This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft File: HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft (raw, json) Hash identifier: KePdgT23UVTRkutVh2Tw3sWNXHXKXf6hL7j8tRx/W+0= Subject key identifier: 6A:39:BC:88:D3:45:8D:6A:6E:FA:9B:48:D9:86:66:30:BA:8B:84:5C Authority key identifier: 1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74 Certificate issuer: /CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174 Certificate serial: 019AF19B071765321F38CB158083373D28C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 03:01:00 +0000 Manifest this update: Sat 06 Dec 2025 03:01:00 +0000 Manifest next update: Sun 07 Dec 2025 03:01:00 +0000 Files and hashes: 1: HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl (hash: N6zAjBYp2MiuxRqVVlX86PVAJuqnlHm3+zkKW5W6gaA=) 2: qNCTONYDVgV-YhIGjmOlPezvOSo.roa (hash: ItD5CwPVAJp65+VPpIu9fPnV1XDVQw26MRj7li9FxQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:07:17:65:32:1f:38:cb:15:80:83:37:3d:28:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ef3cb098d5285020c3be754f8c4ff777aa8a174 Validity Not Before: Dec 6 03:01:00 2025 GMT Not After : Dec 7 03:01:00 2025 GMT Subject: CN=6a39bc88d3458d6a6efa9b48d9866630ba8b845c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b3:94:7a:d3:d5:86:c5:ee:d6:6d:18:c9:99: 4b:5c:b8:53:d3:57:4d:2e:d5:10:a4:0d:28:3d:24: bb:a1:3c:f8:12:d7:82:8a:76:dd:bc:bf:50:1f:cd: ff:fa:f9:5e:3b:71:5c:ca:7a:b2:bb:5a:fc:8d:b6: b6:e7:a6:23:f5:c9:73:06:a6:6a:4f:2b:03:f1:0f: 53:28:1a:44:70:a2:12:e5:25:b8:a1:e4:0b:31:5a: f9:68:84:6a:40:49:b0:81:b6:da:32:69:64:07:66: 23:79:a9:79:89:60:3e:fa:1e:74:99:1f:b8:bc:81: 75:b1:c9:ee:56:28:28:4c:6e:42:a5:6b:d1:17:6a: e1:e1:9c:d6:74:58:67:9f:8b:44:da:6d:4b:06:60: bb:ec:53:5a:2c:96:2b:87:ef:65:70:79:6f:42:0c: 23:21:dc:f2:5c:d7:8f:f6:f2:98:f4:73:e5:a3:00: 39:94:18:61:26:6f:8d:f6:98:47:19:34:51:37:dd: 6d:29:15:7d:8d:42:5b:9a:30:75:40:8c:3f:ea:24: fd:3e:db:be:05:fa:df:47:86:87:2b:ba:d5:0f:ca: 80:41:76:8c:4d:a6:90:d3:26:60:99:07:7f:36:81: f7:12:5a:f0:71:4a:f9:2e:0f:77:cd:a6:fd:06:ec: d3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:39:BC:88:D3:45:8D:6A:6E:FA:9B:48:D9:86:66:30:BA:8B:84:5C X509v3 Authority Key Identifier: keyid:1E:F3:CB:09:8D:52:85:02:0C:3B:E7:54:F8:C4:FF:77:7A:A8:A1:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvPLCY1ShQIMO-dU-MT_d3qooXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/933818-a5bb-4d16-b551-f992b07f323f/1/HvPLCY1ShQIMO-dU-MT_d3qooXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:89:e6:c2:19:bc:2b:80:c2:2c:65:41:ac:ab:b4:4c:08:c8: f0:77:1e:6e:1b:1d:ec:f8:3a:67:ba:56:a4:10:04:33:e3:60: f0:95:e3:88:a8:f7:1d:1c:91:5e:8d:28:4f:0c:5f:51:60:c3: d4:11:9a:df:1a:e8:3b:49:83:f9:20:22:fa:a7:c7:76:84:76: 07:a5:da:91:3c:79:44:87:40:57:78:1a:70:f4:4b:69:87:58: 1b:7b:b4:6d:8f:c6:f6:57:57:99:58:5a:58:65:99:49:eb:e9: 5d:e9:8e:bb:68:f8:76:17:1d:3e:1c:e7:43:ea:d5:e4:a1:81: 3b:68:62:19:0e:3b:64:88:88:00:df:6e:f7:9a:c6:df:6e:52: 2a:f4:38:51:25:a2:9f:3b:88:69:72:95:02:8c:39:ff:40:b6: ad:74:70:8f:9a:ec:7a:19:90:a7:02:17:1e:6f:78:a5:9e:8d: 17:cd:c1:17:cf:77:11:f7:ca:9b:70:c2:ff:7c:39:1a:df:43: 11:1a:c8:ff:83:b4:e9:68:6e:0a:93:8b:29:a4:5e:81:ba:84: 3d:2c:40:df:fd:8b:0d:2d:a8:30:1a:34:62:a6:5f:88:56:9a: 81:ac:5a:98:00:a6:66:08:e1:49:b4:5d:11:e2:bc:7f:34:00: 1e:a6:49:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwcXZTIfOMsVgIM3PSjCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZjNjYjA5OGQ1Mjg1MDIwYzNiZTc1NGY4YzRmZjc3N2Fh OGExNzQwHhcNMjUxMjA2MDMwMTAwWhcNMjUxMjA3MDMwMTAwWjAzMTEwLwYDVQQD Eyg2YTM5YmM4OGQzNDU4ZDZhNmVmYTliNDhkOTg2NjYzMGJhOGI4NDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbOUetPVhsXu1m0YyZlLXLhT01dN LtUQpA0oPSS7oTz4EteCinbdvL9QH83/+vleO3Fcynqyu1r8jba256Yj9clzBqZq TysD8Q9TKBpEcKIS5SW4oeQLMVr5aIRqQEmwgbbaMmlkB2Yjeal5iWA++h50mR+4 vIF1scnuVigoTG5CpWvRF2rh4ZzWdFhnn4tE2m1LBmC77FNaLJYrh+9lcHlvQgwj IdzyXNeP9vKY9HPlowA5lBhhJm+N9phHGTRRN91tKRV9jUJbmjB1QIw/6iT9Ptu+ BfrfR4aHK7rVD8qAQXaMTaaQ0yZgmQd/NoH3ElrwcUr5Lg93zab9BuzTnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGo5vIjTRY1qbvqbSNmGZjC6i4RcMB8GA1UdIwQY MBaAFB7zywmNUoUCDDvnVPjE/3d6qKF0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZQTENZMVNoUUlNTy1kVS1NVF9kM3Fvb1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85MzM4MTgtYTViYi00ZDE2LWI1NTEt Zjk5MmIwN2YzMjNmLzEvSHZQTENZMVNoUUlNTy1kVS1NVF9kM3Fvb1hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85MzM4MTgtYTViYi00ZDE2LWI1NTEtZjk5MmIwN2YzMjNm LzEvSHZQTENZMVNoUUlNTy1kVS1NVF9kM3Fvb1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATInmwhm8 K4DCLGVBrKu0TAjI8Hcebhsd7Pg6Z7pWpBAEM+Ng8JXjiKj3HRyRXo0oTwxfUWDD 1BGa3xroO0mD+SAi+qfHdoR2B6XakTx5RIdAV3gacPRLaYdYG3u0bY/G9ldXmVha WGWZSevpXemOu2j4dhcdPhznQ+rV5KGBO2hiGQ47ZIiIAN9u95rG325SKvQ4USWi nzuIaXKVAow5/0C2rXRwj5rsehmQpwIXHm94pZ6NF83BF893EffKm3DC/3w5Gt9D ERrI/4O06WhuCpOLKaRegbqEPSxA3/2LDS2oMBo0YqZfiFaagaxamACmZgjhSbRd EeK8fzQAHqZJLQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:42:24 2025 by rpki-client