This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft File: HvpZajEmrOApxtcNUpJX4Hs4ugY.mft (raw, json) Hash identifier: lfpt40MJCcEmneDDHRL9Y5jgcna/eSvE14+ZAYyhDVs= Subject key identifier: D5:7E:30:AB:78:C2:37:74:79:4B:B7:D5:93:3C:F2:F7:BC:ED:5F:EF Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06 Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06 Certificate serial: 019AF3897F0170FE60CB73F35E292C387D21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 12:01:05 +0000 Manifest this update: Sat 06 Dec 2025 12:01:05 +0000 Manifest next update: Sun 07 Dec 2025 12:01:05 +0000 Files and hashes: 1: 3rLuW8QzyohR5G8GlpoQPu-Q6-s.roa (hash: F/8n4kYq76m4ZS+34MKi7W7c5dmdl0PtvWuG8cLJRrQ=) 2: 5ExX7PElDwhZvsqUirscS-kfnho.roa (hash: bqRW9TpS9PZv6OIHrk3qUk9RHaZcJhV08bnl4u3kvQE=) 3: HvpZajEmrOApxtcNUpJX4Hs4ugY.crl (hash: rxZfwQZwJmE7cL5g+ms8lyhD6HwbSPFGW75E4lewC5k=) 4: SUGGbjb1_Jk1qcT2JM8WcjQsO3o.roa (hash: oGVNqEXP6azb1lMS8LZZ+mpr73t/MEzsv974PdYYkYc=) 5: Z1aPPPc81U2W2p-hUbb2wEiLSrc.roa (hash: 2YYRPX4gY5ODPttZebzHcbGfP4UENAWKSJvWHEPrLO0=) 6: n-W5m8Lx-i-ynu-cgERA98e1TOA.roa (hash: 4MuuW1m/TV8O5IZ0i/ayNAC7gzR7V1teSLC1JE5/iDs=) 7: pMSZccnz2cyq4EAmIRmDcUPtCn0.roa (hash: rRJO86ohCtFwFSEvJg481KQrtUgLqQRd6A69YZTm2Ng=) 8: ySmmDjcV5o8HMr8fci-zFbiYdNg.roa (hash: QRYJ/tIaqmXv+2YeufSiFwnuiLCPfX4BPxDANJPYOl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:7f:01:70:fe:60:cb:73:f3:5e:29:2c:38:7d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06 Validity Not Before: Dec 6 12:01:05 2025 GMT Not After : Dec 7 12:01:05 2025 GMT Subject: CN=d57e30ab78c23774794bb7d5933cf2f7bced5fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fb:c7:4a:9f:b4:4a:e8:1d:1f:e9:9f:0d:1f: a2:d3:c2:18:00:7a:3c:23:c5:a4:59:81:80:87:05: f8:ee:56:51:56:1b:7c:be:62:7a:2a:aa:82:c4:e2: af:36:9a:63:0e:67:cf:e2:15:5f:f1:50:44:25:78: 8e:f0:fa:17:69:ea:43:5d:fd:25:1f:ff:63:aa:00: fd:a7:3c:2b:7a:0a:61:e4:a1:b5:96:ef:c0:d3:7c: a0:17:26:d9:65:a2:b4:11:f3:e6:41:ad:39:0e:27: c3:66:22:07:12:e1:a4:54:da:8f:19:41:1a:45:e3: 0f:56:4e:6d:6c:8a:bc:58:cf:8a:ea:a7:c2:7e:e3: cf:e5:a0:cc:a4:f1:55:81:4e:49:c7:1b:c5:78:a6: 0b:23:a8:38:e3:03:cb:09:cb:fa:22:88:1b:fa:b7: 53:ea:10:bd:e7:39:8b:0f:d7:b6:fb:6e:c9:6a:3e: 4e:5e:ab:0e:fa:30:5f:7b:bf:34:e3:da:b3:f6:d0: 1e:d7:ad:d9:e3:d0:70:41:06:e3:e2:33:a7:41:d9: 16:de:ad:6f:9d:fb:cf:b0:9b:c2:9f:63:8e:20:f4: cc:a3:76:73:1c:00:e8:9f:f8:96:73:98:e2:f2:c0: 27:f2:09:32:88:81:ef:2c:52:30:94:c1:2d:c8:1e: 1c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7E:30:AB:78:C2:37:74:79:4B:B7:D5:93:3C:F2:F7:BC:ED:5F:EF X509v3 Authority Key Identifier: keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:dc:ba:90:df:4c:55:4a:ea:f4:98:c9:7c:14:c0:c7:39:04: 7c:c5:88:78:04:e8:d2:3c:d7:92:18:86:ec:58:b0:f9:71:5b: 0f:a5:ba:1f:0e:b9:4b:13:7a:82:8f:69:da:6a:d0:1a:ba:f6: 6c:42:74:f4:73:8e:18:4e:3e:99:b0:bc:05:f6:59:a2:6e:2a: 93:6a:68:ca:31:1b:bb:95:34:2d:39:33:ec:36:5d:9f:c1:6f: e4:34:e4:59:00:88:00:0d:62:78:0c:48:8d:b8:dc:32:3d:3c: 39:4e:27:4b:6e:11:0a:ba:77:3a:fa:72:7b:75:c8:b8:06:78: ac:6e:06:ae:52:57:9c:7c:ba:15:8b:6a:6e:d1:d9:70:05:84: de:e1:c3:da:f7:af:53:4d:27:a2:fc:6c:1d:22:ab:bb:63:4b: 71:31:e1:8f:10:6c:ac:57:77:aa:40:f1:3a:76:48:5c:b9:c2: 05:7a:24:25:56:83:60:a6:1d:21:e8:99:69:90:39:fc:e3:c7: 92:ea:fd:e5:52:0a:bf:fd:41:ff:ef:7a:eb:f0:e2:4b:1f:dc: 11:e0:1f:e9:d6:30:36:e2:0b:20:d6:39:de:b7:93:72:7f:46: c3:4a:33:67:69:58:11:83:90:c9:b1:3e:b0:ad:f1:77:11:dd: f1:95:1e:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziX8BcP5gy3PzXiksOH0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZmE1OTZhMzEyNmFjZTAyOWM2ZDcwZDUyOTI1N2UwN2Iz OGJhMDYwHhcNMjUxMjA2MTIwMTA1WhcNMjUxMjA3MTIwMTA1WjAzMTEwLwYDVQQD EyhkNTdlMzBhYjc4YzIzNzc0Nzk0YmI3ZDU5MzNjZjJmN2JjZWQ1ZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/vHSp+0SugdH+mfDR+i08IYAHo8 I8WkWYGAhwX47lZRVht8vmJ6KqqCxOKvNppjDmfP4hVf8VBEJXiO8PoXaepDXf0l H/9jqgD9pzwregph5KG1lu/A03ygFybZZaK0EfPmQa05DifDZiIHEuGkVNqPGUEa ReMPVk5tbIq8WM+K6qfCfuPP5aDMpPFVgU5JxxvFeKYLI6g44wPLCcv6Iogb+rdT 6hC95zmLD9e2+27Jaj5OXqsO+jBfe78049qz9tAe163Z49BwQQbj4jOnQdkW3q1v nfvPsJvCn2OOIPTMo3ZzHADon/iWc5ji8sAn8gkyiIHvLFIwlMEtyB4cpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNV+MKt4wjd0eUu31ZM88ve87V/vMB8GA1UdIwQY MBaAFB76WWoxJqzgKcbXDVKSV+B7OLoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODIt OWQwYzYyMDczNWYxLzEvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODItOWQwYzYyMDczNWYx LzEvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9y6kN9M VUrq9JjJfBTAxzkEfMWIeATo0jzXkhiG7Fiw+XFbD6W6Hw65SxN6go9p2mrQGrr2 bEJ09HOOGE4+mbC8BfZZom4qk2poyjEbu5U0LTkz7DZdn8Fv5DTkWQCIAA1ieAxI jbjcMj08OU4nS24RCrp3Ovpye3XIuAZ4rG4GrlJXnHy6FYtqbtHZcAWE3uHD2vev U00novxsHSKru2NLcTHhjxBsrFd3qkDxOnZIXLnCBXokJVaDYKYdIeiZaZA5/OPH kur95VIKv/1B/+966/DiSx/cEeAf6dYwNuILINY53reTcn9Gw0ozZ2lYEYOQybE+ sK3xdxHd8ZUedw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:12:41 2025 by rpki-client