This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft File: HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft (raw, json) Hash identifier: llP7J6muRk1oCnTu5zZLee+NB+/Tm7H3/0WmkyRkkTU= Subject key identifier: E6:D6:35:CF:D8:59:C1:F1:92:CF:CA:90:4B:17:92:04:FF:32:83:8B Authority key identifier: 1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1 Certificate issuer: /CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1 Certificate serial: 019AF23FA0A38BBCAB2D3523E96814ED487B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft Manifest number: 03AC Signing time: Sat 06 Dec 2025 06:00:47 +0000 Manifest this update: Sat 06 Dec 2025 06:00:47 +0000 Manifest next update: Sun 07 Dec 2025 06:00:47 +0000 Files and hashes: 1: HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl (hash: qE8Cws8lYaBHZUGfgdDSpTuIbKLOisKjZvclygzV0gI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:a0:a3:8b:bc:ab:2d:35:23:e9:68:14:ed:48:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f3bf23756c6e7d64d6822f597b1d58049bd48f1 Validity Not Before: Dec 6 06:00:47 2025 GMT Not After : Dec 7 06:00:47 2025 GMT Subject: CN=e6d635cfd859c1f192cfca904b179204ff32838b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:97:67:6f:b5:f6:e8:96:ec:00:a3:14:c9:29: d1:90:e6:4b:6a:25:c2:85:15:d8:b8:be:62:56:bd: dd:3c:ed:71:f3:d6:e3:1d:b0:97:4e:1d:30:e7:a9: 78:93:be:31:3f:01:03:bb:68:87:5e:59:4c:14:79: 58:f5:00:8a:eb:48:33:fe:7f:32:93:96:74:bd:4f: 44:8a:40:c7:92:b8:a9:b4:9a:67:1c:58:29:f4:02: eb:fc:cc:90:b8:4c:80:eb:e5:fd:8a:a0:e3:5c:4d: de:ac:bb:47:ad:d2:e8:e8:83:55:09:93:fc:c2:d6: 0c:1e:90:d2:e5:82:11:ce:aa:fc:ac:86:59:bf:63: 74:8f:66:63:9f:59:81:96:7d:63:7c:8e:ea:d2:1a: 3d:b1:07:95:22:2b:01:be:7f:39:11:ad:fa:91:a7: 95:6e:95:f3:1f:09:10:b9:ff:3a:f1:a0:05:f9:81: e4:0a:67:57:0c:e5:64:6f:73:c7:85:f3:01:4e:e2: ce:c4:16:da:8b:c0:e1:8d:c7:91:77:85:e4:61:b8: bb:e1:bd:bb:86:c3:11:8a:7a:92:03:22:0f:ce:74: 67:b3:6c:10:70:db:c5:b7:a5:9f:fe:d0:da:8c:3d: 81:79:ed:75:96:fc:65:cc:01:fa:2b:28:82:0b:c9: ab:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D6:35:CF:D8:59:C1:F1:92:CF:CA:90:4B:17:92:04:FF:32:83:8B X509v3 Authority Key Identifier: keyid:1F:3B:F2:37:56:C6:E7:D6:4D:68:22:F5:97:B1:D5:80:49:BD:48:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HzvyN1bG59ZNaCL1l7HVgEm9SPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d1bce2-f6d8-48aa-9632-43dc2dbcab77/1/HzvyN1bG59ZNaCL1l7HVgEm9SPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:d0:b8:23:94:97:24:5e:ae:b1:0f:51:be:07:b4:50:e0:fe: e8:be:60:f4:f8:2e:7a:b1:45:ca:20:65:3c:7c:0d:e9:b0:95: d3:52:b4:da:c9:91:3c:3a:41:ca:51:fe:79:0f:07:d0:97:6f: f2:04:80:49:06:7e:73:8c:dc:a3:bd:92:a7:b5:3c:96:fc:98: 1e:f5:78:11:87:56:0b:d6:29:ef:3e:5c:fe:aa:cd:99:ec:c6: b2:62:34:cc:24:5f:32:22:2e:16:ba:ea:78:f3:0e:4f:b9:06: 9c:d9:4b:89:8f:a6:09:94:85:2b:d2:af:0b:d0:3d:10:b0:d6: 6c:90:64:5b:d3:67:7e:91:42:09:97:3d:38:31:62:aa:1c:c9: cc:4f:7f:bc:6d:66:60:e7:43:16:c6:43:64:84:4b:d8:cc:e4: b0:8e:a9:bd:f2:fc:55:9b:74:f4:82:4c:c7:7e:29:6c:25:d3: 59:65:e6:33:1c:4b:83:de:e2:c1:30:53:75:28:37:b6:c1:d3: 89:ad:0d:0c:93:db:cd:04:7d:67:8a:07:22:9a:3d:43:95:39: 08:08:c9:6d:b8:9c:e2:8e:df:45:14:e0:8b:d5:49:38:b7:0c: e4:35:39:1b:3f:ae:50:4e:5e:9c:53:59:e5:bd:38:b9:ec:90: e5:a4:d0:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP6Cji7yrLTUj6WgU7Uh7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmM2JmMjM3NTZjNmU3ZDY0ZDY4MjJmNTk3YjFkNTgwNDli ZDQ4ZjEwHhcNMjUxMjA2MDYwMDQ3WhcNMjUxMjA3MDYwMDQ3WjAzMTEwLwYDVQQD EyhlNmQ2MzVjZmQ4NTljMWYxOTJjZmNhOTA0YjE3OTIwNGZmMzI4MzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Zdnb7X26JbsAKMUySnRkOZLaiXC hRXYuL5iVr3dPO1x89bjHbCXTh0w56l4k74xPwEDu2iHXllMFHlY9QCK60gz/n8y k5Z0vU9EikDHkriptJpnHFgp9ALr/MyQuEyA6+X9iqDjXE3erLtHrdLo6INVCZP8 wtYMHpDS5YIRzqr8rIZZv2N0j2Zjn1mBln1jfI7q0ho9sQeVIisBvn85Ea36kaeV bpXzHwkQuf868aAF+YHkCmdXDOVkb3PHhfMBTuLOxBbai8DhjceRd4XkYbi74b27 hsMRinqSAyIPznRns2wQcNvFt6Wf/tDajD2Bee11lvxlzAH6KyiCC8mrUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFObWNc/YWcHxks/KkEsXkgT/MoOLMB8GA1UdIwQY MBaAFB878jdWxufWTWgi9Zex1YBJvUjxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHp2eU4xYkc1OVpOYUNMMWw3SFZnRW05U1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kMWJjZTItZjZkOC00OGFhLTk2MzIt NDNkYzJkYmNhYjc3LzEvSHp2eU4xYkc1OVpOYUNMMWw3SFZnRW05U1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9kMWJjZTItZjZkOC00OGFhLTk2MzItNDNkYzJkYmNhYjc3 LzEvSHp2eU4xYkc1OVpOYUNMMWw3SFZnRW05U1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtC4I5SX JF6usQ9Rvge0UOD+6L5g9PguerFFyiBlPHwN6bCV01K02smRPDpBylH+eQ8H0Jdv 8gSASQZ+c4zco72Sp7U8lvyYHvV4EYdWC9Yp7z5c/qrNmezGsmI0zCRfMiIuFrrq ePMOT7kGnNlLiY+mCZSFK9KvC9A9ELDWbJBkW9NnfpFCCZc9ODFiqhzJzE9/vG1m YOdDFsZDZIRL2MzksI6pvfL8VZt09IJMx34pbCXTWWXmMxxLg97iwTBTdSg3tsHT ia0NDJPbzQR9Z4oHIpo9Q5U5CAjJbbic4o7fRRTgi9VJOLcM5DU5Gz+uUE5enFNZ 5b04ueyQ5aTQZg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:13:10 2025 by rpki-client