This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json) Hash identifier: JYLzkrv9IZxYCt0LH0fdMKfy/6cDYJz0BGeSluwP9z8= Subject key identifier: A2:FA:A0:9D:BD:6A:9A:74:11:CC:9B:26:BE:0F:C7:53:D3:F2:4F:0D Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42 Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942 Certificate serial: 019AF12E82BFAC902687F120A2F88554D550 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft Manifest number: 12BB Signing time: Sat 06 Dec 2025 01:02:28 +0000 Manifest this update: Sat 06 Dec 2025 01:02:28 +0000 Manifest next update: Sun 07 Dec 2025 01:02:28 +0000 Files and hashes: 1: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: gXZxJ7upFnepjUQmyLLeoPQNHIn2/149xx7rH7oxtu0=) 2: jgAsessKAm9uqTW97_vJxlFphmg.roa (hash: SBPtFGq/5yKwTAX24BEiHsnyylA3vI1PAj8aDZuhBbE=) 3: kmGblmvAAGyRlFsROEtILxJX0AY.roa (hash: j4zVjRnml2SsYMPrYKgAmMnMiU9kMLQ4Se/WCN6WRCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:82:bf:ac:90:26:87:f1:20:a2:f8:85:54:d5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942 Validity Not Before: Dec 6 01:02:28 2025 GMT Not After : Dec 7 01:02:28 2025 GMT Subject: CN=a2faa09dbd6a9a7411cc9b26be0fc753d3f24f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:52:ec:e0:46:8a:24:c5:0f:a5:7a:5b:57:e3: 27:c7:0a:8e:8c:ec:97:c5:b3:77:98:6e:e3:e4:20: 32:a1:a0:27:73:26:9d:b3:90:b3:f4:d6:97:68:36: 91:de:fa:76:6c:15:9f:8d:2f:f3:18:83:90:18:aa: 96:5b:73:99:63:49:fd:ae:27:85:d2:29:91:97:51: 26:18:93:37:93:0b:65:3a:0f:26:0a:c7:d9:57:8f: 49:6c:ca:3b:58:ac:28:33:06:f3:24:68:bd:53:e0: db:42:00:8a:f1:85:5c:1e:6d:8c:86:e0:bd:94:74: 48:ac:3a:8a:b1:d1:f5:4f:b6:29:d7:2d:5e:69:9b: 5f:d8:15:2b:9f:79:1e:bd:c7:c2:2a:bc:f2:ed:fa: 74:36:6a:6f:e5:57:b4:81:6c:72:23:6e:e5:4a:d7: 9d:96:23:44:5f:aa:b3:69:72:12:38:83:c6:dc:68: 22:76:c9:2c:bc:73:14:1c:bc:ae:a4:c0:d8:80:00: e4:40:13:9b:0b:bf:ff:10:72:b5:ce:80:7f:6a:76: 16:fb:ac:13:d4:70:5d:6f:31:f9:dd:78:da:fb:7c: f4:7e:69:6d:25:30:3d:47:ff:f2:c7:9e:93:56:52: ea:eb:51:a3:58:46:bd:3d:57:2e:8e:a9:23:9c:9f: 29:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:FA:A0:9D:BD:6A:9A:74:11:CC:9B:26:BE:0F:C7:53:D3:F2:4F:0D X509v3 Authority Key Identifier: keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:06:35:b5:c3:f0:ac:d5:f7:0f:31:d8:4c:b5:d8:74:0e:b7: d7:6d:6d:a1:79:26:0e:ae:65:75:cc:fc:58:fc:67:92:71:91: b3:4f:93:7f:be:c1:e5:81:3c:ed:54:66:35:3e:55:33:0e:21: 4d:10:99:55:d3:a8:9e:a5:e5:d6:7b:8b:e8:7e:bd:7c:14:bb: 37:59:89:26:c9:1c:54:6f:54:eb:d9:12:15:08:f1:f4:35:0e: 82:14:29:7e:0d:f8:68:9f:42:d5:90:76:45:81:a6:d9:0f:81: 4b:73:56:4c:60:b9:14:06:10:74:7d:88:70:03:a4:0c:0b:83: 7c:de:2f:15:60:74:42:d7:07:f4:a2:38:62:60:ab:5d:5c:3f: 14:b9:54:a9:02:af:2d:26:f1:fc:5c:60:d0:6f:4b:a8:4f:c6: 57:1f:dc:18:23:e1:0e:51:7b:a2:74:60:c6:c7:ab:90:b6:d5: 67:f0:cc:d2:21:92:75:25:03:b5:25:42:da:8c:55:47:37:5d: 19:c2:ab:bf:38:92:4f:05:a7:84:bc:8f:eb:d6:f8:3e:21:80: 33:bc:5a:21:98:79:17:d9:ed:bc:f4:c1:0e:36:fc:ee:f6:3b: b8:f3:f7:7a:3f:34:e8:ef:f1:35:d4:ec:82:37:45:85:5b:98: 35:2c:bd:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLoK/rJAmh/EgoviFVNVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMmZlZmJkMTY4ZjE4NjYxZWNhMTU1NjlkYzYyMThmODY3 NDY5NDIwHhcNMjUxMjA2MDEwMjI4WhcNMjUxMjA3MDEwMjI4WjAzMTEwLwYDVQQD EyhhMmZhYTA5ZGJkNmE5YTc0MTFjYzliMjZiZTBmYzc1M2QzZjI0ZjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilLs4EaKJMUPpXpbV+MnxwqOjOyX xbN3mG7j5CAyoaAncyads5Cz9NaXaDaR3vp2bBWfjS/zGIOQGKqWW3OZY0n9rieF 0imRl1EmGJM3kwtlOg8mCsfZV49JbMo7WKwoMwbzJGi9U+DbQgCK8YVcHm2MhuC9 lHRIrDqKsdH1T7Yp1y1eaZtf2BUrn3kevcfCKrzy7fp0Nmpv5Ve0gWxyI27lSted liNEX6qzaXISOIPG3GgidsksvHMUHLyupMDYgADkQBObC7//EHK1zoB/anYW+6wT 1HBdbzH53Xja+3z0fmltJTA9R//yx56TVlLq61GjWEa9PVcujqkjnJ8pewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKL6oJ29app0EcybJr4Px1PT8k8NMB8GA1UdIwQY MBaAFB0v770WjxhmHsoVVp3GIY+GdGlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYt YzY0OTU4NTNjYzFhLzEvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYtYzY0OTU4NTNjYzFh LzEvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgY1tcPw rNX3DzHYTLXYdA63121toXkmDq5ldcz8WPxnknGRs0+Tf77B5YE87VRmNT5VMw4h TRCZVdOonqXl1nuL6H69fBS7N1mJJskcVG9U69kSFQjx9DUOghQpfg34aJ9C1ZB2 RYGm2Q+BS3NWTGC5FAYQdH2IcAOkDAuDfN4vFWB0QtcH9KI4YmCrXVw/FLlUqQKv LSbx/Fxg0G9LqE/GVx/cGCPhDlF7onRgxserkLbVZ/DM0iGSdSUDtSVC2oxVRzdd GcKrvziSTwWnhLyP69b4PiGAM7xaIZh5F9ntvPTBDjb87vY7uPP3ej806O/xNdTs gjdFhVuYNSy98A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:43 2025 by rpki-client