This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft File: hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft (raw, json) Hash identifier: DoIoAVFyQ4/GbhM/iB1ZVJpmuXJpsgI1269/ApX+1bY= Subject key identifier: 68:33:28:4C:17:DE:84:16:54:86:04:CF:53:CE:E7:F6:EC:23:08:0E Authority key identifier: 86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F Certificate issuer: /CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f Certificate serial: 019AF088DE7F052272CCBD06F7F8E00CD672 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft Manifest number: 10F0 Signing time: Fri 05 Dec 2025 22:01:32 +0000 Manifest this update: Fri 05 Dec 2025 22:01:32 +0000 Manifest next update: Sat 06 Dec 2025 22:01:32 +0000 Files and hashes: 1: hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl (hash: p0W6d1Tv+atdCLqb2a8PoJxKxAuzUCer7Aecdj5KmuY=) 2: kDscGP6Kvv2ErG5ZiDcwGfJJgOo.roa (hash: sDpLdqtWZqa+OqK0PcGk2ZySrrYvy+43dMtNOAb22Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:de:7f:05:22:72:cc:bd:06:f7:f8:e0:0c:d6:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f4129af869f6f5c85a7388808aad0ac0ba9c4f Validity Not Before: Dec 5 22:01:32 2025 GMT Not After : Dec 6 22:01:32 2025 GMT Subject: CN=6833284c17de8416548604cf53cee7f6ec23080e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b2:b7:12:b2:d0:4c:7a:15:e6:a3:d8:8b:55: a0:ff:c8:a8:1f:43:35:70:96:cf:b1:f5:bf:1c:3a: 30:7b:1b:bf:cc:e7:8a:52:c0:e7:f3:11:ce:74:05: 1f:99:9d:14:6f:db:e9:12:0e:fc:cb:fe:12:ff:ce: 5f:c8:81:1b:49:cc:cc:54:f8:96:b2:86:b0:59:72: 0d:7a:df:db:65:63:a8:c6:cc:d9:a0:7d:c1:0d:6b: 82:e0:b6:26:f3:57:14:92:d7:2d:80:bc:cc:c1:4f: c6:c1:48:7c:6c:c3:b3:9c:ac:5f:59:1d:73:05:e6: a8:8e:05:c4:9c:ad:83:89:32:34:aa:67:a7:a9:0a: f2:c0:39:7b:ed:ad:f3:e9:d2:bd:cd:e1:1f:38:80: ca:d6:8b:c1:52:bd:70:76:83:94:ee:e9:2e:c2:f4: 19:58:ac:3d:61:5c:7e:0d:f7:d8:d7:9f:ea:4e:d9: 9e:d2:22:3a:e0:97:6d:e7:cb:1c:93:0d:d5:98:06: d0:04:fd:97:ef:db:49:be:99:a7:15:35:92:4d:a6: 9d:4b:cf:89:de:81:bc:60:7c:1a:7f:44:df:77:4c: 0d:ca:ab:f9:dd:22:56:64:93:35:3c:cc:fc:59:70: 7c:69:76:ea:38:1e:33:4c:dd:c4:b8:95:fe:44:e4: b3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:33:28:4C:17:DE:84:16:54:86:04:CF:53:CE:E7:F6:EC:23:08:0E X509v3 Authority Key Identifier: keyid:86:F4:12:9A:F8:69:F6:F5:C8:5A:73:88:80:8A:AD:0A:C0:BA:9C:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvQSmvhp9vXIWnOIgIqtCsC6nE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3191ec-ce8f-4576-a940-cc50107ea146/1/hvQSmvhp9vXIWnOIgIqtCsC6nE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:40:8c:26:c3:b8:66:ce:29:51:40:d0:8f:42:30:21:29:61: 25:95:59:61:07:80:d6:8f:61:39:69:03:5b:85:12:9c:75:af: 67:aa:b9:8e:4a:bd:0d:10:69:f5:de:9b:9e:cb:ca:8f:e2:c5: f2:ad:c3:26:54:bc:ab:fd:5a:30:9a:4f:ff:92:3c:30:6a:07: be:dc:2c:2c:c0:bc:38:12:d6:91:f4:18:e8:3f:5e:a9:ce:ce: 81:54:98:de:d5:a4:44:c0:59:3d:1b:a8:18:a1:95:4b:fb:22: f8:86:88:41:aa:e7:e8:5b:5c:16:70:60:fb:ed:42:a8:dc:10: 77:d4:7c:ef:72:32:76:de:81:5e:d6:ee:08:39:d4:1c:7d:b2: a0:e8:f7:01:d9:b7:38:fd:9c:1f:73:b0:65:40:f2:d6:a8:fc: 83:b8:0c:60:99:a3:4e:d0:11:da:72:23:51:71:52:3e:f3:3e: 8a:58:b8:26:b8:0e:d0:d1:de:e1:3f:f2:f5:a6:10:d6:c7:8f: 58:86:a0:a8:35:a6:8e:70:ff:57:a5:43:16:8a:5b:7d:51:c6: 22:bb:fc:64:d7:83:ba:80:7b:fd:c4:e7:a1:47:ea:77:ab:bd: 7e:43:3b:3e:3a:6a:1a:f7:ac:71:62:47:51:07:41:2a:79:fa: 85:a3:81:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiN5/BSJyzL0G9/jgDNZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZjQxMjlhZjg2OWY2ZjVjODVhNzM4ODgwOGFhZDBhYzBi YTljNGYwHhcNMjUxMjA1MjIwMTMyWhcNMjUxMjA2MjIwMTMyWjAzMTEwLwYDVQQD Eyg2ODMzMjg0YzE3ZGU4NDE2NTQ4NjA0Y2Y1M2NlZTdmNmVjMjMwODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbK3ErLQTHoV5qPYi1Wg/8ioH0M1 cJbPsfW/HDowexu/zOeKUsDn8xHOdAUfmZ0Ub9vpEg78y/4S/85fyIEbSczMVPiW soawWXINet/bZWOoxszZoH3BDWuC4LYm81cUktctgLzMwU/GwUh8bMOznKxfWR1z BeaojgXEnK2DiTI0qmenqQrywDl77a3z6dK9zeEfOIDK1ovBUr1wdoOU7ukuwvQZ WKw9YVx+DffY15/qTtme0iI64Jdt58sckw3VmAbQBP2X79tJvpmnFTWSTaadS8+J 3oG8YHwaf0Tfd0wNyqv53SJWZJM1PMz8WXB8aXbqOB4zTN3EuJX+ROSz3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgzKEwX3oQWVIYEz1PO5/bsIwgOMB8GA1UdIwQY MBaAFIb0Epr4afb1yFpziICKrQrAupxPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAt Y2M1MDEwN2VhMTQ2LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8zMTkxZWMtY2U4Zi00NTc2LWE5NDAtY2M1MDEwN2VhMTQ2 LzEvaHZRU212aHA5dlhJV25PSWdJcXRDc0M2bkU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUCMJsO4 Zs4pUUDQj0IwISlhJZVZYQeA1o9hOWkDW4USnHWvZ6q5jkq9DRBp9d6bnsvKj+LF 8q3DJlS8q/1aMJpP/5I8MGoHvtwsLMC8OBLWkfQY6D9eqc7OgVSY3tWkRMBZPRuo GKGVS/si+IaIQarn6FtcFnBg++1CqNwQd9R873Iydt6BXtbuCDnUHH2yoOj3Adm3 OP2cH3OwZUDy1qj8g7gMYJmjTtAR2nIjUXFSPvM+ili4JrgO0NHe4T/y9aYQ1seP WIagqDWmjnD/V6VDFopbfVHGIrv8ZNeDuoB7/cTnoUfqd6u9fkM7PjpqGvescWJH UQdBKnn6haOB9g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:15:31 2025 by rpki-client