This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8539cd-80ba-4c66-ba27-fe51a48c6801/1/hvKEMvItcjPdX3Xz07HMCHN4-0g.mft File: hvKEMvItcjPdX3Xz07HMCHN4-0g.mft (raw, json) Hash identifier: wB10WsadWzytNuzSQQDsv2O+MNEN9lJO1W1roBuDuLk= Subject key identifier: 0D:59:CB:ED:DD:A4:90:AD:38:A7:1D:53:EC:5A:0E:99:14:1C:55:B4 Authority key identifier: 86:F2:84:32:F2:2D:72:33:DD:5F:75:F3:D3:B1:CC:08:73:78:FB:48 Certificate issuer: /CN=86f28432f22d7233dd5f75f3d3b1cc087378fb48 Certificate serial: 019AF4D29847001298B28A60A7F46F2221AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hvKEMvItcjPdX3Xz07HMCHN4-0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8539cd-80ba-4c66-ba27-fe51a48c6801/1/hvKEMvItcjPdX3Xz07HMCHN4-0g.mft Manifest number: 010F Signing time: Sat 06 Dec 2025 18:00:33 +0000 Manifest this update: Sat 06 Dec 2025 18:00:33 +0000 Manifest next update: Sun 07 Dec 2025 18:00:33 +0000 Files and hashes: 1: hvKEMvItcjPdX3Xz07HMCHN4-0g.crl (hash: lJN2lrOEpLG2clAGAb5r+4W9mOJccarM/kzKU2Xuijk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8539cd-80ba-4c66-ba27-fe51a48c6801/1/hvKEMvItcjPdX3Xz07HMCHN4-0g.crl rsync://rpki.ripe.net/repository/DEFAULT/df/8539cd-80ba-4c66-ba27-fe51a48c6801/1/hvKEMvItcjPdX3Xz07HMCHN4-0g.mft rsync://rpki.ripe.net/repository/DEFAULT/hvKEMvItcjPdX3Xz07HMCHN4-0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:98:47:00:12:98:b2:8a:60:a7:f4:6f:22:21:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86f28432f22d7233dd5f75f3d3b1cc087378fb48 Validity Not Before: Dec 6 18:00:33 2025 GMT Not After : Dec 7 18:00:33 2025 GMT Subject: CN=0d59cbeddda490ad38a71d53ec5a0e99141c55b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:73:62:49:20:75:d3:00:82:7b:03:3a:99:3f: 5b:e6:af:4a:08:64:23:60:5c:2a:33:b1:9f:83:76: 41:c2:46:f0:49:51:41:1d:47:6d:2e:a3:e1:31:fb: c7:6b:82:98:58:20:b9:b8:a2:82:e8:fe:d7:e4:b7: c4:83:86:3f:a8:a3:7b:47:7b:11:41:6b:40:95:95: 6b:d6:4c:67:83:ad:0f:21:9c:8c:e2:7f:22:c9:53: ba:f5:de:69:af:33:e6:c6:93:80:f0:55:7f:ec:f3: b3:ac:38:6b:17:35:c8:ed:19:d8:f8:cc:f7:f3:f5: cf:0c:68:f5:dc:69:1c:bf:fb:d7:e1:3c:b5:c9:59: 86:8f:b9:b6:e0:bf:9c:b3:4a:61:11:e0:cc:6c:1f: de:f0:0f:30:9c:69:84:3f:c9:bf:7b:cc:39:95:2e: d7:4e:20:dd:f5:80:9e:0c:85:7d:08:10:9e:ed:00: 32:6c:8d:20:bb:94:25:55:9a:b2:35:7e:fa:bb:43: 79:52:cd:ee:a8:57:cd:d5:19:e8:84:79:1a:6b:c8: 66:1a:cd:87:ee:9b:21:b6:d0:8d:bc:6e:4a:b1:d7: 03:ca:86:bd:d1:3f:9d:42:18:c1:83:c7:37:28:f3: 00:b1:f9:ed:7e:a3:dc:18:19:39:e9:12:96:09:72: 96:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:59:CB:ED:DD:A4:90:AD:38:A7:1D:53:EC:5A:0E:99:14:1C:55:B4 X509v3 Authority Key Identifier: keyid:86:F2:84:32:F2:2D:72:33:DD:5F:75:F3:D3:B1:CC:08:73:78:FB:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hvKEMvItcjPdX3Xz07HMCHN4-0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8539cd-80ba-4c66-ba27-fe51a48c6801/1/hvKEMvItcjPdX3Xz07HMCHN4-0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8539cd-80ba-4c66-ba27-fe51a48c6801/1/hvKEMvItcjPdX3Xz07HMCHN4-0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:2e:77:15:5f:6e:8c:cf:32:a8:c9:64:87:05:f6:a1:77:61: dd:75:18:f7:25:ab:2f:a1:66:86:ea:c5:06:91:97:ab:9e:c0: 17:1e:8b:00:d5:26:2a:64:bb:8f:ec:6a:57:01:ca:4d:a8:0d: 4f:ba:65:70:5a:20:f8:a3:54:d4:b3:55:72:7a:c4:32:77:f5: a9:25:9f:ee:37:fe:38:80:98:56:b9:6e:d9:b5:15:75:65:e2: f2:ea:e2:79:31:1c:3b:ee:cc:e7:86:fe:0c:c2:63:03:76:a7: 24:3e:ec:d5:0a:e8:66:73:5b:2b:33:ed:3d:a4:0b:c9:8d:f3: 36:0a:69:1d:57:d1:6b:fd:9c:8d:f1:e3:c4:cd:ad:4d:9b:de: 17:a2:00:06:21:f1:0a:1b:6a:15:52:eb:de:1d:ef:4e:3e:f5: 55:0c:ad:cb:7b:44:a0:37:ce:dd:ed:2d:84:36:3e:f2:db:5d: cd:2b:d1:4c:a8:ad:0e:32:5e:8f:89:e0:c0:07:e0:ed:92:d9: f7:61:11:21:1a:dd:55:1f:a2:e2:0c:6a:ce:ec:86:71:7b:6e: c5:f5:9b:4d:8f:24:93:e2:a5:94:e5:af:82:5a:43:dd:2d:c5: 40:43:08:1c:3e:c3:c2:cf:9c:5f:be:3b:dd:fa:2e:db:68:64: 36:ae:d5:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00phHABKYsopgp/RvIiGrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZjI4NDMyZjIyZDcyMzNkZDVmNzVmM2QzYjFjYzA4NzM3 OGZiNDgwHhcNMjUxMjA2MTgwMDMzWhcNMjUxMjA3MTgwMDMzWjAzMTEwLwYDVQQD EygwZDU5Y2JlZGRkYTQ5MGFkMzhhNzFkNTNlYzVhMGU5OTE0MWM1NWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3NiSSB10wCCewM6mT9b5q9KCGQj YFwqM7Gfg3ZBwkbwSVFBHUdtLqPhMfvHa4KYWCC5uKKC6P7X5LfEg4Y/qKN7R3sR QWtAlZVr1kxng60PIZyM4n8iyVO69d5przPmxpOA8FV/7POzrDhrFzXI7RnY+Mz3 8/XPDGj13Gkcv/vX4Ty1yVmGj7m24L+cs0phEeDMbB/e8A8wnGmEP8m/e8w5lS7X TiDd9YCeDIV9CBCe7QAybI0gu5QlVZqyNX76u0N5Us3uqFfN1RnohHkaa8hmGs2H 7pshttCNvG5KsdcDyoa90T+dQhjBg8c3KPMAsfntfqPcGBk56RKWCXKWcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1Zy+3dpJCtOKcdU+xaDpkUHFW0MB8GA1UdIwQY MBaAFIbyhDLyLXIz3V9189OxzAhzePtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHZLRU12SXRjalBkWDNYejA3SE1DSE40LTBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84NTM5Y2QtODBiYS00YzY2LWJhMjct ZmU1MWE0OGM2ODAxLzEvaHZLRU12SXRjalBkWDNYejA3SE1DSE40LTBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi84NTM5Y2QtODBiYS00YzY2LWJhMjctZmU1MWE0OGM2ODAx LzEvaHZLRU12SXRjalBkWDNYejA3SE1DSE40LTBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkC53FV9u jM8yqMlkhwX2oXdh3XUY9yWrL6FmhurFBpGXq57AFx6LANUmKmS7j+xqVwHKTagN T7plcFog+KNU1LNVcnrEMnf1qSWf7jf+OICYVrlu2bUVdWXi8urieTEcO+7M54b+ DMJjA3anJD7s1QroZnNbKzPtPaQLyY3zNgppHVfRa/2cjfHjxM2tTZveF6IABiHx ChtqFVLr3h3vTj71VQyty3tEoDfO3e0thDY+8ttdzSvRTKitDjJej4ngwAfg7ZLZ 92ERIRrdVR+i4gxqzuyGcXtuxfWbTY8kk+KllOWvglpD3S3FQEMIHD7Dws+cX747 3fou22hkNq7VAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:53:56 2025 by rpki-client