This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft File: HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft (raw, json) Hash identifier: CEO/x4vFm9eKb+mBsSb/Kg5CpWrZ/RmW98ygaXvIkEY= Subject key identifier: 89:8A:09:F2:F6:EE:C3:F2:F6:2A:6A:60:86:AD:D3:81:8D:CB:BE:8B Authority key identifier: 1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23 Certificate issuer: /CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923 Certificate serial: 019AF1D252C668EF58523DE575F3DB81C5D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft Manifest number: 16C8 Signing time: Sat 06 Dec 2025 04:01:23 +0000 Manifest this update: Sat 06 Dec 2025 04:01:23 +0000 Manifest next update: Sun 07 Dec 2025 04:01:23 +0000 Files and hashes: 1: HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl (hash: ZIHbAp47P2IX/zPnfBaUNzgYIH7BxxfocLs4cve6GmE=) 2: L5mBnSY0HeEAnUmT_xC_Qui2__o.roa (hash: pEnOPp9OXxAyhAm8z7JMf69YUoQujcTxw5JmYxCTmcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:52:c6:68:ef:58:52:3d:e5:75:f3:db:81:c5:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cd8b25cceac38c99372bf72b00c6c8b6418e923 Validity Not Before: Dec 6 04:01:23 2025 GMT Not After : Dec 7 04:01:23 2025 GMT Subject: CN=898a09f2f6eec3f2f62a6a6086add3818dcbbe8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:11:e9:36:a5:fa:fa:2d:94:86:03:57:d6:a6: a4:51:38:d1:06:ca:ee:53:02:18:a7:3a:2a:37:63: dd:14:02:65:d8:ae:97:6b:d3:59:eb:a1:4a:41:94: 53:7f:a1:77:54:e1:e8:6a:1c:5f:a7:b1:f9:d1:d8: e4:14:50:cf:98:b4:58:84:a7:6e:db:13:09:88:ba: 05:c6:9a:a1:6e:a8:0a:40:89:72:3f:95:db:e1:1d: 62:b3:56:55:4f:31:20:18:13:2f:fa:6a:65:35:d5: 59:57:ae:43:32:81:09:2a:2f:aa:6c:c2:93:52:9f: 9a:0e:c5:82:95:bf:f6:d3:43:e0:13:73:c0:f4:f2: 67:d0:7a:37:b2:ef:12:1d:cb:c9:be:f0:cc:1a:b8: 0d:5e:e6:44:0b:f1:5a:64:52:04:a4:f7:0e:07:d8: 73:e4:3d:38:50:44:73:fc:24:f2:28:e6:2f:73:d8: 07:5c:15:19:a4:73:bd:2b:e2:31:50:c5:38:40:27: be:30:d4:4e:70:b1:d9:a8:e6:a7:4c:4d:82:f7:33: d6:ee:00:89:28:a9:c5:e3:32:00:b6:fa:b2:70:73: 0e:ad:95:f4:dd:be:15:df:3f:ef:7c:34:51:f9:91: 53:71:30:21:b0:72:7e:f5:d8:ce:74:60:d4:ea:29: ee:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:8A:09:F2:F6:EE:C3:F2:F6:2A:6A:60:86:AD:D3:81:8D:CB:BE:8B X509v3 Authority Key Identifier: keyid:1C:D8:B2:5C:CE:AC:38:C9:93:72:BF:72:B0:0C:6C:8B:64:18:E9:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HNiyXM6sOMmTcr9ysAxsi2QY6SM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b6c783-f55d-4ead-8c6a-19633f08ed6a/1/HNiyXM6sOMmTcr9ysAxsi2QY6SM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:87:64:09:e9:67:81:d8:23:54:2b:79:fc:be:4e:f7:85:99: b7:93:ef:59:35:6e:60:6b:d3:0f:77:e0:94:3e:c1:a9:c6:4f: 64:7b:6f:17:c5:57:2d:01:0c:e5:28:e9:0e:ae:93:d1:21:3c: 21:6e:34:6e:68:ce:de:1a:7e:39:da:67:f0:d7:c9:d9:c1:d7: ce:87:9c:23:16:fe:ff:63:92:6a:9b:d8:7d:f5:84:42:31:dd: 06:a4:4a:b2:7a:ca:d2:51:ef:93:dc:77:3a:77:67:16:02:b7: 49:fa:01:dd:6d:08:bc:51:3d:25:9a:b8:d5:3f:86:6b:01:c6: 2e:d3:8e:4e:94:f1:4e:4d:2f:6a:31:41:9e:83:83:12:10:be: 10:e9:2e:3c:ed:46:5e:2a:c9:f0:eb:8d:4a:58:7a:38:74:de: 3a:0e:3f:59:b2:7f:46:d8:b2:f7:7c:a3:3f:08:bc:a6:92:90: 9d:71:a2:46:73:ed:de:67:82:3b:b6:a2:7a:77:b9:26:75:52: d2:9a:58:cc:d7:73:2c:d9:aa:03:2c:30:e3:c2:60:53:f2:56: c0:20:b8:8d:5e:a8:90:ad:da:a5:d9:de:8a:7f:c8:e7:04:ed: 4c:18:85:93:01:f5:ad:13:d5:20:2e:5b:90:30:f3:f6:fc:48: 64:45:73:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0lLGaO9YUj3ldfPbgcXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZDhiMjVjY2VhYzM4Yzk5MzcyYmY3MmIwMGM2YzhiNjQx OGU5MjMwHhcNMjUxMjA2MDQwMTIzWhcNMjUxMjA3MDQwMTIzWjAzMTEwLwYDVQQD Eyg4OThhMDlmMmY2ZWVjM2YyZjYyYTZhNjA4NmFkZDM4MThkY2JiZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBHpNqX6+i2UhgNX1qakUTjRBsru UwIYpzoqN2PdFAJl2K6Xa9NZ66FKQZRTf6F3VOHoahxfp7H50djkFFDPmLRYhKdu 2xMJiLoFxpqhbqgKQIlyP5Xb4R1is1ZVTzEgGBMv+mplNdVZV65DMoEJKi+qbMKT Up+aDsWClb/200PgE3PA9PJn0Ho3su8SHcvJvvDMGrgNXuZEC/FaZFIEpPcOB9hz 5D04UERz/CTyKOYvc9gHXBUZpHO9K+IxUMU4QCe+MNROcLHZqOanTE2C9zPW7gCJ KKnF4zIAtvqycHMOrZX03b4V3z/vfDRR+ZFTcTAhsHJ+9djOdGDU6inurwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImKCfL27sPy9ipqYIat04GNy76LMB8GA1UdIwQY MBaAFBzYslzOrDjJk3K/crAMbItkGOkjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE5peVhNNnNPTW1UY3I5eXNBeHNpMlFZNlNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iNmM3ODMtZjU1ZC00ZWFkLThjNmEt MTk2MzNmMDhlZDZhLzEvSE5peVhNNnNPTW1UY3I5eXNBeHNpMlFZNlNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9iNmM3ODMtZjU1ZC00ZWFkLThjNmEtMTk2MzNmMDhlZDZh LzEvSE5peVhNNnNPTW1UY3I5eXNBeHNpMlFZNlNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqIdkCeln gdgjVCt5/L5O94WZt5PvWTVuYGvTD3fglD7BqcZPZHtvF8VXLQEM5SjpDq6T0SE8 IW40bmjO3hp+Odpn8NfJ2cHXzoecIxb+/2OSapvYffWEQjHdBqRKsnrK0lHvk9x3 OndnFgK3SfoB3W0IvFE9JZq41T+GawHGLtOOTpTxTk0vajFBnoODEhC+EOkuPO1G XirJ8OuNSlh6OHTeOg4/WbJ/Rtiy93yjPwi8ppKQnXGiRnPt3meCO7aiene5JnVS 0ppYzNdzLNmqAyww48JgU/JWwCC4jV6okK3apdnein/I5wTtTBiFkwH1rRPVIC5b kDDz9vxIZEVzkQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:23 2025 by rpki-client