This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft File: HvyrTe3tZqvvfNftcmV7wDqCKdY.mft (raw, json) Hash identifier: K0M+bfqXzGD0Gf+kuEa89vC15Kw4+jVMKSI7BbzGkjo= Subject key identifier: E4:25:DD:C6:4E:71:43:4C:39:0E:25:54:4C:D2:8D:83:82:EF:C0:8D Authority key identifier: 1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6 Certificate issuer: /CN=1efcab4deded66abef7cd7ed72657bc03a8229d6 Certificate serial: 019AF540BF6AEBA9608E115F8ED4EE8B6B25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft Manifest number: 07CC Signing time: Sat 06 Dec 2025 20:00:52 +0000 Manifest this update: Sat 06 Dec 2025 20:00:52 +0000 Manifest next update: Sun 07 Dec 2025 20:00:52 +0000 Files and hashes: 1: HvyrTe3tZqvvfNftcmV7wDqCKdY.crl (hash: VuEDCZcEbwMSRjpDXRvfj1hdIInUT8wHATO8Fbh1W4k=) 2: biU2dVHDkmW3ggJsKp9Y0Y3icgc.roa (hash: Q70FfzUUNjte1Czb813dG83AEi9zq10U9CCK5o5IFaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:bf:6a:eb:a9:60:8e:11:5f:8e:d4:ee:8b:6b:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1efcab4deded66abef7cd7ed72657bc03a8229d6 Validity Not Before: Dec 6 20:00:52 2025 GMT Not After : Dec 7 20:00:52 2025 GMT Subject: CN=e425ddc64e71434c390e25544cd28d8382efc08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4c:23:d7:db:ab:00:64:f9:65:48:f9:23:95: b5:a4:00:1a:53:56:de:b4:11:64:ca:f3:b6:71:ac: 2c:df:7d:b4:bc:a5:63:43:71:7e:cf:5d:e3:5a:c5: 75:b4:7a:5d:84:31:76:74:d5:bb:84:e6:ae:17:d3: 40:4a:17:ab:9f:82:6b:18:c4:87:c9:0e:29:36:fe: d4:b3:e3:2a:0d:03:c7:61:1e:b7:1b:07:9c:81:e3: 16:03:79:3b:4e:52:df:49:bf:08:d6:16:e2:14:a3: b0:4a:fb:d5:89:c2:1c:d5:29:08:1d:0a:39:0f:b0: e6:64:de:9a:8e:c7:81:88:0d:fb:e5:2c:2d:7c:05: ea:d5:e3:1c:96:19:79:90:cc:15:84:ae:50:e1:b8: f9:11:5b:fb:e4:ca:b9:43:c9:1e:26:6e:43:e3:06: 19:7c:a7:bb:45:33:26:2e:06:37:53:32:75:31:22: a4:c7:22:91:5f:6d:09:86:51:dc:34:a5:39:29:3e: f8:a9:72:c9:fb:48:45:0c:aa:e2:36:4e:f2:ed:7e: 23:e8:10:7f:b8:9b:bb:2d:7e:0f:b9:61:5c:28:fe: ee:2f:41:e4:45:21:4a:58:4e:48:f3:ee:45:20:cb: 58:13:55:bd:4f:29:f0:80:77:19:75:44:d1:68:bf: 1b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:25:DD:C6:4E:71:43:4C:39:0E:25:54:4C:D2:8D:83:82:EF:C0:8D X509v3 Authority Key Identifier: keyid:1E:FC:AB:4D:ED:ED:66:AB:EF:7C:D7:ED:72:65:7B:C0:3A:82:29:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvyrTe3tZqvvfNftcmV7wDqCKdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c7c83f-fac2-4551-8f78-91a77ea05df1/1/HvyrTe3tZqvvfNftcmV7wDqCKdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:25:3d:ff:18:f1:fe:99:86:71:a0:30:a0:eb:aa:e9:59:4b: ae:3c:01:a0:07:4a:37:97:e5:71:bb:55:c3:82:50:ba:d7:cb: 88:a0:33:2e:41:de:eb:88:0c:4f:ab:00:31:36:67:37:01:81: c3:ce:b6:dc:49:e8:6f:df:7a:ef:3a:44:82:49:e8:78:f4:e8: 83:10:d7:84:45:09:51:c9:30:5a:7f:86:57:d5:57:3a:2c:03: dc:00:11:2d:fb:b7:8d:9d:f2:51:b5:f0:7e:58:cb:88:12:cf: a9:78:6e:b8:15:73:51:03:96:b0:c7:b1:a8:3c:5f:60:95:a2: 54:4e:36:d5:26:ac:b1:02:3c:9a:78:28:ac:61:5b:ef:ae:1b: a4:46:6d:a6:79:12:25:b8:09:8f:67:8b:b5:68:b9:a2:cc:20: af:29:18:de:4d:01:95:0f:33:14:d7:53:07:a5:54:bd:bb:14: fd:c2:be:7e:87:df:90:71:bc:6e:d7:d4:e9:0a:ef:c4:ca:69: 54:c4:6a:c1:2b:4a:9e:96:7b:b2:bd:af:ab:ea:c4:f2:50:3d: a9:3d:e3:7e:15:70:19:da:ba:41:28:c0:ee:07:0d:5a:54:8d: dc:10:b3:d3:54:ce:c3:22:e4:33:74:5f:77:b3:ec:f1:c8:76: 48:7b:10:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QL9q66lgjhFfjtTui2slMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZmNhYjRkZWRlZDY2YWJlZjdjZDdlZDcyNjU3YmMwM2E4 MjI5ZDYwHhcNMjUxMjA2MjAwMDUyWhcNMjUxMjA3MjAwMDUyWjAzMTEwLwYDVQQD EyhlNDI1ZGRjNjRlNzE0MzRjMzkwZTI1NTQ0Y2QyOGQ4MzgyZWZjMDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40wj19urAGT5ZUj5I5W1pAAaU1be tBFkyvO2caws3320vKVjQ3F+z13jWsV1tHpdhDF2dNW7hOauF9NAShern4JrGMSH yQ4pNv7Us+MqDQPHYR63GwecgeMWA3k7TlLfSb8I1hbiFKOwSvvVicIc1SkIHQo5 D7DmZN6ajseBiA375SwtfAXq1eMclhl5kMwVhK5Q4bj5EVv75Mq5Q8keJm5D4wYZ fKe7RTMmLgY3UzJ1MSKkxyKRX20JhlHcNKU5KT74qXLJ+0hFDKriNk7y7X4j6BB/ uJu7LX4PuWFcKP7uL0HkRSFKWE5I8+5FIMtYE1W9TynwgHcZdUTRaL8bbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOQl3cZOcUNMOQ4lVEzSjYOC78CNMB8GA1UdIwQY MBaAFB78q03t7War73zX7XJle8A6ginWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZ5clRlM3RacXZ2Zk5mdGNtVjd3RHFDS2RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jN2M4M2YtZmFjMi00NTUxLThmNzgt OTFhNzdlYTA1ZGYxLzEvSHZ5clRlM3RacXZ2Zk5mdGNtVjd3RHFDS2RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jN2M4M2YtZmFjMi00NTUxLThmNzgtOTFhNzdlYTA1ZGYx LzEvSHZ5clRlM3RacXZ2Zk5mdGNtVjd3RHFDS2RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvyU9/xjx /pmGcaAwoOuq6VlLrjwBoAdKN5flcbtVw4JQutfLiKAzLkHe64gMT6sAMTZnNwGB w8623Enob9967zpEgknoePTogxDXhEUJUckwWn+GV9VXOiwD3AARLfu3jZ3yUbXw fljLiBLPqXhuuBVzUQOWsMexqDxfYJWiVE421SassQI8mngorGFb764bpEZtpnkS JbgJj2eLtWi5oswgrykY3k0BlQ8zFNdTB6VUvbsU/cK+foffkHG8btfU6QrvxMpp VMRqwStKnpZ7sr2vq+rE8lA9qT3jfhVwGdq6QSjA7gcNWlSN3BCz01TOwyLkM3Rf d7Ps8ch2SHsQyw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:13:26 2025 by rpki-client