This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9da7c4-d96d-401f-a7fe-21cfc83aeec6/1/HY-s3UFcS7p4J3uj57D-I9Klobg.mft File: HY-s3UFcS7p4J3uj57D-I9Klobg.mft (raw, json) Hash identifier: Lvg0SIp/BImPZPWPM7rt3rpng6vnoiS2VfkqA4cL5B4= Subject key identifier: B9:8D:18:4E:68:17:F7:5B:0C:A7:C8:0A:D6:C7:5C:2F:32:59:EC:25 Authority key identifier: 1D:8F:AC:DD:41:5C:4B:BA:78:27:7B:A3:E7:B0:FE:23:D2:A5:A1:B8 Certificate issuer: /CN=1d8facdd415c4bba78277ba3e7b0fe23d2a5a1b8 Certificate serial: 019AF2095934480D1F71C993FC0282F385FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY-s3UFcS7p4J3uj57D-I9Klobg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/9da7c4-d96d-401f-a7fe-21cfc83aeec6/1/HY-s3UFcS7p4J3uj57D-I9Klobg.mft Manifest number: 0300 Signing time: Sat 06 Dec 2025 05:01:30 +0000 Manifest this update: Sat 06 Dec 2025 05:01:30 +0000 Manifest next update: Sun 07 Dec 2025 05:01:30 +0000 Files and hashes: 1: HY-s3UFcS7p4J3uj57D-I9Klobg.crl (hash: kBcwWPcXSC61sTrkzEjows5jZltqTZDUWZAHMKpke6s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/9da7c4-d96d-401f-a7fe-21cfc83aeec6/1/HY-s3UFcS7p4J3uj57D-I9Klobg.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/9da7c4-d96d-401f-a7fe-21cfc83aeec6/1/HY-s3UFcS7p4J3uj57D-I9Klobg.mft rsync://rpki.ripe.net/repository/DEFAULT/HY-s3UFcS7p4J3uj57D-I9Klobg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:59:34:48:0d:1f:71:c9:93:fc:02:82:f3:85:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d8facdd415c4bba78277ba3e7b0fe23d2a5a1b8 Validity Not Before: Dec 6 05:01:30 2025 GMT Not After : Dec 7 05:01:30 2025 GMT Subject: CN=b98d184e6817f75b0ca7c80ad6c75c2f3259ec25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6c:c7:ba:a3:67:58:7c:f1:91:82:56:73:22: b7:dc:95:64:26:ef:93:d7:2a:58:44:ea:b7:e1:9f: b8:a5:bf:b5:b6:f6:7e:1b:90:2a:12:5e:c2:e6:3c: 47:67:04:9d:04:32:9b:82:ba:ac:46:39:1f:55:66: 27:34:a8:33:03:fe:06:c5:1e:23:92:08:c6:c2:cf: 16:ae:2c:1b:06:6b:5f:7e:10:c0:7e:bc:9d:96:96: bd:5e:ca:9e:a2:86:96:a5:57:b4:e3:cd:66:88:d8: 09:31:13:c8:44:70:c0:67:4f:38:6f:2b:ad:4b:bb: 60:12:f4:ad:75:2c:bd:8d:48:62:6f:e7:f9:8b:c1: 21:49:50:fc:76:71:e3:ee:a6:26:a8:29:a1:45:9a: ba:ee:09:80:b0:36:b7:a1:19:c9:14:cc:2e:56:97: fb:3b:ff:38:3d:25:f0:64:0d:a1:62:59:4c:c1:f6: 58:3f:b7:da:72:c1:b6:e0:e1:75:d9:97:3b:d6:9b: 5b:20:76:41:57:41:b3:1c:74:24:ab:c3:2d:01:10: 2b:c8:28:3a:d1:07:d5:cd:14:30:53:11:95:a1:09: ea:1a:28:21:bc:f6:5d:2c:7f:25:58:28:af:15:e8: f7:8d:e9:bb:84:fd:e7:e2:3e:e0:bc:87:e1:ed:6a: 71:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:8D:18:4E:68:17:F7:5B:0C:A7:C8:0A:D6:C7:5C:2F:32:59:EC:25 X509v3 Authority Key Identifier: keyid:1D:8F:AC:DD:41:5C:4B:BA:78:27:7B:A3:E7:B0:FE:23:D2:A5:A1:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY-s3UFcS7p4J3uj57D-I9Klobg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9da7c4-d96d-401f-a7fe-21cfc83aeec6/1/HY-s3UFcS7p4J3uj57D-I9Klobg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9da7c4-d96d-401f-a7fe-21cfc83aeec6/1/HY-s3UFcS7p4J3uj57D-I9Klobg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:5f:09:90:a3:d1:26:01:80:04:36:e5:1a:f7:bc:20:92:e6: 9e:4d:f6:88:4a:7e:a0:9c:d5:80:03:05:63:7c:af:3e:dc:dc: 69:80:44:a6:f6:8d:a2:a6:3f:84:e4:92:cd:aa:f3:30:3a:9b: 16:a7:00:9a:44:5c:ca:19:cc:8c:e6:18:12:1f:41:c7:3a:0d: 15:ce:2c:18:6b:28:b8:44:a0:3b:22:28:9f:76:b5:c7:32:82: 70:a9:e7:b6:32:29:5c:1e:c4:c5:85:5e:0b:24:58:25:d1:6a: aa:74:fa:e7:6d:c7:b8:b4:9c:b1:76:34:7b:a4:cd:d8:e4:b3: d8:cb:0b:e7:e1:35:77:86:29:01:3a:05:98:5d:09:29:50:46: 0d:70:5e:c7:c5:54:fb:b0:75:bd:6c:ee:3d:84:a8:64:81:6b: a7:c7:5f:6c:5f:37:76:aa:16:28:7c:ed:4a:e1:22:a1:ba:f6: 47:3c:01:f3:a8:07:d1:b8:47:6d:b7:64:13:a6:92:e1:e4:5a: 5e:e4:72:26:e7:a2:ed:5e:c0:b3:0f:a3:1c:fd:15:e8:da:49: 81:97:c3:a1:fd:d7:9a:1f:c6:65:36:2e:65:3d:c8:0b:99:18: d1:0f:26:11:58:0e:85:aa:8c:a7:d6:cf:9c:0a:a9:c5:d5:95: be:54:08:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVk0SA0fccmT/AKC84X/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkOGZhY2RkNDE1YzRiYmE3ODI3N2JhM2U3YjBmZTIzZDJh NWExYjgwHhcNMjUxMjA2MDUwMTMwWhcNMjUxMjA3MDUwMTMwWjAzMTEwLwYDVQQD EyhiOThkMTg0ZTY4MTdmNzViMGNhN2M4MGFkNmM3NWMyZjMyNTllYzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWzHuqNnWHzxkYJWcyK33JVkJu+T 1ypYROq34Z+4pb+1tvZ+G5AqEl7C5jxHZwSdBDKbgrqsRjkfVWYnNKgzA/4GxR4j kgjGws8WriwbBmtffhDAfrydlpa9XsqeooaWpVe0481miNgJMRPIRHDAZ084byut S7tgEvStdSy9jUhib+f5i8EhSVD8dnHj7qYmqCmhRZq67gmAsDa3oRnJFMwuVpf7 O/84PSXwZA2hYllMwfZYP7facsG24OF12Zc71ptbIHZBV0GzHHQkq8MtARAryCg6 0QfVzRQwUxGVoQnqGighvPZdLH8lWCivFej3jem7hP3n4j7gvIfh7WpxOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmNGE5oF/dbDKfICtbHXC8yWewlMB8GA1UdIwQY MBaAFB2PrN1BXEu6eCd7o+ew/iPSpaG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFktczNVRmNTN3A0SjN1ajU3RC1JOUtsb2JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85ZGE3YzQtZDk2ZC00MDFmLWE3ZmUt MjFjZmM4M2FlZWM2LzEvSFktczNVRmNTN3A0SjN1ajU3RC1JOUtsb2JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85ZGE3YzQtZDk2ZC00MDFmLWE3ZmUtMjFjZmM4M2FlZWM2 LzEvSFktczNVRmNTN3A0SjN1ajU3RC1JOUtsb2JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXl8JkKPR JgGABDblGve8IJLmnk32iEp+oJzVgAMFY3yvPtzcaYBEpvaNoqY/hOSSzarzMDqb FqcAmkRcyhnMjOYYEh9BxzoNFc4sGGsouESgOyIon3a1xzKCcKnntjIpXB7ExYVe CyRYJdFqqnT6523HuLScsXY0e6TN2OSz2MsL5+E1d4YpAToFmF0JKVBGDXBex8VU +7B1vWzuPYSoZIFrp8dfbF83dqoWKHztSuEiobr2RzwB86gH0bhHbbdkE6aS4eRa XuRyJuei7V7Asw+jHP0V6NpJgZfDof3Xmh/GZTYuZT3IC5kY0Q8mEVgOhaqMp9bP nAqpxdWVvlQIcg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:58:07 2025 by rpki-client