This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft File: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft (raw, json) Hash identifier: lFNDCrZA7AO9sVm7ngzMT+feeTYhuGFEenGfe69JJZ8= Subject key identifier: 6A:D8:B0:2A:5F:28:FC:AB:44:E1:74:AB:A6:66:4F:29:9A:45:B1:71 Authority key identifier: 1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE Certificate issuer: /CN=1d5da9109f614c7c4159b3231a3877702a6f21ce Certificate serial: 019B44395194E29C23709CCC6EF4EA14FC17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft Manifest number: 0D7D Signing time: Mon 22 Dec 2025 04:02:45 +0000 Manifest this update: Mon 22 Dec 2025 04:02:45 +0000 Manifest next update: Tue 23 Dec 2025 04:02:45 +0000 Files and hashes: 1: HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl (hash: Q3ezsCHmKxFmNovKKjGPSS5I+/nuai6AZPKj3/pFD1o=) 2: tVk3cWsdi3hZrDEonwmclNGT-5M.roa (hash: bJG7n4hjSkt99mV93dCKPOM2IO0DVMxNl1m0F3B2sm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:51:94:e2:9c:23:70:9c:cc:6e:f4:ea:14:fc:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d5da9109f614c7c4159b3231a3877702a6f21ce Validity Not Before: Dec 22 04:02:45 2025 GMT Not After : Dec 23 04:02:45 2025 GMT Subject: CN=6ad8b02a5f28fcab44e174aba6664f299a45b171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a4:14:9a:ac:53:74:29:73:ad:cd:b9:22:e4: 3b:7a:67:f1:e7:63:ba:cc:c6:f0:d8:0b:33:23:34: a4:15:72:ed:98:ec:71:29:6d:90:4f:29:7a:5f:a9: aa:8a:96:5c:50:53:2d:01:1f:e4:31:9a:04:03:75: b6:e0:f8:18:f9:90:7e:ff:a6:69:56:3d:0a:c5:08: d7:f4:e0:62:d7:c5:68:bb:ad:80:f9:23:49:fe:d7: 71:34:e3:77:67:1e:a6:03:e2:20:52:a3:20:c8:aa: aa:8c:01:4d:b7:8d:82:ba:f6:af:f0:16:e2:e3:36: cd:0d:a3:f8:80:9a:0e:cc:b5:a7:17:f6:d1:16:5e: c2:dd:15:2d:a7:54:53:0f:8b:d6:ed:48:f6:d8:d6: 0d:89:d4:29:63:24:f9:d0:8e:7d:58:ac:a0:88:88: d8:f2:a5:b3:9a:1e:12:0a:b9:a4:39:5e:e0:76:c9: 57:b6:c0:d8:ad:70:83:3d:46:e2:4c:03:d4:fa:d0: 77:fa:f1:0f:f7:c2:f6:d4:a1:7f:3f:86:da:c0:6f: 29:09:51:06:e1:83:94:70:8d:70:34:97:a8:e2:30: 0e:7e:2e:d5:4e:c0:81:e5:26:1f:d3:06:90:9f:45: dc:8f:15:4f:17:d7:be:c3:a4:63:fa:3a:c0:f1:36: b1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:D8:B0:2A:5F:28:FC:AB:44:E1:74:AB:A6:66:4F:29:9A:45:B1:71 X509v3 Authority Key Identifier: keyid:1D:5D:A9:10:9F:61:4C:7C:41:59:B3:23:1A:38:77:70:2A:6F:21:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/33ac0e-e19e-4c89-bdf3-706a6fc164b1/1/HV2pEJ9hTHxBWbMjGjh3cCpvIc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e4:bd:0e:fa:19:66:ed:78:90:be:d9:68:cd:26:fc:3d:ba: 2c:99:3f:95:fe:00:ea:4d:b6:66:79:78:5f:34:5a:ef:e1:6d: 92:27:d5:14:ec:71:d3:c1:b4:ae:a3:81:64:d7:4a:ba:80:c3: 04:25:14:62:ea:88:9d:d5:8f:1c:df:be:13:06:5f:9c:f3:08: 99:1b:cd:44:1b:5a:85:8e:45:52:6e:d9:55:2d:f5:61:c4:93: c0:70:c3:35:3f:ed:13:77:9e:3e:a9:02:7e:f0:2f:c7:2a:ed: e0:39:d2:c2:d9:aa:cc:98:78:c4:84:eb:e7:44:79:12:68:4b: 55:54:ec:6b:d4:a4:54:88:20:0c:94:ae:53:06:e8:e0:e1:49: ab:63:67:22:2e:ac:02:3c:3a:30:20:c2:4b:0a:45:45:be:30: 0c:14:0a:1e:52:2b:5b:d0:e7:21:3e:64:05:d8:0f:44:d4:74: d2:d9:e8:30:f0:c6:03:db:98:94:97:28:23:f9:b4:89:ee:85: 05:2b:48:e8:67:dd:5b:dd:72:d9:7a:3e:d2:0e:c2:4a:50:40: 22:92:36:1e:81:22:e5:a5:5b:12:14:f8:59:c9:5e:bf:4a:b4: 69:7a:b9:29:3e:b0:67:6b:9d:29:b2:b5:07:1a:74:35:6a:38: 3d:6e:0e:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEOVGU4pwjcJzMbvTqFPwXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNWRhOTEwOWY2MTRjN2M0MTU5YjMyMzFhMzg3NzcwMmE2 ZjIxY2UwHhcNMjUxMjIyMDQwMjQ1WhcNMjUxMjIzMDQwMjQ1WjAzMTEwLwYDVQQD Eyg2YWQ4YjAyYTVmMjhmY2FiNDRlMTc0YWJhNjY2NGYyOTlhNDViMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKQUmqxTdClzrc25IuQ7emfx52O6 zMbw2AszIzSkFXLtmOxxKW2QTyl6X6mqipZcUFMtAR/kMZoEA3W24PgY+ZB+/6Zp Vj0KxQjX9OBi18Vou62A+SNJ/tdxNON3Zx6mA+IgUqMgyKqqjAFNt42Cuvav8Bbi 4zbNDaP4gJoOzLWnF/bRFl7C3RUtp1RTD4vW7Uj22NYNidQpYyT50I59WKygiIjY 8qWzmh4SCrmkOV7gdslXtsDYrXCDPUbiTAPU+tB3+vEP98L21KF/P4bawG8pCVEG 4YOUcI1wNJeo4jAOfi7VTsCB5SYf0waQn0XcjxVPF9e+w6Rj+jrA8TaxywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrYsCpfKPyrROF0q6ZmTymaRbFxMB8GA1UdIwQY MBaAFB1dqRCfYUx8QVmzIxo4d3AqbyHOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8zM2FjMGUtZTE5ZS00Yzg5LWJkZjMt NzA2YTZmYzE2NGIxLzEvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8zM2FjMGUtZTE5ZS00Yzg5LWJkZjMtNzA2YTZmYzE2NGIx LzEvSFYycEVKOWhUSHhCV2JNakdqaDNjQ3B2SWM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguS9DvoZ Zu14kL7ZaM0m/D26LJk/lf4A6k22Znl4XzRa7+FtkifVFOxx08G0rqOBZNdKuoDD BCUUYuqIndWPHN++EwZfnPMImRvNRBtahY5FUm7ZVS31YcSTwHDDNT/tE3eePqkC fvAvxyrt4DnSwtmqzJh4xITr50R5EmhLVVTsa9SkVIggDJSuUwbo4OFJq2NnIi6s Ajw6MCDCSwpFRb4wDBQKHlIrW9DnIT5kBdgPRNR00tnoMPDGA9uYlJcoI/m0ie6F BStI6GfdW91y2Xo+0g7CSlBAIpI2HoEi5aVbEhT4Wclev0q0aXq5KT6wZ2udKbK1 Bxp0NWo4PW4OdQ== -----END CERTIFICATE-----Generated at Mon Dec 22 06:51:37 2025 by rpki-client