This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft File: HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json) Hash identifier: GwBwrsCSHl2PqBLWPVxGl7Zz1v6xSATv7OKCY2qASF0= Subject key identifier: C9:41:64:8B:29:B7:84:E0:97:E7:4F:3C:66:64:E7:99:98:E0:65:45 Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42 Certificate issuer: /CN=1d2fefbd168f18661eca15569dc6218f86746942 Certificate serial: 019B0E267107D034B748EA21B82779DD103C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft Manifest number: 12CA Signing time: Thu 11 Dec 2025 16:02:38 +0000 Manifest this update: Thu 11 Dec 2025 16:02:38 +0000 Manifest next update: Fri 12 Dec 2025 16:02:38 +0000 Files and hashes: 1: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: R8BYELvoqg0w0d5UjcheE0PKp5b4SWjl55BzqhTwFrA=) 2: jgAsessKAm9uqTW97_vJxlFphmg.roa (hash: SBPtFGq/5yKwTAX24BEiHsnyylA3vI1PAj8aDZuhBbE=) 3: kmGblmvAAGyRlFsROEtILxJX0AY.roa (hash: j4zVjRnml2SsYMPrYKgAmMnMiU9kMLQ4Se/WCN6WRCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:71:07:d0:34:b7:48:ea:21:b8:27:79:dd:10:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942 Validity Not Before: Dec 11 16:02:38 2025 GMT Not After : Dec 12 16:02:38 2025 GMT Subject: CN=c941648b29b784e097e74f3c6664e79998e06545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3e:17:62:a3:a8:75:3c:0e:d7:01:da:8c:ce: 89:20:db:38:0c:fc:5d:98:4f:42:82:43:b2:1b:11: 2f:b7:61:d7:20:10:52:98:05:d5:3c:61:b4:77:25: 74:5e:0a:5f:9b:fb:02:ba:4b:98:cd:a9:b3:5e:8d: 5b:33:54:cb:61:75:61:4b:b8:1b:21:55:aa:d5:de: f0:73:3e:8e:93:fd:07:8d:31:37:05:e0:9f:94:a6: 5e:89:2b:aa:f1:5e:0a:23:bf:5a:9c:17:57:05:f6: d9:88:2d:2d:3e:c1:9e:09:92:9d:27:41:e1:d6:d8: 33:99:42:86:e4:c8:ef:f1:39:7d:93:f7:8e:e7:c6: 0c:aa:ff:ac:83:43:a5:cd:4c:26:17:8f:e0:9d:88: 38:0c:27:47:14:3f:b3:95:58:f5:71:bb:e0:9e:eb: 3a:c4:eb:0f:91:64:fb:fc:b1:d1:c1:cd:b8:73:02: 89:d5:ea:5f:c4:59:f7:e2:dd:5e:42:05:30:c7:73: a6:ed:d5:3e:4e:bb:f3:ee:88:78:7b:60:e9:54:a3: 8d:1d:34:dd:31:e0:20:4e:a5:d6:ab:4e:fe:c3:d7: c4:e6:25:c6:ed:98:ec:b7:52:a9:4a:59:15:ce:98: 2f:a0:f1:cc:52:6f:a3:b1:2e:c7:7a:c7:fa:58:81: dc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:41:64:8B:29:B7:84:E0:97:E7:4F:3C:66:64:E7:99:98:E0:65:45 X509v3 Authority Key Identifier: keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a5:b7:94:68:89:31:5b:59:80:20:58:42:b2:e2:5e:7a:b8: 70:5d:d2:b3:81:76:5d:20:3b:ed:62:c1:b7:cc:ff:db:e2:27: 98:f1:5e:0b:1f:87:20:af:10:d4:ef:80:c0:b6:46:0a:59:ea: 8d:d9:b9:4c:60:4e:0f:6b:05:a0:eb:a4:78:c5:73:30:b6:cc: 99:b8:f2:eb:60:9d:64:10:b3:a9:9b:98:e7:b9:35:16:ce:43: 08:a9:f7:ab:e0:27:26:39:4e:7b:65:40:32:14:db:b0:5a:63: 70:be:0f:05:d6:84:74:9a:2f:61:0a:85:4f:59:cc:41:89:a0: b9:ce:9a:4f:8c:d4:8c:f0:35:61:a0:14:e8:6b:26:76:90:da: 84:ba:ae:d0:d0:fa:47:90:ca:c5:78:78:74:20:d2:36:62:f6: f0:a3:d0:10:2a:1e:c4:da:b9:a9:1b:b5:a6:5a:ea:f7:66:16: 2d:23:2e:4e:ca:ee:91:ae:ef:27:b7:f0:aa:9f:a1:f4:e8:22: 36:86:84:93:53:fd:3f:9d:f0:c3:9b:9a:bf:cb:37:e2:ae:ec: be:04:7e:bf:c4:7a:86:38:98:8f:59:52:e8:2e:ff:a1:c0:21: 32:b0:97:e1:93:97:06:a5:78:54:95:ca:39:2d:99:6e:fd:41: b9:a8:2a:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJnEH0DS3SOohuCd53RA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkMmZlZmJkMTY4ZjE4NjYxZWNhMTU1NjlkYzYyMThmODY3 NDY5NDIwHhcNMjUxMjExMTYwMjM4WhcNMjUxMjEyMTYwMjM4WjAzMTEwLwYDVQQD EyhjOTQxNjQ4YjI5Yjc4NGUwOTdlNzRmM2M2NjY0ZTc5OTk4ZTA2NTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4D4XYqOodTwO1wHajM6JINs4DPxd mE9CgkOyGxEvt2HXIBBSmAXVPGG0dyV0Xgpfm/sCukuYzamzXo1bM1TLYXVhS7gb IVWq1d7wcz6Ok/0HjTE3BeCflKZeiSuq8V4KI79anBdXBfbZiC0tPsGeCZKdJ0Hh 1tgzmUKG5Mjv8Tl9k/eO58YMqv+sg0OlzUwmF4/gnYg4DCdHFD+zlVj1cbvgnus6 xOsPkWT7/LHRwc24cwKJ1epfxFn34t1eQgUwx3Om7dU+Trvz7oh4e2DpVKONHTTd MeAgTqXWq07+w9fE5iXG7Zjst1KpSlkVzpgvoPHMUm+jsS7Hesf6WIHcmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlBZIspt4Tgl+dPPGZk55mY4GVFMB8GA1UdIwQY MBaAFB0v770WjxhmHsoVVp3GIY+GdGlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYt YzY0OTU4NTNjYzFhLzEvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9jMmRmNTktOWYxZS00OGRmLTg0NjYtYzY0OTU4NTNjYzFh LzEvSFNfdnZSYVBHR1lleWhWV25jWWhqNFowYVVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOaW3lGiJ MVtZgCBYQrLiXnq4cF3Ss4F2XSA77WLBt8z/2+InmPFeCx+HIK8Q1O+AwLZGClnq jdm5TGBOD2sFoOukeMVzMLbMmbjy62CdZBCzqZuY57k1Fs5DCKn3q+AnJjlOe2VA MhTbsFpjcL4PBdaEdJovYQqFT1nMQYmguc6aT4zUjPA1YaAU6GsmdpDahLqu0ND6 R5DKxXh4dCDSNmL28KPQECoexNq5qRu1plrq92YWLSMuTsruka7vJ7fwqp+h9Ogi NoaEk1P9P53ww5uav8s34q7svgR+v8R6hjiYj1lS6C7/ocAhMrCX4ZOXBqV4VJXK OS2Zbv1Buagq3A== -----END CERTIFICATE-----Generated at Thu Dec 11 23:53:37 2025 by rpki-client