This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft File: y__HcfLtWPwoIe50zahT_S42xCg.mft (raw, json) Hash identifier: buhCmev37SR5qx3uspimR+TXyzK1gIA9rxffpn9Cg9s= Subject key identifier: D9:03:8B:C6:14:AE:22:11:CC:E4:F8:FE:8B:E0:9E:FE:98:EF:CE:67 Authority key identifier: CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28 Certificate issuer: /CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428 Certificate serial: 019AF2AD73EF5A50F45BEE4F25135ECBF78F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft Manifest number: 0C54 Signing time: Sat 06 Dec 2025 08:00:44 +0000 Manifest this update: Sat 06 Dec 2025 08:00:44 +0000 Manifest next update: Sun 07 Dec 2025 08:00:44 +0000 Files and hashes: 1: 8adR64UTKfQJyv8Hn8Uu3Mto6Ss.roa (hash: QwMK3mT98zuHytYWjDXlVT7MVpssQnTqv+nHseA43Vg=) 2: y__HcfLtWPwoIe50zahT_S42xCg.crl (hash: qA+0DX1O8aiH8cZLOcZ4lNvKwHdfVBTbNwZLnTR7ddc=) 3: ywmRdz3QQ075sogl-Hv1NFuoucM.roa (hash: 9XVqYZqYueT5VxXq2AcYWrkj+zD3Y8x/GGADjcUQjJk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:73:ef:5a:50:f4:5b:ee:4f:25:13:5e:cb:f7:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbffc771f2ed58fc2821ee74cda853fd2e36c428 Validity Not Before: Dec 6 08:00:44 2025 GMT Not After : Dec 7 08:00:44 2025 GMT Subject: CN=d9038bc614ae2211cce4f8fe8be09efe98efce67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:51:b0:e9:bd:20:ea:c0:b5:1a:ce:fb:a6:e8: 2b:3a:ce:1f:4f:ef:c9:68:60:af:28:14:c5:e5:e2: b5:db:d1:63:d8:4a:04:d8:31:9a:7e:4e:b3:20:0a: 28:f2:71:8d:f2:43:5d:62:60:0f:a3:ec:ca:89:6a: 09:ce:40:a5:f7:8c:e3:7d:e3:3c:60:e1:51:0b:a9: 3a:95:1b:3c:d3:01:9f:33:53:86:31:9f:8c:ec:bc: 0b:31:a5:34:76:92:11:c6:ad:76:cc:e5:8c:a3:1d: 5e:86:31:f2:92:e9:35:9c:2d:72:dd:38:f9:7f:f8: 59:db:9a:69:c4:19:eb:16:fb:47:aa:91:72:c7:0f: b8:63:31:86:cf:8a:5f:d0:b9:a8:47:96:ce:7f:3d: 6d:e9:38:06:9a:3b:69:4e:58:3c:dd:dc:51:5a:8b: 7c:53:a9:2b:6c:21:56:9b:cd:fa:9a:52:33:bc:27: 29:20:c4:1d:67:6f:35:61:d1:33:a9:8e:b5:83:f2: 50:a0:80:3f:4b:31:f1:c1:91:47:07:51:aa:00:c8: 50:bc:21:d4:e8:79:17:11:fe:92:b7:a2:7c:66:e5: 77:63:6b:70:1b:d5:0b:75:f7:1f:c3:a3:bc:8b:6b: 20:20:75:df:2f:27:9c:c0:66:05:84:c6:f1:f8:db: 67:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:03:8B:C6:14:AE:22:11:CC:E4:F8:FE:8B:E0:9E:FE:98:EF:CE:67 X509v3 Authority Key Identifier: keyid:CB:FF:C7:71:F2:ED:58:FC:28:21:EE:74:CD:A8:53:FD:2E:36:C4:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y__HcfLtWPwoIe50zahT_S42xCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/e52e14-7aad-43e4-88c4-7a4054551fd4/1/y__HcfLtWPwoIe50zahT_S42xCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:7a:15:a9:2a:33:d5:fe:e9:aa:b4:96:0f:2f:f3:44:59:e3: 52:f6:db:c9:da:46:f7:7c:24:9d:0e:a8:fb:b8:09:b5:dd:51: 0e:71:6e:f7:b2:4e:3a:64:eb:d1:fd:c8:4a:10:5f:36:5f:28: ad:45:55:d1:a8:9a:c5:33:70:2b:bd:e7:ea:61:c6:02:81:b0: 4e:4a:4e:ad:4e:60:d5:69:48:2c:f2:1c:bd:04:bb:49:da:3f: 59:ed:ce:eb:5f:e2:55:d0:71:30:ef:06:fe:20:7c:25:33:85: 82:d2:40:30:b8:6f:4d:53:8c:4e:aa:43:98:85:4a:34:3f:19: bc:cc:82:9a:57:f1:e3:b1:7a:c2:79:43:52:74:54:76:50:af: 89:54:87:67:dd:62:f7:28:76:a9:b4:2a:c7:a3:6c:5c:b5:1d: 07:18:ed:54:9f:c8:a5:40:a1:0a:ff:89:85:c7:0e:ae:25:9f: bc:66:01:e1:5b:4b:26:f7:59:ce:e4:ae:12:30:60:04:99:9a: 54:68:ed:b3:57:a4:7b:15:70:a1:a5:b8:3c:3f:1a:74:d2:a8: e4:76:52:76:a5:28:6f:22:89:ac:c1:28:d3:75:52:6a:e0:e7: 80:20:5f:79:9a:25:22:89:ab:0c:7e:9e:0c:77:f1:09:c4:0b: 47:b0:a0:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrXPvWlD0W+5PJRNey/ePMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZmZjNzcxZjJlZDU4ZmMyODIxZWU3NGNkYTg1M2ZkMmUz NmM0MjgwHhcNMjUxMjA2MDgwMDQ0WhcNMjUxMjA3MDgwMDQ0WjAzMTEwLwYDVQQD EyhkOTAzOGJjNjE0YWUyMjExY2NlNGY4ZmU4YmUwOWVmZTk4ZWZjZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FGw6b0g6sC1Gs77pugrOs4fT+/J aGCvKBTF5eK129Fj2EoE2DGafk6zIAoo8nGN8kNdYmAPo+zKiWoJzkCl94zjfeM8 YOFRC6k6lRs80wGfM1OGMZ+M7LwLMaU0dpIRxq12zOWMox1ehjHykuk1nC1y3Tj5 f/hZ25ppxBnrFvtHqpFyxw+4YzGGz4pf0LmoR5bOfz1t6TgGmjtpTlg83dxRWot8 U6krbCFWm836mlIzvCcpIMQdZ281YdEzqY61g/JQoIA/SzHxwZFHB1GqAMhQvCHU 6HkXEf6St6J8ZuV3Y2twG9ULdfcfw6O8i2sgIHXfLyecwGYFhMbx+NtnaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNkDi8YUriIRzOT4/ovgnv6Y785nMB8GA1UdIwQY MBaAFMv/x3Hy7Vj8KCHudM2oU/0uNsQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9lNTJlMTQtN2FhZC00M2U0LTg4YzQt N2E0MDU0NTUxZmQ0LzEveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9lNTJlMTQtN2FhZC00M2U0LTg4YzQtN2E0MDU0NTUxZmQ0 LzEveV9fSGNmTHRXUHdvSWU1MHphaFRfUzQyeENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHoVqSoz 1f7pqrSWDy/zRFnjUvbbydpG93wknQ6o+7gJtd1RDnFu97JOOmTr0f3IShBfNl8o rUVV0aiaxTNwK73n6mHGAoGwTkpOrU5g1WlILPIcvQS7Sdo/We3O61/iVdBxMO8G /iB8JTOFgtJAMLhvTVOMTqpDmIVKND8ZvMyCmlfx47F6wnlDUnRUdlCviVSHZ91i 9yh2qbQqx6NsXLUdBxjtVJ/IpUChCv+JhccOriWfvGYB4VtLJvdZzuSuEjBgBJma VGjts1ekexVwoaW4PD8adNKo5HZSdqUobyKJrMEo03VSauDngCBfeZolIomrDH6e DHfxCcQLR7CgkA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:29 2025 by rpki-client