This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft File: HvkxLOpap0OLTZDAg2yC8FCioAo.mft (raw, json) Hash identifier: LNk0E8hcL2nulWfNG2VEnsYb3S2/u6eEPyX5cGGbQhI= Subject key identifier: 7F:12:A8:22:BA:09:BE:7B:07:82:97:B5:4A:E3:62:F1:64:10:39:6C Authority key identifier: 1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A Certificate issuer: /CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a Certificate serial: 019B5A1AF31BD45641890CB1BCCC3A7EC2CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 10:01:14 +0000 Manifest this update: Fri 26 Dec 2025 10:01:14 +0000 Manifest next update: Sat 27 Dec 2025 10:01:14 +0000 Files and hashes: 1: HvkxLOpap0OLTZDAg2yC8FCioAo.crl (hash: 4c1AfJc+DdzKRPKuOi2gTQfwuM3TGuh58CdQZz/rrXI=) 2: cZTdH7vf_vUsZSA9Bkrj9O3ow_4.roa (hash: nta1g/RvN2MBRkggXlvKzqyMNronRUI3y0vVkrzhbVE=) 3: l6Bsbmlql8UUoGOr_xfaC7GIJH4.roa (hash: 8uzp3mGBJoeQsydXTRtIRsEs6X4WHsK4qeFwSpFjWKA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:f3:1b:d4:56:41:89:0c:b1:bc:cc:3a:7e:c2:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ef9312cea5aa7438b4d90c0836c82f050a2a00a Validity Not Before: Dec 26 10:01:14 2025 GMT Not After : Dec 27 10:01:14 2025 GMT Subject: CN=7f12a822ba09be7b078297b54ae362f16410396c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e7:16:c3:aa:af:10:b2:39:2c:cd:6b:c2:5b: 99:09:d9:16:de:16:11:39:2f:c1:3e:cd:56:92:71: 1a:d8:36:ab:9c:b0:ec:f3:a5:e6:28:45:66:25:1d: 09:09:7a:c2:7f:b1:34:17:14:fc:7a:a6:b9:0d:bc: 3f:e2:f0:d1:0a:4a:2d:37:0c:3d:6b:7b:a1:c0:3b: f3:5a:e0:90:05:bb:15:23:71:df:8f:ec:f9:26:09: 31:e1:60:58:9e:bf:43:96:7e:d7:3e:16:c6:0b:e4: 5b:e5:eb:15:67:8e:1d:7c:ff:1c:2c:45:4b:fa:69: 8f:2a:c6:ac:1f:83:50:47:e2:be:93:91:b5:d6:52: 3f:83:7c:e7:bc:b4:81:5e:58:ba:21:c8:0f:4d:af: 27:2d:2d:a2:be:f3:18:1a:6a:65:dd:93:44:45:a9: 60:29:08:9f:53:9f:e4:7e:7a:ad:95:a4:52:ab:3d: 35:73:e1:e4:6b:e1:04:e9:0c:55:3d:72:85:ab:ae: 40:02:a9:8e:f0:04:e8:f8:95:39:a6:95:7a:37:a7: 83:a0:5a:78:54:95:45:bd:66:0c:85:30:b6:4e:33: 9e:33:63:e8:a8:b9:c2:ca:0d:39:d6:1a:e1:05:d1: 64:a0:64:ca:3b:44:41:80:ea:52:14:c5:cd:8b:5c: 8d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:12:A8:22:BA:09:BE:7B:07:82:97:B5:4A:E3:62:F1:64:10:39:6C X509v3 Authority Key Identifier: keyid:1E:F9:31:2C:EA:5A:A7:43:8B:4D:90:C0:83:6C:82:F0:50:A2:A0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvkxLOpap0OLTZDAg2yC8FCioAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/e844e8-d2f0-4514-b405-0b801bf80d53/1/HvkxLOpap0OLTZDAg2yC8FCioAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:93:12:7a:a5:1b:dc:2f:de:2b:3f:b0:04:4c:31:38:4c:e8: b4:6e:62:20:91:61:aa:6f:db:9c:fe:5d:15:32:6a:dd:82:d2: 6f:43:20:ea:23:14:c9:bc:e6:0e:b1:94:a0:08:2b:95:f0:d3: ba:4a:d9:98:1d:9c:60:5e:17:22:d6:cd:2b:c7:d8:01:62:cd: be:5a:13:48:ed:7d:d0:e7:1c:04:4c:a2:72:ba:95:1a:81:50: 30:33:14:f0:47:f6:ed:ba:9d:48:0a:95:d4:78:9f:6c:33:ac: 62:ce:e1:04:d4:82:2e:e1:7f:e1:e6:3a:3b:5f:1d:e3:d2:bc: 07:85:ba:07:57:40:e3:71:aa:20:40:8c:9b:ca:ea:54:b2:ef: 45:f0:97:16:db:17:d5:76:76:db:63:8a:9f:1d:fb:d9:43:8a: 2a:44:e4:5b:4c:3c:ed:21:cc:24:03:c1:5d:ca:21:74:d5:9e: 91:cd:53:94:0f:df:12:69:7b:7e:20:c2:9a:57:2f:b7:3a:ff: ea:01:11:b5:6a:0d:13:38:6e:80:e9:91:6f:50:e4:32:e3:16: a7:af:65:6a:6e:01:7d:91:3c:c4:0f:b1:30:8d:62:cd:d8:79: 8b:2e:89:e5:12:3e:21:8f:ba:fa:b3:dd:18:59:fe:df:c2:cf: 73:0a:b2:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGvMb1FZBiQyxvMw6fsLKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZjkzMTJjZWE1YWE3NDM4YjRkOTBjMDgzNmM4MmYwNTBh MmEwMGEwHhcNMjUxMjI2MTAwMTE0WhcNMjUxMjI3MTAwMTE0WjAzMTEwLwYDVQQD Eyg3ZjEyYTgyMmJhMDliZTdiMDc4Mjk3YjU0YWUzNjJmMTY0MTAzOTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmecWw6qvELI5LM1rwluZCdkW3hYR OS/BPs1WknEa2DarnLDs86XmKEVmJR0JCXrCf7E0FxT8eqa5Dbw/4vDRCkotNww9 a3uhwDvzWuCQBbsVI3Hfj+z5Jgkx4WBYnr9Dln7XPhbGC+Rb5esVZ44dfP8cLEVL +mmPKsasH4NQR+K+k5G11lI/g3znvLSBXli6IcgPTa8nLS2ivvMYGmpl3ZNERalg KQifU5/kfnqtlaRSqz01c+Hka+EE6QxVPXKFq65AAqmO8ATo+JU5ppV6N6eDoFp4 VJVFvWYMhTC2TjOeM2PoqLnCyg051hrhBdFkoGTKO0RBgOpSFMXNi1yNSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8SqCK6Cb57B4KXtUrjYvFkEDlsMB8GA1UdIwQY MBaAFB75MSzqWqdDi02QwINsgvBQoqAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9lODQ0ZTgtZDJmMC00NTE0LWI0MDUt MGI4MDFiZjgwZDUzLzEvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9lODQ0ZTgtZDJmMC00NTE0LWI0MDUtMGI4MDFiZjgwZDUz LzEvSHZreExPcGFwME9MVFpEQWcyeUM4RkNpb0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGZMSeqUb 3C/eKz+wBEwxOEzotG5iIJFhqm/bnP5dFTJq3YLSb0Mg6iMUybzmDrGUoAgrlfDT ukrZmB2cYF4XItbNK8fYAWLNvloTSO190OccBEyicrqVGoFQMDMU8Ef27bqdSAqV 1HifbDOsYs7hBNSCLuF/4eY6O18d49K8B4W6B1dA43GqIECMm8rqVLLvRfCXFtsX 1XZ222OKnx372UOKKkTkW0w87SHMJAPBXcohdNWekc1TlA/fEml7fiDCmlcvtzr/ 6gERtWoNEzhugOmRb1DkMuMWp69lam4BfZE8xA+xMI1izdh5iy6J5RI+IY+6+rPd GFn+38LPcwqy4Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:09:05 2025 by rpki-client