This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft File: hVLmDnmh3nUzQ9eBW4cMloDArn8.mft (raw, json) Hash identifier: +VRgtTQBtmYobIGYwG/BV/mhe9rSwq/9ryY7u+jXmX8= Subject key identifier: AA:FC:0D:E0:30:20:6E:07:4C:F7:73:0B:92:83:FD:67:9D:58:DA:6F Authority key identifier: 85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F Certificate issuer: /CN=8552e60e79a1de753343d7815b870c9680c0ae7f Certificate serial: 019AF50B581090EC11DDD02FE760E7B6A7DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft Manifest number: 0D34 Signing time: Sat 06 Dec 2025 19:02:32 +0000 Manifest this update: Sat 06 Dec 2025 19:02:32 +0000 Manifest next update: Sun 07 Dec 2025 19:02:32 +0000 Files and hashes: 1: hVLmDnmh3nUzQ9eBW4cMloDArn8.crl (hash: AtVqOAorrqAjbzOZEbFJmAF8+ridDBfdnWfR4gqGi5Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:58:10:90:ec:11:dd:d0:2f:e7:60:e7:b6:a7:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8552e60e79a1de753343d7815b870c9680c0ae7f Validity Not Before: Dec 6 19:02:32 2025 GMT Not After : Dec 7 19:02:32 2025 GMT Subject: CN=aafc0de030206e074cf7730b9283fd679d58da6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:76:94:de:a3:f2:53:de:dd:80:ed:4f:04:5a: 98:cd:94:64:89:9c:39:e0:66:bf:b5:ce:59:52:9a: 8b:f8:cc:81:fc:92:1f:76:8c:e8:fe:1e:ae:d6:a5: f3:9b:ab:78:f7:1d:0f:d4:9d:5f:c4:c2:69:a1:1f: d9:6f:4e:07:28:0d:0a:e6:b7:15:7c:56:17:b6:74: df:ca:98:34:af:37:8e:33:9a:15:1f:5a:15:6e:28: 06:24:d5:59:84:d3:53:6c:6d:4d:ff:02:24:29:ff: e6:30:91:c1:51:83:95:4b:5a:c2:5e:b6:97:f4:81: 17:22:53:d1:c4:2a:61:4f:93:2b:0d:fe:0e:36:38: b4:88:7a:6a:f5:88:4b:b6:f1:76:49:b6:c3:e2:57: b3:50:02:cd:cc:d1:e5:de:71:74:f6:87:74:a8:2a: 9f:0e:ce:68:61:d1:81:fb:1f:25:46:6a:95:a0:0d: 1d:6c:c1:82:bb:49:6e:8e:59:28:f7:7f:7c:df:fc: d8:4b:ea:1d:d4:c3:d0:d2:12:84:3a:7e:d2:28:89: 0d:88:b2:4b:93:69:6d:54:b1:f8:cb:1c:be:20:45: b0:bf:b4:48:de:07:8b:7e:36:a6:e8:90:04:0b:ba: 29:28:1c:d2:92:1d:df:49:fa:dd:33:c1:4d:da:6e: 7d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FC:0D:E0:30:20:6E:07:4C:F7:73:0B:92:83:FD:67:9D:58:DA:6F X509v3 Authority Key Identifier: keyid:85:52:E6:0E:79:A1:DE:75:33:43:D7:81:5B:87:0C:96:80:C0:AE:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVLmDnmh3nUzQ9eBW4cMloDArn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3724d3-212f-48bf-a2c1-9ffa60db8f71/1/hVLmDnmh3nUzQ9eBW4cMloDArn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:40:e1:7c:73:fe:b8:b7:f7:d4:06:88:d0:de:7e:09:41:db: db:96:f7:37:a9:b2:e3:aa:c0:57:84:5e:2a:f1:b5:3d:c1:51: ac:7c:6a:82:dd:5b:fe:11:af:9a:f7:2d:e2:00:23:1d:f1:88: 3c:90:95:aa:f0:7d:a7:c9:94:bf:f3:35:fc:6b:0a:e4:58:1d: 0c:a9:b2:6d:8b:ff:7e:3e:1c:d4:2b:d3:50:34:69:41:35:41: 56:2c:02:79:69:98:29:51:5c:3a:b8:d4:3a:2b:de:80:fb:17: 63:08:f3:bb:45:db:50:65:48:6c:05:72:c4:59:2c:2a:16:71: 18:9c:31:58:fb:3a:b7:f3:d4:1c:1e:75:4f:b0:5b:d8:34:e8: f9:28:2e:0d:c5:f3:8e:e8:4f:1a:23:33:f4:c6:e6:20:4e:36: 2f:92:f5:d3:39:3e:9f:6b:c9:66:7d:58:b8:52:2a:8a:a4:e4: a1:50:e6:14:e6:d6:15:8c:09:df:da:cb:be:10:a4:50:ab:aa: 50:35:f4:f3:e0:45:f4:46:d3:e9:98:36:c0:1b:6e:f9:21:b0: 3b:73:93:99:cf:cd:28:9a:82:ea:34:73:fd:2b:6c:c1:c4:de: 6f:1c:62:f2:90:32:43:26:4f:04:1d:4a:a2:43:37:01:9c:41: 2b:55:66:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C1gQkOwR3dAv52DntqfbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NTJlNjBlNzlhMWRlNzUzMzQzZDc4MTViODcwYzk2ODBj MGFlN2YwHhcNMjUxMjA2MTkwMjMyWhcNMjUxMjA3MTkwMjMyWjAzMTEwLwYDVQQD EyhhYWZjMGRlMDMwMjA2ZTA3NGNmNzczMGI5MjgzZmQ2NzlkNThkYTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnaU3qPyU97dgO1PBFqYzZRkiZw5 4Ga/tc5ZUpqL+MyB/JIfdozo/h6u1qXzm6t49x0P1J1fxMJpoR/Zb04HKA0K5rcV fFYXtnTfypg0rzeOM5oVH1oVbigGJNVZhNNTbG1N/wIkKf/mMJHBUYOVS1rCXraX 9IEXIlPRxCphT5MrDf4ONji0iHpq9YhLtvF2SbbD4lezUALNzNHl3nF09od0qCqf Ds5oYdGB+x8lRmqVoA0dbMGCu0lujlko93983/zYS+od1MPQ0hKEOn7SKIkNiLJL k2ltVLH4yxy+IEWwv7RI3geLfjam6JAEC7opKBzSkh3fSfrdM8FN2m59MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKr8DeAwIG4HTPdzC5KD/WedWNpvMB8GA1UdIwQY MBaAFIVS5g55od51M0PXgVuHDJaAwK5/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFZMbURubWgzblV6UTllQlc0Y01sb0RBcm44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zNzI0ZDMtMjEyZi00OGJmLWEyYzEt OWZmYTYwZGI4ZjcxLzEvaFZMbURubWgzblV6UTllQlc0Y01sb0RBcm44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8zNzI0ZDMtMjEyZi00OGJmLWEyYzEtOWZmYTYwZGI4Zjcx LzEvaFZMbURubWgzblV6UTllQlc0Y01sb0RBcm44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA0DhfHP+ uLf31AaI0N5+CUHb25b3N6my46rAV4ReKvG1PcFRrHxqgt1b/hGvmvct4gAjHfGI PJCVqvB9p8mUv/M1/GsK5FgdDKmybYv/fj4c1CvTUDRpQTVBViwCeWmYKVFcOrjU OivegPsXYwjzu0XbUGVIbAVyxFksKhZxGJwxWPs6t/PUHB51T7Bb2DTo+SguDcXz juhPGiMz9MbmIE42L5L10zk+n2vJZn1YuFIqiqTkoVDmFObWFYwJ39rLvhCkUKuq UDX08+BF9EbT6Zg2wBtu+SGwO3OTmc/NKJqC6jRz/StswcTebxxi8pAyQyZPBB1K okM3AZxBK1Vm8w== -----END CERTIFICATE-----Generated at Sat Dec 6 21:43:32 2025 by rpki-client