This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft File: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft (raw, json) Hash identifier: 3p9xu0aMvCUgJkMzPaoEuLYMNboiDuodWcnJyOHe92E= Subject key identifier: 3F:00:89:14:CF:3A:B7:6C:E2:A9:45:CA:D4:DF:C6:63:CE:B2:8A:C9 Authority key identifier: 1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE Certificate issuer: /CN=1d5da9109f614c7c4159b3231a3877702a6f21ce Certificate serial: 019AF31BD4A2E4CE7FED4FFFD21812FECFAB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft Manifest number: 0D53 Signing time: Sat 06 Dec 2025 10:01:18 +0000 Manifest this update: Sat 06 Dec 2025 10:01:18 +0000 Manifest next update: Sun 07 Dec 2025 10:01:18 +0000 Files and hashes: 1: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl (hash: Gd+I2ccjKy+zva5OvflDyJN8pPN+ihggNub5Orowgpg=) 2: tVk3cWsdi3hZrDEonwmclNGT-5M.roa (hash: bJG7n4hjSkt99mV93dCKPOM2IO0DVMxNl1m0F3B2sm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:d4:a2:e4:ce:7f:ed:4f:ff:d2:18:12:fe:cf:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d5da9109f614c7c4159b3231a3877702a6f21ce Validity Not Before: Dec 6 10:01:18 2025 GMT Not After : Dec 7 10:01:18 2025 GMT Subject: CN=3f008914cf3ab76ce2a945cad4dfc663ceb28ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:13:89:b9:d5:e3:d7:88:3f:e1:3c:85:71:5b: 79:77:88:2f:e9:31:ec:d2:5b:9e:e0:44:c5:07:4e: 76:20:96:fb:71:18:31:13:65:fd:4b:f8:a9:5a:fe: e2:e3:21:4d:13:dd:5a:12:81:46:11:bb:a6:47:8f: 55:48:69:fe:c2:c0:86:f1:a3:7e:a9:6b:07:f6:4c: 3c:38:83:e0:ef:c0:9b:f9:b4:b0:f7:e0:58:1f:54: af:87:68:26:9c:56:d4:2d:eb:1c:da:e9:f6:65:8d: 94:8e:c4:d7:0b:d5:61:89:27:ce:69:aa:4b:1f:2f: 3a:2a:73:f4:42:4f:3b:2a:79:e1:04:db:e5:16:5e: 13:30:70:34:26:fe:3e:78:1b:ec:85:52:78:47:f9: 9b:9a:60:2b:81:bb:97:fc:71:a3:2d:d2:27:5a:b5: 61:f8:03:bb:ff:11:aa:77:d5:b0:1c:35:e8:2b:08: 40:52:e8:bf:ea:57:1c:25:aa:e0:1d:f9:5b:54:7c: 28:37:d7:35:e1:5c:50:af:2e:d9:83:22:9b:a1:48: 5e:d9:77:d0:10:b3:b6:80:a8:5f:df:4b:ef:ee:83: 8a:4e:29:77:ca:b0:4c:ac:f8:df:fc:f6:31:10:39: 77:7f:d8:89:51:25:11:61:e3:f6:07:ba:29:41:ad: 0e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:00:89:14:CF:3A:B7:6C:E2:A9:45:CA:D4:DF:C6:63:CE:B2:8A:C9 X509v3 Authority Key Identifier: keyid:1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:ed:3a:00:2f:fd:2f:9f:fe:7b:20:35:6a:ea:9d:30:c7:25: 48:43:21:e3:2d:73:94:41:3b:de:82:5d:fa:9e:fc:70:97:f8: f9:21:ce:48:bd:b3:4e:54:d7:cd:74:b5:0d:17:4b:8f:1d:53: f3:91:4e:ac:3c:2b:06:43:72:1f:ed:2e:d1:13:fd:a1:dd:83: 22:d5:3f:6b:78:92:0b:21:fa:56:f3:a0:2c:1b:14:2d:5e:bc: 9e:89:8e:35:6e:9d:fe:79:ed:01:cb:36:57:5a:d3:0b:ce:f0: a7:d9:9a:d8:43:ae:bd:18:01:18:5b:8a:28:f5:5a:47:ab:3b: 2f:41:9b:39:f0:ea:cf:96:99:6e:a9:cd:74:08:9d:62:b6:d8: 6e:0a:54:2c:3a:38:37:8b:57:ed:95:eb:32:88:41:6a:dd:39: 8e:26:1f:2a:87:38:04:26:f2:4e:60:58:a8:d1:c6:8f:fb:aa: 76:71:28:28:70:4d:aa:11:57:0b:cc:b7:c1:d4:ac:c5:96:48: 81:8d:85:20:82:eb:44:32:d2:40:dd:55:5f:14:c6:ba:84:b1: 58:87:2c:79:11:1f:04:73:ef:41:10:aa:a6:2b:c9:0e:c1:7f: cf:02:c8:1c:1e:1b:e8:2c:e9:42:6c:d7:2d:9f:91:7d:9a:c5: ce:34:09:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG9Si5M5/7U//0hgS/s+rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNWRhOTEwOWY2MTRjN2M0MTU5YjMyMzFhMzg3NzcwMmE2 ZjIxY2UwHhcNMjUxMjA2MTAwMTE4WhcNMjUxMjA3MTAwMTE4WjAzMTEwLwYDVQQD EygzZjAwODkxNGNmM2FiNzZjZTJhOTQ1Y2FkNGRmYzY2M2NlYjI4YWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhOJudXj14g/4TyFcVt5d4gv6THs 0lue4ETFB052IJb7cRgxE2X9S/ipWv7i4yFNE91aEoFGEbumR49VSGn+wsCG8aN+ qWsH9kw8OIPg78Cb+bSw9+BYH1Svh2gmnFbULesc2un2ZY2UjsTXC9VhiSfOaapL Hy86KnP0Qk87KnnhBNvlFl4TMHA0Jv4+eBvshVJ4R/mbmmArgbuX/HGjLdInWrVh +AO7/xGqd9WwHDXoKwhAUui/6lccJargHflbVHwoN9c14VxQry7ZgyKboUhe2XfQ ELO2gKhf30vv7oOKTil3yrBMrPjf/PYxEDl3f9iJUSURYeP2B7opQa0O0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8AiRTPOrds4qlFytTfxmPOsorJMB8GA1UdIwQY MBaAFB1dqRCfYUx8QVmzIxo4d3AqbyHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zM2FjMGUtZTE5ZS00Yzg5LWJkZjMt NzA2YTZmYzE2NGIxLzEvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8zM2FjMGUtZTE5ZS00Yzg5LWJkZjMtNzA2YTZmYzE2NGIx LzEvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAu06AC/9 L5/+eyA1auqdMMclSEMh4y1zlEE73oJd+p78cJf4+SHOSL2zTlTXzXS1DRdLjx1T 85FOrDwrBkNyH+0u0RP9od2DItU/a3iSCyH6VvOgLBsULV68nomONW6d/nntAcs2 V1rTC87wp9ma2EOuvRgBGFuKKPVaR6s7L0GbOfDqz5aZbqnNdAidYrbYbgpULDo4 N4tX7ZXrMohBat05jiYfKoc4BCbyTmBYqNHGj/uqdnEoKHBNqhFXC8y3wdSsxZZI gY2FIILrRDLSQN1VXxTGuoSxWIcseREfBHPvQRCqpivJDsF/zwLIHB4b6CzpQmzX LZ+RfZrFzjQJfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:36:52 2025 by rpki-client