This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
File:                     HVS-eciStTVr8be80TE5fywjrcA.mft (raw, json)
Hash identifier:          AGjEejtBz8HFT4BdzycP3cyTXxNMfVuNoKSQAroQg/0=
Subject key identifier:   3D:D3:19:78:3A:13:81:A0:60:A9:F6:27:51:DE:D7:F1:72:B2:C8:3E
Authority key identifier: 1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0
Certificate issuer:       /CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
Certificate serial:       019B0E2692963DB06A74E6F0B4C5EB16F82B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
Manifest number:          09BF
Signing time:             Thu 11 Dec 2025 16:02:47 +0000
Manifest this update:     Thu 11 Dec 2025 16:02:47 +0000
Manifest next update:     Fri 12 Dec 2025 16:02:47 +0000
Files and hashes:         1: HVS-eciStTVr8be80TE5fywjrcA.crl (hash: e8TAJXtuax6MRzoBI2sSeI09EhPy35/9qfe9EqNs0Qg=)
                          2: IlwlHTJqPLWMH_lz0yKwBRJ4EFM.roa (hash: 8ILO0xflDnRhAiaIWXV+bVrYseH60cw/H2lTYnQELWU=)
                          3: JQ0JLv3dju_CCqlooLL5tlgBa_8.roa (hash: 5xZaiIHpbRpK6TPasK1/MWxTTRnr5a9yc1STZsXk08U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Dec 2025 16:02:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:0e:26:92:96:3d:b0:6a:74:e6:f0:b4:c5:eb:16:f8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d54be79c892b5356bf1b7bcd131397f2c23adc0
        Validity
            Not Before: Dec 11 16:02:47 2025 GMT
            Not After : Dec 12 16:02:47 2025 GMT
        Subject: CN=3dd319783a1381a060a9f62751ded7f172b2c83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f4:69:bc:da:14:fb:5c:72:9f:6d:4f:cf:a5:
                    88:f8:52:cb:2f:05:35:36:ec:82:8a:fc:ac:27:02:
                    fc:12:88:16:4d:a2:86:3e:d6:21:53:59:8d:b7:e0:
                    b6:43:bd:70:aa:40:fa:26:07:b8:07:38:eb:56:cb:
                    a6:55:7e:89:b8:68:fd:81:e6:62:92:77:0a:cb:69:
                    25:9f:6c:2c:08:73:40:dd:f3:d2:c8:b5:38:f3:d5:
                    ef:41:4c:40:38:e9:45:aa:17:9d:12:3b:e0:ad:28:
                    48:db:9d:42:12:3a:4c:64:65:87:53:eb:e7:40:c9:
                    cc:44:a5:7a:26:85:da:0e:96:93:ed:4a:27:7d:de:
                    e3:4e:1d:10:58:0a:c6:17:a2:4b:07:a2:b1:08:8a:
                    85:56:04:10:81:eb:a3:5d:a4:a6:e4:01:00:c6:d2:
                    76:90:a3:45:42:ad:88:11:a3:fa:99:cf:a1:a1:e5:
                    3b:d2:a9:f7:a0:96:75:b4:c5:70:f4:14:94:c6:ee:
                    db:f2:b7:ef:7b:e9:b9:1a:5b:45:8a:92:df:72:85:
                    b5:50:f4:18:5b:40:bf:43:7d:8f:0b:06:46:2b:81:
                    59:dc:ed:d3:19:cc:51:e9:7b:15:47:2a:a0:f6:9b:
                    1c:9d:49:0f:12:af:3d:60:83:13:9e:89:2a:94:cd:
                    c1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D3:19:78:3A:13:81:A0:60:A9:F6:27:51:DE:D7:F1:72:B2:C8:3E
            X509v3 Authority Key Identifier:
                keyid:1D:54:BE:79:C8:92:B5:35:6B:F1:B7:BC:D1:31:39:7F:2C:23:AD:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVS-eciStTVr8be80TE5fywjrcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/67769b-85a5-4a0a-889b-802b6376f743/1/HVS-eciStTVr8be80TE5fywjrcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:35:98:3f:8a:71:7b:76:96:e9:c1:43:ff:63:5f:70:eb:5f:
         8f:6b:cf:aa:e9:11:66:c6:1f:0b:b0:6c:ef:05:a7:32:09:1f:
         dc:21:55:e7:1d:73:40:e0:60:ab:39:46:54:8e:63:e6:f8:a6:
         df:6f:46:eb:b2:09:96:40:7b:ba:16:9c:4e:c1:d0:1a:fb:f7:
         38:76:cf:20:cc:dc:c2:93:68:f9:58:9e:43:76:21:d7:97:28:
         1e:a7:fd:29:37:d7:6f:a6:0f:5c:dc:b6:b9:bc:da:7d:44:f1:
         37:89:4e:f5:bc:62:ed:6b:7c:f7:ae:19:c0:80:25:61:38:6c:
         3b:11:51:66:aa:96:f2:45:03:08:3d:8a:cf:ff:de:ca:79:9f:
         6c:81:e2:2d:af:ab:bc:cb:cb:13:69:ff:db:97:96:2f:aa:4c:
         d5:93:f6:d1:cd:34:8c:90:a8:3d:41:b5:dd:b2:b1:2f:56:1c:
         cf:47:dd:ab:19:44:81:15:ec:ba:6d:ea:de:7c:71:b8:5a:90:
         38:98:82:81:f4:ac:4e:ff:87:aa:78:ef:7b:f0:dc:4d:69:fe:
         e3:68:8d:42:d3:59:80:d6:ad:31:84:d8:54:4a:b4:eb:06:84:
         87:48:5a:d0:42:0a:bf:67:b6:d0:2c:a3:ee:2d:7a:f0:1c:b8:
         4a:08:da:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsOJpKWPbBqdObwtMXrFvgrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNTRiZTc5Yzg5MmI1MzU2YmYxYjdiY2QxMzEzOTdmMmMy
M2FkYzAwHhcNMjUxMjExMTYwMjQ3WhcNMjUxMjEyMTYwMjQ3WjAzMTEwLwYDVQQD
EygzZGQzMTk3ODNhMTM4MWEwNjBhOWY2Mjc1MWRlZDdmMTcyYjJjODNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufRpvNoU+1xyn21Pz6WI+FLLLwU1
NuyCivysJwL8EogWTaKGPtYhU1mNt+C2Q71wqkD6Jge4BzjrVsumVX6JuGj9geZi
kncKy2kln2wsCHNA3fPSyLU489XvQUxAOOlFqhedEjvgrShI251CEjpMZGWHU+vn
QMnMRKV6JoXaDpaT7Uonfd7jTh0QWArGF6JLB6KxCIqFVgQQgeujXaSm5AEAxtJ2
kKNFQq2IEaP6mc+hoeU70qn3oJZ1tMVw9BSUxu7b8rfve+m5GltFipLfcoW1UPQY
W0C/Q32PCwZGK4FZ3O3TGcxR6XsVRyqg9pscnUkPEq89YIMTnokqlM3BmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3TGXg6E4GgYKn2J1He1/Fyssg+MB8GA1UdIwQY
MBaAFB1UvnnIkrU1a/G3vNExOX8sI63AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFZTLWVjaVN0VFZyOGJlODBURTVmeXdqcmNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82Nzc2OWItODVhNS00YTBhLTg4OWIt
ODAyYjYzNzZmNzQzLzEvSFZTLWVjaVN0VFZyOGJlODBURTVmeXdqcmNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82Nzc2OWItODVhNS00YTBhLTg4OWItODAyYjYzNzZmNzQz
LzEvSFZTLWVjaVN0VFZyOGJlODBURTVmeXdqcmNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTWYP4px
e3aW6cFD/2NfcOtfj2vPqukRZsYfC7Bs7wWnMgkf3CFV5x1zQOBgqzlGVI5j5vim
329G67IJlkB7uhacTsHQGvv3OHbPIMzcwpNo+VieQ3Yh15coHqf9KTfXb6YPXNy2
ubzafUTxN4lO9bxi7Wt8964ZwIAlYThsOxFRZqqW8kUDCD2Kz//eynmfbIHiLa+r
vMvLE2n/25eWL6pM1ZP20c00jJCoPUG13bKxL1Ycz0fdqxlEgRXsum3q3nxxuFqQ
OJiCgfSsTv+Hqnjve/DcTWn+42iNQtNZgNatMYTYVEq06waEh0ha0EIKv2e20Cyj
7i168By4Sgja4A==
-----END CERTIFICATE-----
Generated at Fri Dec 12 00:25:57 2025 by rpki-client