This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft File: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft (raw, json) Hash identifier: QSl/P/i1dCPb4buBf/geLKxxJqre4AhueA++iRa0qG0= Subject key identifier: 84:1A:EE:59:7A:0A:50:25:20:D1:36:B8:62:A1:1D:94:D3:03:99:AC Authority key identifier: 1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE Certificate issuer: /CN=1d5da9109f614c7c4159b3231a3877702a6f21ce Certificate serial: 019B7292200369CB336F7317A618998ADBF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft Manifest number: 0D95 Signing time: Wed 31 Dec 2025 04:02:17 +0000 Manifest this update: Wed 31 Dec 2025 04:02:17 +0000 Manifest next update: Thu 01 Jan 2026 04:02:17 +0000 Files and hashes: 1: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl (hash: 7KGquj7DfXYPHHLloHWvhZ4ISnEzh7HEERRAeiFApbw=) 2: tVk3cWsdi3hZrDEonwmclNGT-5M.roa (hash: bJG7n4hjSkt99mV93dCKPOM2IO0DVMxNl1m0F3B2sm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:92:20:03:69:cb:33:6f:73:17:a6:18:99:8a:db:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d5da9109f614c7c4159b3231a3877702a6f21ce Validity Not Before: Dec 31 04:02:17 2025 GMT Not After : Jan 1 04:02:17 2026 GMT Subject: CN=841aee597a0a502520d136b862a11d94d30399ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0c:72:d1:f3:e5:5d:41:98:9a:1c:0a:19:66: 16:59:2a:04:4a:38:76:b6:2e:ad:0e:b1:9d:6a:60: 13:13:e8:16:3d:08:c0:05:8d:fd:55:d3:58:ba:e1: b4:78:17:38:80:d0:33:5e:69:0f:17:5a:65:92:ef: 62:5c:d3:d0:90:5c:cc:4c:20:e6:e0:b1:87:b5:1b: 31:7f:e0:56:0e:d7:33:c1:05:0c:e3:07:79:29:0a: 82:04:8a:43:85:e9:47:f5:14:b2:d5:9a:7c:0a:11: 26:08:eb:08:0c:bc:54:c4:b2:df:50:8b:db:05:c9: ca:6c:64:fe:62:72:82:45:48:52:93:f5:64:42:b0: e8:5b:35:48:b1:c6:92:b9:de:d3:71:a9:9f:78:58: 33:cf:77:df:37:ce:63:f0:fa:6e:47:e8:1c:af:a1: 7b:52:14:9e:21:0f:8f:35:40:72:ec:28:1b:4d:3a: 8f:0f:f2:19:3c:ec:46:9d:8b:55:48:2c:23:21:89: 75:2b:a9:91:6c:01:61:4a:23:29:41:be:2c:91:7c: 55:f6:08:4d:19:b3:36:31:5c:d3:fe:c5:c0:1f:99: cd:11:90:e3:53:17:20:6e:fa:fb:5b:1c:fa:7e:e4: ef:34:2e:b7:37:33:da:b2:e1:18:89:a6:41:36:0c: 3e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1A:EE:59:7A:0A:50:25:20:D1:36:B8:62:A1:1D:94:D3:03:99:AC X509v3 Authority Key Identifier: keyid:1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:47:16:59:78:7d:f7:ec:3e:68:11:f5:0b:5b:35:0a:be:ef: be:6e:39:40:e9:41:76:7c:c1:14:d0:12:08:36:2b:2a:3c:a8: 52:15:06:f2:d9:52:46:82:f8:19:75:47:d8:74:44:10:89:3b: 6d:21:52:57:0d:6a:63:6f:99:87:d5:33:d0:77:66:25:84:71: 24:0a:d0:c1:a7:e4:ff:65:59:c8:4a:a3:40:3b:6e:4d:86:fc: 71:82:fa:f5:fd:ee:30:e3:ba:da:02:70:88:93:9c:81:76:b2: 59:14:c8:15:52:61:81:d1:22:94:25:22:4f:ef:f1:a8:87:46: ba:09:a4:44:92:e8:fc:4b:ae:df:0f:f9:8f:3d:49:2f:53:83: 2e:f7:ed:5c:79:8e:8a:c9:83:4a:f9:7a:ac:55:eb:c3:1b:c3: 7c:37:ef:e8:ee:df:cc:51:14:63:4d:86:3a:40:8b:3d:23:8c: 2b:96:01:35:d8:9f:50:e0:0e:93:fd:d9:da:07:10:74:02:aa: eb:57:4c:a8:e1:b9:33:02:ba:8d:fd:0c:b9:14:90:5a:7b:f4: 47:70:e0:a6:31:41:bf:e5:93:e8:82:27:c6:ad:e8:0a:9a:0b: e3:24:14:f6:c8:d0:2d:e1:68:a6:47:95:ca:78:0f:2f:4e:36: be:b7:41:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykiADacszb3MXphiZitv3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNWRhOTEwOWY2MTRjN2M0MTU5YjMyMzFhMzg3NzcwMmE2 ZjIxY2UwHhcNMjUxMjMxMDQwMjE3WhcNMjYwMTAxMDQwMjE3WjAzMTEwLwYDVQQD Eyg4NDFhZWU1OTdhMGE1MDI1MjBkMTM2Yjg2MmExMWQ5NGQzMDM5OWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gxy0fPlXUGYmhwKGWYWWSoESjh2 ti6tDrGdamATE+gWPQjABY39VdNYuuG0eBc4gNAzXmkPF1plku9iXNPQkFzMTCDm 4LGHtRsxf+BWDtczwQUM4wd5KQqCBIpDhelH9RSy1Zp8ChEmCOsIDLxUxLLfUIvb BcnKbGT+YnKCRUhSk/VkQrDoWzVIscaSud7TcamfeFgzz3ffN85j8PpuR+gcr6F7 UhSeIQ+PNUBy7CgbTTqPD/IZPOxGnYtVSCwjIYl1K6mRbAFhSiMpQb4skXxV9ghN GbM2MVzT/sXAH5nNEZDjUxcgbvr7Wxz6fuTvNC63NzPasuEYiaZBNgw+FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQa7ll6ClAlINE2uGKhHZTTA5msMB8GA1UdIwQY MBaAFB1dqRCfYUx8QVmzIxo4d3AqbyHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zM2FjMGUtZTE5ZS00Yzg5LWJkZjMt NzA2YTZmYzE2NGIxLzEvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8zM2FjMGUtZTE5ZS00Yzg5LWJkZjMtNzA2YTZmYzE2NGIx LzEvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEcWWXh9 9+w+aBH1C1s1Cr7vvm45QOlBdnzBFNASCDYrKjyoUhUG8tlSRoL4GXVH2HREEIk7 bSFSVw1qY2+Zh9Uz0HdmJYRxJArQwafk/2VZyEqjQDtuTYb8cYL69f3uMOO62gJw iJOcgXayWRTIFVJhgdEilCUiT+/xqIdGugmkRJLo/Euu3w/5jz1JL1ODLvftXHmO ismDSvl6rFXrwxvDfDfv6O7fzFEUY02GOkCLPSOMK5YBNdifUOAOk/3Z2gcQdAKq 61dMqOG5MwK6jf0MuRSQWnv0R3DgpjFBv+WT6IInxq3oCpoL4yQU9sjQLeFopkeV yngPL042vrdBpA== -----END CERTIFICATE-----Generated at Wed Dec 31 05:55:51 2025 by rpki-client