This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft File: HVdIhaDItCBcPfLR_Nc0h33hBdk.mft (raw, json) Hash identifier: ok0SgNd1kTTL13SbyrBeDRYi6p1rTnf+oIgT6E/8C2Q= Subject key identifier: 90:A5:33:FD:1A:9C:F7:8B:37:D3:33:7B:7F:A0:3B:A2:42:1A:9F:3D Authority key identifier: 1D:57:48:85:A0:C8:B4:20:5C:3D:F2:D1:FC:D7:34:87:7D:E1:05:D9 Certificate issuer: /CN=1d574885a0c8b4205c3df2d1fcd734877de105d9 Certificate serial: 019B35322A56F6019746DE6A366B649066A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft Manifest number: 0355 Signing time: Fri 19 Dec 2025 06:00:38 +0000 Manifest this update: Fri 19 Dec 2025 06:00:38 +0000 Manifest next update: Sat 20 Dec 2025 06:00:38 +0000 Files and hashes: 1: HVdIhaDItCBcPfLR_Nc0h33hBdk.crl (hash: H2B8bGxouYNLNW8Iia86TDW9Gtsr3Ry595ab8Ji7H64=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:2a:56:f6:01:97:46:de:6a:36:6b:64:90:66:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d574885a0c8b4205c3df2d1fcd734877de105d9 Validity Not Before: Dec 19 06:00:38 2025 GMT Not After : Dec 20 06:00:38 2025 GMT Subject: CN=90a533fd1a9cf78b37d3337b7fa03ba2421a9f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:1e:5e:c8:06:97:63:d0:10:1f:0f:c5:8d:a8: b1:fe:43:c2:b1:eb:53:52:34:9c:14:43:76:44:bc: 58:14:6a:f7:10:28:e6:6f:24:f6:6a:b8:9e:10:c6: 7f:f1:b2:f2:1f:e5:f3:4c:3c:9d:4e:1a:1d:10:a0: 78:71:b9:11:d8:17:22:2d:9c:b7:86:13:ea:68:c5: a1:5a:ca:00:6b:c5:8a:70:55:69:65:7e:05:d7:71: e3:22:ae:c8:db:e6:92:8f:32:80:df:9d:c7:19:30: 56:c8:f8:e7:5d:cd:a7:7b:44:18:eb:31:57:7c:41: 65:6c:7b:72:4c:d6:78:0d:4b:ed:ad:bc:15:73:4e: 5a:44:ac:ee:8a:05:e2:d9:b7:e0:42:69:d7:43:dc: b4:2e:6b:fc:6e:3f:0a:03:48:da:1f:49:e9:1c:59: 1e:57:32:08:39:7d:d6:1a:4b:a9:e8:ae:41:04:e7: 1a:82:a4:46:b1:a8:fc:5e:17:bf:b7:50:d7:9e:7d: 56:85:e8:b8:13:39:53:80:57:bd:e7:17:37:36:88: 7b:84:b7:a7:66:ad:7d:21:02:ce:07:02:a4:19:11: 21:a5:93:34:5a:b2:04:46:3c:2f:49:f0:5a:b8:26: bf:9a:da:43:95:6e:2b:96:c7:a6:e9:ff:37:c8:cf: 18:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:A5:33:FD:1A:9C:F7:8B:37:D3:33:7B:7F:A0:3B:A2:42:1A:9F:3D X509v3 Authority Key Identifier: keyid:1D:57:48:85:A0:C8:B4:20:5C:3D:F2:D1:FC:D7:34:87:7D:E1:05:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:97:a8:47:c1:e6:6e:4b:72:aa:85:92:c0:bf:5b:fc:bb:76: 76:1e:9b:b5:bd:62:e2:e0:16:a3:ab:07:ec:f3:1f:52:7d:00: 99:ec:0a:d3:29:de:bf:1c:e6:96:db:fb:a3:63:06:49:4c:ef: d8:a9:f8:bc:6e:e8:9d:d9:ac:c9:ac:8f:87:ad:92:73:62:80: 3d:4a:9f:7a:12:a1:b2:46:b3:88:d9:78:3d:93:bf:7f:e2:fd: 47:79:81:4e:db:8b:b3:49:18:b2:78:51:3f:87:d6:29:cb:ef: f1:e5:33:56:74:e5:72:7e:54:8e:d8:01:98:e9:59:cf:a5:a0: 1b:ab:91:3e:a2:3b:90:d5:c4:bf:1b:72:2f:88:84:c3:c6:c5: cf:0c:bc:68:80:51:3c:9b:4d:bc:aa:a0:ff:92:3d:61:12:02: e8:fa:81:4c:cb:9d:2b:4c:bb:28:74:3f:84:22:c0:29:46:40: f7:1c:5f:4f:73:e4:44:ea:0f:4f:44:bd:77:e5:e7:ff:2c:4b: 41:f1:1e:5b:11:90:2e:f8:bb:44:72:01:c6:a3:57:40:73:cd: c3:92:c1:ac:4d:9c:05:18:36:0e:84:7a:6a:54:2c:cc:b1:fb: e7:4b:4f:98:49:a7:cb:ec:a8:71:e8:3c:ec:e4:a6:be:0e:72: a2:20:21:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MipW9gGXRt5qNmtkkGanMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNTc0ODg1YTBjOGI0MjA1YzNkZjJkMWZjZDczNDg3N2Rl MTA1ZDkwHhcNMjUxMjE5MDYwMDM4WhcNMjUxMjIwMDYwMDM4WjAzMTEwLwYDVQQD Eyg5MGE1MzNmZDFhOWNmNzhiMzdkMzMzN2I3ZmEwM2JhMjQyMWE5ZjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5x5eyAaXY9AQHw/Fjaix/kPCsetT UjScFEN2RLxYFGr3ECjmbyT2arieEMZ/8bLyH+XzTDydThodEKB4cbkR2BciLZy3 hhPqaMWhWsoAa8WKcFVpZX4F13HjIq7I2+aSjzKA353HGTBWyPjnXc2ne0QY6zFX fEFlbHtyTNZ4DUvtrbwVc05aRKzuigXi2bfgQmnXQ9y0Lmv8bj8KA0jaH0npHFke VzIIOX3WGkup6K5BBOcagqRGsaj8Xhe/t1DXnn1Whei4EzlTgFe95xc3Noh7hLen Zq19IQLOBwKkGREhpZM0WrIERjwvSfBauCa/mtpDlW4rlsem6f83yM8YGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJClM/0anPeLN9Mze3+gO6JCGp89MB8GA1UdIwQY MBaAFB1XSIWgyLQgXD3y0fzXNId94QXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFZkSWhhREl0Q0JjUGZMUl9OYzBoMzNoQmRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82OTdkZjctYjE5Yi00NmYxLThlNDMt OTE5OGNhMmFjNzY2LzEvSFZkSWhhREl0Q0JjUGZMUl9OYzBoMzNoQmRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82OTdkZjctYjE5Yi00NmYxLThlNDMtOTE5OGNhMmFjNzY2 LzEvSFZkSWhhREl0Q0JjUGZMUl9OYzBoMzNoQmRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJeoR8Hm bktyqoWSwL9b/Lt2dh6btb1i4uAWo6sH7PMfUn0AmewK0ynevxzmltv7o2MGSUzv 2Kn4vG7ondmsyayPh62Sc2KAPUqfehKhskaziNl4PZO/f+L9R3mBTtuLs0kYsnhR P4fWKcvv8eUzVnTlcn5UjtgBmOlZz6WgG6uRPqI7kNXEvxtyL4iEw8bFzwy8aIBR PJtNvKqg/5I9YRIC6PqBTMudK0y7KHQ/hCLAKUZA9xxfT3PkROoPT0S9d+Xn/yxL QfEeWxGQLvi7RHIBxqNXQHPNw5LBrE2cBRg2DoR6alQszLH750tPmEmny+yoceg8 7OSmvg5yoiAhxQ== -----END CERTIFICATE-----Generated at Fri Dec 19 14:29:39 2025 by rpki-client