This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.mft File: hVvB1897acjrUdDG1U9_-t94DKc.mft (raw, json) Hash identifier: Hs6rYicsO8wyB2tXQC4MpcfcQ4dbmhvyq6jJ/Rmi27g= Subject key identifier: D8:07:A7:FF:B0:C3:77:06:CE:0E:44:54:79:6D:37:EA:BF:D0:5B:E7 Authority key identifier: 85:5B:C1:D7:CF:7B:69:C8:EB:51:D0:C6:D5:4F:7F:FA:DF:78:0C:A7 Certificate issuer: /CN=855bc1d7cf7b69c8eb51d0c6d54f7ffadf780ca7 Certificate serial: 019B5A1AC7C36632F9133E518B90206ACB35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvB1897acjrUdDG1U9_-t94DKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.mft Manifest number: 79 Signing time: Fri 26 Dec 2025 10:01:02 +0000 Manifest this update: Fri 26 Dec 2025 10:01:02 +0000 Manifest next update: Sat 27 Dec 2025 10:01:02 +0000 Files and hashes: 1: Rw8RywHbsa_p7g8zsXuVy9RBQFI.roa (hash: jD0IyjbZPbmU1TJt+Q9T2QY51OqVD1cOWjM2usjzUl4=) 2: hVvB1897acjrUdDG1U9_-t94DKc.crl (hash: iepV1+TIrC/VQhgdkZ49KJB8sFLPNFPUEESLqKwsMMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.crl rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.mft rsync://rpki.ripe.net/repository/DEFAULT/hVvB1897acjrUdDG1U9_-t94DKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:c7:c3:66:32:f9:13:3e:51:8b:90:20:6a:cb:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=855bc1d7cf7b69c8eb51d0c6d54f7ffadf780ca7 Validity Not Before: Dec 26 10:01:02 2025 GMT Not After : Dec 27 10:01:02 2025 GMT Subject: CN=d807a7ffb0c37706ce0e4454796d37eabfd05be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:df:91:3c:3e:ec:f3:95:31:20:cf:ec:4d:05: 23:42:8e:0d:72:69:5e:f2:96:5a:4b:da:5c:33:01: 43:fb:dc:19:ae:1f:4e:f1:2e:75:d6:6d:75:bf:8c: 10:a6:e6:83:44:9e:8a:3c:b7:9e:d4:ac:92:70:82: 09:b2:c9:e0:8c:f1:a4:50:34:aa:e2:1f:ab:70:ef: 21:39:fc:02:33:af:49:a5:a7:78:32:28:9f:de:e7: 94:2c:b3:24:b3:a8:0d:cd:53:7f:1d:5f:e8:8a:f7: 2a:f9:78:fc:d0:da:0e:15:83:6c:81:13:73:1e:49: 40:63:34:02:f0:5d:9e:60:59:72:1f:d8:53:bd:ef: 61:e2:c9:1f:b8:da:52:4f:32:1c:34:b6:d6:25:1e: 71:f6:3b:eb:29:2b:a2:8e:22:a7:da:10:b2:a1:4c: 24:2e:0a:a8:9a:fd:c9:db:11:8d:09:0c:c2:c9:4a: 68:26:b1:f8:87:99:bd:d8:38:d0:44:6c:43:43:e6: 60:81:a9:f3:05:7d:ff:f3:3b:ce:46:d9:8a:e9:69: 4b:6a:0a:99:20:c9:37:b0:e5:76:ac:e8:e0:43:45: 1a:51:bd:52:6d:fe:ed:72:bb:59:0e:ba:19:6a:12: b6:6a:8e:4b:f4:cb:19:75:d7:75:38:2b:2e:7b:51: 18:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:07:A7:FF:B0:C3:77:06:CE:0E:44:54:79:6D:37:EA:BF:D0:5B:E7 X509v3 Authority Key Identifier: keyid:85:5B:C1:D7:CF:7B:69:C8:EB:51:D0:C6:D5:4F:7F:FA:DF:78:0C:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvB1897acjrUdDG1U9_-t94DKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e3d6ff-8ffb-4741-8fa4-0cc4d2d26f06/1/hVvB1897acjrUdDG1U9_-t94DKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:f8:38:ca:be:a8:99:e2:2c:b6:82:48:02:04:cb:e9:70:d0: a8:eb:4d:34:f2:46:00:b1:69:cd:0c:52:ee:59:ba:6a:65:fa: 6a:0b:74:f7:ce:bb:d8:16:e2:fc:fe:53:7b:3f:8d:42:72:28: 52:10:af:ad:dd:eb:ce:ac:d9:1d:14:31:e7:9e:9e:68:47:04: 6b:6f:0a:08:7e:63:cb:66:9e:4b:41:7b:84:85:c1:1b:2d:b1: c5:88:6e:5d:d9:3f:9f:de:3a:b3:0b:37:4a:2d:df:06:7a:ef: f9:e8:0a:79:7e:2c:38:57:c4:36:ac:ab:a8:f1:1a:54:79:58: ef:ea:86:77:2e:43:45:ca:ec:aa:32:d0:fe:71:f3:72:15:54: 41:a0:81:98:bd:9f:60:41:20:30:d5:40:f7:eb:ad:1f:a6:42: db:e9:3e:d7:ec:c8:b3:37:72:ad:22:9e:b1:33:c6:26:76:84: 2f:80:42:e2:52:6f:b4:22:af:e0:1a:8c:d3:b9:2f:1c:5f:37: 96:b3:1f:55:ef:56:70:1e:97:cd:95:1c:06:12:e7:3c:b0:c4: be:b8:18:0c:8f:07:db:e2:e5:14:20:0d:83:d8:29:a6:b6:3c: 13:9b:a2:d3:2f:a8:cb:74:1d:39:26:53:e2:f1:33:1f:1e:e4: bd:cf:18:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGsfDZjL5Ez5Ri5Agass1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NWJjMWQ3Y2Y3YjY5YzhlYjUxZDBjNmQ1NGY3ZmZhZGY3 ODBjYTcwHhcNMjUxMjI2MTAwMTAyWhcNMjUxMjI3MTAwMTAyWjAzMTEwLwYDVQQD EyhkODA3YTdmZmIwYzM3NzA2Y2UwZTQ0NTQ3OTZkMzdlYWJmZDA1YmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAot+RPD7s85UxIM/sTQUjQo4Ncmle 8pZaS9pcMwFD+9wZrh9O8S511m11v4wQpuaDRJ6KPLee1KyScIIJssngjPGkUDSq 4h+rcO8hOfwCM69Jpad4Miif3ueULLMks6gNzVN/HV/oivcq+Xj80NoOFYNsgRNz HklAYzQC8F2eYFlyH9hTve9h4skfuNpSTzIcNLbWJR5x9jvrKSuijiKn2hCyoUwk Lgqomv3J2xGNCQzCyUpoJrH4h5m92DjQRGxDQ+ZgganzBX3/8zvORtmK6WlLagqZ IMk3sOV2rOjgQ0UaUb1Sbf7tcrtZDroZahK2ao5L9MsZddd1OCsue1EYIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgHp/+ww3cGzg5EVHltN+q/0FvnMB8GA1UdIwQY MBaAFIVbwdfPe2nI61HQxtVPf/rfeAynMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFZ2QjE4OTdhY2pyVWRERzFVOV8tdDk0REtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9lM2Q2ZmYtOGZmYi00NzQxLThmYTQt MGNjNGQyZDI2ZjA2LzEvaFZ2QjE4OTdhY2pyVWRERzFVOV8tdDk0REtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9lM2Q2ZmYtOGZmYi00NzQxLThmYTQtMGNjNGQyZDI2ZjA2 LzEvaFZ2QjE4OTdhY2pyVWRERzFVOV8tdDk0REtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEPg4yr6o meIstoJIAgTL6XDQqOtNNPJGALFpzQxS7lm6amX6agt098672Bbi/P5Tez+NQnIo UhCvrd3rzqzZHRQx556eaEcEa28KCH5jy2aeS0F7hIXBGy2xxYhuXdk/n946sws3 Si3fBnrv+egKeX4sOFfENqyrqPEaVHlY7+qGdy5DRcrsqjLQ/nHzchVUQaCBmL2f YEEgMNVA9+utH6ZC2+k+1+zIszdyrSKesTPGJnaEL4BC4lJvtCKv4BqM07kvHF83 lrMfVe9WcB6XzZUcBhLnPLDEvrgYDI8H2+LlFCANg9gpprY8E5ui0y+oy3QdOSZT 4vEzHx7kvc8YkA== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:17 2025 by rpki-client