This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft File: HVdIhaDItCBcPfLR_Nc0h33hBdk.mft (raw, json) Hash identifier: tXT77n6IUkNkXAP8DooBOATyGG30aFufVdhHsyuPBIw= Subject key identifier: CB:87:7E:2D:26:A9:6A:B4:F1:42:C2:39:8B:73:DE:95:9A:5B:11:E4 Authority key identifier: 1D:57:48:85:A0:C8:B4:20:5C:3D:F2:D1:FC:D7:34:87:7D:E1:05:D9 Certificate issuer: /CN=1d574885a0c8b4205c3df2d1fcd734877de105d9 Certificate serial: 019AF19B4E2056EA776379523818A49AA34B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft Manifest number: 0332 Signing time: Sat 06 Dec 2025 03:01:18 +0000 Manifest this update: Sat 06 Dec 2025 03:01:18 +0000 Manifest next update: Sun 07 Dec 2025 03:01:18 +0000 Files and hashes: 1: HVdIhaDItCBcPfLR_Nc0h33hBdk.crl (hash: +bPPb3+UAkziYo/GWnXVEMG6rKJUA+nR25kSa3pYfVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:4e:20:56:ea:77:63:79:52:38:18:a4:9a:a3:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d574885a0c8b4205c3df2d1fcd734877de105d9 Validity Not Before: Dec 6 03:01:18 2025 GMT Not After : Dec 7 03:01:18 2025 GMT Subject: CN=cb877e2d26a96ab4f142c2398b73de959a5b11e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:91:00:7a:7f:c9:3f:1b:28:c5:f0:1d:7e:bb: 35:0d:d6:32:da:e8:4d:df:54:4a:23:cc:c4:c9:23: 55:d3:87:4b:45:1a:74:6a:24:c2:f0:34:e2:1a:2d: 7d:11:f5:3c:15:43:85:a8:03:41:4b:a8:8e:2d:44: 0a:ed:dd:33:bf:3f:f3:45:41:1a:3a:5e:47:a3:e1: 62:45:cc:a7:55:e0:59:6a:2c:38:fd:15:cd:30:b8: b9:1c:05:68:8d:87:d9:3d:68:24:ae:62:b8:de:4f: 1c:d0:91:e8:d6:bb:8b:98:4a:5b:8d:81:d8:d4:9e: 16:1f:e0:71:b8:67:f4:82:0e:eb:ea:ee:c4:dc:7f: 45:c4:4d:51:60:95:02:1e:6d:0a:85:1e:f3:59:6b: 61:01:6b:19:b3:07:d5:8c:84:ef:60:f4:4a:8b:8e: 0d:cc:95:65:a3:60:58:ed:83:64:49:28:3d:ef:d1: 0d:ff:7a:c9:40:7d:1a:ec:ec:ef:a9:a0:52:22:da: 24:ce:ab:68:e9:38:56:65:8b:9b:12:c6:4b:e0:60: c6:b0:bd:63:9f:66:10:6f:c5:82:2c:f0:3b:3a:27: 58:2d:b6:9b:67:ff:a4:85:63:3c:7e:2a:24:ac:71: 54:89:1a:b1:9b:cf:d6:46:11:40:ba:01:b2:5f:3d: 77:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:87:7E:2D:26:A9:6A:B4:F1:42:C2:39:8B:73:DE:95:9A:5B:11:E4 X509v3 Authority Key Identifier: keyid:1D:57:48:85:A0:C8:B4:20:5C:3D:F2:D1:FC:D7:34:87:7D:E1:05:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVdIhaDItCBcPfLR_Nc0h33hBdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/697df7-b19b-46f1-8e43-9198ca2ac766/1/HVdIhaDItCBcPfLR_Nc0h33hBdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:07:69:70:ca:61:9e:ad:42:b4:a6:78:b3:6e:72:ee:1e:eb: d2:96:51:dd:1c:2c:01:85:8d:35:00:85:7c:41:45:4d:af:7c: 42:3a:2d:bf:38:06:14:70:6e:24:c1:07:7e:bb:ad:5c:3b:62: 9b:e8:61:de:f7:5d:68:30:a7:7c:c7:11:65:96:16:bf:5b:0b: 10:63:7e:f2:53:71:ac:5c:e5:6d:31:2a:97:80:a7:d9:7e:d5: 26:43:85:de:63:c5:7f:87:dd:38:79:85:16:ee:04:41:28:05: 12:58:7b:1e:fa:1f:14:fa:bd:03:eb:ee:de:00:ea:c1:4b:cc: 19:8c:45:2f:a3:db:77:bd:a2:d8:34:b6:50:19:12:0d:33:6b: 94:f5:3a:b3:88:67:6f:eb:da:46:22:5e:cd:fe:99:89:53:d9: 98:7d:d8:fb:97:37:d1:fd:55:f5:25:a5:80:8e:a8:8e:1c:d1: 7a:7e:47:dd:45:c5:a8:03:61:89:bf:7a:d7:47:a4:a5:29:2c: 35:46:52:51:3b:6f:b4:53:3f:f0:01:35:01:36:d3:91:a6:a8: e6:ed:ce:a3:f5:4d:76:55:61:11:9d:a8:70:ac:07:d7:0f:c6: af:18:5e:b8:7c:6e:85:3a:f6:fc:ec:38:dd:c2:1d:a8:b4:2e: bb:4a:fa:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm04gVup3Y3lSOBikmqNLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNTc0ODg1YTBjOGI0MjA1YzNkZjJkMWZjZDczNDg3N2Rl MTA1ZDkwHhcNMjUxMjA2MDMwMTE4WhcNMjUxMjA3MDMwMTE4WjAzMTEwLwYDVQQD EyhjYjg3N2UyZDI2YTk2YWI0ZjE0MmMyMzk4YjczZGU5NTlhNWIxMWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZEAen/JPxsoxfAdfrs1DdYy2uhN 31RKI8zEySNV04dLRRp0aiTC8DTiGi19EfU8FUOFqANBS6iOLUQK7d0zvz/zRUEa Ol5Ho+FiRcynVeBZaiw4/RXNMLi5HAVojYfZPWgkrmK43k8c0JHo1ruLmEpbjYHY 1J4WH+BxuGf0gg7r6u7E3H9FxE1RYJUCHm0KhR7zWWthAWsZswfVjITvYPRKi44N zJVlo2BY7YNkSSg979EN/3rJQH0a7OzvqaBSItokzqto6ThWZYubEsZL4GDGsL1j n2YQb8WCLPA7OidYLbabZ/+khWM8fiokrHFUiRqxm8/WRhFAugGyXz13zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuHfi0mqWq08ULCOYtz3pWaWxHkMB8GA1UdIwQY MBaAFB1XSIWgyLQgXD3y0fzXNId94QXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFZkSWhhREl0Q0JjUGZMUl9OYzBoMzNoQmRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82OTdkZjctYjE5Yi00NmYxLThlNDMt OTE5OGNhMmFjNzY2LzEvSFZkSWhhREl0Q0JjUGZMUl9OYzBoMzNoQmRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC82OTdkZjctYjE5Yi00NmYxLThlNDMtOTE5OGNhMmFjNzY2 LzEvSFZkSWhhREl0Q0JjUGZMUl9OYzBoMzNoQmRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsgdpcMph nq1CtKZ4s25y7h7r0pZR3RwsAYWNNQCFfEFFTa98QjotvzgGFHBuJMEHfrutXDti m+hh3vddaDCnfMcRZZYWv1sLEGN+8lNxrFzlbTEql4Cn2X7VJkOF3mPFf4fdOHmF Fu4EQSgFElh7HvofFPq9A+vu3gDqwUvMGYxFL6Pbd72i2DS2UBkSDTNrlPU6s4hn b+vaRiJezf6ZiVPZmH3Y+5c30f1V9SWlgI6ojhzRen5H3UXFqANhib9610ekpSks NUZSUTtvtFM/8AE1ATbTkaao5u3Oo/VNdlVhEZ2ocKwH1w/GrxheuHxuhTr2/Ow4 3cIdqLQuu0r6tA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:57:44 2025 by rpki-client