This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft File: hY6VYi_VRF1u00P4DgU-r_sRiyw.mft (raw, json) Hash identifier: yBWjVSDM+rJrSx1gf1ftT85Z3/FgsPlVCZo2XMIQP6k= Subject key identifier: D7:04:5F:B5:6B:9B:CE:CB:12:F5:5B:FE:BB:36:C0:B5:81:D4:E9:A7 Authority key identifier: 85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C Certificate issuer: /CN=858e95622fd5445d6ed343f80e053eaffb118b2c Certificate serial: 019AF19AB2F41F2219BE2F66EB1F650B5AB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:00:38 +0000 Manifest this update: Sat 06 Dec 2025 03:00:38 +0000 Manifest next update: Sun 07 Dec 2025 03:00:38 +0000 Files and hashes: 1: hY6VYi_VRF1u00P4DgU-r_sRiyw.crl (hash: PcoqgtPDhanqIqm/qrinr8UvcoRP/lz90Yw+PpLyGKU=) 2: s8ohh6B9MPW6Ei_9Z3ptsTMa_B0.roa (hash: u62iZk13BoIGBLhc8QtldmpQibWClfB9WRM3VJxu+Vs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b2:f4:1f:22:19:be:2f:66:eb:1f:65:0b:5a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=858e95622fd5445d6ed343f80e053eaffb118b2c Validity Not Before: Dec 6 03:00:38 2025 GMT Not After : Dec 7 03:00:38 2025 GMT Subject: CN=d7045fb56b9bcecb12f55bfebb36c0b581d4e9a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:62:48:c2:aa:c7:0a:e4:5a:4c:c2:61:f0:e2: 15:e5:8b:72:04:e6:2b:28:5d:50:d8:02:25:e6:22: 59:6d:8d:a5:9b:ce:00:ce:f5:f6:ab:68:10:a8:58: 07:c2:b9:cf:9c:e3:52:8d:65:38:32:ff:ea:42:2a: 8b:63:54:b1:f0:ac:2a:32:c9:bd:46:de:69:92:fd: 4c:b5:84:24:40:8e:94:7e:a4:1f:ff:e1:56:01:ea: dc:d1:46:74:a6:c8:db:9d:22:17:95:ea:0b:d4:57: 1d:16:a5:e7:51:dc:0e:3f:90:52:63:39:01:12:48: ad:a0:7c:4c:02:64:9b:94:a8:f8:4c:cf:bb:3b:c4: 3a:d7:e8:d2:90:ce:4f:60:af:9b:3e:40:43:b0:04: 7e:9d:7b:f6:9c:ff:20:31:1f:5e:f8:e4:4d:de:9a: 3e:3d:94:11:a9:77:22:7f:24:ce:98:b3:57:62:b2: e4:0c:4b:c5:28:ac:52:de:a6:9b:eb:49:e5:95:cc: e1:09:57:f4:77:f9:5f:43:63:97:05:b6:c4:af:b9: 96:85:2c:ee:3c:89:c6:05:90:6c:d0:78:81:dc:b2: b7:2f:47:c7:51:30:de:7c:68:1e:fd:63:a8:55:b0: b7:02:e5:cf:e3:10:89:99:c6:40:2c:17:86:86:33: dc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:04:5F:B5:6B:9B:CE:CB:12:F5:5B:FE:BB:36:C0:B5:81:D4:E9:A7 X509v3 Authority Key Identifier: keyid:85:8E:95:62:2F:D5:44:5D:6E:D3:43:F8:0E:05:3E:AF:FB:11:8B:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hY6VYi_VRF1u00P4DgU-r_sRiyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/d7b006-2527-44e5-a401-5bd4dcc5d6ed/1/hY6VYi_VRF1u00P4DgU-r_sRiyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ae:a2:17:98:8f:c0:b0:b8:9d:77:e4:96:c9:8c:f2:47:8c: 22:7b:2f:fc:96:16:d5:ec:e7:ab:ec:5c:03:a4:d6:e6:5f:26: b7:5f:d0:fa:8e:c0:0e:6c:97:e0:d1:31:e2:d4:7b:e6:01:72: bb:6a:d7:f6:f8:9a:7f:97:cc:05:ff:2a:85:29:73:ec:45:ed: 23:b3:4c:d8:09:ca:54:90:1a:05:2a:91:a2:55:ce:12:d0:4e: ae:94:e7:71:59:60:49:aa:b2:ef:90:73:fe:d3:13:a6:2e:85: 92:7d:4f:86:cf:55:dc:ab:63:19:9a:87:d7:83:83:8e:3e:3b: 42:a2:b3:ff:7f:7f:aa:d9:bd:27:a5:75:5c:e5:48:3b:b3:62: 4e:ba:61:36:b9:e3:8d:76:93:bd:db:1b:7c:b1:35:65:a6:57: 2c:a0:74:3a:df:d8:7d:c2:db:64:65:59:ee:9d:91:03:80:9f: 1f:79:48:09:60:13:22:49:e3:70:90:44:7f:d2:89:38:9b:52: 8e:4d:2d:ad:ff:2f:12:5b:e0:d2:91:0d:6b:aa:e8:05:d6:7a: 1c:78:e0:8f:7d:ec:9e:81:23:01:fc:1f:ba:36:1c:2f:d0:98: fd:0b:21:09:da:bb:63:14:29:12:01:04:6c:fe:28:7f:8a:17: d6:bf:f6:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrL0HyIZvi9m6x9lC1q2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1OGU5NTYyMmZkNTQ0NWQ2ZWQzNDNmODBlMDUzZWFmZmIx MThiMmMwHhcNMjUxMjA2MDMwMDM4WhcNMjUxMjA3MDMwMDM4WjAzMTEwLwYDVQQD EyhkNzA0NWZiNTZiOWJjZWNiMTJmNTViZmViYjM2YzBiNTgxZDRlOWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42JIwqrHCuRaTMJh8OIV5YtyBOYr KF1Q2AIl5iJZbY2lm84AzvX2q2gQqFgHwrnPnONSjWU4Mv/qQiqLY1Sx8KwqMsm9 Rt5pkv1MtYQkQI6UfqQf/+FWAerc0UZ0psjbnSIXleoL1FcdFqXnUdwOP5BSYzkB EkitoHxMAmSblKj4TM+7O8Q61+jSkM5PYK+bPkBDsAR+nXv2nP8gMR9e+ORN3po+ PZQRqXcifyTOmLNXYrLkDEvFKKxS3qab60nllczhCVf0d/lfQ2OXBbbEr7mWhSzu PInGBZBs0HiB3LK3L0fHUTDefGge/WOoVbC3AuXP4xCJmcZALBeGhjPcowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcEX7Vrm87LEvVb/rs2wLWB1OmnMB8GA1UdIwQY MBaAFIWOlWIv1URdbtND+A4FPq/7EYssMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9kN2IwMDYtMjUyNy00NGU1LWE0MDEt NWJkNGRjYzVkNmVkLzEvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9kN2IwMDYtMjUyNy00NGU1LWE0MDEtNWJkNGRjYzVkNmVk LzEvaFk2VllpX1ZSRjF1MDBQNERnVS1yX3NSaXl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK66iF5iP wLC4nXfklsmM8keMInsv/JYW1eznq+xcA6TW5l8mt1/Q+o7ADmyX4NEx4tR75gFy u2rX9viaf5fMBf8qhSlz7EXtI7NM2AnKVJAaBSqRolXOEtBOrpTncVlgSaqy75Bz /tMTpi6Fkn1Phs9V3KtjGZqH14ODjj47QqKz/39/qtm9J6V1XOVIO7NiTrphNrnj jXaTvdsbfLE1ZaZXLKB0Ot/YfcLbZGVZ7p2RA4CfH3lICWATIknjcJBEf9KJOJtS jk0trf8vElvg0pENa6roBdZ6HHjgj33snoEjAfwfujYcL9CY/QshCdq7YxQpEgEE bP4of4oX1r/2/w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:11:49 2025 by rpki-client