This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft File: Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft (raw, json) Hash identifier: 7XNU6JpwrdgHHRsopT9cvyPpzR1ZWn4CLCNugZrtBaw= Subject key identifier: 8F:AB:82:8B:A4:24:D4:45:60:FC:C9:13:CF:74:38:D7:CD:B5:92:57 Authority key identifier: 1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D Certificate issuer: /CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d Certificate serial: 019AF1D1F61ECF5C50706EEF86D0503C5A69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft Manifest number: 0E45 Signing time: Sat 06 Dec 2025 04:01:00 +0000 Manifest this update: Sat 06 Dec 2025 04:01:00 +0000 Manifest next update: Sun 07 Dec 2025 04:01:00 +0000 Files and hashes: 1: Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl (hash: 97jmF3cZJB/3DQOK97oTYBIiZbann2L2IsNu77Lyy9M=) 2: lE0Hn99x0fhwc2jXac5uga-vHXs.roa (hash: iA0oHrpgL6CqGZiYUNOViB4cOKniJ8+iyJSulMgnLyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f6:1e:cf:5c:50:70:6e:ef:86:d0:50:3c:5a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ef8791dc3aa6fea328a5e1390ce26e982df372d Validity Not Before: Dec 6 04:01:00 2025 GMT Not After : Dec 7 04:01:00 2025 GMT Subject: CN=8fab828ba424d44560fcc913cf7438d7cdb59257 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f6:b6:a1:74:50:b7:41:d9:c7:8e:6e:62:3f: 66:21:4f:54:e5:78:6d:d7:62:d5:8b:f7:2a:fd:71: bc:ea:c8:fa:55:cc:4d:14:04:c5:85:9e:d8:98:7b: 81:ba:d7:3b:3d:a2:43:73:3b:bc:23:63:18:e2:2e: 54:2c:b5:be:02:dc:fb:28:ac:27:e9:dc:87:34:e4: e1:a2:38:5d:1c:aa:c1:4d:b8:9f:30:eb:f1:d4:f0: 95:e2:5a:4f:5e:81:92:ad:1e:07:75:19:4e:2b:ac: fa:19:99:d6:c9:a1:d7:24:6e:c6:b2:87:cb:dd:1b: 8b:62:53:fb:cd:71:f9:45:c5:d3:c0:b0:f4:53:7b: a9:bf:8c:34:43:73:fd:6f:19:6c:cf:db:fc:80:6f: 9d:4c:b4:7c:74:44:30:5c:e9:2e:bd:4f:b2:eb:8e: 1a:ed:52:b8:4b:3c:eb:64:5b:23:cd:07:e9:13:9f: b3:ed:fb:96:c6:06:7e:0c:01:b4:a5:d9:20:0a:86: 38:9f:b9:12:eb:1d:0d:91:1b:18:96:6f:89:9a:08: 8e:ad:7e:d6:e4:64:10:49:a2:9d:38:60:fe:2b:a5: 52:60:97:03:9a:42:ab:cf:2d:c1:c8:0e:2d:ab:d7: 10:f7:3a:c3:c7:3d:a5:b1:25:fd:89:69:7d:1e:29: 7d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:AB:82:8B:A4:24:D4:45:60:FC:C9:13:CF:74:38:D7:CD:B5:92:57 X509v3 Authority Key Identifier: keyid:1E:F8:79:1D:C3:AA:6F:EA:32:8A:5E:13:90:CE:26:E9:82:DF:37:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvh5HcOqb-oyil4TkM4m6YLfNy0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/e17813-1845-4ff2-b95a-833ee9cb3980/1/Hvh5HcOqb-oyil4TkM4m6YLfNy0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:88:5a:ef:10:67:02:15:26:b4:c5:3b:a5:c4:8a:06:83:23: 70:0e:07:89:5f:eb:77:56:bb:58:66:dd:70:15:d5:26:85:57: 98:47:f4:21:e6:df:7b:60:e7:50:aa:6b:69:f8:5a:74:92:3e: 42:15:6f:65:2c:d2:a0:93:03:d5:6f:6b:26:0c:8d:0c:ef:41: 64:98:d4:64:72:27:7b:9f:95:6a:f2:b4:c6:87:15:7d:e8:cc: 54:55:3d:fc:e1:e3:26:8f:53:3a:a3:ce:4e:15:43:43:a9:16: e1:a8:87:5d:09:8a:85:04:45:72:80:44:e5:a3:b6:46:f7:d8: ff:ff:a9:95:23:2a:38:54:59:a9:8d:19:d1:44:a5:18:3a:1e: d2:ec:89:bb:09:84:d6:b7:ea:d1:7f:4a:5d:55:a0:db:55:2a: 8d:6d:01:a5:21:82:e1:7f:90:a5:a9:7f:6c:f6:9a:26:3d:2e: 8f:1c:b4:7e:af:15:72:aa:28:16:db:80:ed:94:38:ea:3b:57: 97:41:b0:5d:6a:1b:22:8e:a9:b2:b7:55:26:9d:2e:c5:2d:e7: 23:da:7c:1c:2d:a7:b5:21:8b:ab:e7:fb:4b:0f:6c:18:d6:29: c8:0a:1c:65:73:65:37:85:4e:30:8b:90:1e:20:bd:e1:dd:81: 61:41:0c:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fYez1xQcG7vhtBQPFppMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZjg3OTFkYzNhYTZmZWEzMjhhNWUxMzkwY2UyNmU5ODJk ZjM3MmQwHhcNMjUxMjA2MDQwMTAwWhcNMjUxMjA3MDQwMTAwWjAzMTEwLwYDVQQD Eyg4ZmFiODI4YmE0MjRkNDQ1NjBmY2M5MTNjZjc0MzhkN2NkYjU5MjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/a2oXRQt0HZx45uYj9mIU9U5Xht 12LVi/cq/XG86sj6VcxNFATFhZ7YmHuButc7PaJDczu8I2MY4i5ULLW+Atz7KKwn 6dyHNOThojhdHKrBTbifMOvx1PCV4lpPXoGSrR4HdRlOK6z6GZnWyaHXJG7GsofL 3RuLYlP7zXH5RcXTwLD0U3upv4w0Q3P9bxlsz9v8gG+dTLR8dEQwXOkuvU+y644a 7VK4SzzrZFsjzQfpE5+z7fuWxgZ+DAG0pdkgCoY4n7kS6x0NkRsYlm+JmgiOrX7W 5GQQSaKdOGD+K6VSYJcDmkKrzy3ByA4tq9cQ9zrDxz2lsSX9iWl9Hil9HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+rgoukJNRFYPzJE890ONfNtZJXMB8GA1UdIwQY MBaAFB74eR3Dqm/qMopeE5DOJumC3zctMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lMTc4MTMtMTg0NS00ZmYyLWI5NWEt ODMzZWU5Y2IzOTgwLzEvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lMTc4MTMtMTg0NS00ZmYyLWI5NWEtODMzZWU5Y2IzOTgw LzEvSHZoNUhjT3FiLW95aWw0VGtNNG02WUxmTnkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4ha7xBn AhUmtMU7pcSKBoMjcA4HiV/rd1a7WGbdcBXVJoVXmEf0Iebfe2DnUKprafhadJI+ QhVvZSzSoJMD1W9rJgyNDO9BZJjUZHIne5+VavK0xocVfejMVFU9/OHjJo9TOqPO ThVDQ6kW4aiHXQmKhQRFcoBE5aO2RvfY//+plSMqOFRZqY0Z0USlGDoe0uyJuwmE 1rfq0X9KXVWg21UqjW0BpSGC4X+Qpal/bPaaJj0ujxy0fq8VcqooFtuA7ZQ46jtX l0GwXWobIo6psrdVJp0uxS3nI9p8HC2ntSGLq+f7Sw9sGNYpyAocZXNlN4VOMIuQ HiC94d2BYUEMMw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:34:35 2025 by rpki-client