This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft File: HRV4JMY4xxige1NeDYJMskr8Bww.mft (raw, json) Hash identifier: GWFeSWMNZoQ4dcpTxJYYCa2i4IEC2m16DWvU6USxz/Y= Subject key identifier: D3:EA:AA:A3:01:7B:29:CD:7B:D1:34:7E:4B:E0:C4:30:C2:E5:DB:94 Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C Certificate issuer: /CN=1d157824c638c718a07b535e0d824cb24afc070c Certificate serial: 019B3E6C3D80E6D576D3AA70A67814F9A997 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 01:00:39 +0000 Manifest this update: Sun 21 Dec 2025 01:00:39 +0000 Manifest next update: Mon 22 Dec 2025 01:00:39 +0000 Files and hashes: 1: DQA5wbdLSEm4_F0k0CrcOYfl8nk.roa (hash: nSw+Z2r+tEaSc2AQgef90FTr8oKptJDQ2v6jPAQnhGM=) 2: HRV4JMY4xxige1NeDYJMskr8Bww.crl (hash: pMKgLNyqu72Dm7py78E0rKaxaYgBcSM9dsifU5HH5l8=) 3: HuQWl8CvzbCRxNpw5HY0jCj3ToQ.roa (hash: XR9eo2BAwqzrJQjS2GXKNqFXgZew/uNp0g76elzf6UI=) 4: q-KsgHc87yurkiTPrGB6_ENn-Sg.roa (hash: cFavBWqarVDA4XfAipmh7/d8krk6AEiGb/atvWyd1pQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:3d:80:e6:d5:76:d3:aa:70:a6:78:14:f9:a9:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c Validity Not Before: Dec 21 01:00:39 2025 GMT Not After : Dec 22 01:00:39 2025 GMT Subject: CN=d3eaaaa3017b29cd7bd1347e4be0c430c2e5db94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:15:be:e8:88:41:ce:f4:53:c3:13:c7:79:0e: 40:f8:92:ac:9a:2a:31:be:70:68:9d:c5:a9:40:6d: 36:1c:a2:17:49:3f:60:c2:fb:28:38:4f:e0:ef:db: aa:fa:fb:53:1b:f3:1b:b5:32:99:0b:8a:8b:63:bb: bb:b4:9a:d0:e9:1d:e3:a7:b3:ab:1e:0a:3e:ea:71: 0a:11:2e:5f:0b:21:8f:06:3c:98:82:3c:26:94:0e: e9:28:e8:3d:18:9d:59:b1:a3:8d:de:e5:87:98:89: b6:ff:fc:11:40:26:1b:db:9a:62:26:fd:23:f7:e5: ee:2e:30:56:1f:e2:fa:71:1d:63:77:9c:50:37:a8: 18:40:1e:a5:1a:7c:47:3a:b9:4f:02:22:39:dc:46: e4:46:75:68:7b:7c:88:7d:b3:35:fb:b1:6c:6d:c0: af:6c:e6:d0:99:9f:d7:59:3b:c5:f1:ee:3c:c7:a1: 99:bc:a9:b1:96:28:e3:77:39:59:72:0a:48:93:14: b9:36:df:e7:3e:1e:51:1d:44:39:df:14:9f:de:96: b6:c6:11:d4:89:7a:d0:32:2c:31:6d:cc:c2:69:f7: f3:13:07:40:91:9b:9c:e3:f6:4c:93:02:db:0f:fc: 25:8b:4a:bb:ae:57:a7:7b:b2:0c:cc:15:39:e9:1b: 4e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EA:AA:A3:01:7B:29:CD:7B:D1:34:7E:4B:E0:C4:30:C2:E5:DB:94 X509v3 Authority Key Identifier: keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:d1:aa:5b:75:fd:2a:54:ea:57:81:bb:08:94:76:ec:95:67: 75:37:47:e6:dc:e7:40:33:c5:fd:b6:d7:34:f3:1e:16:53:ab: 01:c0:17:95:87:c4:75:83:2b:f5:b7:32:fe:78:94:02:ae:54: 95:3a:17:df:07:21:04:29:07:de:13:d7:dc:39:de:42:e7:fa: 0f:39:57:0a:7e:61:f7:79:7e:fc:b9:b3:75:8d:05:57:63:02: d6:df:d4:21:28:50:46:b9:9f:38:a9:93:48:93:67:0c:a7:63: cd:00:b1:b4:3c:8b:0c:fb:ab:32:19:14:1b:e5:1c:14:77:8c: 23:11:8d:f4:8c:d6:45:20:7d:e9:a3:3b:b4:ca:14:cb:cd:ca: 3a:6c:bb:d9:95:df:9d:4d:1f:47:b4:91:4e:27:23:52:ac:19: b8:14:3e:cc:a5:b1:97:12:ac:10:1f:09:b4:a1:35:ed:94:27: 2d:cd:87:36:c2:ba:0b:a0:4f:83:c6:9e:6c:ae:5d:b0:33:37: 08:2d:e8:e4:ef:31:9f:88:22:9e:e4:24:bc:9e:a2:1f:81:25: 7a:55:17:86:3f:e0:e2:76:7e:cf:d1:d8:2b:91:b1:4a:3b:cd: 25:5b:02:68:c5:50:39:d0:a1:47:bf:2d:db:5b:48:06:49:94: ad:45:3d:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bD2A5tV206pwpngU+amXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMTU3ODI0YzYzOGM3MThhMDdiNTM1ZTBkODI0Y2IyNGFm YzA3MGMwHhcNMjUxMjIxMDEwMDM5WhcNMjUxMjIyMDEwMDM5WjAzMTEwLwYDVQQD EyhkM2VhYWFhMzAxN2IyOWNkN2JkMTM0N2U0YmUwYzQzMGMyZTVkYjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhW+6IhBzvRTwxPHeQ5A+JKsmiox vnBoncWpQG02HKIXST9gwvsoOE/g79uq+vtTG/MbtTKZC4qLY7u7tJrQ6R3jp7Or Hgo+6nEKES5fCyGPBjyYgjwmlA7pKOg9GJ1ZsaON3uWHmIm2//wRQCYb25piJv0j 9+XuLjBWH+L6cR1jd5xQN6gYQB6lGnxHOrlPAiI53EbkRnVoe3yIfbM1+7FsbcCv bObQmZ/XWTvF8e48x6GZvKmxlijjdzlZcgpIkxS5Nt/nPh5RHUQ53xSf3pa2xhHU iXrQMiwxbczCaffzEwdAkZuc4/ZMkwLbD/wli0q7rlene7IMzBU56RtOYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPqqqMBeynNe9E0fkvgxDDC5duUMB8GA1UdIwQY MBaAFB0VeCTGOMcYoHtTXg2CTLJK/AcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFJWNEpNWTR4eGlnZTFOZURZSk1za3I4Qnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lNmFjMDEtOGJmYi00ZWYzLWJmYTct ZTU3NDQwMjYwYmUwLzEvSFJWNEpNWTR4eGlnZTFOZURZSk1za3I4Qnd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9lNmFjMDEtOGJmYi00ZWYzLWJmYTctZTU3NDQwMjYwYmUw LzEvSFJWNEpNWTR4eGlnZTFOZURZSk1za3I4Qnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfNGqW3X9 KlTqV4G7CJR27JVndTdH5tznQDPF/bbXNPMeFlOrAcAXlYfEdYMr9bcy/niUAq5U lToX3wchBCkH3hPX3DneQuf6DzlXCn5h93l+/LmzdY0FV2MC1t/UIShQRrmfOKmT SJNnDKdjzQCxtDyLDPurMhkUG+UcFHeMIxGN9IzWRSB96aM7tMoUy83KOmy72ZXf nU0fR7SRTicjUqwZuBQ+zKWxlxKsEB8JtKE17ZQnLc2HNsK6C6BPg8aebK5dsDM3 CC3o5O8xn4ginuQkvJ6iH4ElelUXhj/g4nZ+z9HYK5GxSjvNJVsCaMVQOdChR78t 21tIBkmUrUU9TA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:01:34 2025 by rpki-client