This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft File: HvpZajEmrOApxtcNUpJX4Hs4ugY.mft (raw, json) Hash identifier: H05wosGrCzLXsh7fzpJt/dESPJfWpati09cHWoOR9QA= Subject key identifier: 48:42:1D:ED:A3:9E:F1:78:44:FD:31:A6:1A:CB:3C:C3:3D:7D:F0:04 Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06 Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06 Certificate serial: 019B390F992CCF41BCA2AC9BEFB7672E1B38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 00:01:22 +0000 Manifest this update: Sat 20 Dec 2025 00:01:22 +0000 Manifest next update: Sun 21 Dec 2025 00:01:22 +0000 Files and hashes: 1: 3rLuW8QzyohR5G8GlpoQPu-Q6-s.roa (hash: F/8n4kYq76m4ZS+34MKi7W7c5dmdl0PtvWuG8cLJRrQ=) 2: 5ExX7PElDwhZvsqUirscS-kfnho.roa (hash: bqRW9TpS9PZv6OIHrk3qUk9RHaZcJhV08bnl4u3kvQE=) 3: HvpZajEmrOApxtcNUpJX4Hs4ugY.crl (hash: 7/mssV3bUoI+oWRocNEed5YjAOukXO2MbT9FVu+zi9E=) 4: SUGGbjb1_Jk1qcT2JM8WcjQsO3o.roa (hash: oGVNqEXP6azb1lMS8LZZ+mpr73t/MEzsv974PdYYkYc=) 5: Z1aPPPc81U2W2p-hUbb2wEiLSrc.roa (hash: 2YYRPX4gY5ODPttZebzHcbGfP4UENAWKSJvWHEPrLO0=) 6: n-W5m8Lx-i-ynu-cgERA98e1TOA.roa (hash: 4MuuW1m/TV8O5IZ0i/ayNAC7gzR7V1teSLC1JE5/iDs=) 7: pMSZccnz2cyq4EAmIRmDcUPtCn0.roa (hash: rRJO86ohCtFwFSEvJg481KQrtUgLqQRd6A69YZTm2Ng=) 8: ySmmDjcV5o8HMr8fci-zFbiYdNg.roa (hash: QRYJ/tIaqmXv+2YeufSiFwnuiLCPfX4BPxDANJPYOl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:99:2c:cf:41:bc:a2:ac:9b:ef:b7:67:2e:1b:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06 Validity Not Before: Dec 20 00:01:22 2025 GMT Not After : Dec 21 00:01:22 2025 GMT Subject: CN=48421deda39ef17844fd31a61acb3cc33d7df004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ad:17:ad:95:80:31:87:60:ec:6d:16:f3:77: b9:62:b2:32:17:00:02:24:fb:c5:28:6b:4c:07:ee: 26:ba:08:7e:a6:6f:d1:95:92:a4:f3:04:aa:e4:c1: 06:3c:f5:a1:1a:5d:1b:2c:40:be:f0:7b:11:0c:61: 14:ed:96:16:bd:42:77:f8:5f:cb:dd:ac:59:34:dd: 60:83:0f:a3:36:a3:f6:0a:b7:27:7f:49:1f:b3:d9: 61:cb:f3:54:9c:57:e2:ff:83:9b:8f:f5:78:a8:23: 4e:9d:0e:a8:c6:a3:f8:26:93:51:80:5b:c8:52:fd: 79:44:9d:e2:4b:ff:26:cc:25:7e:e9:47:25:cb:75: d6:e4:ec:0d:5d:22:76:fb:6c:26:19:ff:a5:8b:c8: 38:c4:f7:7d:b9:d8:54:56:00:61:97:a1:fd:d5:4b: 3f:24:e3:ae:21:01:96:ae:fb:68:66:16:7e:de:b5: b3:33:69:ea:da:83:97:cc:ab:a7:e9:9b:12:78:e2: f3:22:7a:55:a3:a2:62:e5:15:b6:3c:23:cd:11:95: b1:bc:58:94:aa:5b:25:4a:23:df:36:29:3a:b1:74: 70:43:94:11:12:98:5d:3d:51:53:b9:0c:1e:0b:e8: eb:fb:bf:ad:4c:75:35:93:92:63:ce:7b:98:21:e8: be:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:42:1D:ED:A3:9E:F1:78:44:FD:31:A6:1A:CB:3C:C3:3D:7D:F0:04 X509v3 Authority Key Identifier: keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:6a:70:82:26:d4:5e:f5:03:9a:46:32:24:2e:6a:04:46:1a: f0:29:18:a0:ee:d8:f8:bd:cd:c5:45:5b:24:39:5f:27:58:af: a0:53:5a:19:bd:6f:a7:9e:5e:55:d4:6c:e6:05:cf:ee:4c:28: 97:5a:26:39:9f:93:48:72:28:5a:8f:05:66:98:e4:49:5b:40: 09:80:dd:3e:53:6d:67:1e:e7:4e:ac:2c:4c:70:e9:41:1a:cd: f8:24:2e:44:3c:47:7c:e6:ad:a3:d9:d1:2d:65:de:af:e5:d6: de:43:4c:97:12:21:ac:bb:da:95:e2:f2:05:d9:6e:02:7a:b3: b7:10:8c:ff:47:f3:e0:a6:b4:41:b9:9d:f7:97:66:ce:4a:29: 5a:12:6e:d2:d9:76:aa:60:1a:94:2e:3a:d7:36:58:82:36:28: 1a:46:0d:d5:f2:04:5e:fa:6c:aa:41:8d:3e:62:9c:c5:0b:fb: 09:0b:c8:49:ca:95:04:e6:f4:e5:e3:99:f5:a8:ae:72:54:dd: c5:e7:6e:69:8a:7e:a8:89:0f:e5:79:ba:da:3d:d8:c5:71:b9: 89:e0:40:fe:30:15:1b:9e:ca:a9:d1:49:85:7d:ee:77:65:9b: be:fb:82:13:75:da:cb:08:6d:24:f9:80:50:a3:9f:37:c0:a2: 99:43:af:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D5ksz0G8oqyb77dnLhs4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZmE1OTZhMzEyNmFjZTAyOWM2ZDcwZDUyOTI1N2UwN2Iz OGJhMDYwHhcNMjUxMjIwMDAwMTIyWhcNMjUxMjIxMDAwMTIyWjAzMTEwLwYDVQQD Eyg0ODQyMWRlZGEzOWVmMTc4NDRmZDMxYTYxYWNiM2NjMzNkN2RmMDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo60XrZWAMYdg7G0W83e5YrIyFwAC JPvFKGtMB+4mugh+pm/RlZKk8wSq5MEGPPWhGl0bLEC+8HsRDGEU7ZYWvUJ3+F/L 3axZNN1ggw+jNqP2Crcnf0kfs9lhy/NUnFfi/4Obj/V4qCNOnQ6oxqP4JpNRgFvI Uv15RJ3iS/8mzCV+6Ucly3XW5OwNXSJ2+2wmGf+li8g4xPd9udhUVgBhl6H91Us/ JOOuIQGWrvtoZhZ+3rWzM2nq2oOXzKun6ZsSeOLzInpVo6Ji5RW2PCPNEZWxvFiU qlslSiPfNik6sXRwQ5QREphdPVFTuQweC+jr+7+tTHU1k5JjznuYIei+AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhCHe2jnvF4RP0xphrLPMM9ffAEMB8GA1UdIwQY MBaAFB76WWoxJqzgKcbXDVKSV+B7OLoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODIt OWQwYzYyMDczNWYxLzEvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODItOWQwYzYyMDczNWYx LzEvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApWpwgibU XvUDmkYyJC5qBEYa8CkYoO7Y+L3NxUVbJDlfJ1ivoFNaGb1vp55eVdRs5gXP7kwo l1omOZ+TSHIoWo8FZpjkSVtACYDdPlNtZx7nTqwsTHDpQRrN+CQuRDxHfOato9nR LWXer+XW3kNMlxIhrLvaleLyBdluAnqztxCM/0fz4Ka0Qbmd95dmzkopWhJu0tl2 qmAalC461zZYgjYoGkYN1fIEXvpsqkGNPmKcxQv7CQvIScqVBOb05eOZ9aiuclTd xeduaYp+qIkP5Xm62j3YxXG5ieBA/jAVG57KqdFJhX3ud2WbvvuCE3XaywhtJPmA UKOfN8CimUOvWg== -----END CERTIFICATE-----Generated at Sat Dec 20 04:50:04 2025 by rpki-client