This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft File: Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft (raw, json) Hash identifier: 2VSYENTWoUkeQQ1lU2w37R/quB6rQA3/4t1wqFM2b24= Subject key identifier: E7:EF:70:EA:0A:30:E7:B3:10:CE:BD:43:ED:C5:AC:F7:E3:22:80:12 Authority key identifier: 1E:F9:5B:FC:F5:95:F4:65:0F:F3:12:25:43:62:AD:26:66:B1:CD:6B Certificate issuer: /CN=1ef95bfcf595f4650ff312254362ad2666b1cd6b Certificate serial: 019B3CEC42587858C9DE2A6671EDCB0FDE13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft Manifest number: 05F4 Signing time: Sat 20 Dec 2025 18:01:14 +0000 Manifest this update: Sat 20 Dec 2025 18:01:14 +0000 Manifest next update: Sun 21 Dec 2025 18:01:14 +0000 Files and hashes: 1: Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl (hash: f67qF/4lwYxoti8wUpAtIvWvrvSsW1Jum894EPSXyVs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:42:58:78:58:c9:de:2a:66:71:ed:cb:0f:de:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ef95bfcf595f4650ff312254362ad2666b1cd6b Validity Not Before: Dec 20 18:01:14 2025 GMT Not After : Dec 21 18:01:14 2025 GMT Subject: CN=e7ef70ea0a30e7b310cebd43edc5acf7e3228012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:45:69:25:8f:e9:28:ad:5c:67:69:83:20:48: db:e0:c1:b1:32:f2:43:0c:96:75:07:52:18:85:7d: fc:b7:9c:47:95:e2:83:8f:6e:af:04:20:43:5a:46: 40:f1:93:2d:db:9f:10:c7:cd:7b:ce:0e:ec:f5:a6: 44:0f:8f:d9:e8:e9:2b:4a:9a:6c:63:7b:1f:a0:82: 8a:18:f9:b6:84:1c:bd:42:e5:5a:42:71:b1:1d:2a: 9c:c1:8d:55:af:ae:73:45:e5:f5:b6:d6:56:83:d7: 78:f4:db:fa:b4:46:0b:54:53:b3:50:54:11:c7:f0: 1e:69:47:ad:7f:16:a7:24:68:c2:46:b9:5a:e4:08: 31:52:e8:13:65:68:a4:54:ba:87:15:c2:a3:b1:2c: 9e:9c:a3:ef:dc:3f:5d:48:ba:59:43:c9:40:65:32: 62:2a:86:3b:8a:19:8d:dd:41:c1:a0:8d:66:a6:88: 82:1d:28:af:c8:cb:5c:78:67:5d:81:ef:1f:64:ca: 00:6c:20:2d:5f:e1:8a:6e:3f:04:f9:9b:03:85:be: 78:9f:96:1e:a3:6a:a6:8d:fe:4c:6a:1f:5f:96:85: bd:eb:64:7f:90:ef:db:58:a9:5f:59:cf:5b:56:8d: a0:52:06:5b:63:2d:d4:2c:92:b2:ef:f4:87:98:c6: 29:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EF:70:EA:0A:30:E7:B3:10:CE:BD:43:ED:C5:AC:F7:E3:22:80:12 X509v3 Authority Key Identifier: keyid:1E:F9:5B:FC:F5:95:F4:65:0F:F3:12:25:43:62:AD:26:66:B1:CD:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/74d697-4a07-4020-9dda-550e1018fcbf/1/Hvlb_PWV9GUP8xIlQ2KtJmaxzWs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:4f:5d:52:1a:30:b1:5c:38:4d:d6:29:90:eb:78:7c:a9:14: ba:d3:14:8b:11:32:7a:4e:3e:d5:f3:c1:21:38:a2:dd:72:ab: 60:67:ba:fb:96:1b:34:f3:12:3b:5b:03:42:23:3e:5d:b5:60: 37:af:3a:5d:54:3e:f8:a9:7f:ac:3f:8f:f7:93:18:7c:e2:5d: 62:7a:59:f6:69:0e:ac:d6:4e:a5:9e:3e:b5:29:29:78:df:27: 3d:d5:b2:93:c6:7a:c5:fd:26:1d:59:1c:83:da:a9:3e:68:da: bc:e3:fa:fd:bc:cd:80:1f:4b:ea:6d:16:34:c7:ad:32:15:bb: 9e:78:ec:32:d7:54:74:49:4e:16:ca:62:2d:d1:ac:ad:52:e4: 70:97:39:d1:2c:bb:31:3f:1e:7c:70:b3:0a:be:08:3a:f3:e6: 56:cc:96:bf:11:73:b1:c4:fd:1b:45:b2:44:0f:0d:2b:09:da: e6:ef:59:c5:f3:80:38:40:11:76:85:72:36:0e:be:21:83:37: 98:69:fc:b4:ce:28:1b:44:b9:4a:48:d1:94:0a:25:78:65:bc: 3b:d0:3f:cb:f0:09:fe:40:4b:e3:89:9b:22:de:48:8d:a2:e8: f1:62:11:e7:f1:ac:b0:2d:d7:05:fd:0a:03:5f:ff:61:fb:56: 4b:07:a6:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87EJYeFjJ3ipmce3LD94TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZjk1YmZjZjU5NWY0NjUwZmYzMTIyNTQzNjJhZDI2NjZi MWNkNmIwHhcNMjUxMjIwMTgwMTE0WhcNMjUxMjIxMTgwMTE0WjAzMTEwLwYDVQQD EyhlN2VmNzBlYTBhMzBlN2IzMTBjZWJkNDNlZGM1YWNmN2UzMjI4MDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0VpJY/pKK1cZ2mDIEjb4MGxMvJD DJZ1B1IYhX38t5xHleKDj26vBCBDWkZA8ZMt258Qx817zg7s9aZED4/Z6OkrSpps Y3sfoIKKGPm2hBy9QuVaQnGxHSqcwY1Vr65zReX1ttZWg9d49Nv6tEYLVFOzUFQR x/AeaUetfxanJGjCRrla5AgxUugTZWikVLqHFcKjsSyenKPv3D9dSLpZQ8lAZTJi KoY7ihmN3UHBoI1mpoiCHSivyMtceGddge8fZMoAbCAtX+GKbj8E+ZsDhb54n5Ye o2qmjf5Mah9floW962R/kO/bWKlfWc9bVo2gUgZbYy3ULJKy7/SHmMYpEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfvcOoKMOezEM69Q+3FrPfjIoASMB8GA1UdIwQY MBaAFB75W/z1lfRlD/MSJUNirSZmsc1rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZsYl9QV1Y5R1VQOHhJbFEyS3RKbWF4eldzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83NGQ2OTctNGEwNy00MDIwLTlkZGEt NTUwZTEwMThmY2JmLzEvSHZsYl9QV1Y5R1VQOHhJbFEyS3RKbWF4eldzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS83NGQ2OTctNGEwNy00MDIwLTlkZGEtNTUwZTEwMThmY2Jm LzEvSHZsYl9QV1Y5R1VQOHhJbFEyS3RKbWF4eldzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGk9dUhow sVw4TdYpkOt4fKkUutMUixEyek4+1fPBITii3XKrYGe6+5YbNPMSO1sDQiM+XbVg N686XVQ++Kl/rD+P95MYfOJdYnpZ9mkOrNZOpZ4+tSkpeN8nPdWyk8Z6xf0mHVkc g9qpPmjavOP6/bzNgB9L6m0WNMetMhW7nnjsMtdUdElOFspiLdGsrVLkcJc50Sy7 MT8efHCzCr4IOvPmVsyWvxFzscT9G0WyRA8NKwna5u9ZxfOAOEARdoVyNg6+IYM3 mGn8tM4oG0S5SkjRlAoleGW8O9A/y/AJ/kBL44mbIt5IjaLo8WIR5/GssC3XBf0K A1//YftWSwemlA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:23:04 2025 by rpki-client