This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft File: HvSYurfzu5cWbaV5KUqLRxRQ51w.mft (raw, json) Hash identifier: AM1lQsJ+Nd0MUNj+qwznasgdSgh2L+9HFA1wbKDCCKU= Subject key identifier: 79:AF:DA:10:0E:B0:47:CA:2B:B5:EA:40:67:71:3E:51:4F:65:FD:39 Authority key identifier: 1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C Certificate issuer: /CN=1ef498bab7f3bb97166da579294a8b471450e75c Certificate serial: 019B3D22B3F4B848D313B3BB3ACA1950AD80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft Manifest number: 07E6 Signing time: Sat 20 Dec 2025 19:00:43 +0000 Manifest this update: Sat 20 Dec 2025 19:00:43 +0000 Manifest next update: Sun 21 Dec 2025 19:00:43 +0000 Files and hashes: 1: F7xrxdbn_XCb6hAz8sT6b-tUYk8.roa (hash: rn01kFBYtcMCz9gh8LCxCPZJ6H8UjKqO4aqrKRZuT5A=) 2: HvSYurfzu5cWbaV5KUqLRxRQ51w.crl (hash: Y1NOO0g8jDJNQk8XorZDky44ac1AT7sPJPX3RYgOS/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:b3:f4:b8:48:d3:13:b3:bb:3a:ca:19:50:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ef498bab7f3bb97166da579294a8b471450e75c Validity Not Before: Dec 20 19:00:43 2025 GMT Not After : Dec 21 19:00:43 2025 GMT Subject: CN=79afda100eb047ca2bb5ea4067713e514f65fd39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:aa:3e:ae:8c:43:e5:fa:40:c8:69:4a:f5:60: 72:49:6c:19:97:50:fb:4c:8d:30:ba:4d:a5:bf:ef: 6a:ec:42:ed:32:bb:0d:1d:d8:50:fc:94:93:d4:51: 99:ff:97:62:6c:af:e4:0e:ab:f5:40:3a:9a:e0:93: ec:30:b6:b5:99:d6:6d:df:bc:04:53:6e:e3:59:0f: 6a:7e:15:c2:d7:5d:d0:7f:bf:e1:44:65:ff:6c:a9: bf:d9:cd:f7:12:9d:b3:43:63:6b:6d:2b:9a:92:67: 82:d4:19:6a:a8:64:f7:8b:79:ab:58:48:5b:51:e9: 21:ec:0f:f6:6c:5f:2e:ff:e3:7f:d8:04:84:d4:90: 1e:ec:bf:62:05:b1:35:96:ee:18:9d:ce:a6:d6:bf: ab:54:96:49:e4:5e:2d:47:31:06:23:23:b0:85:4d: fa:70:63:b3:68:6b:4c:47:2a:73:b9:a1:85:46:a8: 45:83:40:f5:ee:10:a2:2e:e6:e8:c2:8d:90:ab:4c: f4:a4:fe:ee:61:96:9f:e8:36:55:83:f4:94:04:8c: a3:a1:3a:6c:c8:36:2e:27:61:bc:93:90:06:e4:f0: 98:18:13:04:28:9e:93:cd:09:21:bb:a9:c6:98:72: 63:44:d9:80:5b:cb:c8:41:64:8f:4f:ca:77:d1:10: 50:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:AF:DA:10:0E:B0:47:CA:2B:B5:EA:40:67:71:3E:51:4F:65:FD:39 X509v3 Authority Key Identifier: keyid:1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:1b:33:92:41:65:53:f2:b5:9d:ce:4e:0f:af:8d:f3:ba:f6: d4:24:52:ae:29:76:9a:26:76:ac:66:3e:01:5c:7e:92:e5:c5: c3:5a:64:ca:23:34:0d:d7:93:81:d6:f2:09:b9:12:ee:71:e8: e6:52:2a:23:69:a0:b9:29:69:34:c0:40:22:72:93:ab:6b:73: 30:b5:64:a6:2a:c4:b2:2b:3c:8f:dd:e6:d8:6f:25:f7:b0:d0: 16:09:e1:54:21:69:ef:38:35:ec:29:75:fc:59:c1:15:0e:a7: 53:fb:f0:28:02:ba:85:62:cb:08:94:8a:f0:c6:9b:15:e1:2b: b4:a1:35:69:9f:a8:16:77:31:2a:89:3a:ad:42:34:6c:57:c9: 6c:3f:4b:fc:16:3b:67:10:66:5f:a0:93:8a:f3:f9:8e:bc:37: 0b:60:89:80:73:ff:88:4e:93:2e:56:48:6e:d9:4b:79:58:77: f7:2f:ee:e2:06:18:73:14:6b:95:cf:08:73:5c:b9:56:4d:4f: 4a:a9:9a:00:9b:a3:e8:f7:d1:f2:0b:73:e6:a2:b1:a2:aa:8f: 33:34:2a:5f:e4:09:84:f4:6a:e0:79:20:34:7e:67:e2:3c:02: 54:55:2f:21:ed:1a:7a:77:73:0f:e6:06:7f:e6:6b:7c:9d:b1: 24:0c:fe:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IrP0uEjTE7O7OsoZUK2AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZjQ5OGJhYjdmM2JiOTcxNjZkYTU3OTI5NGE4YjQ3MTQ1 MGU3NWMwHhcNMjUxMjIwMTkwMDQzWhcNMjUxMjIxMTkwMDQzWjAzMTEwLwYDVQQD Eyg3OWFmZGExMDBlYjA0N2NhMmJiNWVhNDA2NzcxM2U1MTRmNjVmZDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKo+roxD5fpAyGlK9WBySWwZl1D7 TI0wuk2lv+9q7ELtMrsNHdhQ/JST1FGZ/5dibK/kDqv1QDqa4JPsMLa1mdZt37wE U27jWQ9qfhXC113Qf7/hRGX/bKm/2c33Ep2zQ2NrbSuakmeC1BlqqGT3i3mrWEhb Uekh7A/2bF8u/+N/2ASE1JAe7L9iBbE1lu4Ync6m1r+rVJZJ5F4tRzEGIyOwhU36 cGOzaGtMRypzuaGFRqhFg0D17hCiLubowo2Qq0z0pP7uYZaf6DZVg/SUBIyjoTps yDYuJ2G8k5AG5PCYGBMEKJ6TzQkhu6nGmHJjRNmAW8vIQWSPT8p30RBQBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmv2hAOsEfKK7XqQGdxPlFPZf05MB8GA1UdIwQY MBaAFB70mLq387uXFm2leSlKi0cUUOdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZTWXVyZnp1NWNXYmFWNUtVcUxSeFJRNTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84NjJlMjQtMDBmNi00ZTg0LWE4Y2Et NzUyNjI1OTI4ZmVmLzEvSHZTWXVyZnp1NWNXYmFWNUtVcUxSeFJRNTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi84NjJlMjQtMDBmNi00ZTg0LWE4Y2EtNzUyNjI1OTI4ZmVm LzEvSHZTWXVyZnp1NWNXYmFWNUtVcUxSeFJRNTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBszkkFl U/K1nc5OD6+N87r21CRSril2miZ2rGY+AVx+kuXFw1pkyiM0DdeTgdbyCbkS7nHo 5lIqI2mguSlpNMBAInKTq2tzMLVkpirEsis8j93m2G8l97DQFgnhVCFp7zg17Cl1 /FnBFQ6nU/vwKAK6hWLLCJSK8MabFeErtKE1aZ+oFncxKok6rUI0bFfJbD9L/BY7 ZxBmX6CTivP5jrw3C2CJgHP/iE6TLlZIbtlLeVh39y/u4gYYcxRrlc8Ic1y5Vk1P SqmaAJuj6PfR8gtz5qKxoqqPMzQqX+QJhPRq4HkgNH5n4jwCVFUvIe0aendzD+YG f+ZrfJ2xJAz+Bg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:33:52 2025 by rpki-client