This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
File: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft (raw, json)
Hash identifier: yWl54UItHxxszI8JMp72hH0AWt7WEarTzm8erQMoAQQ=
Subject key identifier: D8:CC:49:5E:E9:ED:32:3F:F2:95:3B:C3:7D:D5:CF:B4:DB:87:CF:92
Authority key identifier: 1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE
Certificate issuer: /CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
Certificate serial: 019B6CC6F431785F0B579A8C1236B9CB94E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
Manifest number: 0D92
Signing time: Tue 30 Dec 2025 01:02:16 +0000
Manifest this update: Tue 30 Dec 2025 01:02:16 +0000
Manifest next update: Wed 31 Dec 2025 01:02:16 +0000
Files and hashes: 1: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl (hash: ytHD/CArrmqshe69LPA9nM47ZwtSNkif2M72sveCfgo=)
2: tVk3cWsdi3hZrDEonwmclNGT-5M.roa (hash: bJG7n4hjSkt99mV93dCKPOM2IO0DVMxNl1m0F3B2sm8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 31 Dec 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:6c:c6:f4:31:78:5f:0b:57:9a:8c:12:36:b9:cb:94:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5da9109f614c7c4159b3231a3877702a6f21ce
Validity
Not Before: Dec 30 01:02:16 2025 GMT
Not After : Dec 31 01:02:16 2025 GMT
Subject: CN=d8cc495ee9ed323ff2953bc37dd5cfb4db87cf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a1:23:93:bc:e2:3d:7b:46:73:66:32:0e:f9:
d3:ad:dc:27:f4:6d:ae:58:d7:40:88:a6:14:5d:ae:
5a:4d:d4:99:20:c7:78:2d:d1:e1:dd:ce:a4:55:aa:
ae:15:ca:00:ed:59:9c:a4:cf:c3:0a:e0:5f:fe:3a:
de:7d:74:fd:c8:75:85:c7:ee:39:5e:10:2a:65:07:
7b:60:b5:83:4f:98:86:a9:d7:bb:74:b2:c7:62:11:
5a:bb:b3:7d:46:2e:99:e9:3a:13:f9:9f:4c:89:2f:
f9:c9:cb:94:0a:46:32:0c:fc:a5:e5:39:a1:e3:9c:
91:32:07:6a:79:a7:5d:97:29:f4:65:a6:03:d0:03:
46:02:e0:f5:3b:b5:67:2c:30:33:05:31:87:b6:75:
74:0b:a9:60:c7:a0:01:de:ea:73:01:8d:e1:cb:a0:
56:ee:d4:67:ae:0c:19:ca:cc:24:16:c7:37:13:2f:
d9:1e:d1:da:60:98:48:2d:e9:7e:bc:1d:c4:61:55:
2e:c9:f8:58:a0:93:06:f5:6d:a7:3a:f2:9c:64:d9:
b4:86:bc:85:db:18:61:a1:24:72:12:58:35:6b:18:
8e:47:74:26:b6:b2:ec:c6:c4:e1:bd:8b:c2:99:e2:
1c:5a:6f:a0:81:67:ce:1c:a0:3e:83:0e:e4:82:84:
92:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CC:49:5E:E9:ED:32:3F:F2:95:3B:C3:7D:D5:CF:B4:DB:87:CF:92
X509v3 Authority Key Identifier:
keyid:1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:66:c8:a0:2a:46:ff:e2:88:73:92:07:a4:9e:a8:af:ba:b0:
ca:82:5c:98:e8:a8:d5:dd:b1:83:57:50:b1:a5:4a:90:6c:59:
26:c0:67:cb:91:c0:36:12:37:ab:8d:c9:ce:74:e3:8d:8b:83:
99:f3:75:b5:a6:3a:ef:ba:b6:74:d2:b8:4e:8f:0d:54:1b:f7:
8e:58:53:0e:81:30:dd:cc:e1:07:64:1f:a5:8f:dc:15:fd:05:
f7:60:50:1d:2d:01:83:ab:09:24:f4:34:ed:ce:42:81:3d:12:
e9:cf:e2:1d:04:aa:c0:05:d7:f5:c5:e2:2a:50:07:a9:ec:2f:
8d:b9:b9:f6:b8:a3:b6:f8:47:d3:a9:09:01:55:01:c6:18:aa:
f4:27:a1:ee:a3:37:ff:53:e4:1d:9e:37:83:ae:b8:a8:bb:50:
e1:8c:b9:ad:cb:9d:e4:5e:7b:b6:82:71:74:12:99:89:12:d0:
9f:ab:7d:5e:93:47:28:8f:68:15:a2:95:5d:7d:3b:40:b9:91:
f2:08:df:32:ff:06:4c:b0:0d:cf:3c:e6:39:68:47:d0:cf:8f:
58:28:06:90:ea:73:e1:2d:9a:42:8d:c3:ae:67:42:c8:1c:ca:
f4:96:a0:00:aa:31:ee:c2:23:00:40:ce:ee:e3:5e:04:44:7a:
f1:79:02:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 30 08:19:19 2025 by rpki-client