This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft File: HRV4JMY4xxige1NeDYJMskr8Bww.mft (raw, json) Hash identifier: 1lthweRCEMXxITHwq3qANc/e6AX+ZE/nxeFIpvBu8zI= Subject key identifier: 86:CA:0A:14:94:48:DD:0E:68:29:58:21:B3:37:9D:4B:3E:E7:BE:D5 Authority key identifier: 1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C Certificate issuer: /CN=1d157824c638c718a07b535e0d824cb24afc070c Certificate serial: 019AF12D87058B3AFBF7EBD78F85F686A541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 01:01:24 +0000 Manifest this update: Sat 06 Dec 2025 01:01:24 +0000 Manifest next update: Sun 07 Dec 2025 01:01:24 +0000 Files and hashes: 1: DQA5wbdLSEm4_F0k0CrcOYfl8nk.roa (hash: nSw+Z2r+tEaSc2AQgef90FTr8oKptJDQ2v6jPAQnhGM=) 2: HRV4JMY4xxige1NeDYJMskr8Bww.crl (hash: YfJ2EJJ7Mm/OQuPeEWbVSKzqalVphkZz6XQIKBCAApc=) 3: HuQWl8CvzbCRxNpw5HY0jCj3ToQ.roa (hash: XR9eo2BAwqzrJQjS2GXKNqFXgZew/uNp0g76elzf6UI=) 4: q-KsgHc87yurkiTPrGB6_ENn-Sg.roa (hash: cFavBWqarVDA4XfAipmh7/d8krk6AEiGb/atvWyd1pQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:87:05:8b:3a:fb:f7:eb:d7:8f:85:f6:86:a5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d157824c638c718a07b535e0d824cb24afc070c Validity Not Before: Dec 6 01:01:24 2025 GMT Not After : Dec 7 01:01:24 2025 GMT Subject: CN=86ca0a149448dd0e68295821b3379d4b3ee7bed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:50:08:3c:a3:55:56:ee:ff:65:8b:72:fe:88: 62:23:5d:f2:3e:91:98:28:6a:c8:e9:51:33:8e:09: 14:e2:83:7a:79:6c:ea:04:d3:95:66:4c:77:3d:f1: 97:8b:ba:29:b8:31:c3:22:ea:ab:aa:9b:4d:10:10: 95:a4:c9:88:43:ff:0f:a7:a3:b8:ec:13:81:f9:28: f5:4b:5a:9e:45:f3:fa:28:cf:25:78:77:a7:60:52: c3:2a:60:d1:9d:77:20:75:a8:8d:ee:4d:e4:9d:41: 70:fa:25:4a:16:19:97:c3:df:66:f2:85:cf:77:48: 3a:3f:2f:cb:12:ee:a6:6f:f3:c7:ae:c5:92:97:2d: 08:aa:c2:fa:ec:f2:0d:fe:be:00:b2:33:d4:d9:36: 1d:d2:e9:e3:2f:cd:37:e1:ac:86:5a:e7:5c:76:37: 85:30:47:68:ab:68:f8:20:ec:83:b1:da:23:94:a3: ea:ff:57:bd:b8:c2:f9:15:a5:e4:14:9a:31:77:4c: d3:3b:b3:96:88:a6:94:11:40:d7:d5:57:07:10:a9: d7:7c:03:f2:4e:77:69:ce:9e:f0:ba:c6:ad:86:8a: 78:04:5d:06:16:13:2f:43:c5:6f:94:a6:26:a4:c1: 02:21:d2:41:c2:d9:ef:55:2b:ba:4d:93:9c:bd:35: 36:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:CA:0A:14:94:48:DD:0E:68:29:58:21:B3:37:9D:4B:3E:E7:BE:D5 X509v3 Authority Key Identifier: keyid:1D:15:78:24:C6:38:C7:18:A0:7B:53:5E:0D:82:4C:B2:4A:FC:07:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HRV4JMY4xxige1NeDYJMskr8Bww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/e6ac01-8bfb-4ef3-bfa7-e57440260be0/1/HRV4JMY4xxige1NeDYJMskr8Bww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:34:78:74:6c:08:e3:2d:d2:a8:80:d6:f6:3a:d9:23:78:e6: 07:c2:8e:86:b4:00:7d:c5:be:f1:1b:2b:e7:6a:83:70:12:54: 98:1d:bc:1f:aa:e6:be:e0:91:26:3f:09:fe:05:25:ac:ac:3a: de:d6:db:35:bf:d1:68:8b:b4:b9:c3:d4:1f:95:9c:12:68:b3: 00:f5:25:3f:aa:0e:c2:a0:f7:01:9d:eb:32:25:63:02:49:9f: 5c:4c:6d:07:92:cb:11:65:ce:b5:13:ca:e8:f2:f3:e0:31:79: bd:01:68:3c:2e:bc:d3:99:f6:ac:54:69:ac:62:be:0f:2f:05: de:ce:49:af:c5:18:35:71:05:c4:fa:14:57:dd:f0:22:83:71: c3:f4:a2:e0:36:2b:01:72:2c:7b:80:9a:37:bc:c8:32:71:eb: a4:d7:60:1e:b7:1c:90:3d:e1:68:aa:5a:4e:3b:ec:4d:27:87: fc:ca:54:ec:13:a2:87:48:fc:fa:76:0b:cb:f7:2a:f1:20:69: fa:73:a6:b9:6e:c2:c2:10:c9:e9:7c:9f:97:93:0b:bb:e9:0b: fb:ba:6a:2c:3d:e4:1c:7a:78:6e:3e:bb:b1:81:ca:1a:7b:ee: 36:d3:ad:f4:49:d1:58:95:3c:a4:8f:95:61:fa:8a:b3:df:d9: 8a:53:66:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLYcFizr79+vXj4X2hqVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMTU3ODI0YzYzOGM3MThhMDdiNTM1ZTBkODI0Y2IyNGFm YzA3MGMwHhcNMjUxMjA2MDEwMTI0WhcNMjUxMjA3MDEwMTI0WjAzMTEwLwYDVQQD Eyg4NmNhMGExNDk0NDhkZDBlNjgyOTU4MjFiMzM3OWQ0YjNlZTdiZWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlAIPKNVVu7/ZYty/ohiI13yPpGY KGrI6VEzjgkU4oN6eWzqBNOVZkx3PfGXi7opuDHDIuqrqptNEBCVpMmIQ/8Pp6O4 7BOB+Sj1S1qeRfP6KM8leHenYFLDKmDRnXcgdaiN7k3knUFw+iVKFhmXw99m8oXP d0g6Py/LEu6mb/PHrsWSly0IqsL67PIN/r4AsjPU2TYd0unjL8034ayGWudcdjeF MEdoq2j4IOyDsdojlKPq/1e9uML5FaXkFJoxd0zTO7OWiKaUEUDX1VcHEKnXfAPy Tndpzp7wusathop4BF0GFhMvQ8VvlKYmpMECIdJBwtnvVSu6TZOcvTU26wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbKChSUSN0OaClYIbM3nUs+577VMB8GA1UdIwQY MBaAFB0VeCTGOMcYoHtTXg2CTLJK/AcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFJWNEpNWTR4eGlnZTFOZURZSk1za3I4Qnd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lNmFjMDEtOGJmYi00ZWYzLWJmYTct ZTU3NDQwMjYwYmUwLzEvSFJWNEpNWTR4eGlnZTFOZURZSk1za3I4Qnd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9lNmFjMDEtOGJmYi00ZWYzLWJmYTctZTU3NDQwMjYwYmUw LzEvSFJWNEpNWTR4eGlnZTFOZURZSk1za3I4Qnd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDR4dGwI 4y3SqIDW9jrZI3jmB8KOhrQAfcW+8Rsr52qDcBJUmB28H6rmvuCRJj8J/gUlrKw6 3tbbNb/RaIu0ucPUH5WcEmizAPUlP6oOwqD3AZ3rMiVjAkmfXExtB5LLEWXOtRPK 6PLz4DF5vQFoPC6805n2rFRprGK+Dy8F3s5Jr8UYNXEFxPoUV93wIoNxw/Si4DYr AXIse4CaN7zIMnHrpNdgHrcckD3haKpaTjvsTSeH/MpU7BOih0j8+nYLy/cq8SBp +nOmuW7CwhDJ6Xyfl5MLu+kL+7pqLD3kHHp4bj67sYHKGnvuNtOt9EnRWJU8pI+V YfqKs9/ZilNmgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:46 2025 by rpki-client