This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft File: hUyBdtnELHBLMQkTMJRwNRu1meU.mft (raw, json) Hash identifier: S4uWq9zUUVjKN+GPHXMYzwcy1nagj+5DJUApL52n/XA= Subject key identifier: A0:0E:3D:03:B0:49:43:1B:E1:58:DF:D3:39:66:B7:44:6D:CE:CA:B3 Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5 Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5 Certificate serial: 019AF23F6EC2D081EA26A5B253572513FD94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft Manifest number: 128A Signing time: Sat 06 Dec 2025 06:00:34 +0000 Manifest this update: Sat 06 Dec 2025 06:00:34 +0000 Manifest next update: Sun 07 Dec 2025 06:00:34 +0000 Files and hashes: 1: d12qVgxDPPHiE2ljm9qZxxkNLxQ.roa (hash: zX9r1B9nDeSmX0ma2mBmx6eNhz70tybIXv2tasEp9Z0=) 2: hUyBdtnELHBLMQkTMJRwNRu1meU.crl (hash: 6Bzm9PXrTICSWoKaKI7LcieWc47DcmHYMo2CccwJdJE=) 3: j-Ef-_ZUrA-AY6ZXYzU0wKA0MAE.roa (hash: xMubkcRgzBEAU63sGA3yqVsJQIJj2JYDdMpLJL8yY80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:6e:c2:d0:81:ea:26:a5:b2:53:57:25:13:fd:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854c8176d9c42c704b310913309470351bb599e5 Validity Not Before: Dec 6 06:00:34 2025 GMT Not After : Dec 7 06:00:34 2025 GMT Subject: CN=a00e3d03b049431be158dfd33966b7446dcecab3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:db:34:fa:ec:ec:dd:dc:d6:f5:ea:78:69:35: 5f:dc:b4:0b:44:bd:d9:7e:03:95:f4:92:8c:cf:05: d4:6b:13:82:1e:ac:86:ba:db:23:99:fd:17:42:0a: 67:9c:c5:a7:11:e7:b0:be:b7:9b:cc:25:b7:9b:a2: 9f:e4:1a:46:76:bb:7b:3b:d5:f9:b3:23:27:4a:c6: de:4e:2b:6b:79:00:ad:ce:af:91:47:49:1a:e1:1e: 84:48:77:fc:74:64:3d:a2:61:06:c8:a1:65:56:9a: 95:2d:ae:e5:8d:54:b3:f4:a2:32:66:9c:a3:59:a9: ac:3a:9a:22:b0:29:82:62:d7:e4:26:a3:60:a4:c9: 91:85:f2:be:88:01:8f:25:00:96:18:cc:19:71:f5: 09:38:d3:dd:fc:f4:91:44:5e:74:77:79:74:35:a2: f4:04:02:eb:b0:3c:bc:40:16:df:34:42:db:97:64: cc:2e:6e:10:87:75:51:c3:25:d3:9e:c4:61:bd:71: 4a:4b:01:39:1e:7f:d5:61:e8:84:be:e6:97:62:7e: b4:e2:ee:6c:49:47:f7:e1:f5:28:71:df:31:bc:82: 28:6a:71:f5:75:49:92:08:7c:46:e5:62:02:5a:d4: 89:bc:58:65:95:23:a4:b4:f6:11:f5:42:af:73:50: 95:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0E:3D:03:B0:49:43:1B:E1:58:DF:D3:39:66:B7:44:6D:CE:CA:B3 X509v3 Authority Key Identifier: keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ec:dd:69:3e:41:2d:65:ad:1e:fc:ad:98:40:b3:13:33:56: 01:30:b4:70:36:5f:24:92:cd:48:16:a2:ce:20:1d:18:dd:a1: e9:e5:75:25:76:21:c9:b7:0e:f0:ba:82:bf:7b:79:0a:a2:69: 53:b4:ad:bf:69:83:b6:7c:ae:9d:67:55:1c:22:26:5d:e4:8d: ca:ba:d4:26:f6:8d:bf:37:5e:8e:2f:16:4f:e3:10:ef:37:3d: db:ae:0b:5c:8b:aa:97:5b:f6:f4:34:3c:ae:e4:ce:31:56:56: 16:a9:12:a8:c1:ce:4c:d2:0e:b0:b8:c1:7f:0b:aa:12:5e:dc: 6c:39:7c:26:4c:3a:38:14:b7:50:6e:a2:d7:c6:5d:31:6f:67: 1b:90:21:c3:f9:c3:9b:c9:2e:13:f0:86:3c:d2:06:55:40:0b: fe:34:ba:0c:65:e3:69:f4:2d:c7:f0:ef:56:67:9c:75:4c:59: 5b:e6:26:ec:06:bf:70:cf:f8:94:67:44:ce:24:bc:a3:0d:97: 84:29:bb:9a:8a:b8:a8:31:5d:3e:80:1c:b8:d9:e1:3c:4c:3e: 5a:2e:b6:3d:9e:ed:61:9c:31:bd:07:7d:38:bc:ec:ce:06:00: 73:a6:d8:da:49:fd:1e:96:fa:03:d7:b2:09:84:db:a2:f2:0d: ae:a8:e9:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP27C0IHqJqWyU1clE/2UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGM4MTc2ZDljNDJjNzA0YjMxMDkxMzMwOTQ3MDM1MWJi NTk5ZTUwHhcNMjUxMjA2MDYwMDM0WhcNMjUxMjA3MDYwMDM0WjAzMTEwLwYDVQQD EyhhMDBlM2QwM2IwNDk0MzFiZTE1OGRmZDMzOTY2Yjc0NDZkY2VjYWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ts0+uzs3dzW9ep4aTVf3LQLRL3Z fgOV9JKMzwXUaxOCHqyGutsjmf0XQgpnnMWnEeewvrebzCW3m6Kf5BpGdrt7O9X5 syMnSsbeTitreQCtzq+RR0ka4R6ESHf8dGQ9omEGyKFlVpqVLa7ljVSz9KIyZpyj WamsOpoisCmCYtfkJqNgpMmRhfK+iAGPJQCWGMwZcfUJONPd/PSRRF50d3l0NaL0 BALrsDy8QBbfNELbl2TMLm4Qh3VRwyXTnsRhvXFKSwE5Hn/VYeiEvuaXYn604u5s SUf34fUocd8xvIIoanH1dUmSCHxG5WICWtSJvFhllSOktPYR9UKvc1CVdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAOPQOwSUMb4Vjf0zlmt0RtzsqzMB8GA1UdIwQY MBaAFIVMgXbZxCxwSzEJEzCUcDUbtZnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jZmY2MzAtNmM4YS00M2JkLWFmYjkt YjA3ZjAxNmExNzYyLzEvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jZmY2MzAtNmM4YS00M2JkLWFmYjktYjA3ZjAxNmExNzYy LzEvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFuzdaT5B LWWtHvytmECzEzNWATC0cDZfJJLNSBaiziAdGN2h6eV1JXYhybcO8LqCv3t5CqJp U7Stv2mDtnyunWdVHCImXeSNyrrUJvaNvzdeji8WT+MQ7zc9264LXIuql1v29DQ8 ruTOMVZWFqkSqMHOTNIOsLjBfwuqEl7cbDl8Jkw6OBS3UG6i18ZdMW9nG5Ahw/nD m8kuE/CGPNIGVUAL/jS6DGXjafQtx/DvVmecdUxZW+Ym7Aa/cM/4lGdEziS8ow2X hCm7moq4qDFdPoAcuNnhPEw+Wi62PZ7tYZwxvQd9OLzszgYAc6bY2kn9Hpb6A9ey CYTbovINrqjp0w== -----END CERTIFICATE-----Generated at Sat Dec 6 13:49:27 2025 by rpki-client