This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft File: HvSYurfzu5cWbaV5KUqLRxRQ51w.mft (raw, json) Hash identifier: gY1r3mBCmzjbPLmdROjKQVTjP1rS2/fmesjBnodVHNI= Subject key identifier: EF:0F:55:65:E1:B5:18:45:9F:1E:F1:DA:17:68:A1:82:0B:FF:C6:E2 Authority key identifier: 1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C Certificate issuer: /CN=1ef498bab7f3bb97166da579294a8b471450e75c Certificate serial: 019AF1D1E2407695FA9B159454D6DC65841A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft Manifest number: 07BF Signing time: Sat 06 Dec 2025 04:00:55 +0000 Manifest this update: Sat 06 Dec 2025 04:00:55 +0000 Manifest next update: Sun 07 Dec 2025 04:00:55 +0000 Files and hashes: 1: F7xrxdbn_XCb6hAz8sT6b-tUYk8.roa (hash: rn01kFBYtcMCz9gh8LCxCPZJ6H8UjKqO4aqrKRZuT5A=) 2: HvSYurfzu5cWbaV5KUqLRxRQ51w.crl (hash: dQwVDTCY8RkNJ7Mr9LJB6xlEroIr05hLGY2QVRre64Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e2:40:76:95:fa:9b:15:94:54:d6:dc:65:84:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ef498bab7f3bb97166da579294a8b471450e75c Validity Not Before: Dec 6 04:00:55 2025 GMT Not After : Dec 7 04:00:55 2025 GMT Subject: CN=ef0f5565e1b518459f1ef1da1768a1820bffc6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:dc:2c:89:45:e6:f0:c2:59:9e:d7:86:38: 4d:8e:24:b1:b3:06:56:49:d9:db:fe:9b:e4:ca:9c: 9a:8b:2f:ea:e1:7e:ec:60:69:6c:1e:07:a4:8f:15: 42:7c:be:e9:e5:27:0f:1c:ef:f6:d4:0e:82:e1:ef: 49:43:65:ec:59:26:9f:89:83:02:16:24:e1:82:8a: 38:6e:79:ab:84:c7:b5:f4:6b:09:16:5d:d0:15:e3: 47:f5:ff:2a:80:3b:99:e6:35:bc:86:10:38:52:22: 7b:6c:c6:ff:a1:c7:2c:38:26:d7:af:e6:19:ff:93: c2:d7:23:b2:7d:3c:97:fe:b3:2a:68:6b:da:5d:99: df:58:c2:31:e1:db:0e:8d:f5:5f:5a:6b:d6:5e:fd: 91:1d:c0:d6:35:3c:46:96:96:07:ab:44:33:24:3c: 77:e7:23:0d:1e:97:61:88:02:b8:b1:75:20:a0:7e: 86:2e:01:a3:24:50:37:4e:6f:c1:aa:17:58:25:e4: 64:14:14:ad:da:50:c3:58:4a:3c:1a:66:7f:e5:8c: e6:dc:b6:7c:2e:46:7d:7f:c8:8d:1c:bc:49:d5:2a: ef:28:43:89:ed:2e:50:4a:e0:4d:19:24:04:7b:e2: 4d:99:45:85:0c:21:d8:c0:c5:74:23:d4:f7:81:b3: 2a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:0F:55:65:E1:B5:18:45:9F:1E:F1:DA:17:68:A1:82:0B:FF:C6:E2 X509v3 Authority Key Identifier: keyid:1E:F4:98:BA:B7:F3:BB:97:16:6D:A5:79:29:4A:8B:47:14:50:E7:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvSYurfzu5cWbaV5KUqLRxRQ51w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/862e24-00f6-4e84-a8ca-752625928fef/1/HvSYurfzu5cWbaV5KUqLRxRQ51w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:53:56:1f:aa:2c:9b:8d:81:08:f7:0c:18:5e:15:cc:af:ca: c9:a0:33:fe:e5:5c:39:09:a4:7b:e6:18:6f:11:25:62:2e:3d: 63:3f:6e:df:54:98:ae:ff:e3:3d:da:d7:5e:4a:31:aa:ed:a1: 55:41:41:02:42:62:56:c0:8c:bb:ce:3a:0c:6e:e6:30:77:32: 64:68:98:b6:3a:93:49:6d:10:b6:3e:e6:fa:ba:4c:29:ae:4e: bc:92:6d:18:29:47:3d:f5:0e:f3:dd:26:4a:1d:02:35:d6:79: fb:9c:b3:b5:84:3f:59:70:91:17:4a:e3:6e:db:35:4f:4f:df: eb:3e:b0:60:27:f8:f9:31:c9:05:40:39:d9:11:90:e7:a0:71: 3b:cc:48:16:14:ce:83:57:0f:39:9e:d2:5d:7f:c3:a7:17:b5: dc:73:99:da:fd:94:83:14:81:83:e0:dd:d8:55:51:75:e1:03: 7a:89:4d:4f:a7:97:06:e2:5c:ff:1e:4b:5a:0f:4f:0c:4f:7f: 7b:2c:94:fe:27:7e:35:64:ce:74:0e:b0:f7:12:6d:6f:67:3b: 4d:9e:14:87:cd:92:8c:a3:02:d1:e5:57:0e:0c:ff:7b:22:d5: b6:44:36:ab:0f:db:8a:88:2e:a8:51:79:9b:6c:9d:b6:5f:c4: b8:e2:64:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eJAdpX6mxWUVNbcZYQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZjQ5OGJhYjdmM2JiOTcxNjZkYTU3OTI5NGE4YjQ3MTQ1 MGU3NWMwHhcNMjUxMjA2MDQwMDU1WhcNMjUxMjA3MDQwMDU1WjAzMTEwLwYDVQQD EyhlZjBmNTU2NWUxYjUxODQ1OWYxZWYxZGExNzY4YTE4MjBiZmZjNmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjPcLIlF5vDCWZ7XhjhNjiSxswZW Sdnb/pvkypyaiy/q4X7sYGlsHgekjxVCfL7p5ScPHO/21A6C4e9JQ2XsWSafiYMC FiThgoo4bnmrhMe19GsJFl3QFeNH9f8qgDuZ5jW8hhA4UiJ7bMb/occsOCbXr+YZ /5PC1yOyfTyX/rMqaGvaXZnfWMIx4dsOjfVfWmvWXv2RHcDWNTxGlpYHq0QzJDx3 5yMNHpdhiAK4sXUgoH6GLgGjJFA3Tm/BqhdYJeRkFBSt2lDDWEo8GmZ/5Yzm3LZ8 LkZ9f8iNHLxJ1SrvKEOJ7S5QSuBNGSQEe+JNmUWFDCHYwMV0I9T3gbMqVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8PVWXhtRhFnx7x2hdooYIL/8biMB8GA1UdIwQY MBaAFB70mLq387uXFm2leSlKi0cUUOdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZTWXVyZnp1NWNXYmFWNUtVcUxSeFJRNTF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84NjJlMjQtMDBmNi00ZTg0LWE4Y2Et NzUyNjI1OTI4ZmVmLzEvSHZTWXVyZnp1NWNXYmFWNUtVcUxSeFJRNTF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi84NjJlMjQtMDBmNi00ZTg0LWE4Y2EtNzUyNjI1OTI4ZmVm LzEvSHZTWXVyZnp1NWNXYmFWNUtVcUxSeFJRNTF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFNWH6os m42BCPcMGF4VzK/KyaAz/uVcOQmke+YYbxElYi49Yz9u31SYrv/jPdrXXkoxqu2h VUFBAkJiVsCMu846DG7mMHcyZGiYtjqTSW0Qtj7m+rpMKa5OvJJtGClHPfUO890m Sh0CNdZ5+5yztYQ/WXCRF0rjbts1T0/f6z6wYCf4+THJBUA52RGQ56BxO8xIFhTO g1cPOZ7SXX/Dpxe13HOZ2v2UgxSBg+Dd2FVRdeEDeolNT6eXBuJc/x5LWg9PDE9/ eyyU/id+NWTOdA6w9xJtb2c7TZ4Uh82SjKMC0eVXDgz/eyLVtkQ2qw/bioguqFF5 m2ydtl/EuOJkOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:48:06 2025 by rpki-client