This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft File: Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft (raw, json) Hash identifier: Q0EaJ+Rbpsg1SedflvIsOqaRnLP5mABvJe0VwnkCCvE= Subject key identifier: 8E:1B:D0:B0:A4:38:8B:13:C5:8D:21:F4:61:56:34:1E:FE:3D:CC:CB Authority key identifier: 1E:F9:5B:FC:F5:95:F4:65:0F:F3:12:25:43:62:AD:26:66:B1:CD:6B Certificate issuer: /CN=1ef95bfcf595f4650ff312254362ad2666b1cd6b Certificate serial: 019B8FF72C8FA2D105814680789FC0F30512 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft Manifest number: 061F Signing time: Mon 05 Jan 2026 21:01:39 +0000 Manifest this update: Mon 05 Jan 2026 21:01:39 +0000 Manifest next update: Tue 06 Jan 2026 21:01:39 +0000 Files and hashes: 1: Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl (hash: IvWwDKooiaDlV0FKp7fRfd4GRhNGRmR/3wy1Jdv6c5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8f:f7:2c:8f:a2:d1:05:81:46:80:78:9f:c0:f3:05:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ef95bfcf595f4650ff312254362ad2666b1cd6b Validity Not Before: Jan 5 21:01:39 2026 GMT Not After : Jan 6 21:01:39 2026 GMT Subject: CN=8e1bd0b0a4388b13c58d21f46156341efe3dcccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:42:b9:8e:9c:8e:98:bd:20:e1:5c:a2:4e: bc:90:97:87:a8:5a:1e:f8:ce:8f:d5:07:57:8f:77: 0c:06:50:85:04:1d:37:38:9f:fc:65:c9:83:73:47: 0f:0d:e0:3b:69:f2:ca:df:4a:70:23:d8:7d:c6:49: 5e:5c:4e:34:14:6f:4e:ea:e1:10:84:6d:4a:bd:c5: 30:6e:a4:c0:dd:e0:87:04:3a:f3:ce:c0:54:a8:05: 2b:7f:a2:be:2e:f5:d6:98:6a:09:18:39:be:59:1b: 37:2d:a5:80:64:cb:81:77:f0:e2:b9:82:3e:05:26: 96:b3:6e:c4:08:e2:67:ad:f2:f0:00:2d:b8:49:b1: df:94:81:04:21:ce:ab:83:94:fa:49:fb:a5:3e:a2: dc:b4:09:e4:dd:b2:31:f6:f6:da:ee:23:66:56:78: 70:46:ac:77:af:35:19:7a:f1:ee:7d:21:55:88:bd: 0f:7e:b6:0e:2a:63:3f:d8:9b:3b:d4:e9:85:6c:75: 16:9f:bb:7e:8b:a5:05:5a:dd:bd:b8:2e:bd:4f:47: ba:1e:b8:7a:c2:8e:57:bf:b4:b4:7f:13:cd:23:a0: a9:df:d5:2e:89:54:16:4c:52:14:93:46:7e:ce:09: d6:c3:a1:8a:e6:7d:b1:35:ed:2e:59:aa:21:c9:b6: 0a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1B:D0:B0:A4:38:8B:13:C5:8D:21:F4:61:56:34:1E:FE:3D:CC:CB X509v3 Authority Key Identifier: keyid:1E:F9:5B:FC:F5:95:F4:65:0F:F3:12:25:43:62:AD:26:66:B1:CD:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:0f:88:93:a0:e0:88:59:19:7d:80:ea:4c:9f:29:cc:43:c3: b7:0e:0e:4c:f5:23:8b:6a:22:ff:8a:97:c5:c2:81:c4:6a:a6: 93:3b:e1:5c:3c:89:61:cf:e2:9b:c0:00:7f:6a:a3:8e:14:b9: 51:ef:fc:06:55:9a:d4:3d:71:b7:e1:77:98:88:ed:61:c4:9f: 7a:70:6b:0f:ec:ba:96:4f:6c:73:e5:05:88:5d:a0:a4:2c:6a: 67:15:c6:f1:8a:7c:ec:8d:f3:a5:87:3a:b8:f4:04:77:00:49: c5:ef:a5:d1:15:cd:d6:d8:40:a2:fe:a0:ec:83:67:4b:18:cb: 20:49:c3:02:65:e6:7c:1b:db:75:b6:75:8b:3a:a7:6d:72:a9: bb:0f:a6:de:60:49:08:bc:5d:21:69:0f:e8:7f:b5:6a:3d:c9: 65:b0:62:4d:aa:31:f0:df:9f:b0:9a:ab:db:89:e1:f7:32:ac: a4:98:19:25:b5:b2:c5:76:0b:de:ce:80:e9:35:1a:48:84:af: e0:98:7c:c7:4b:57:e9:43:ca:b9:44:79:2a:5d:05:3e:66:f5: 29:4c:cb:57:ca:1d:6d:7d:e6:20:d8:f2:7f:53:3b:6f:90:26: ed:fa:20:be:02:93:f8:ad:36:6b:e3:83:1a:c2:b8:39:ff:04: 90:8b:64:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuP9yyPotEFgUaAeJ/A8wUSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZjk1YmZjZjU5NWY0NjUwZmYzMTIyNTQzNjJhZDI2NjZi MWNkNmIwHhcNMjYwMTA1MjEwMTM5WhcNMjYwMTA2MjEwMTM5WjAzMTEwLwYDVQQD Eyg4ZTFiZDBiMGE0Mzg4YjEzYzU4ZDIxZjQ2MTU2MzQxZWZlM2RjY2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun9CuY6cjpi9IOFcok68kJeHqFoe +M6P1QdXj3cMBlCFBB03OJ/8ZcmDc0cPDeA7afLK30pwI9h9xkleXE40FG9O6uEQ hG1KvcUwbqTA3eCHBDrzzsBUqAUrf6K+LvXWmGoJGDm+WRs3LaWAZMuBd/DiuYI+ BSaWs27ECOJnrfLwAC24SbHflIEEIc6rg5T6SfulPqLctAnk3bIx9vba7iNmVnhw Rqx3rzUZevHufSFViL0PfrYOKmM/2Js71OmFbHUWn7t+i6UFWt29uC69T0e6Hrh6 wo5Xv7S0fxPNI6Cp39UuiVQWTFIUk0Z+zgnWw6GK5n2xNe0uWaohybYK7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4b0LCkOIsTxY0h9GFWNB7+PczLMB8GA1UdIwQY MBaAFB75W/z1lfRlD/MSJUNirSZmsc1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZsYl9QV1Y5R1VQOHhJbFEyS3RKbWF4eldzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83NGQ2OTctNGEwNy00MDIwLTlkZGEt NTUwZTEwMThmY2JmLzEvSHZsYl9QV1Y5R1VQOHhJbFEyS3RKbWF4eldzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS83NGQ2OTctNGEwNy00MDIwLTlkZGEtNTUwZTEwMThmY2Jm LzEvSHZsYl9QV1Y5R1VQOHhJbFEyS3RKbWF4eldzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIg+Ik6Dg iFkZfYDqTJ8pzEPDtw4OTPUji2oi/4qXxcKBxGqmkzvhXDyJYc/im8AAf2qjjhS5 Ue/8BlWa1D1xt+F3mIjtYcSfenBrD+y6lk9sc+UFiF2gpCxqZxXG8Yp87I3zpYc6 uPQEdwBJxe+l0RXN1thAov6g7INnSxjLIEnDAmXmfBvbdbZ1izqnbXKpuw+m3mBJ CLxdIWkP6H+1aj3JZbBiTaox8N+fsJqr24nh9zKspJgZJbWyxXYL3s6A6TUaSISv 4Jh8x0tX6UPKuUR5Kl0FPmb1KUzLV8odbX3mINjyf1M7b5Am7fogvgKT+K02a+OD GsK4Of8EkItkJQ== -----END CERTIFICATE-----Generated at Tue Jan 6 01:47:47 2026 by rpki-client