This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json) Hash identifier: emp6EcovKet/xXtycAfHxo1VzMm+f/3IaiVihgBwKsw= Subject key identifier: E4:CF:2B:45:DE:C8:70:40:D9:CE:48:BC:93:5A:F2:06:7F:5D:A6:56 Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a Certificate serial: 019B318D1AE0CE02487981BF68345265BE7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft Manifest number: 1785 Signing time: Thu 18 Dec 2025 13:01:29 +0000 Manifest this update: Thu 18 Dec 2025 13:01:29 +0000 Manifest next update: Fri 19 Dec 2025 13:01:29 +0000 Files and hashes: 1: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: /pe1gAjTS3GdNaFXQIitu9A0KaBBZmWQZf0/IPnK6NM=) 2: cZTdH7vf_vUsZSA9Bkrj9O3ow_4.roa (hash: nta1g/RvN2MBRkggXlvKzqyMNronRUI3y0vVkrzhbVE=) 3: l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa (hash: 8uzp3mGBJoeQsydXTRtIRsEs6X4WHsK4qeFwSpFjWKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:8d:1a:e0:ce:02:48:79:81:bf:68:34:52:65:be:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a Validity Not Before: Dec 18 13:01:29 2025 GMT Not After : Dec 19 13:01:29 2025 GMT Subject: CN=e4cf2b45dec87040d9ce48bc935af2067f5da656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:54:85:31:96:6b:c2:54:34:a5:09:0d:b8:e9: 66:96:d3:dd:40:7d:15:1a:59:cb:49:39:de:06:11: 9c:75:fa:dd:06:36:de:06:3b:ce:d4:c6:01:68:05: a8:76:ba:0b:7c:e2:78:7f:f7:4b:3d:fe:24:77:a0: 27:ee:c9:ed:69:ff:47:f3:d3:c1:4d:8f:1d:f6:6d: f7:99:a4:1f:06:b6:27:f2:fb:cc:76:f9:c3:a0:49: ab:15:36:50:b0:87:20:2e:77:ce:f1:59:4d:1c:2f: 9c:f1:26:e4:15:d8:54:1f:35:23:5c:7a:3b:74:4f: 42:56:e0:0e:dd:99:f6:fb:35:7d:97:cd:a4:52:43: bd:1e:0e:09:13:5a:c1:c2:a3:b5:dc:63:17:36:b6: f9:7a:0f:04:47:f9:3b:2e:36:60:03:58:a5:8a:cf: 0f:cf:83:cb:0b:c4:63:0e:13:2e:35:ba:6a:0b:82: 7f:70:3f:41:e8:ba:7e:d1:d9:db:f1:f2:3e:e7:e4: ff:8a:a1:c2:a6:a0:cf:b3:78:36:26:af:2f:f3:f8: d6:48:65:54:82:64:47:09:7f:e5:a6:29:1f:99:e0: d3:69:45:73:4f:c6:3a:39:95:2a:c7:6e:c7:25:24: b0:3a:3f:ca:df:df:a4:58:52:ac:31:d4:eb:03:cb: 16:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CF:2B:45:DE:C8:70:40:D9:CE:48:BC:93:5A:F2:06:7F:5D:A6:56 X509v3 Authority Key Identifier: keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:4b:57:f4:83:98:a3:b8:aa:47:e2:71:6b:b3:4a:80:6d:14: 54:e2:97:f2:56:82:c7:7a:db:ce:0a:db:ba:91:1a:39:03:26: d1:ed:c1:91:23:ce:a2:02:5b:58:6e:1a:40:fe:f4:37:0c:24: d2:2b:04:f7:d7:42:1e:a0:8e:b5:68:2c:6a:55:dd:83:22:a0: 5c:70:d8:6c:05:3f:5d:9a:f5:b1:17:71:2e:46:ea:f3:1f:49: 3e:7b:e7:ff:97:37:ff:c9:c0:14:d5:fa:0e:40:a4:68:cf:41: ca:75:6e:b4:83:61:12:8a:7c:65:e9:78:67:cf:b9:87:75:07: 01:85:32:c0:5b:a4:d0:d4:57:de:55:f0:c3:b1:00:ea:27:7a: d0:0d:de:49:01:12:cc:34:7c:33:71:52:7c:e7:35:cd:21:04: ee:03:3a:1b:68:2b:c1:10:98:c5:8a:cf:88:1d:96:dc:03:27: af:e8:4c:5b:40:55:2d:0b:f9:db:2e:3f:16:1e:c6:ed:73:82: 6f:ab:7b:c8:3f:51:c8:e2:9d:4c:b2:53:56:de:f1:f0:ca:43: c8:26:1c:12:6a:6b:ee:62:24:5e:11:b5:3b:a5:8f:29:e6:3f: dc:2a:65:b5:e8:fc:9a:13:e7:9b:a3:36:72:d0:65:09:a8:c1: 02:ca:80:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxjRrgzgJIeYG/aDRSZb59MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZjkzMTJjZWE1YWE3NDM4YjRkOTBjMDgzNmM4MmYwNTBh MmEwMGEwHhcNMjUxMjE4MTMwMTI5WhcNMjUxMjE5MTMwMTI5WjAzMTEwLwYDVQQD EyhlNGNmMmI0NWRlYzg3MDQwZDljZTQ4YmM5MzVhZjIwNjdmNWRhNjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFSFMZZrwlQ0pQkNuOlmltPdQH0V GlnLSTneBhGcdfrdBjbeBjvO1MYBaAWodroLfOJ4f/dLPf4kd6An7sntaf9H89PB TY8d9m33maQfBrYn8vvMdvnDoEmrFTZQsIcgLnfO8VlNHC+c8SbkFdhUHzUjXHo7 dE9CVuAO3Zn2+zV9l82kUkO9Hg4JE1rBwqO13GMXNrb5eg8ER/k7LjZgA1ilis8P z4PLC8RjDhMuNbpqC4J/cD9B6Lp+0dnb8fI+5+T/iqHCpqDPs3g2Jq8v8/jWSGVU gmRHCX/lpikfmeDTaUVzT8Y6OZUqx27HJSSwOj/K39+kWFKsMdTrA8sWawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTPK0XeyHBA2c5IvJNa8gZ/XaZWMB8GA1UdIwQY MBaAFB75MSzqWqdDi02QwINsgvBQoqAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lODQ0ZTgtZDJmMC00NTE0LWI0MDUt MGI4MDFiZjgwZDUzLzEvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9lODQ0ZTgtZDJmMC00NTE0LWI0MDUtMGI4MDFiZjgwZDUz LzEvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEtX9IOY o7iqR+Jxa7NKgG0UVOKX8laCx3rbzgrbupEaOQMm0e3BkSPOogJbWG4aQP70Nwwk 0isE99dCHqCOtWgsalXdgyKgXHDYbAU/XZr1sRdxLkbq8x9JPnvn/5c3/8nAFNX6 DkCkaM9BynVutINhEop8Zel4Z8+5h3UHAYUywFuk0NRX3lXww7EA6id60A3eSQES zDR8M3FSfOc1zSEE7gM6G2grwRCYxYrPiB2W3AMnr+hMW0BVLQv52y4/Fh7G7XOC b6t7yD9RyOKdTLJTVt7x8MpDyCYcEmpr7mIkXhG1O6WPKeY/3Cpltej8mhPnm6M2 ctBlCajBAsqAeA== -----END CERTIFICATE-----Generated at Thu Dec 18 14:17:45 2025 by rpki-client