This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json) Hash identifier: RU/wsCHlllh7bBxzSS9RWFPxyBCvmzYQyzCLkOCHZjE= Subject key identifier: 57:E6:AB:47:09:4A:3C:99:C2:89:93:DD:9C:12:32:6F:89:FF:F8:7B Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42 Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942 Certificate serial: 019B3C7F6EB2B3B1282D5B01EDCF39DF9ED5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft Manifest number: 12E2 Signing time: Sat 20 Dec 2025 16:02:22 +0000 Manifest this update: Sat 20 Dec 2025 16:02:22 +0000 Manifest next update: Sun 21 Dec 2025 16:02:22 +0000 Files and hashes: 1: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: hqZXDSTbFEdTDa+mtQnXA2RpKjmUu1H2NmEatAmeg6g=) 2: jgAsessKAm9uqTW97_vJxlFphmg.roa (hash: SBPtFGq/5yKwTAX24BEiHsnyylA3vI1PAj8aDZuhBbE=) 3: kmGblmvAAGyRlFsROEtILxJX0AY.roa (hash: j4zVjRnml2SsYMPrYKgAmMnMiU9kMLQ4Se/WCN6WRCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:6e:b2:b3:b1:28:2d:5b:01:ed:cf:39:df:9e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942 Validity Not Before: Dec 20 16:02:22 2025 GMT Not After : Dec 21 16:02:22 2025 GMT Subject: CN=57e6ab47094a3c99c28993dd9c12326f89fff87b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:18:51:7a:0b:64:28:69:a1:72:af:a2:0d:bf: 0b:ed:69:9f:b9:ec:e2:84:7a:e8:31:8c:5c:ee:38: 4d:ae:dc:ca:1e:6f:55:ee:ea:1e:3e:d1:f2:b4:58: e8:c3:2c:02:ee:41:64:88:19:90:d6:7d:20:bb:26: a6:e3:20:06:51:05:2f:22:26:79:e3:ab:54:4a:7d: b7:58:32:32:14:d1:0d:aa:cc:1d:a1:62:3e:51:18: f0:4b:45:93:e8:50:2c:fc:81:e9:33:65:2f:51:d8: a4:9a:ba:1c:6e:a8:e0:c7:ad:03:4c:e6:1d:7f:ba: 6f:89:2d:d9:f0:e8:39:bd:8c:72:e9:e2:f1:fc:fe: 9c:51:08:c2:3d:d0:83:a8:92:89:dc:a4:d0:83:38: 19:4e:e5:93:7c:59:0c:5e:5d:5a:78:5b:34:88:91: b7:1f:54:18:a4:fe:2b:09:95:62:6e:73:0f:9b:50: 2b:fc:2d:ac:09:fe:d1:5e:32:3a:81:5b:56:0f:79: 40:e2:63:c7:67:2d:0c:cd:3f:30:eb:80:f3:47:c4: 79:b3:83:75:65:44:ca:af:1c:4a:4b:a3:1c:75:eb: b3:e2:c6:0f:e1:cf:44:87:bb:d0:b8:0b:29:99:53: d0:5c:92:0d:ef:e6:68:8b:04:f1:be:fc:5e:0f:a6: a6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E6:AB:47:09:4A:3C:99:C2:89:93:DD:9C:12:32:6F:89:FF:F8:7B X509v3 Authority Key Identifier: keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:1f:a0:6f:05:5b:bb:70:08:ea:cc:c1:e1:9f:5d:19:6b:b5: e3:57:c5:7e:a4:a9:04:cf:c9:54:6e:af:89:be:57:35:a6:68: 8c:c2:70:62:0d:5d:f6:c6:7b:a0:14:4f:1c:59:7d:bf:88:c7: db:04:10:16:62:25:a6:30:2e:a3:9b:7d:aa:dc:ea:53:33:0e: 7b:59:6c:f6:b9:d0:68:92:ba:f4:a8:ce:c0:33:db:e0:b9:0a: 33:8c:70:e7:4c:24:22:13:11:62:e0:df:20:c2:23:81:b2:48: 14:0f:a2:fb:3a:ea:0f:a3:6f:87:03:71:ce:41:f0:cd:11:23: 51:f7:b5:73:8a:14:39:01:e5:72:a0:24:fe:c6:23:bf:be:9c: fe:54:a5:25:1c:28:06:03:44:e9:0e:15:61:6d:d8:39:01:5b: b4:5b:01:a5:61:e9:fe:db:f4:b1:a9:61:df:aa:b5:ca:e0:77: 3a:d9:c5:e1:86:26:a7:05:de:58:c1:e4:36:21:1e:fe:82:e8: 92:6f:a7:ae:6f:85:48:12:ea:57:e9:d4:ef:5a:df:a3:4a:c7: c9:30:05:fd:9b:0c:19:73:e1:42:a0:41:d2:14:32:a7:ae:85: 1b:6e:ad:d7:bb:97:1a:5a:c6:e7:6d:1f:21:db:3d:1e:52:29: d8:61:21:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f26ys7EoLVsB7c85357VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMmZlZmJkMTY4ZjE4NjYxZWNhMTU1NjlkYzYyMThmODY3 NDY5NDIwHhcNMjUxMjIwMTYwMjIyWhcNMjUxMjIxMTYwMjIyWjAzMTEwLwYDVQQD Eyg1N2U2YWI0NzA5NGEzYzk5YzI4OTkzZGQ5YzEyMzI2Zjg5ZmZmODdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxhRegtkKGmhcq+iDb8L7Wmfuezi hHroMYxc7jhNrtzKHm9V7uoePtHytFjowywC7kFkiBmQ1n0guyam4yAGUQUvIiZ5 46tUSn23WDIyFNENqswdoWI+URjwS0WT6FAs/IHpM2UvUdikmrocbqjgx60DTOYd f7pviS3Z8Og5vYxy6eLx/P6cUQjCPdCDqJKJ3KTQgzgZTuWTfFkMXl1aeFs0iJG3 H1QYpP4rCZVibnMPm1Ar/C2sCf7RXjI6gVtWD3lA4mPHZy0MzT8w64DzR8R5s4N1 ZUTKrxxKS6Mcdeuz4sYP4c9Eh7vQuAspmVPQXJIN7+ZoiwTxvvxeD6am2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfmq0cJSjyZwomT3ZwSMm+J//h7MB8GA1UdIwQY MBaAFB0v770WjxhmHsoVVp3GIY+GdGlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYt YzY0OTU4NTNjYzFhLzEvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYtYzY0OTU4NTNjYzFh LzEvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANx+gbwVb u3AI6szB4Z9dGWu141fFfqSpBM/JVG6vib5XNaZojMJwYg1d9sZ7oBRPHFl9v4jH 2wQQFmIlpjAuo5t9qtzqUzMOe1ls9rnQaJK69KjOwDPb4LkKM4xw50wkIhMRYuDf IMIjgbJIFA+i+zrqD6NvhwNxzkHwzREjUfe1c4oUOQHlcqAk/sYjv76c/lSlJRwo BgNE6Q4VYW3YOQFbtFsBpWHp/tv0salh36q1yuB3OtnF4YYmpwXeWMHkNiEe/oLo km+nrm+FSBLqV+nU71rfo0rHyTAF/ZsMGXPhQqBB0hQyp66FG26t17uXGlrG520f Ids9HlIp2GEhnA== -----END CERTIFICATE-----Generated at Sat Dec 20 21:33:01 2025 by rpki-client