This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft File: HwyNgMOjQnXwPijteYZM7iaUjcc.mft (raw, json) Hash identifier: Ewinmgyb2pT0r03yEt+Z3dgNot1c1nnL9Pdjd0PU64s= Subject key identifier: 7B:D0:4B:B9:24:1E:90:E7:38:EC:17:14:2B:FB:3E:D4:6A:17:68:F1 Authority key identifier: 1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7 Certificate issuer: /CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7 Certificate serial: 019AF61C25CCE7B389C43030AF6A8825D5C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft Manifest number: 166F Signing time: Sun 07 Dec 2025 00:00:30 +0000 Manifest this update: Sun 07 Dec 2025 00:00:30 +0000 Manifest next update: Mon 08 Dec 2025 00:00:30 +0000 Files and hashes: 1: HwyNgMOjQnXwPijteYZM7iaUjcc.crl (hash: f+9WwRT3QYqcIBpGKx1TN2vg0pEnmvBQP5RPJZrcXM0=) 2: wgwzL4nQgenDF7kaZKoRw4cHHm8.roa (hash: vTDmhwG3bRsI8jRBLFZnMhqGYznCGkqaPdqTjt9VZls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:25:cc:e7:b3:89:c4:30:30:af:6a:88:25:d5:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0c8d80c3a34275f03e28ed79864cee26948dc7 Validity Not Before: Dec 7 00:00:30 2025 GMT Not After : Dec 8 00:00:30 2025 GMT Subject: CN=7bd04bb9241e90e738ec17142bfb3ed46a1768f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ac:e5:52:a2:c0:bc:c9:2d:25:c8:5c:f2:e7: fa:e3:31:3b:6e:c9:36:7d:8e:88:a6:e0:1e:ff:17: 3c:05:2b:6a:6f:11:04:6c:1f:78:cf:23:3e:55:bf: c6:01:a1:0a:85:40:33:d1:67:4b:1b:f4:87:cb:32: be:5d:dc:f7:e9:9d:fb:1a:cf:92:ae:92:6c:36:1e: 47:ae:0e:bc:61:5c:02:fd:a6:a5:11:2f:a8:6f:d3: a1:a2:75:36:ae:f9:1e:62:92:63:3b:73:7c:c5:d4: c3:69:a4:41:c7:5b:ec:64:b7:2f:20:1f:6f:0e:9e: 4d:c3:ce:02:47:8c:b3:3d:a7:c1:3f:19:43:5b:36: 32:4c:15:63:1b:8f:06:67:02:a1:c0:1c:1c:97:6d: 1f:06:16:17:b4:c2:1f:0f:3a:57:fb:c6:7c:3e:62: 01:1b:80:22:ec:97:e7:29:f1:f4:c3:92:fb:f5:41: e8:77:fb:a9:18:0d:fd:eb:3a:35:8e:33:e1:a7:2d: aa:45:82:d4:81:f3:20:98:07:a4:39:41:bc:41:bd: 4d:a6:c2:f8:aa:fc:81:d6:7a:e1:af:89:dc:1b:8b: ca:34:9b:a0:f5:59:c9:cd:bd:e7:96:ca:a4:d4:41: 2c:d0:67:2e:ee:91:76:d3:10:b0:7d:3f:fb:dd:b9: f9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:D0:4B:B9:24:1E:90:E7:38:EC:17:14:2B:FB:3E:D4:6A:17:68:F1 X509v3 Authority Key Identifier: keyid:1F:0C:8D:80:C3:A3:42:75:F0:3E:28:ED:79:86:4C:EE:26:94:8D:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwyNgMOjQnXwPijteYZM7iaUjcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/7d8a42-7e82-4d18-8a3c-f543b9185932/1/HwyNgMOjQnXwPijteYZM7iaUjcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:aa:7f:cc:92:73:fa:30:91:3c:d8:ff:8f:a9:e4:25:9e:23: 0d:1d:76:58:11:02:62:1f:5e:00:e1:dc:b2:95:2a:88:c8:f6: 4e:99:9d:03:70:32:df:e3:a5:76:7f:ac:7c:b8:28:84:c1:75: 18:d8:9e:4a:4f:c2:45:6c:9d:7b:e5:06:57:1f:3e:03:ef:2a: f1:87:61:c5:bb:19:9b:07:b2:3b:f1:5c:8e:18:9b:5f:39:41: a6:07:54:c8:97:2f:a1:eb:99:5a:d7:00:ba:11:6d:d3:a5:50: d2:36:31:b1:a6:77:b5:e4:7a:2b:cd:f9:d9:4c:5b:c6:6e:21: 65:11:8b:3f:97:7f:c2:bd:7b:24:07:19:b2:fd:05:cd:58:e6: 40:5a:76:62:d4:7a:52:7c:c3:45:6d:0b:f7:51:fc:2c:a6:9e: e7:5e:88:01:7a:c2:13:8e:29:66:0e:21:50:c2:c6:2b:b6:96: ca:fc:79:ee:11:27:c3:ea:1e:31:be:58:47:b0:0f:72:51:38: e7:62:26:66:1a:de:ff:b4:e8:97:af:8f:0f:aa:25:80:bd:08: 07:95:7c:c8:52:8b:17:5b:02:f6:19:0a:2a:7f:39:91:15:13: e0:20:49:d7:0c:39:e7:8e:db:6b:9b:bf:ea:73:1e:c2:d9:82: ff:16:d3:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HCXM57OJxDAwr2qIJdXFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMGM4ZDgwYzNhMzQyNzVmMDNlMjhlZDc5ODY0Y2VlMjY5 NDhkYzcwHhcNMjUxMjA3MDAwMDMwWhcNMjUxMjA4MDAwMDMwWjAzMTEwLwYDVQQD Eyg3YmQwNGJiOTI0MWU5MGU3MzhlYzE3MTQyYmZiM2VkNDZhMTc2OGYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnazlUqLAvMktJchc8uf64zE7bsk2 fY6IpuAe/xc8BStqbxEEbB94zyM+Vb/GAaEKhUAz0WdLG/SHyzK+Xdz36Z37Gs+S rpJsNh5Hrg68YVwC/aalES+ob9OhonU2rvkeYpJjO3N8xdTDaaRBx1vsZLcvIB9v Dp5Nw84CR4yzPafBPxlDWzYyTBVjG48GZwKhwBwcl20fBhYXtMIfDzpX+8Z8PmIB G4Ai7JfnKfH0w5L79UHod/upGA396zo1jjPhpy2qRYLUgfMgmAekOUG8Qb1NpsL4 qvyB1nrhr4ncG4vKNJug9VnJzb3nlsqk1EEs0Gcu7pF20xCwfT/73bn54QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHvQS7kkHpDnOOwXFCv7PtRqF2jxMB8GA1UdIwQY MBaAFB8MjYDDo0J18D4o7XmGTO4mlI3HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHd5TmdNT2pRblh3UGlqdGVZWk03aWFVamNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83ZDhhNDItN2U4Mi00ZDE4LThhM2Mt ZjU0M2I5MTg1OTMyLzEvSHd5TmdNT2pRblh3UGlqdGVZWk03aWFVamNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83ZDhhNDItN2U4Mi00ZDE4LThhM2MtZjU0M2I5MTg1OTMy LzEvSHd5TmdNT2pRblh3UGlqdGVZWk03aWFVamNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPKp/zJJz +jCRPNj/j6nkJZ4jDR12WBECYh9eAOHcspUqiMj2TpmdA3Ay3+Oldn+sfLgohMF1 GNieSk/CRWyde+UGVx8+A+8q8YdhxbsZmweyO/FcjhibXzlBpgdUyJcvoeuZWtcA uhFt06VQ0jYxsaZ3teR6K8352Uxbxm4hZRGLP5d/wr17JAcZsv0FzVjmQFp2YtR6 UnzDRW0L91H8LKae516IAXrCE44pZg4hUMLGK7aWyvx57hEnw+oeMb5YR7APclE4 52ImZhre/7Tol6+PD6olgL0IB5V8yFKLF1sC9hkKKn85kRUT4CBJ1ww5547ba5u/ 6nMewtmC/xbTNQ== -----END CERTIFICATE-----Generated at Sun Dec 7 03:55:47 2025 by rpki-client