This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft File: HvSYurfzu5cWbaV5KUqLRxRQ51w.mft (raw, json) Hash identifier: oWM598MMkr7WjI9Bvdpgb6dYNL46YgFuiXx3iNq/Hos= Subject key identifier: 8E:F3:8E:9A:A7:FD:FB:53:73:40:07:B1:B4:22:C3:F6:A4:62:23:27 Authority key identifier: 1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C Certificate issuer: /CN=1ef498bab7f3bb97166da579294a8b471450e75c Certificate serial: 019B6D6A5E99D629C3124132EB0811240CBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft Manifest number: 07FF Signing time: Tue 30 Dec 2025 04:00:46 +0000 Manifest this update: Tue 30 Dec 2025 04:00:46 +0000 Manifest next update: Wed 31 Dec 2025 04:00:46 +0000 Files and hashes: 1: F7xrxdbn_XCb6hAz8sT6b-tUYk8.roa (hash: rn01kFBYtcMCz9gh8LCxCPZJ6H8UjKqO4aqrKRZuT5A=) 2: HvSYurfzu5cWbaV5KUqLRxRQ51w.crl (hash: fTQyd1Nbk0KTjZR9V9dbYtALkt/l2fgZBmHhbIskz50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:5e:99:d6:29:c3:12:41:32:eb:08:11:24:0c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ef498bab7f3bb97166da579294a8b471450e75c Validity Not Before: Dec 30 04:00:46 2025 GMT Not After : Dec 31 04:00:46 2025 GMT Subject: CN=8ef38e9aa7fdfb53734007b1b422c3f6a4622327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:1f:39:db:e0:56:59:8a:45:29:d4:0e:3c: 4a:0d:93:1e:fb:30:ab:1a:51:9d:94:2f:61:45:a5: 41:e5:c3:58:f6:01:b4:c7:8c:02:09:72:11:81:f9: 9d:e7:7e:ff:79:54:29:9d:0d:74:71:4e:ac:9a:b0: 8f:d2:2f:e0:77:dd:c8:10:12:cb:a9:64:b6:da:b6: 63:64:3c:e3:cb:38:11:47:56:35:fd:40:77:70:08: b5:ad:27:9b:bd:e6:7f:b3:93:ae:41:e4:50:cb:6d: bc:9a:46:72:b9:8c:ad:9a:61:6b:b2:1d:98:c4:7d: 35:f9:18:e3:9d:b5:bd:f5:16:a7:cc:db:44:90:e8: d2:31:a5:1b:c8:be:c5:9d:55:d6:fe:09:e3:9f:6f: ae:1c:a8:9d:54:c3:93:27:01:8e:04:c1:dd:58:3d: d6:02:ec:53:a2:81:2b:c0:b2:21:a1:61:b3:33:f1: 30:4a:4e:72:78:af:94:ce:80:fd:06:0f:f4:a5:ef: 44:eb:dd:72:a0:55:b9:c8:35:ec:23:82:9c:5f:e3: 7c:c2:ff:70:49:07:a8:ae:6b:2d:f0:d3:bb:f5:08: a3:4e:b8:1e:e4:e0:c7:97:7e:d3:af:cf:d9:f0:78: f4:f1:c3:25:c6:b0:29:85:2b:f5:22:b9:93:1c:8a: 25:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F3:8E:9A:A7:FD:FB:53:73:40:07:B1:B4:22:C3:F6:A4:62:23:27 X509v3 Authority Key Identifier: keyid:1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:73:06:3b:45:87:90:72:18:d1:92:a0:3d:80:92:12:f1:ad: dd:c5:ed:06:2b:1d:2a:c8:47:9e:18:e0:98:73:0b:a4:a2:66: 26:4d:3c:58:55:f2:f8:8c:16:b8:6d:0b:99:b6:ba:fe:6c:b3: ca:5b:71:35:49:14:72:56:7a:48:31:0c:70:30:ac:e6:f1:58: d9:04:d7:b2:d8:c8:6c:0a:59:03:ec:f4:19:c5:9b:fd:85:bf: cf:7a:de:b6:0b:ef:32:15:dc:68:19:1b:03:e3:4a:bf:61:f6: 2b:7b:74:12:9f:90:8a:83:b8:c3:f3:fd:b3:c4:69:58:61:8d: 34:3b:17:81:32:43:5b:2a:42:01:1c:d6:27:55:ae:96:8c:8e: bf:b5:11:55:59:aa:b4:f9:67:fc:4d:28:22:3b:18:38:1a:db: c3:fb:4d:8b:c9:d1:07:0f:3f:1c:d3:86:61:08:f4:17:5c:e9: 33:49:b1:7b:c7:25:0e:c5:50:81:90:13:03:73:c4:1b:27:07: 77:2b:ab:ee:78:85:dc:4e:d7:43:51:f1:8b:7a:e9:b0:fe:92: 71:e2:3a:13:e6:5e:e4:b8:22:14:56:72:a9:20:f7:32:db:9e: 0f:2d:de:8d:ab:f7:34:a0:f8:b2:cc:00:83:f6:0f:a4:d2:95: 3a:ee:e9:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttal6Z1inDEkEy6wgRJAy7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZjQ5OGJhYjdmM2JiOTcxNjZkYTU3OTI5NGE4YjQ3MTQ1 MGU3NWMwHhcNMjUxMjMwMDQwMDQ2WhcNMjUxMjMxMDQwMDQ2WjAzMTEwLwYDVQQD Eyg4ZWYzOGU5YWE3ZmRmYjUzNzM0MDA3YjFiNDIyYzNmNmE0NjIyMzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLwfOdvgVlmKRSnUDjxKDZMe+zCr GlGdlC9hRaVB5cNY9gG0x4wCCXIRgfmd537/eVQpnQ10cU6smrCP0i/gd93IEBLL qWS22rZjZDzjyzgRR1Y1/UB3cAi1rSebveZ/s5OuQeRQy228mkZyuYytmmFrsh2Y xH01+RjjnbW99RanzNtEkOjSMaUbyL7FnVXW/gnjn2+uHKidVMOTJwGOBMHdWD3W AuxTooErwLIhoWGzM/EwSk5yeK+UzoD9Bg/0pe9E691yoFW5yDXsI4KcX+N8wv9w SQeormst8NO79QijTrge5ODHl37Tr8/Z8Hj08cMlxrAphSv1IrmTHIol8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7zjpqn/ftTc0AHsbQiw/akYiMnMB8GA1UdIwQY MBaAFB70mLq387uXFm2leSlKi0cUUOdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZTWXVyZnp1NWNXYmFWNUtVcUxSeFJRNTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84NjJlMjQtMDBmNi00ZTg0LWE4Y2Et NzUyNjI1OTI4ZmVmLzEvSHZTWXVyZnp1NWNXYmFWNUtVcUxSeFJRNTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi84NjJlMjQtMDBmNi00ZTg0LWE4Y2EtNzUyNjI1OTI4ZmVm LzEvSHZTWXVyZnp1NWNXYmFWNUtVcUxSeFJRNTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATHMGO0WH kHIY0ZKgPYCSEvGt3cXtBisdKshHnhjgmHMLpKJmJk08WFXy+IwWuG0Lmba6/myz yltxNUkUclZ6SDEMcDCs5vFY2QTXstjIbApZA+z0GcWb/YW/z3retgvvMhXcaBkb A+NKv2H2K3t0Ep+QioO4w/P9s8RpWGGNNDsXgTJDWypCARzWJ1WuloyOv7URVVmq tPln/E0oIjsYOBrbw/tNi8nRBw8/HNOGYQj0F1zpM0mxe8clDsVQgZATA3PEGycH dyur7niF3E7XQ1Hxi3rpsP6SceI6E+Ze5LgiFFZyqSD3MtueDy3ejav3NKD4sswA g/YPpNKVOu7psg== -----END CERTIFICATE-----Generated at Tue Dec 30 08:49:33 2025 by rpki-client