This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft File: Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft (raw, json) Hash identifier: vARRQobGwNvTydEVDF002ch8AioOYrXn3CJCyHPsLr0= Subject key identifier: 88:35:D8:BD:82:3D:FC:A9:D6:0E:09:DB:FC:F8:D6:61:D5:02:28:47 Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D Certificate issuer: /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d Certificate serial: 019B5FE609AE93F0D5C29F280505AA41D5D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft Manifest number: 0E7E Signing time: Sat 27 Dec 2025 13:01:09 +0000 Manifest this update: Sat 27 Dec 2025 13:01:09 +0000 Manifest next update: Sun 28 Dec 2025 13:01:09 +0000 Files and hashes: 1: Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl (hash: eC9dVLwF4RfPRRpzkplM5VN0Lbx4w75UL68w1ikOE4M=) 2: lE0Hn99x0fhwc2jXac5uga-vHXs.roa (hash: iA0oHrpgL6CqGZiYUNOViB4cOKniJ8+iyJSulMgnLyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5f:e6:09:ae:93:f0:d5:c2:9f:28:05:05:aa:41:d5:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d Validity Not Before: Dec 27 13:01:09 2025 GMT Not After : Dec 28 13:01:09 2025 GMT Subject: CN=8835d8bd823dfca9d60e09dbfcf8d661d5022847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1b:2d:10:c9:5c:8f:8c:a6:74:8a:a0:12:91: a5:07:b5:ae:cc:50:6f:48:f1:84:6e:a6:f5:c5:81: 74:4b:fd:10:8d:70:99:38:74:93:eb:60:1d:82:39: 64:bd:6b:80:31:ae:b2:02:09:98:06:90:31:ce:c0: 45:41:a4:9b:ec:8c:f5:41:cc:37:ee:2f:db:97:02: 56:fb:19:4a:6c:36:28:1a:5b:c0:92:ae:91:b2:db: 42:ba:49:11:7d:63:91:97:29:5f:cb:2c:c8:10:b5: 39:ae:41:de:87:85:64:40:a4:a3:ce:a8:c5:02:60: bf:8d:5c:8a:e0:c5:53:63:21:8c:92:83:eb:5d:62: 9d:e8:c7:96:c0:b5:2e:ee:bf:93:a5:72:6c:16:58: c7:a8:60:04:78:0c:2e:fe:90:1e:e0:f5:01:1f:37: d0:6a:44:bd:74:59:75:56:eb:eb:20:15:89:5d:53: 5c:48:fb:bc:7c:91:66:a2:fe:b1:37:c3:f1:1a:2f: 77:7a:e6:c7:a5:3f:2e:f0:91:e0:40:c1:20:93:f3: b7:00:1f:66:fd:b9:61:d9:49:0e:2e:ca:92:80:77: 70:c0:e0:b8:0c:7e:48:be:c4:7c:bb:08:25:0d:f1: 54:1c:17:59:fc:e0:a5:3e:1a:73:54:6c:47:93:d1: 16:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:35:D8:BD:82:3D:FC:A9:D6:0E:09:DB:FC:F8:D6:61:D5:02:28:47 X509v3 Authority Key Identifier: keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b2:e0:cc:ad:20:6e:57:76:60:d1:e0:2e:9f:cd:47:61:e3: 9f:59:1d:47:ee:98:89:b1:54:d2:c2:b8:25:d2:b9:7a:64:73: d8:5d:fb:a3:9e:6a:65:d3:c0:7e:bc:76:87:8c:92:e3:63:9a: 83:43:f9:e4:0e:1e:ce:d2:66:ca:03:81:3f:35:3a:4c:0e:b7: 60:83:b2:a7:68:58:8f:a6:8c:c9:f1:08:b4:09:1e:0e:ae:77: eb:03:43:c3:84:97:b7:55:f8:7b:ff:e4:f8:67:25:b9:fb:a9: 65:ae:4d:71:45:d5:2f:c7:4e:4a:f9:99:7a:dd:45:73:81:e3: ef:b8:34:36:e5:e0:62:c2:b5:85:62:6e:0a:bb:b1:fa:58:46: be:fd:ee:0c:55:55:7b:af:9e:27:12:c2:87:a5:27:9e:1b:8c: 9c:0f:70:bd:ae:96:20:aa:b8:78:d9:62:37:9b:30:c6:50:de: 18:0b:8a:81:fa:8e:53:c1:32:5b:d6:39:20:f4:36:b8:9b:2b: 2b:c1:3f:94:da:7b:3a:b8:92:85:b7:70:26:7e:6f:49:fa:79: 4e:0f:85:a5:a9:91:9d:a0:b2:05:0a:f7:fe:47:47:52:f5:7e: 79:ff:58:33:4c:cb:14:b9:30:68:7a:eb:55:35:df:85:ca:e2: 11:1e:c2:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtf5gmuk/DVwp8oBQWqQdXVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZjg3OTFkYzNhYTZmZWEzMjhhNWUxMzkwY2UyNmU5ODJk ZjM3MmQwHhcNMjUxMjI3MTMwMTA5WhcNMjUxMjI4MTMwMTA5WjAzMTEwLwYDVQQD Eyg4ODM1ZDhiZDgyM2RmY2E5ZDYwZTA5ZGJmY2Y4ZDY2MWQ1MDIyODQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxstEMlcj4ymdIqgEpGlB7WuzFBv SPGEbqb1xYF0S/0QjXCZOHST62AdgjlkvWuAMa6yAgmYBpAxzsBFQaSb7Iz1Qcw3 7i/blwJW+xlKbDYoGlvAkq6RsttCukkRfWORlylfyyzIELU5rkHeh4VkQKSjzqjF AmC/jVyK4MVTYyGMkoPrXWKd6MeWwLUu7r+TpXJsFljHqGAEeAwu/pAe4PUBHzfQ akS9dFl1VuvrIBWJXVNcSPu8fJFmov6xN8PxGi93eubHpT8u8JHgQMEgk/O3AB9m /blh2UkOLsqSgHdwwOC4DH5IvsR8uwglDfFUHBdZ/OClPhpzVGxHk9EWXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIg12L2CPfyp1g4J2/z41mHVAihHMB8GA1UdIwQY MBaAFB74eR3Dqm/qMopeE5DOJumC3zctMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lMTc4MTMtMTg0NS00ZmYyLWI5NWEt ODMzZWU5Y2IzOTgwLzEvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lMTc4MTMtMTg0NS00ZmYyLWI5NWEtODMzZWU5Y2IzOTgw LzEvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrLgzK0g bld2YNHgLp/NR2Hjn1kdR+6YibFU0sK4JdK5emRz2F37o55qZdPAfrx2h4yS42Oa g0P55A4eztJmygOBPzU6TA63YIOyp2hYj6aMyfEItAkeDq536wNDw4SXt1X4e//k +GclufupZa5NcUXVL8dOSvmZet1Fc4Hj77g0NuXgYsK1hWJuCrux+lhGvv3uDFVV e6+eJxLCh6UnnhuMnA9wva6WIKq4eNliN5swxlDeGAuKgfqOU8EyW9Y5IPQ2uJsr K8E/lNp7OriShbdwJn5vSfp5Tg+FpamRnaCyBQr3/kdHUvV+ef9YM0zLFLkwaHrr VTXfhcriER7C3w== -----END CERTIFICATE-----Generated at Sat Dec 27 15:54:05 2025 by rpki-client