This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft File: HybOksLNg7Xsz0lzPzp753rdSaA.mft (raw, json) Hash identifier: x9P+tCYgVPt1uik6f8zg11ug1uuxV8eyIKFCZucp8/4= Subject key identifier: 5A:66:2A:92:40:0D:4F:B6:DB:F8:BB:70:AA:A9:3A:23:7A:BC:C8:34 Authority key identifier: 1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0 Certificate issuer: /CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0 Certificate serial: 019AF5785D9221987F847FDFB343EFFC0DB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft Manifest number: 05C2 Signing time: Sat 06 Dec 2025 21:01:37 +0000 Manifest this update: Sat 06 Dec 2025 21:01:37 +0000 Manifest next update: Sun 07 Dec 2025 21:01:37 +0000 Files and hashes: 1: HybOksLNg7Xsz0lzPzp753rdSaA.crl (hash: roqVz7FTA3cop5btxPSwtAbQAz3fjtlw91YYVfw1rNU=) 2: s0bJG6Qp94T0ozPjLlAbRCJfTFs.roa (hash: qwFiBqb0rHrSmTwD9b+7ecXoNWtZfg8qRArEug26wV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:5d:92:21:98:7f:84:7f:df:b3:43:ef:fc:0d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f26ce92c2cd83b5eccf49733f3a7be77add49a0 Validity Not Before: Dec 6 21:01:37 2025 GMT Not After : Dec 7 21:01:37 2025 GMT Subject: CN=5a662a92400d4fb6dbf8bb70aaa93a237abcc834 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5e:b5:37:b2:83:01:80:18:03:8b:04:0e:7b: 11:37:98:7d:ff:11:ab:7e:f9:5e:22:4a:b4:79:35: 00:f1:3e:14:7d:a1:b2:85:8b:b4:16:09:06:48:3a: 0d:19:8e:9a:f1:de:28:57:eb:fe:ea:b0:71:d4:b2: b5:b1:e4:78:a6:ea:3e:b1:41:6a:53:28:0d:41:b2: 35:32:49:cb:60:6c:94:98:d7:2a:34:dd:6d:04:b4: 83:45:27:ee:74:62:83:6f:c1:d7:e7:a4:70:d6:16: 05:cc:c5:84:15:73:f7:35:58:fd:10:0e:37:2b:c8: 2b:34:29:26:4a:b7:42:d3:24:e3:2b:a9:b2:bf:e5: d3:e8:96:65:d8:a8:3a:63:e2:38:03:f9:7d:44:e9: e8:8b:ab:c5:1d:22:03:0b:28:4d:21:5f:b9:08:df: 70:01:a6:2d:62:6b:b3:cf:49:19:06:44:cc:f1:b5: be:4d:3e:74:e1:19:8b:7a:05:28:34:97:0a:28:39: 7d:01:60:56:18:59:f7:3c:d1:7d:b9:c3:6b:c6:94: 8f:88:49:c3:2f:cb:4e:68:77:db:0c:e7:50:42:f0: 6a:9e:51:ac:68:ec:9e:d0:1d:40:c2:16:7d:c0:95: 75:e6:42:27:2c:2b:51:9f:c8:b7:eb:72:6a:30:f8: ff:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:66:2A:92:40:0D:4F:B6:DB:F8:BB:70:AA:A9:3A:23:7A:BC:C8:34 X509v3 Authority Key Identifier: keyid:1F:26:CE:92:C2:CD:83:B5:EC:CF:49:73:3F:3A:7B:E7:7A:DD:49:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HybOksLNg7Xsz0lzPzp753rdSaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/1d0f41-519a-4c42-aa6f-c71d2b92c397/1/HybOksLNg7Xsz0lzPzp753rdSaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ac:0d:5f:7e:f6:ed:ed:0f:2e:3c:64:b3:9a:3f:71:21:3b: 1b:79:e9:19:33:55:f3:7e:25:83:1b:6b:f9:46:48:77:c8:ed: 8a:d0:d4:85:dd:3d:61:17:2f:4f:be:b1:f0:af:ce:a0:09:64: 48:c2:63:7c:cb:68:8a:cf:b3:45:85:fd:85:bb:73:16:c9:ce: fe:3d:e1:0f:b8:05:15:5f:2d:b2:32:8d:16:83:ed:80:86:40: 3b:2f:80:9d:f9:60:a6:3f:c7:2b:2a:91:d8:79:89:2e:f7:d6: 78:69:20:96:02:87:02:98:79:81:30:3e:17:db:db:e4:43:13: 7e:97:b2:e0:28:29:dd:df:7a:ef:51:0e:32:6e:3e:e5:93:de: b7:0b:a6:54:c5:e8:90:18:51:cc:e9:1e:4b:9e:aa:a1:16:d1: 32:99:e4:22:30:13:aa:a7:99:b8:41:c3:5c:fa:cd:98:77:b7: dd:87:8e:91:76:a6:bd:bf:f9:4f:95:d8:a0:d6:56:ae:1c:e0: 4d:86:d6:95:49:17:de:2c:4e:91:ff:51:2a:d3:9c:59:8a:68: 8c:1c:f1:5a:53:ce:c2:f9:0a:9e:d4:ce:82:b8:28:af:2e:31: 69:f5:3c:2f:27:1a:66:db:94:fa:f3:dc:65:34:e1:fd:3e:5a: 72:c5:e7:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eF2SIZh/hH/fs0Pv/A20MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMjZjZTkyYzJjZDgzYjVlY2NmNDk3MzNmM2E3YmU3N2Fk ZDQ5YTAwHhcNMjUxMjA2MjEwMTM3WhcNMjUxMjA3MjEwMTM3WjAzMTEwLwYDVQQD Eyg1YTY2MmE5MjQwMGQ0ZmI2ZGJmOGJiNzBhYWE5M2EyMzdhYmNjODM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV61N7KDAYAYA4sEDnsRN5h9/xGr fvleIkq0eTUA8T4UfaGyhYu0FgkGSDoNGY6a8d4oV+v+6rBx1LK1seR4puo+sUFq UygNQbI1MknLYGyUmNcqNN1tBLSDRSfudGKDb8HX56Rw1hYFzMWEFXP3NVj9EA43 K8grNCkmSrdC0yTjK6myv+XT6JZl2Kg6Y+I4A/l9ROnoi6vFHSIDCyhNIV+5CN9w AaYtYmuzz0kZBkTM8bW+TT504RmLegUoNJcKKDl9AWBWGFn3PNF9ucNrxpSPiEnD L8tOaHfbDOdQQvBqnlGsaOye0B1AwhZ9wJV15kInLCtRn8i363JqMPj/2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpmKpJADU+22/i7cKqpOiN6vMg0MB8GA1UdIwQY MBaAFB8mzpLCzYO17M9Jcz86e+d63UmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8xZDBmNDEtNTE5YS00YzQyLWFhNmYt YzcxZDJiOTJjMzk3LzEvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8xZDBmNDEtNTE5YS00YzQyLWFhNmYtYzcxZDJiOTJjMzk3 LzEvSHliT2tzTE5nN1hzejBselB6cDc1M3JkU2FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANqwNX372 7e0PLjxks5o/cSE7G3npGTNV834lgxtr+UZId8jtitDUhd09YRcvT76x8K/OoAlk SMJjfMtois+zRYX9hbtzFsnO/j3hD7gFFV8tsjKNFoPtgIZAOy+Anflgpj/HKyqR 2HmJLvfWeGkglgKHAph5gTA+F9vb5EMTfpey4Cgp3d9671EOMm4+5ZPetwumVMXo kBhRzOkeS56qoRbRMpnkIjATqqeZuEHDXPrNmHe33YeOkXamvb/5T5XYoNZWrhzg TYbWlUkX3ixOkf9RKtOcWYpojBzxWlPOwvkKntTOgrgory4xafU8LycaZtuU+vPc ZTTh/T5acsXnNw== -----END CERTIFICATE-----Generated at Sun Dec 7 04:52:11 2025 by rpki-client