This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
File:                     hvpWTPl1d8B2M7pOZA6njHb8F90.mft (raw, json)
Hash identifier:          s9dZdgR1s8u5GwFow0P6ZJtAjjWr1MpUBkWYNaHk/Ew=
Subject key identifier:   65:AB:C8:F9:92:E4:82:1F:E9:CE:9D:27:0F:0C:03:9B:6F:9A:A3:03
Authority key identifier: 86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD
Certificate issuer:       /CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
Certificate serial:       019AF1D20A36AE6A9989D283665A1D7A154C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
Manifest number:          0CA8
Signing time:             Sat 06 Dec 2025 04:01:05 +0000
Manifest this update:     Sat 06 Dec 2025 04:01:05 +0000
Manifest next update:     Sun 07 Dec 2025 04:01:05 +0000
Files and hashes:         1: 35pT895rFPfGGgGdlQZKQuPJrR0.roa (hash: AdJ58aGQtDEjdleM+tpt6uAtjgF+DuwozoTDkormu+M=)
                          2: h616S8CObPCxdJef21IBTy1P_kM.roa (hash: ww3qKCX3iE26kJSJ/CLfQ0sPTYdm4Yl6Tj8BVSnidG4=)
                          3: hvpWTPl1d8B2M7pOZA6njHb8F90.crl (hash: TZTE4mxnaznF5MGa2wirFhvW4Htca95TVkfb13F7fGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Dec 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:f1:d2:0a:36:ae:6a:99:89:d2:83:66:5a:1d:7a:15:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fa564cf97577c07633ba4e640ea78c76fc17dd
        Validity
            Not Before: Dec  6 04:01:05 2025 GMT
            Not After : Dec  7 04:01:05 2025 GMT
        Subject: CN=65abc8f992e4821fe9ce9d270f0c039b6f9aa303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:af:97:10:f5:22:eb:3f:49:bd:99:e2:a8:01:
                    1c:c0:1c:05:15:ec:1f:fe:c9:2f:d1:e3:53:67:66:
                    ef:48:39:fd:39:fd:26:e4:bc:91:64:f5:3b:59:03:
                    7b:55:da:9d:07:87:2c:15:9b:ce:2f:e7:67:de:9c:
                    8a:07:e4:4b:94:7c:ae:9e:74:76:c8:ff:71:e4:d0:
                    3b:b0:84:a9:52:13:1b:1f:99:28:cf:40:56:c0:ad:
                    0a:8c:63:3f:95:2d:61:43:bb:0e:f4:2e:5c:3a:07:
                    8e:76:f3:11:2c:0e:e2:25:b0:ac:98:c8:0c:fe:b2:
                    13:74:38:65:aa:a5:ca:7d:b7:53:5e:c8:1d:d4:f3:
                    27:9c:21:0a:45:00:71:f1:dd:5d:54:a9:3f:1b:9b:
                    a7:4f:d3:e4:2e:45:ad:6e:bb:b4:8e:d6:cf:82:a8:
                    44:5b:ef:ea:0b:35:06:a3:6c:37:e8:46:64:af:70:
                    8b:53:0e:4d:d8:01:25:e1:55:5b:32:40:6e:b5:eb:
                    0b:4c:a1:b0:80:1f:ed:b7:7f:1b:5b:d7:bd:5d:ca:
                    1f:0f:10:af:43:52:04:a8:59:57:75:d1:bd:1c:1e:
                    4b:6a:18:a3:6a:c3:19:96:0c:99:d9:f6:84:c4:2e:
                    17:0d:b8:56:c6:d1:7c:53:04:92:c2:aa:62:61:6e:
                    8f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AB:C8:F9:92:E4:82:1F:E9:CE:9D:27:0F:0C:03:9B:6F:9A:A3:03
            X509v3 Authority Key Identifier:
                keyid:86:FA:56:4C:F9:75:77:C0:76:33:BA:4E:64:0E:A7:8C:76:FC:17:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvpWTPl1d8B2M7pOZA6njHb8F90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/39cb4f-ca88-480e-97d9-073d0d14ddde/1/hvpWTPl1d8B2M7pOZA6njHb8F90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:54:94:14:6e:d7:2b:53:f6:e7:9b:1e:10:5c:e1:ea:28:1d:
         63:99:d2:30:62:15:a1:af:de:66:45:46:d0:d4:bd:2f:16:c9:
         ce:70:bc:c8:dd:a3:73:a5:51:94:95:22:21:a5:ad:ee:01:15:
         52:67:0d:3a:1b:ca:b1:41:67:cc:f9:dc:ed:cf:2b:02:e7:6b:
         db:14:f3:58:37:6f:c9:c9:e9:fe:6a:d0:d9:b7:91:59:88:c2:
         5b:3c:41:40:d3:a9:65:0b:aa:ba:8b:c5:68:2a:59:7e:77:c2:
         9a:78:f4:98:56:54:ad:42:04:52:00:54:20:92:d1:f4:5f:fb:
         e5:65:dc:a9:84:b0:41:3f:21:db:2b:93:49:31:0e:f2:40:1f:
         a8:a2:62:c3:b6:b9:be:8f:e7:b6:76:fc:43:a0:a9:2a:9e:c5:
         87:f1:f1:53:b7:85:8f:df:e0:fd:ca:5a:76:2e:57:6d:5f:b8:
         dd:eb:27:55:e2:a8:bd:fe:0c:99:68:7e:f1:de:35:3c:49:82:
         22:43:3a:08:f9:99:22:ee:f9:7b:fc:f1:79:c8:bb:76:be:85:
         77:1e:65:26:8e:d2:8d:39:8c:5a:23:0c:21:06:a4:52:1b:b9:
         69:40:83:bf:b1:f1:ac:1b:62:80:03:0f:dc:97:b3:fa:77:b6:
         4d:82:e5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 08:11:31 2025 by rpki-client