cc: a0:01:4f:43:3a:7a:66:df:b0:93:5d:1e:f7:b6:05:87:d6:3a: 35:45:72:a2:16:eb:3d:34:bf:8f:14:3e:96:62:b8:96:23:8f: ce:20:ae:bd:64:74:8b:5d:1e:09:79:b1:96:e8:04:10:99:71: c4:73:d7:e2:06:81:d6:c8:85:dd:fc:5e:01:bf:b8:f3:dc:a7: 70:7e:97:15:d2:f0:00:ad:65:7e:41:fa:7e:22:ca:a2:75:3d: 5f:82:80:62:cd:46:e7:06:e3:9a:bf:ce:c2:0d:60:bf:ed:79: e6:49:d9:c0:98:6c:b9:f7:f8:1d:01:eb:e3:ec:a7:53:62:4e: a5:20:2f:da:50:f2:9f:bd:76:b8:24:ab:68:81:61:8b:85:fb: 87:1d:7a:f0:c7:2f:10:c7:dc:2d:2d:fb:cd:4e:21:cc:31:59: 4f:8f:c4:de:8f:7f:ae:65:6b:05:73:66:bb:bc:60:bc:71:64: 3a:5c:71:fd:2c:8a:9f:37:d4:36:04:f6:d9:e2:cf:5f:ee:41: 79:79:7b:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv52k+qx4T5ShcBsSmuQJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMjliY2JkNWNmY2MxOTVlNzZiNzBhMWJmMGRkOTkxZWM3 ZTMzZDQwHhcNMjUxMjA1MjMwMTIwWhcNMjUxMjA2MjMwMTIwWjAzMTEwLwYDVQQD EygwYWQ1OWZkYjc1NGY2MmQ3ZjI1ZDkwMjkwOGY2YmQ3NDg4MjRmYTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+QR1Jxc18liJh+gnOj6Vrtizh95 8omiWMMpedHL0XEDqSbHef5UUzuXbwOZsUFHShY19FUZSOr06+SJrn7VSYQt07y7 P7t18e/ZCbR9xe+2lr2qjk/7IZXmhaSASQKLdyv0OSqgg+YF7nd88doBj7FyYzBJ bTZuKX+fAarFa/IEEkleljsWry1Wi0cZIyI1gI62Pg5yeqSA/CpPY5FT3mpEC6P8 RepzKdZBi1xlfT9T+kM3zUKOeXLPENjJI2u9gXA3cxmLdHs2U614bNMv9tjwXGpY dHvj0IofcDbkdkw7S70PRP8whvtAAQdMFo+01VSsL4PGGvKWd1qUx8LJlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArVn9t1T2LX8l2QKQj2vXSIJPqJMB8GA1UdIwQY MBaAFB8pvL1c/MGV52twob8N2ZHsfjPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEt ZDRkMzVkOTk5ODFkLzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC83NDIyZmUtZjAxMy00M2UzLWJlOTEtZDRkMzVkOTk5ODFk LzEvSHltOHZWejh3WlhuYTNDaHZ3M1prZXgtTTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXG9ysFv UlKa2M8dAmgqj0aU4v9dE/fvDnmvHAdRC7kbMyWfjBCYLk3tDxz3elLHK0x4N5nM oAFPQzp6Zt+wk10e97YFh9Y6NUVyohbrPTS/jxQ+lmK4liOPziCuvWR0i10eCXmx lugEEJlxxHPX4gaB1siF3fxeAb+489yncH6XFdLwAK1lfkH6fiLKonU9X4KAYs1G 5wbjmr/Owg1gv+155knZwJhsuff4HQHr4+ynU2JOpSAv2lDyn712uCSraIFhi4X7 hx168McvEMfcLS37zU4hzDFZT4/E3o9/rmVrBXNmu7xgvHFkOlxx/SyKnzfUNgT2 2eLPX+5BeXl7ww== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:35 2025 by rpki-client