This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json) Hash identifier: 4SqaV2gKMfGN4h0S/7TIVdtks5mickEyuDr+lOWq7mc= Subject key identifier: FE:42:FF:BB:D2:A3:B0:68:DE:1C:85:04:7C:2A:69:95:0A:55:DA:A2 Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a Certificate serial: 019B3F11BE479E50C90B6A2B8ED781EF3A42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 04:01:25 +0000 Manifest this update: Sun 21 Dec 2025 04:01:25 +0000 Manifest next update: Mon 22 Dec 2025 04:01:25 +0000 Files and hashes: 1: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: SSwSSAaGXGuUvzxywYrPN5eIg9Xd6hqy5S5jioLmf2c=) 2: cZTdH7vf_vUsZSA9Bkrj9O3ow_4.roa (hash: nta1g/RvN2MBRkggXlvKzqyMNronRUI3y0vVkrzhbVE=) 3: l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa (hash: 8uzp3mGBJoeQsydXTRtIRsEs6X4WHsK4qeFwSpFjWKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:be:47:9e:50:c9:0b:6a:2b:8e:d7:81:ef:3a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a Validity Not Before: Dec 21 04:01:25 2025 GMT Not After : Dec 22 04:01:25 2025 GMT Subject: CN=fe42ffbbd2a3b068de1c85047c2a69950a55daa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ae:9e:44:d6:ac:27:24:45:31:4d:30:4f:a1: 36:f1:06:85:30:f5:65:c9:cb:c4:45:3d:8c:34:bc: f1:3d:91:e5:85:30:0a:56:af:7c:93:bf:b8:9a:4d: b7:c4:cd:e2:d7:19:d0:53:5c:e5:2b:32:6e:0f:08: d1:60:f5:7d:35:13:cd:1f:d7:62:40:13:25:2a:35: 5e:47:be:a3:97:10:b7:12:fa:a6:4d:3f:f3:36:fd: f0:f9:47:25:a4:77:1d:c7:7f:92:74:ef:61:31:33: 46:9b:85:b6:1e:2a:5f:88:ac:ce:dd:42:2f:96:fb: 03:40:4c:50:74:15:08:3d:71:9e:76:68:09:2d:73: 72:40:9a:81:ef:d8:d6:b1:33:99:bb:8e:16:e1:6e: f7:3e:17:36:53:1a:7a:4d:ed:ab:11:31:7c:d5:c5: 16:d0:9a:46:78:26:e4:81:d8:8a:79:9f:03:ef:59: 87:8e:2a:56:55:de:07:b2:a7:e2:94:9c:ca:ca:55: 7a:9a:78:e7:f3:94:33:68:c4:3c:3e:ac:2c:b2:8e: ae:4a:03:26:9d:ad:28:7c:47:ac:cd:0b:a5:4c:34: be:cb:4e:5a:3c:95:8a:89:01:fe:74:70:78:ac:73: c0:56:fb:2b:69:03:9c:7c:bc:d9:8b:b8:05:52:b2: 9f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:42:FF:BB:D2:A3:B0:68:DE:1C:85:04:7C:2A:69:95:0A:55:DA:A2 X509v3 Authority Key Identifier: keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:14:e0:73:52:da:a2:2a:11:c9:82:2b:6e:e0:f0:67:24:9e: 7b:50:c9:71:85:16:89:94:7b:78:ae:0c:1f:c8:a2:b0:c3:00: 7a:48:5e:d7:1c:4a:21:a3:c0:2c:3b:5a:15:bd:07:97:ac:95: 52:28:65:91:e1:bd:79:67:c3:86:94:16:f8:80:64:ab:29:8e: 01:0e:87:df:ca:1f:21:c3:46:3e:d5:02:71:c9:3c:70:16:80: 0b:4e:19:52:e4:bb:51:48:51:70:44:e1:31:65:7a:5c:00:8f: 61:07:ed:c7:80:31:d8:11:a5:1b:ef:bb:fe:12:04:3a:a1:b0: 40:e6:2d:cb:52:58:fd:21:fd:12:d1:f6:f4:50:c0:a4:de:91: ee:9a:c5:e1:30:81:5d:e0:65:9f:12:86:2f:9e:65:b8:20:d5: 7c:8b:0e:36:20:8c:df:ab:04:6f:0d:c5:9f:92:3a:7c:94:0e: f3:6f:52:4c:8b:91:81:c9:06:f2:81:00:0e:53:92:68:d0:10: 3a:c7:16:fc:97:d9:f6:b0:6f:41:06:73:bd:d8:af:9b:2c:e7: fb:3c:84:6f:d0:19:39:89:8f:d7:cc:90:51:eb:17:8d:24:7b: 1d:76:e6:d9:fd:46:03:55:4b:8b:96:cc:31:76:d3:c3:ab:cd: 91:17:06:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/Eb5HnlDJC2orjteB7zpCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZjkzMTJjZWE1YWE3NDM4YjRkOTBjMDgzNmM4MmYwNTBh MmEwMGEwHhcNMjUxMjIxMDQwMTI1WhcNMjUxMjIyMDQwMTI1WjAzMTEwLwYDVQQD EyhmZTQyZmZiYmQyYTNiMDY4ZGUxYzg1MDQ3YzJhNjk5NTBhNTVkYWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2q6eRNasJyRFMU0wT6E28QaFMPVl ycvERT2MNLzxPZHlhTAKVq98k7+4mk23xM3i1xnQU1zlKzJuDwjRYPV9NRPNH9di QBMlKjVeR76jlxC3EvqmTT/zNv3w+UclpHcdx3+SdO9hMTNGm4W2HipfiKzO3UIv lvsDQExQdBUIPXGedmgJLXNyQJqB79jWsTOZu44W4W73Phc2Uxp6Te2rETF81cUW 0JpGeCbkgdiKeZ8D71mHjipWVd4HsqfilJzKylV6mnjn85QzaMQ8Pqwsso6uSgMm na0ofEeszQulTDS+y05aPJWKiQH+dHB4rHPAVvsraQOcfLzZi7gFUrKf3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP5C/7vSo7Bo3hyFBHwqaZUKVdqiMB8GA1UdIwQY MBaAFB75MSzqWqdDi02QwINsgvBQoqAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lODQ0ZTgtZDJmMC00NTE0LWI0MDUt MGI4MDFiZjgwZDUzLzEvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9lODQ0ZTgtZDJmMC00NTE0LWI0MDUtMGI4MDFiZjgwZDUz LzEvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZhTgc1La oioRyYIrbuDwZySee1DJcYUWiZR7eK4MH8iisMMAekhe1xxKIaPALDtaFb0Hl6yV UihlkeG9eWfDhpQW+IBkqymOAQ6H38ofIcNGPtUCcck8cBaAC04ZUuS7UUhRcETh MWV6XACPYQftx4Ax2BGlG++7/hIEOqGwQOYty1JY/SH9EtH29FDApN6R7prF4TCB XeBlnxKGL55luCDVfIsONiCM36sEbw3Fn5I6fJQO829STIuRgckG8oEADlOSaNAQ OscW/JfZ9rBvQQZzvdivmyzn+zyEb9AZOYmP18yQUesXjSR7HXbm2f1GA1VLi5bM MXbTw6vNkRcGaQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:51:42 2025 by rpki-client