This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft File: HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft (raw, json) Hash identifier: Sm/YCVNFtf2grabx0od6D/JPVoU6Yh73UxmCOu28SZg= Subject key identifier: BA:F1:1F:0D:3F:4B:6B:75:94:FA:80:50:CC:C1:1B:F4:A8:ED:21:FD Authority key identifier: 1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E Certificate issuer: /CN=1d861782973c382cc1ce670f5ad50df8fb53c82e Certificate serial: 019AF3F7585BBF52B39550DD902B8D62B8BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft Manifest number: 0D91 Signing time: Sat 06 Dec 2025 14:01:04 +0000 Manifest this update: Sat 06 Dec 2025 14:01:04 +0000 Manifest next update: Sun 07 Dec 2025 14:01:04 +0000 Files and hashes: 1: HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl (hash: q9CxGg6Ivz4JJcAZzRoGWnc430c3Pmyak5+dM19umOE=) 2: KUAHtfvST5K1EckHjwHYRJlPUp4.roa (hash: xEJyISbIDbAPWfTLfoXu5sCkABLUM5AZf64I/6n92jo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:58:5b:bf:52:b3:95:50:dd:90:2b:8d:62:b8:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d861782973c382cc1ce670f5ad50df8fb53c82e Validity Not Before: Dec 6 14:01:04 2025 GMT Not After : Dec 7 14:01:04 2025 GMT Subject: CN=baf11f0d3f4b6b7594fa8050ccc11bf4a8ed21fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a6:ec:70:5c:8c:95:70:10:ca:50:4a:f4:18: 54:29:8c:a5:89:19:8a:fb:90:c6:5b:67:b7:a6:e1: 4b:69:42:98:81:7a:32:d2:46:cb:dd:bb:93:9d:68: a2:e3:8d:d1:f2:2f:a3:80:95:38:72:0f:c4:e0:82: c6:1b:dc:64:1d:3f:eb:4b:7e:7a:01:13:ab:0e:31: c9:b0:b4:68:2c:e9:05:94:0f:34:3e:93:57:21:de: 7a:cf:33:9f:c1:bd:70:0a:0c:d7:62:db:2c:f9:e4: fd:79:f0:f3:d1:a1:95:a1:06:cd:7c:e2:f9:9e:0a: 33:1a:d3:35:e6:0f:7e:f7:68:4f:62:db:4d:a6:7a: 7b:c4:4b:61:62:27:fe:25:6d:bb:20:f3:e9:8c:c4: cc:12:7c:2a:ac:c6:2b:03:88:0e:f3:9e:f8:4a:b0: 34:c2:30:6f:d4:10:20:59:73:ea:46:79:29:84:d7: 65:4f:1c:7d:dd:0e:53:f2:e4:6b:3b:25:ea:cb:b0: 11:cd:a6:7d:a8:89:47:ce:38:28:43:31:b7:2f:42: 94:2e:69:32:23:14:b5:55:c3:39:80:56:db:61:78: ec:f2:22:82:98:96:65:86:b3:bd:05:0e:fb:33:47: 08:21:20:45:20:74:d4:cb:b1:9c:c9:20:ce:cf:a1: e9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F1:1F:0D:3F:4B:6B:75:94:FA:80:50:CC:C1:1B:F4:A8:ED:21:FD X509v3 Authority Key Identifier: keyid:1D:86:17:82:97:3C:38:2C:C1:CE:67:0F:5A:D5:0D:F8:FB:53:C8:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HYYXgpc8OCzBzmcPWtUN-PtTyC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cceaf2-7561-42a7-8d12-8e060ca96fac/1/HYYXgpc8OCzBzmcPWtUN-PtTyC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:14:15:6c:81:9c:4c:9e:85:a4:95:32:14:59:d4:4f:5c:81: a5:c4:e0:79:73:b0:d0:d6:d5:45:78:e1:61:ba:71:f3:00:3f: a3:8b:f7:78:eb:94:c2:23:46:93:98:f9:40:fe:27:2b:d7:20: 8a:d6:80:5c:95:01:37:1b:27:d0:27:f6:5a:9a:de:0c:5e:44: a2:06:57:2f:fe:a8:cb:29:b8:2f:7a:ee:37:05:85:96:31:b0: f7:b3:d2:f7:f1:8d:93:66:23:55:43:76:4c:e1:11:d8:03:4a: 2b:d7:a2:3a:38:04:8b:66:10:6e:85:d2:e8:0e:a5:41:98:97: 6d:a2:a4:2b:64:4c:85:4e:54:21:08:dc:45:db:c6:2d:27:a3: 24:e7:27:d4:fa:a4:47:6a:57:eb:93:5a:b9:47:bf:bb:c9:2b: d0:95:dc:d7:66:b0:db:3c:7c:47:be:5c:3b:28:3a:d6:fe:f6: 17:26:49:a4:65:9f:a7:f5:57:29:5c:a5:2e:11:a4:71:9c:4c: 01:73:d5:d0:7c:6b:13:21:22:c7:07:a2:1a:53:68:7f:c0:a5: 98:d4:8e:fa:b6:b7:50:01:57:da:4a:0f:57:d2:ba:5f:d0:bd: 8f:a9:06:ff:25:cc:18:22:9b:82:c7:e5:7a:4d:09:b1:2b:e7: f4:6e:d8:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz91hbv1KzlVDdkCuNYri6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkODYxNzgyOTczYzM4MmNjMWNlNjcwZjVhZDUwZGY4ZmI1 M2M4MmUwHhcNMjUxMjA2MTQwMTA0WhcNMjUxMjA3MTQwMTA0WjAzMTEwLwYDVQQD EyhiYWYxMWYwZDNmNGI2Yjc1OTRmYTgwNTBjY2MxMWJmNGE4ZWQyMWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKbscFyMlXAQylBK9BhUKYyliRmK +5DGW2e3puFLaUKYgXoy0kbL3buTnWii443R8i+jgJU4cg/E4ILGG9xkHT/rS356 AROrDjHJsLRoLOkFlA80PpNXId56zzOfwb1wCgzXYtss+eT9efDz0aGVoQbNfOL5 ngozGtM15g9+92hPYttNpnp7xEthYif+JW27IPPpjMTMEnwqrMYrA4gO8574SrA0 wjBv1BAgWXPqRnkphNdlTxx93Q5T8uRrOyXqy7ARzaZ9qIlHzjgoQzG3L0KULmky IxS1VcM5gFbbYXjs8iKCmJZlhrO9BQ77M0cIISBFIHTUy7GcySDOz6HpswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLrxHw0/S2t1lPqAUMzBG/So7SH9MB8GA1UdIwQY MBaAFB2GF4KXPDgswc5nD1rVDfj7U8guMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTIt OGUwNjBjYTk2ZmFjLzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jY2VhZjItNzU2MS00MmE3LThkMTItOGUwNjBjYTk2ZmFj LzEvSFlZWGdwYzhPQ3pCem1jUFd0VU4tUHRUeUM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBQVbIGc TJ6FpJUyFFnUT1yBpcTgeXOw0NbVRXjhYbpx8wA/o4v3eOuUwiNGk5j5QP4nK9cg itaAXJUBNxsn0Cf2WpreDF5EogZXL/6oyym4L3ruNwWFljGw97PS9/GNk2YjVUN2 TOER2ANKK9eiOjgEi2YQboXS6A6lQZiXbaKkK2RMhU5UIQjcRdvGLSejJOcn1Pqk R2pX65NauUe/u8kr0JXc12aw2zx8R75cOyg61v72FyZJpGWfp/VXKVylLhGkcZxM AXPV0HxrEyEixweiGlNof8ClmNSO+ra3UAFX2koPV9K6X9C9j6kG/yXMGCKbgsfl ek0JsSvn9G7YHw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:36 2025 by rpki-client