This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft File: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft (raw, json) Hash identifier: 0Lu83nBRbJ4XspN0x2h0MxpYEv/V+fdQGvElbVomZCg= Subject key identifier: AE:EA:E7:BD:0F:27:A4:89:13:0D:15:D3:99:E1:DE:C5:F5:04:97:A6 Authority key identifier: 87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5 Certificate issuer: /CN=8724b401ffeac3d5db42f828cab4f163c064d6d5 Certificate serial: 019AF4650D4C04E6E79DFF09F8E8DE2F5E40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 16:00:54 +0000 Manifest this update: Sat 06 Dec 2025 16:00:54 +0000 Manifest next update: Sun 07 Dec 2025 16:00:54 +0000 Files and hashes: 1: C_dV-a8NL19EWcN2B58oBMal8wA.roa (hash: cfrqdXpjr4fkDxvy5PbVD58Is9FxlX0Bf3Low+2bVCc=) 2: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl (hash: TpOBFRhzcnipZ047z+GYhl6us8RyjqbF7YUz1NL5+Zs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:0d:4c:04:e6:e7:9d:ff:09:f8:e8:de:2f:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8724b401ffeac3d5db42f828cab4f163c064d6d5 Validity Not Before: Dec 6 16:00:54 2025 GMT Not After : Dec 7 16:00:54 2025 GMT Subject: CN=aeeae7bd0f27a489130d15d399e1dec5f50497a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:31:e3:8b:cb:84:d0:ec:ed:19:c3:54:3c:94: 95:a1:d9:85:58:ad:ed:38:f4:03:bb:0a:38:7e:16: 32:b3:45:0c:65:ea:11:a2:6e:27:2e:90:a0:0e:e4: 3e:05:0e:9f:40:48:f4:c6:6f:c2:db:0e:17:02:5b: 30:64:27:44:33:9a:88:b9:c1:1a:b7:1c:8d:ca:9c: 7b:fc:25:e6:09:cd:99:a9:04:aa:38:83:92:76:4e: 33:af:4b:47:02:8c:9c:6f:a3:d6:09:33:70:56:83: d9:3d:48:29:b7:e8:3d:80:3a:99:62:a9:fa:52:64: 08:f2:b8:f2:d7:49:1c:96:71:12:1b:0e:06:29:27: eb:d2:e4:56:79:55:6d:f7:1e:b5:a5:a7:4b:6c:76: 61:c0:e7:45:8a:73:3d:c9:71:2c:1a:7b:a3:76:d9: e6:26:a0:22:44:d0:4f:10:1b:dc:03:8f:f2:80:63: 23:8d:ac:00:07:a8:88:da:c4:fc:1a:7a:cd:0d:9c: dc:1d:2a:a5:81:7b:3f:6f:45:3a:cd:a4:a2:1e:f9: 01:05:92:a5:c0:a9:5c:77:1f:01:4b:14:92:db:97: eb:0d:f8:3a:14:df:6d:98:51:d7:ee:4d:19:2b:cd: f8:9c:7b:7f:39:e0:7a:d4:71:14:0d:b5:70:25:eb: a2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EA:E7:BD:0F:27:A4:89:13:0D:15:D3:99:E1:DE:C5:F5:04:97:A6 X509v3 Authority Key Identifier: keyid:87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c2:01:0c:64:fc:28:2e:a2:b2:25:af:03:2f:28:4d:31:28: 13:4a:68:28:a5:89:a3:85:c0:15:cc:9f:a7:0e:21:9c:2e:43: 1a:bf:24:4a:47:5f:cb:90:fd:37:c6:0c:07:75:3d:19:89:8f: fa:ce:dc:61:02:da:7a:33:65:37:a2:3f:ab:fd:ce:e6:87:48: c6:67:9a:1d:67:1d:e4:19:b5:6a:db:25:57:2d:e4:ed:b6:b7: 1f:87:c3:f9:81:82:99:72:d5:78:a1:fe:68:ba:fe:6f:ef:9f: c5:8f:b1:54:34:a3:e6:bc:9a:4f:cd:09:89:12:93:5a:00:37: c6:9b:00:55:b9:37:62:6f:c4:47:3e:3f:08:ac:1e:b7:51:aa: 19:80:23:eb:41:94:20:6c:a6:b6:08:ea:cf:7f:77:c3:49:da: 17:9f:39:93:9f:64:9e:0d:f7:b6:df:14:93:33:0b:40:6c:8b: 4a:84:37:70:3f:d4:4e:d3:65:b8:47:d2:2d:04:00:92:b1:49: 99:d4:a9:f2:70:11:17:75:b6:42:6a:ed:55:ec:a2:86:3d:fb: 7d:1f:eb:a1:c6:d2:c6:ef:82:1f:cf:7c:66:ed:4f:3b:3d:25: 9c:35:97:10:40:66:39:51:9c:b9:c2:37:04:85:26:64:3b:cf: 68:5d:7c:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZQ1MBObnnf8J+OjeL15AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MjRiNDAxZmZlYWMzZDVkYjQyZjgyOGNhYjRmMTYzYzA2 NGQ2ZDUwHhcNMjUxMjA2MTYwMDU0WhcNMjUxMjA3MTYwMDU0WjAzMTEwLwYDVQQD EyhhZWVhZTdiZDBmMjdhNDg5MTMwZDE1ZDM5OWUxZGVjNWY1MDQ5N2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DHji8uE0OztGcNUPJSVodmFWK3t OPQDuwo4fhYys0UMZeoRom4nLpCgDuQ+BQ6fQEj0xm/C2w4XAlswZCdEM5qIucEa txyNypx7/CXmCc2ZqQSqOIOSdk4zr0tHAoycb6PWCTNwVoPZPUgpt+g9gDqZYqn6 UmQI8rjy10kclnESGw4GKSfr0uRWeVVt9x61padLbHZhwOdFinM9yXEsGnujdtnm JqAiRNBPEBvcA4/ygGMjjawAB6iI2sT8GnrNDZzcHSqlgXs/b0U6zaSiHvkBBZKl wKlcdx8BSxSS25frDfg6FN9tmFHX7k0ZK834nHt/OeB61HEUDbVwJeuiuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK7q570PJ6SJEw0V05nh3sX1BJemMB8GA1UdIwQY MBaAFIcktAH/6sPV20L4KMq08WPAZNbVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHlTMEFmX3F3OVhiUXZnb3lyVHhZOEJrMXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8zZTUwYzktOTVkMC00YWI3LWE3ZTEt MDExMTAzODkzNGQzLzEvaHlTMEFmX3F3OVhiUXZnb3lyVHhZOEJrMXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8zZTUwYzktOTVkMC00YWI3LWE3ZTEtMDExMTAzODkzNGQz LzEvaHlTMEFmX3F3OVhiUXZnb3lyVHhZOEJrMXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8IBDGT8 KC6isiWvAy8oTTEoE0poKKWJo4XAFcyfpw4hnC5DGr8kSkdfy5D9N8YMB3U9GYmP +s7cYQLaejNlN6I/q/3O5odIxmeaHWcd5Bm1atslVy3k7ba3H4fD+YGCmXLVeKH+ aLr+b++fxY+xVDSj5ryaT80JiRKTWgA3xpsAVbk3Ym/ERz4/CKwet1GqGYAj60GU IGymtgjqz393w0naF585k59kng33tt8UkzMLQGyLSoQ3cD/UTtNluEfSLQQAkrFJ mdSp8nARF3W2QmrtVeyihj37fR/rocbSxu+CH898Zu1POz0lnDWXEEBmOVGcucI3 BIUmZDvPaF18Vw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:18:29 2025 by rpki-client