This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft File: HWHLS77lzdfs7adWCqJJxtEfI6k.mft (raw, json) Hash identifier: SY5/Nfb1Vs9bkRA4lAnVYJr8Jt5rLDKijevX/7SuQ3Y= Subject key identifier: 32:CD:04:63:27:14:A5:EC:42:09:92:82:B5:EE:D5:02:1D:05:8C:0C Authority key identifier: 1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9 Certificate issuer: /CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9 Certificate serial: 019AF12D70872A70B858416F80374FB00058 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft Manifest number: 0E88 Signing time: Sat 06 Dec 2025 01:01:18 +0000 Manifest this update: Sat 06 Dec 2025 01:01:18 +0000 Manifest next update: Sun 07 Dec 2025 01:01:18 +0000 Files and hashes: 1: HWHLS77lzdfs7adWCqJJxtEfI6k.crl (hash: WmQ0fCEHIkTeWnRC5cg/Klc4ldjyzxcGjVfI/Rk7EhQ=) 2: RPmjQPRT6ThSraH9_mRiL0MDtOs.roa (hash: whApUZJ7ydquVhB+yjQTmZxwrY2+CBwkk7L36wahsAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:70:87:2a:70:b8:58:41:6f:80:37:4f:b0:00:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9 Validity Not Before: Dec 6 01:01:18 2025 GMT Not After : Dec 7 01:01:18 2025 GMT Subject: CN=32cd04632714a5ec42099282b5eed5021d058c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7f:74:f3:0f:01:39:c7:0c:19:e7:3b:ee:41: 1b:df:48:d9:c7:b7:ec:99:5d:af:17:a2:13:09:d4: 36:a9:d2:0c:02:ad:4c:8d:85:ec:14:b4:f2:f3:33: 01:c0:67:c1:64:88:7b:60:c2:32:91:b4:27:b3:d4: c0:14:f7:97:07:92:2d:92:b3:cf:b4:c9:b5:b1:6f: 05:a6:88:5f:fe:4b:86:4a:8c:e5:16:86:0f:36:62: ea:1a:42:6e:d6:2e:9d:5b:f1:a7:c3:e2:d5:41:29: bd:74:31:c5:31:cb:ec:58:20:dd:e1:2a:e1:80:4c: 7e:82:6a:94:ef:48:b9:39:ef:87:e6:76:05:79:e1: 98:04:8b:7b:91:c8:d3:ff:e7:33:5d:89:ec:bf:bc: 29:03:9a:ee:e0:0c:73:67:24:96:40:5e:f5:50:7a: be:c3:5d:0d:0a:6a:9d:40:95:15:8a:8e:d7:ce:17: 7c:78:11:8f:07:dc:28:15:97:16:76:30:7e:f6:77: 36:cf:7c:59:85:f9:25:07:c0:20:ef:77:54:35:22: 3f:ed:3d:13:bb:b4:b5:6f:d8:39:78:84:1b:63:2d: a1:f2:f5:ff:9d:6b:f1:9d:7d:5f:78:06:5e:0f:6f: 83:71:5b:2e:aa:9e:5a:18:fb:21:e6:1e:33:1c:c9: 01:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:CD:04:63:27:14:A5:EC:42:09:92:82:B5:EE:D5:02:1D:05:8C:0C X509v3 Authority Key Identifier: keyid:1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:97:c7:bd:2a:25:0a:66:6d:65:fb:37:1f:1c:82:bb:bb:48: 94:6d:9f:91:61:6b:19:df:2d:b3:af:84:47:a5:17:75:55:62: 73:3d:eb:33:a8:a6:3b:db:c3:67:04:66:53:bb:5b:e4:e7:77: 8f:71:bc:65:0b:cd:e4:73:f5:4c:33:24:be:85:b9:77:68:eb: fd:f0:92:7c:95:69:bf:2e:09:3d:21:f4:ec:86:98:f9:c2:26: 13:d8:3f:65:1c:6f:4d:55:d0:88:77:94:e4:62:fd:6d:3c:d7: 2d:f6:7c:e2:36:2d:d0:1c:a5:df:17:46:d3:19:1e:1d:36:c2: d8:73:a4:36:16:b5:8b:49:97:3f:e3:26:74:fc:0c:3c:18:73: c4:a3:eb:d6:95:0f:d6:fe:24:dc:3f:e1:71:3a:79:a1:86:b3: 17:f3:40:0b:ec:86:d7:91:da:64:f0:16:4a:17:74:dd:6d:90: 0c:e0:c8:d3:ba:30:7b:db:d2:dd:2b:ab:09:76:96:7e:96:3a: 2b:83:6d:93:e8:ff:47:6b:2a:25:b8:be:ae:56:17:26:63:73: a1:38:63:9d:79:fd:30:f1:1b:30:7c:88:1f:bd:48:8b:55:64: 5c:91:ee:2b:7d:aa:a5:44:eb:06:72:57:43:e4:b8:71:ce:e4: 28:d6:5f:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLXCHKnC4WEFvgDdPsABYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNjFjYjRiYmVlNWNkZDdlY2VkYTc1NjBhYTI0OWM2ZDEx ZjIzYTkwHhcNMjUxMjA2MDEwMTE4WhcNMjUxMjA3MDEwMTE4WjAzMTEwLwYDVQQD EygzMmNkMDQ2MzI3MTRhNWVjNDIwOTkyODJiNWVlZDUwMjFkMDU4YzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArn908w8BOccMGec77kEb30jZx7fs mV2vF6ITCdQ2qdIMAq1MjYXsFLTy8zMBwGfBZIh7YMIykbQns9TAFPeXB5ItkrPP tMm1sW8Fpohf/kuGSozlFoYPNmLqGkJu1i6dW/Gnw+LVQSm9dDHFMcvsWCDd4Srh gEx+gmqU70i5Oe+H5nYFeeGYBIt7kcjT/+czXYnsv7wpA5ru4AxzZySWQF71UHq+ w10NCmqdQJUVio7Xzhd8eBGPB9woFZcWdjB+9nc2z3xZhfklB8Ag73dUNSI/7T0T u7S1b9g5eIQbYy2h8vX/nWvxnX1feAZeD2+DcVsuqp5aGPsh5h4zHMkB2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLNBGMnFKXsQgmSgrXu1QIdBYwMMB8GA1UdIwQY MBaAFB1hy0u+5c3X7O2nVgqiScbRHyOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFdITFM3N2x6ZGZzN2FkV0NxSkp4dEVmSTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iMmY1ZjktZDM0YS00N2EzLWJiNTQt MDg3MWZkYjZhNGZhLzEvSFdITFM3N2x6ZGZzN2FkV0NxSkp4dEVmSTZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9iMmY1ZjktZDM0YS00N2EzLWJiNTQtMDg3MWZkYjZhNGZh LzEvSFdITFM3N2x6ZGZzN2FkV0NxSkp4dEVmSTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5fHvSol CmZtZfs3HxyCu7tIlG2fkWFrGd8ts6+ER6UXdVVicz3rM6imO9vDZwRmU7tb5Od3 j3G8ZQvN5HP1TDMkvoW5d2jr/fCSfJVpvy4JPSH07IaY+cImE9g/ZRxvTVXQiHeU 5GL9bTzXLfZ84jYt0Byl3xdG0xkeHTbC2HOkNha1i0mXP+MmdPwMPBhzxKPr1pUP 1v4k3D/hcTp5oYazF/NAC+yG15HaZPAWShd03W2QDODI07owe9vS3SurCXaWfpY6 K4Ntk+j/R2sqJbi+rlYXJmNzoThjnXn9MPEbMHyIH71Ii1VkXJHuK32qpUTrBnJX Q+S4cc7kKNZf0w== -----END CERTIFICATE-----Generated at Sat Dec 6 11:14:26 2025 by rpki-client