This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
File:                     HVS-eciStTVr8be80TE5fywjrcA.mft (raw, json)
Hash identifier:          qt9nqp6pUaK2c5DDGfOpmbWL2OjS0lXoCiU2GaK0ce4=
Subject key identifier:   61:2D:75:2D:84:04:BB:2A:D1:B6:CF:5E:1F:3E:F8:D3:35:64:EE:A8
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Certificate issuer:       /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial:       019BF7D22FB1425050B0336480C7CE177B66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
Manifest number:          0A39
Signing time:             Mon 26 Jan 2026 01:01:45 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:45 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:45 +0000
Files and hashes:         1: HVS-eciStTVr8be80TE5fywjrcA.crl (hash: fWSUnbcZ6/yvuUyKEjNUFsCrxVF2eloacY29A+lRs7Q=)
                          2: _rQ-inVtZiLnUQDx1Re8DAds5e8.roa (hash: h5VKcdxj79+jYpnEz4FG7zfzdVmPeg7kNvFKCQvIgGA=)
                          3: ehIM4r7y0MNk_6X7PPB_Xq7ctEo.roa (hash: x9UHBy6St0JPZwyF+fAa8ymLClmistFAKiLBfqM/Jyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d2:2f:b1:42:50:50:b0:33:64:80:c7:ce:17:7b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
        Validity
            Not Before: Jan 26 01:01:45 2026 GMT
            Not After : Jan 27 01:01:45 2026 GMT
        Subject: CN=612d752d8404bb2ad1b6cf5e1f3ef8d33564eea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dd:ae:c0:a6:1b:7b:6a:49:c7:e0:bf:e1:f7:
                    cb:ea:5e:cf:e6:2e:4e:3b:27:03:2b:e3:40:5c:ac:
                    98:48:1b:08:be:c7:9c:46:51:bf:98:75:84:75:81:
                    82:04:af:6f:6e:81:91:0a:f1:a1:aa:0c:55:9e:0e:
                    96:0e:41:36:b6:4e:6b:25:92:f9:8d:94:d5:23:a4:
                    d9:41:df:9d:cb:cf:c8:54:51:dc:4f:2e:cc:26:39:
                    cb:8b:d4:d0:32:b1:fd:77:ff:35:fc:d3:85:0b:69:
                    9c:6d:04:47:8b:9b:3c:4d:53:fb:43:5f:11:1f:91:
                    37:5f:1f:8d:c1:a0:c3:48:68:8b:81:58:31:6a:eb:
                    fb:81:7d:92:ca:e8:b4:cd:79:f0:9d:c0:a4:69:9c:
                    22:73:6d:04:4c:7c:3e:28:20:6a:85:1d:5c:09:ac:
                    ad:56:e3:1a:8d:dc:07:2a:6f:6d:4c:e8:54:0c:be:
                    ea:10:c6:05:82:a7:43:c8:87:9a:03:c6:1e:40:0f:
                    e7:d6:9a:a5:0e:7a:59:03:2a:12:82:7e:f7:0d:e8:
                    32:c4:92:6a:b3:b4:2f:40:7a:aa:1e:3c:27:63:ed:
                    b7:3e:8d:3f:11:9a:eb:2a:2f:08:43:b1:af:d2:20:
                    82:40:e1:82:e3:6f:52:49:07:02:d7:29:26:5b:b4:
                    aa:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2D:75:2D:84:04:BB:2A:D1:B6:CF:5E:1F:3E:F8:D3:35:64:EE:A8
            X509v3 Authority Key Identifier:
                keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:48:c1:dc:ce:c3:4f:91:4e:a1:bd:da:eb:90:70:ac:18:22:
         dd:f9:c6:2d:0d:ab:c7:a5:03:67:5d:8d:af:24:36:fb:98:77:
         a7:24:72:85:b4:a5:69:35:e2:4f:be:aa:c6:3a:46:65:d5:ad:
         6b:da:9d:c2:88:51:3f:9d:a6:91:bb:6d:14:83:c7:d9:d3:1b:
         dc:1e:35:ba:9a:50:19:98:db:82:6f:1f:85:de:e9:9b:ab:23:
         77:bb:46:d8:ea:4b:c7:6e:1d:d0:f7:98:5b:0c:ef:5a:02:c0:
         2c:69:94:9d:ce:03:6a:08:6c:2e:6a:0a:1e:fc:91:9f:cc:e2:
         38:5e:1e:19:c7:a6:14:fa:e9:5c:44:f1:a3:66:e3:33:3d:bf:
         78:5f:c9:23:17:f8:90:cc:75:79:17:3c:c3:f8:e5:15:10:f7:
         50:4c:ff:bf:9a:45:fc:55:d5:71:13:94:e4:3e:5b:47:37:0f:
         ae:0c:40:cb:61:08:e4:8f:06:87:d5:30:27:78:89:97:70:61:
         f9:19:2c:f7:9e:ee:51:99:e1:1a:c9:14:f3:4f:81:3d:43:e4:
         14:96:2a:5b:94:e7:17:5b:e5:93:f7:5e:c5:74:15:aa:61:37:
         8f:1e:c0:ca:cc:74:88:8b:28:45:ea:dd:00:ac:5a:f9:73:fa:
         72:50:95:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:40:36 2026 by rpki-client