This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft File: hUyBdtnELHBLMQkTMJRwNRu1meU.mft (raw, json) Hash identifier: wCYhzEo4QyLozCe6CPX30hd+YAwHOyDtsb6LD2oDg34= Subject key identifier: B7:35:57:B8:03:C1:1A:EE:3E:45:10:BD:9C:C4:6D:48:49:4B:10:6C Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5 Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5 Certificate serial: 019B3BA287963F35C55C2C5B808E9B750C99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft Manifest number: 12B0 Signing time: Sat 20 Dec 2025 12:01:05 +0000 Manifest this update: Sat 20 Dec 2025 12:01:05 +0000 Manifest next update: Sun 21 Dec 2025 12:01:05 +0000 Files and hashes: 1: d12qVgxDPPHiE2ljm9qZxxkNLxQ.roa (hash: zX9r1B9nDeSmX0ma2mBmx6eNhz70tybIXv2tasEp9Z0=) 2: hUyBdtnELHBLMQkTMJRwNRu1meU.crl (hash: Da0mryXWRbw74z++qRo0dtpPnHWwSyOubzfgfWWAA1s=) 3: j-Ef-_ZUrA-AY6ZXYzU0wKA0MAE.roa (hash: xMubkcRgzBEAU63sGA3yqVsJQIJj2JYDdMpLJL8yY80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 12:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:87:96:3f:35:c5:5c:2c:5b:80:8e:9b:75:0c:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854c8176d9c42c704b310913309470351bb599e5 Validity Not Before: Dec 20 12:01:05 2025 GMT Not After : Dec 21 12:01:05 2025 GMT Subject: CN=b73557b803c11aee3e4510bd9cc46d48494b106c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:53:b2:3b:10:db:63:1f:ec:3f:9a:e3:4c:80: e5:2b:d3:ab:6d:87:f0:73:cb:10:37:cc:3d:22:c4: 91:40:79:dc:a1:16:02:8c:1e:75:77:a3:b4:75:2a: 93:3f:c1:66:b7:31:37:08:3a:13:65:7a:34:1d:67: 6e:de:a6:67:c2:30:c1:42:df:fd:28:9d:9f:3b:10: 93:16:97:67:d9:02:5a:2d:71:37:84:77:66:99:b8: 0f:6e:53:15:16:66:9b:3b:53:4e:53:4d:e9:14:e3: 65:f6:5a:3d:21:6d:bd:63:41:89:72:f8:38:54:1d: 51:98:cc:43:6c:5d:2c:83:3d:6f:65:a5:24:1a:32: c8:92:1a:8a:02:77:a4:b2:05:9a:64:b6:ed:b0:f3: 54:4f:37:9c:54:b0:06:bd:c7:5e:99:ec:68:06:a4: ad:c9:fc:ba:4c:2e:a8:6d:81:83:34:c5:24:06:9f: 06:f6:77:84:5b:0d:42:f1:8e:b0:99:13:f4:c6:c9: a9:fe:a1:2d:5e:f5:62:e8:b7:7a:74:da:98:81:20: 64:89:b4:e3:1a:ca:c4:19:8a:0a:7e:96:8a:17:4e: 11:ad:75:a8:0d:8d:72:37:08:7b:43:7c:16:b4:23: 58:54:23:ad:0e:4c:91:42:11:5e:f5:b7:d1:aa:88: 64:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:35:57:B8:03:C1:1A:EE:3E:45:10:BD:9C:C4:6D:48:49:4B:10:6C X509v3 Authority Key Identifier: keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:4b:2e:0a:97:ce:ec:3c:d7:75:7e:a6:3d:98:51:a1:d6:5f: 36:3f:fd:05:14:4c:0f:4d:ec:11:6c:32:de:7c:97:8d:bd:5a: c9:8d:1c:67:ea:ba:a1:29:73:a8:01:b1:c3:4d:16:ac:ed:1e: 87:82:e0:a8:ea:b4:4e:a8:6d:90:32:4f:70:cd:d2:5e:d7:dd: 57:b9:ae:59:83:b1:93:f7:2c:5c:f8:22:ae:ce:43:27:92:fb: 45:50:7f:9b:d5:a6:11:1e:e7:ac:f7:45:54:66:ca:4d:d8:4d: 89:36:95:6b:2c:28:81:1f:e8:0f:c7:ea:97:81:5e:b0:4b:38: 6b:7c:94:3b:dd:9c:8d:53:55:cf:99:73:51:7e:57:90:0f:a1: b1:3e:48:ad:f0:ee:8f:ad:b4:d2:f6:70:fe:65:c6:14:5b:52: 91:97:19:fb:c8:24:6a:00:4b:10:c3:de:3e:85:cc:c6:1d:49: 9d:c5:15:bd:d5:dd:0a:41:7a:d5:7d:52:92:9e:80:6b:cd:aa: 81:2e:a8:89:96:b3:8c:be:70:1a:2a:c8:e7:74:26:81:ef:ac: c2:94:4e:ad:e0:d3:81:34:e4:37:d6:a8:cf:22:b7:2c:d7:de: 5d:0c:08:11:7c:30:da:92:1b:f1:38:af:11:78:81:79:37:70: a9:c2:ec:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7ooeWPzXFXCxbgI6bdQyZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGM4MTc2ZDljNDJjNzA0YjMxMDkxMzMwOTQ3MDM1MWJi NTk5ZTUwHhcNMjUxMjIwMTIwMTA1WhcNMjUxMjIxMTIwMTA1WjAzMTEwLwYDVQQD EyhiNzM1NTdiODAzYzExYWVlM2U0NTEwYmQ5Y2M0NmQ0ODQ5NGIxMDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVOyOxDbYx/sP5rjTIDlK9OrbYfw c8sQN8w9IsSRQHncoRYCjB51d6O0dSqTP8FmtzE3CDoTZXo0HWdu3qZnwjDBQt/9 KJ2fOxCTFpdn2QJaLXE3hHdmmbgPblMVFmabO1NOU03pFONl9lo9IW29Y0GJcvg4 VB1RmMxDbF0sgz1vZaUkGjLIkhqKAneksgWaZLbtsPNUTzecVLAGvcdemexoBqSt yfy6TC6obYGDNMUkBp8G9neEWw1C8Y6wmRP0xsmp/qEtXvVi6Ld6dNqYgSBkibTj GsrEGYoKfpaKF04RrXWoDY1yNwh7Q3wWtCNYVCOtDkyRQhFe9bfRqohkaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLc1V7gDwRruPkUQvZzEbUhJSxBsMB8GA1UdIwQY MBaAFIVMgXbZxCxwSzEJEzCUcDUbtZnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jZmY2MzAtNmM4YS00M2JkLWFmYjkt YjA3ZjAxNmExNzYyLzEvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9jZmY2MzAtNmM4YS00M2JkLWFmYjktYjA3ZjAxNmExNzYy LzEvaFV5QmR0bkVMSEJMTVFrVE1KUndOUnUxbWVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGksuCpfO 7DzXdX6mPZhRodZfNj/9BRRMD03sEWwy3nyXjb1ayY0cZ+q6oSlzqAGxw00WrO0e h4LgqOq0TqhtkDJPcM3SXtfdV7muWYOxk/csXPgirs5DJ5L7RVB/m9WmER7nrPdF VGbKTdhNiTaVaywogR/oD8fql4FesEs4a3yUO92cjVNVz5lzUX5XkA+hsT5IrfDu j6200vZw/mXGFFtSkZcZ+8gkagBLEMPePoXMxh1JncUVvdXdCkF61X1Skp6Aa82q gS6oiZazjL5wGirI53Qmge+swpROreDTgTTkN9aozyK3LNfeXQwIEXww2pIb8Tiv EXiBeTdwqcLsmg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:29:50 2025 by rpki-client