This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft File: hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json) Hash identifier: Uml0fXuf8/DBC1GlbJE/1HlK4jM9tQBMw5YsLCD5K20= Subject key identifier: 0A:7A:C5:4D:13:34:E1:AB:58:B4:13:F0:B2:86:88:15:D4:C8:33:18 Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD Certificate issuer: /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd Certificate serial: 019B337AFC87897E26FCFDE95D3A443E8392 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft Manifest number: 0CCA Signing time: Thu 18 Dec 2025 22:00:56 +0000 Manifest this update: Thu 18 Dec 2025 22:00:56 +0000 Manifest next update: Fri 19 Dec 2025 22:00:56 +0000 Files and hashes: 1: 35pT895rFPfGGgGdlQZKQuPJrR0.roa (hash: AdJ58aGQtDEjdleM+tpt6uAtjgF+DuwozoTDkormu+M=) 2: h616S8CObPCxdJef21IBTy1P_kM.roa (hash: ww3qKCX3iE26kJSJ/CLfQ0sPTYdm4Yl6Tj8BVSnidG4=) 3: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: ZbBzAoDk7zP9+JU406AEM6Euco5dubbvfDv5b+O/68o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7a:fc:87:89:7e:26:fc:fd:e9:5d:3a:44:3e:83:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd Validity Not Before: Dec 18 22:00:56 2025 GMT Not After : Dec 19 22:00:56 2025 GMT Subject: CN=0a7ac54d1334e1ab58b413f0b2868815d4c83318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ab:f6:32:5d:84:47:ca:6a:44:6b:85:aa:3f: 41:1e:5e:21:3b:b7:f0:8a:ba:47:11:8c:2b:1f:e6: 49:5e:d4:72:87:cb:e6:5d:5c:96:12:d4:f3:71:2d: 6b:75:5b:9c:ef:a8:c3:be:6f:2b:9f:03:7b:ba:f4: 4c:f8:63:fd:60:b6:7a:22:6a:b5:70:58:87:50:de: e8:cb:73:c7:7e:f4:bd:73:53:a8:8f:48:58:5b:f2: 96:fd:f9:e8:98:01:1f:16:86:cb:d4:0a:79:e0:d9: 30:a3:6d:34:48:47:90:55:63:56:44:6b:5b:20:be: d7:73:b8:84:b9:c0:86:7a:3e:87:cd:f7:f7:a3:c9: 6f:7e:93:c5:05:72:3d:ba:d0:0d:14:c5:e8:ee:8d: 22:f5:e1:73:4e:4b:04:47:7f:29:b9:b0:26:89:5b: 6e:4c:b0:e7:16:98:10:62:15:16:0d:fd:6c:fe:30: 36:fa:21:11:1d:49:ac:be:eb:8f:e4:4a:55:0f:6f: 4d:91:aa:8c:a7:47:58:4d:4f:b9:eb:98:06:32:94: 98:41:b8:bb:9d:16:b6:94:b7:81:66:8b:fe:bd:d2: b6:01:b6:38:47:01:ef:f0:c2:f8:e5:a0:df:44:6a: 11:1a:79:01:de:09:f8:53:0b:9d:be:79:c5:67:92: 3c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7A:C5:4D:13:34:E1:AB:58:B4:13:F0:B2:86:88:15:D4:C8:33:18 X509v3 Authority Key Identifier: keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:e6:89:96:2f:96:6d:8f:2c:18:2b:e5:e4:19:d2:db:52:21: d5:3b:f7:01:c9:ea:61:f0:21:13:e3:e8:be:2b:24:54:f2:fa: 41:ae:e7:45:57:34:89:bc:9c:e7:39:76:0d:e4:c1:11:f3:1f: df:11:b0:65:83:84:3f:ea:68:0c:5c:24:be:93:e1:eb:a2:92: b2:91:72:eb:3b:13:12:6c:d4:bf:cc:c4:26:d2:1e:7c:61:fa: 74:87:9e:10:31:9a:eb:db:2f:d2:e0:33:97:2a:6f:2d:20:c9: d7:10:8e:44:fd:18:4b:b4:3c:db:cb:05:17:80:9b:c7:9c:66: eb:3e:38:9b:05:95:56:2b:e4:98:96:b1:84:a6:d3:d1:b1:81: c4:54:6d:ba:4e:80:27:0c:6e:e6:20:4b:f5:48:6b:42:fb:95: 28:0a:71:23:9b:ce:2c:26:25:98:c8:98:d5:90:7f:3a:6c:f4: 94:93:2e:29:73:ed:fb:8b:3f:ae:d5:9e:3b:bd:cd:df:4f:db: c8:62:ed:3f:0f:ea:3e:93:88:8c:3d:8f:b5:90:d9:f2:70:ee: d6:7a:98:8c:66:02:96:06:94:e8:e8:a1:17:2e:20:7a:cc:87: ef:c2:97:0f:10:60:19:bf:d1:ef:80:5f:a5:4f:bf:27:af:5c: f6:0b:39:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszevyHiX4m/P3pXTpEPoOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZmE1NjRjZjk3NTc3YzA3NjMzYmE0ZTY0MGVhNzhjNzZm YzE3ZGQwHhcNMjUxMjE4MjIwMDU2WhcNMjUxMjE5MjIwMDU2WjAzMTEwLwYDVQQD EygwYTdhYzU0ZDEzMzRlMWFiNThiNDEzZjBiMjg2ODgxNWQ0YzgzMzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1av2Ml2ER8pqRGuFqj9BHl4hO7fw irpHEYwrH+ZJXtRyh8vmXVyWEtTzcS1rdVuc76jDvm8rnwN7uvRM+GP9YLZ6Imq1 cFiHUN7oy3PHfvS9c1Ooj0hYW/KW/fnomAEfFobL1Ap54Nkwo200SEeQVWNWRGtb IL7Xc7iEucCGej6Hzff3o8lvfpPFBXI9utANFMXo7o0i9eFzTksER38pubAmiVtu TLDnFpgQYhUWDf1s/jA2+iERHUmsvuuP5EpVD29NkaqMp0dYTU+565gGMpSYQbi7 nRa2lLeBZov+vdK2AbY4RwHv8ML45aDfRGoRGnkB3gn4UwudvnnFZ5I8lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAp6xU0TNOGrWLQT8LKGiBXUyDMYMB8GA1UdIwQY MBaAFIb6Vkz5dXfAdjO6TmQOp4x2/BfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zOWNiNGYtY2E4OC00ODBlLTk3ZDkt MDczZDBkMTRkZGRlLzEvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zOWNiNGYtY2E4OC00ODBlLTk3ZDktMDczZDBkMTRkZGRl LzEvaHZwV1RQbDFkOEIyTTdwT1pBNm5qSGI4RjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAluaJli+W bY8sGCvl5BnS21Ih1Tv3AcnqYfAhE+PoviskVPL6Qa7nRVc0ibyc5zl2DeTBEfMf 3xGwZYOEP+poDFwkvpPh66KSspFy6zsTEmzUv8zEJtIefGH6dIeeEDGa69sv0uAz lypvLSDJ1xCORP0YS7Q828sFF4Cbx5xm6z44mwWVVivkmJaxhKbT0bGBxFRtuk6A Jwxu5iBL9UhrQvuVKApxI5vOLCYlmMiY1ZB/Omz0lJMuKXPt+4s/rtWeO73N30/b yGLtPw/qPpOIjD2PtZDZ8nDu1nqYjGYClgaU6OihFy4gesyH78KXDxBgGb/R74Bf pU+/J69c9gs5jw== -----END CERTIFICATE-----Generated at Fri Dec 19 00:15:50 2025 by rpki-client