This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft File: hvblJPwVqtxInul1gVo3KG3ku1I.mft (raw, json) Hash identifier: wA8w1KAi7nQeeVdCD+zSab4FxnIbljbP6ct12Z1k0cc= Subject key identifier: 88:38:66:5F:A0:65:13:4D:90:10:BC:49:56:D5:41:81:A3:3C:95:1E Authority key identifier: 86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52 Certificate issuer: /CN=86f6e524fc15aadc489ee975815a37286de4bb52 Certificate serial: 019AF12D40E31178F4A2B18FB7CE802CCA49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft Manifest number: 1318 Signing time: Sat 06 Dec 2025 01:01:06 +0000 Manifest this update: Sat 06 Dec 2025 01:01:06 +0000 Manifest next update: Sun 07 Dec 2025 01:01:06 +0000 Files and hashes: 1: IpgvZs6RrwjJSCrjLtVpTPx5AtI.roa (hash: iS+xV5aTYk61W96/gtelSQVtN/gxFQrLuDUzpUUnG5Q=) 2: UTAlH1piM7PJ2QM0s5skdXPPsuo.roa (hash: fzndOTAoxEC/XhPLAQSFfAsuTeWYwABcKcsXrCmPQNc=) 3: hvblJPwVqtxInul1gVo3KG3ku1I.crl (hash: KPRm1PVsXlX+kFE3WrFjC46RHRIMn/hXbMzBTQaO8w0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:40:e3:11:78:f4:a2:b1:8f:b7:ce:80:2c:ca:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f6e524fc15aadc489ee975815a37286de4bb52 Validity Not Before: Dec 6 01:01:06 2025 GMT Not After : Dec 7 01:01:06 2025 GMT Subject: CN=8838665fa065134d9010bc4956d54181a33c951e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b8:00:f2:8e:fc:e6:4f:9c:7d:8d:f1:89:da: 85:df:35:df:27:f8:d1:8a:99:b9:21:95:b1:2e:ad: 01:12:e0:55:73:71:1a:a1:b0:40:bb:dd:82:ea:fd: 89:59:7f:d2:d9:77:e9:ca:d6:32:70:0b:60:8a:de: 83:fa:f8:53:f6:de:b3:db:53:11:2b:ee:d3:4d:5a: 1f:8e:40:88:b3:3f:43:a0:bd:92:d2:72:f2:28:a8: e1:5b:bd:a0:6e:32:1c:00:41:55:43:e0:43:61:51: 27:b2:20:7d:dd:ab:5d:d5:49:34:cc:1a:10:ec:f9: 2c:37:77:63:e1:97:53:a8:6f:9d:b5:ae:fd:62:ab: c9:63:14:26:65:98:57:c2:60:d8:25:f3:9e:8c:92: a0:c0:4e:78:de:c1:37:f8:40:f1:21:b2:ec:26:fe: ad:2f:89:10:7f:36:1b:0e:fa:0f:30:46:dc:5e:6a: d2:d8:a8:21:1a:6e:38:ed:15:d0:2d:b7:f8:75:46: ab:0b:64:e0:d0:5d:fa:e7:ec:78:c6:55:cc:1f:e8: 77:59:f7:3c:cc:24:f9:4a:f2:a5:2f:24:5d:cc:61: 5a:4d:4e:50:6f:31:87:8c:66:f1:42:60:4b:e9:19: 12:99:9d:fa:1f:13:96:ec:01:11:f0:83:a7:76:ea: 38:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:38:66:5F:A0:65:13:4D:90:10:BC:49:56:D5:41:81:A3:3C:95:1E X509v3 Authority Key Identifier: keyid:86:F6:E5:24:FC:15:AA:DC:48:9E:E9:75:81:5A:37:28:6D:E4:BB:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvblJPwVqtxInul1gVo3KG3ku1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c43e1c-b676-48c6-863f-9ade396f7c4c/1/hvblJPwVqtxInul1gVo3KG3ku1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:7a:0c:8d:a5:9c:36:9e:b5:5e:0d:78:1d:7f:9c:b7:ae:e9: 32:17:0d:3d:ea:43:e3:f8:73:cd:54:64:d0:dd:44:38:9b:42: 0a:43:a3:12:0d:e8:98:34:63:00:e5:ac:2f:65:0f:5b:79:08: e6:96:65:33:66:eb:e0:0d:81:4f:cc:0b:78:e1:42:2f:62:c4: e8:7c:07:c9:e9:af:72:c9:48:08:14:2e:18:cc:e0:76:0d:1c: 19:de:e0:8d:bd:93:c2:c3:3c:4a:cb:e0:6e:f9:ac:b5:cf:89: 52:d1:fa:36:67:92:11:fd:14:f9:ff:99:eb:78:37:bb:58:fe: d0:14:1a:fb:0a:ba:f5:a7:ba:4b:3f:d5:bb:fb:d8:08:1e:c4: 52:2d:c4:8a:5f:47:58:9c:23:36:78:02:3f:36:38:31:e4:0e: 6a:64:a1:f5:7c:af:c6:fe:c0:8d:c3:9d:9c:15:2b:bc:bc:7f: 89:82:39:08:5e:88:f5:4b:7b:e7:b9:0f:84:61:8b:3d:ed:fc: 70:d8:f7:5e:0b:46:12:5e:5d:3d:24:7f:34:4d:94:69:52:f1: e6:4d:4c:1a:f1:06:96:ba:71:e2:02:e7:5c:3f:ea:c0:95:9a: b4:a7:7f:a7:a6:3b:af:86:d2:4a:90:a3:6d:dd:d0:94:2e:5d: ef:a5:fb:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLUDjEXj0orGPt86ALMpJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZjZlNTI0ZmMxNWFhZGM0ODllZTk3NTgxNWEzNzI4NmRl NGJiNTIwHhcNMjUxMjA2MDEwMTA2WhcNMjUxMjA3MDEwMTA2WjAzMTEwLwYDVQQD Eyg4ODM4NjY1ZmEwNjUxMzRkOTAxMGJjNDk1NmQ1NDE4MWEzM2M5NTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbgA8o785k+cfY3xidqF3zXfJ/jR ipm5IZWxLq0BEuBVc3EaobBAu92C6v2JWX/S2XfpytYycAtgit6D+vhT9t6z21MR K+7TTVofjkCIsz9DoL2S0nLyKKjhW72gbjIcAEFVQ+BDYVEnsiB93atd1Uk0zBoQ 7PksN3dj4ZdTqG+dta79YqvJYxQmZZhXwmDYJfOejJKgwE543sE3+EDxIbLsJv6t L4kQfzYbDvoPMEbcXmrS2KghGm447RXQLbf4dUarC2Tg0F365+x4xlXMH+h3Wfc8 zCT5SvKlLyRdzGFaTU5QbzGHjGbxQmBL6RkSmZ36HxOW7AER8IOnduo40wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIg4Zl+gZRNNkBC8SVbVQYGjPJUeMB8GA1UdIwQY MBaAFIb25ST8FarcSJ7pdYFaNyht5LtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDNlMWMtYjY3Ni00OGM2LTg2M2Yt OWFkZTM5NmY3YzRjLzEvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9jNDNlMWMtYjY3Ni00OGM2LTg2M2YtOWFkZTM5NmY3YzRj LzEvaHZibEpQd1ZxdHhJbnVsMWdWbzNLRzNrdTFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3oMjaWc Np61Xg14HX+ct67pMhcNPepD4/hzzVRk0N1EOJtCCkOjEg3omDRjAOWsL2UPW3kI 5pZlM2br4A2BT8wLeOFCL2LE6HwHyemvcslICBQuGMzgdg0cGd7gjb2TwsM8Ssvg bvmstc+JUtH6NmeSEf0U+f+Z63g3u1j+0BQa+wq69ae6Sz/Vu/vYCB7EUi3Eil9H WJwjNngCPzY4MeQOamSh9Xyvxv7AjcOdnBUrvLx/iYI5CF6I9Ut757kPhGGLPe38 cNj3XgtGEl5dPSR/NE2UaVLx5k1MGvEGlrpx4gLnXD/qwJWatKd/p6Y7r4bSSpCj bd3QlC5d76X7eg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:00:55 2025 by rpki-client