This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft File: HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft (raw, json) Hash identifier: cdhGxW3qm9U1/IxEsZH8ujeiC/PNVJ2HvKovv0RxTDM= Subject key identifier: FA:F5:28:54:29:F0:A2:55:1B:88:EE:5C:0F:0D:7D:C9:44:32:95:29 Authority key identifier: 1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54 Certificate issuer: /CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54 Certificate serial: 019AF163F7DFCED67B4647990892AF48C70A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 02:00:51 +0000 Manifest this update: Sat 06 Dec 2025 02:00:51 +0000 Manifest next update: Sun 07 Dec 2025 02:00:51 +0000 Files and hashes: 1: HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl (hash: Ej9NwQL3kGtTxwmxa2Z7Drf8Nj6/PjxL2JEk9aIvXd8=) 2: yJY2Oeq3toKxTdk7-X31riY01hg.roa (hash: 5uMPJikDIqqkTXkRRFHehwnU8XhjCZjiCcVLwMn6QX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:f7:df:ce:d6:7b:46:47:99:08:92:af:48:c7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54 Validity Not Before: Dec 6 02:00:51 2025 GMT Not After : Dec 7 02:00:51 2025 GMT Subject: CN=faf5285429f0a2551b88ee5c0f0d7dc944329529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f9:7e:47:8f:dd:f6:66:d7:40:54:95:96:5d: 7d:05:68:90:23:53:0c:09:14:95:74:d7:f8:50:87: 26:9f:cc:52:0f:37:d1:48:85:5c:2e:ab:90:4a:84: 8a:9d:f9:a4:b4:97:5f:54:8f:b2:2f:f4:63:37:22: f0:71:8d:67:b7:33:93:cc:a0:4b:7f:f7:12:8b:9c: 0e:00:4a:6f:7c:ff:9c:a3:b0:21:f4:29:14:94:40: b2:f3:82:3e:ae:bc:3b:97:16:57:2f:c3:1d:60:db: f5:2a:f7:6c:0a:2f:50:9b:ba:a3:0b:ab:21:92:ab: f3:a4:13:dd:49:59:40:91:4c:b5:7c:0b:76:32:12: f8:d2:c8:27:c2:96:81:a4:ea:33:6d:c8:7a:4e:6b: bd:0e:10:0d:49:77:61:d2:1d:7c:e9:28:a3:f8:45: 1c:86:10:8d:14:ea:98:c2:7e:7c:df:0d:c3:7d:37: 62:7b:c1:15:da:20:80:da:58:68:ee:95:4b:05:0b: ea:bb:8e:89:fa:4c:68:04:e0:ed:55:94:80:4e:fe: c7:81:df:e2:13:79:98:a2:cf:97:c6:9e:66:1e:6c: 2c:5c:48:39:78:e6:b5:61:8a:30:4a:3d:ae:b9:94: 44:5c:76:ae:0f:af:56:03:e8:6c:1f:8d:a5:df:a7: af:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F5:28:54:29:F0:A2:55:1B:88:EE:5C:0F:0D:7D:C9:44:32:95:29 X509v3 Authority Key Identifier: keyid:1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ec:57:75:39:d4:07:f9:28:eb:bf:27:b9:bf:36:d0:30:94: 46:54:0f:15:30:6d:c8:aa:56:e3:ec:3e:1f:aa:4f:29:5b:0e: ba:69:56:f3:9f:88:d1:34:cd:30:34:1d:20:ea:36:2e:8f:a5: 1c:f5:8c:25:ca:db:17:25:af:d9:69:c0:01:2f:ee:b0:8e:41: de:b5:64:7a:3b:96:e6:f0:00:80:a6:20:f0:1a:4a:6d:c9:58: 03:0b:55:66:be:8d:ea:9f:69:d1:bc:22:1e:9d:6f:ab:89:15: 96:03:1d:66:e6:0c:21:13:9d:52:fc:74:d5:66:84:70:87:f6: 2b:4c:20:3d:b0:26:ec:c0:0e:04:ee:da:6e:50:bf:28:7e:17: 24:c7:b6:4c:20:d3:0f:3a:f1:29:e1:0a:5f:c7:fc:db:ce:c7: 5b:a8:7f:08:48:1e:60:9f:40:9e:e6:47:ca:1f:5e:af:69:c7: 19:b8:06:66:2f:6c:05:0a:f4:28:42:5f:d4:b4:da:0a:49:fd: d1:65:a3:21:83:09:69:90:17:2e:37:5b:b1:ca:8c:7a:63:ba: e0:ea:6b:0a:91:8b:af:98:a3:3e:3b:d0:47:a7:48:d7:c7:7a: 7b:b9:d5:6a:d8:7f:ed:25:31:9b:ec:fa:5a:b3:76:e9:72:c7: 73:3e:00:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY/ffztZ7RkeZCJKvSMcKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMWMyMzU3ZTcwYjk3ZDAzZWQ3MGMzZDY4OGNlNTA3YzY3 NThkNTQwHhcNMjUxMjA2MDIwMDUxWhcNMjUxMjA3MDIwMDUxWjAzMTEwLwYDVQQD EyhmYWY1Mjg1NDI5ZjBhMjU1MWI4OGVlNWMwZjBkN2RjOTQ0MzI5NTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovl+R4/d9mbXQFSVll19BWiQI1MM CRSVdNf4UIcmn8xSDzfRSIVcLquQSoSKnfmktJdfVI+yL/RjNyLwcY1ntzOTzKBL f/cSi5wOAEpvfP+co7Ah9CkUlECy84I+rrw7lxZXL8MdYNv1KvdsCi9Qm7qjC6sh kqvzpBPdSVlAkUy1fAt2MhL40sgnwpaBpOozbch6Tmu9DhANSXdh0h186Sij+EUc hhCNFOqYwn583w3DfTdie8EV2iCA2lho7pVLBQvqu46J+kxoBODtVZSATv7Hgd/i E3mYos+Xxp5mHmwsXEg5eOa1YYowSj2uuZREXHauD69WA+hsH42l36evlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPr1KFQp8KJVG4juXA8NfclEMpUpMB8GA1UdIwQY MBaAFB4cI1fnC5fQPtcMPWiM5QfGdY1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGh3alYtY0xsOUEtMXd3OWFJemxCOFoxalZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wNTQ4NjctMTRkNC00OTIyLWJmNWYt NmRkY2ZhYzk3MGY3LzEvSGh3alYtY0xsOUEtMXd3OWFJemxCOFoxalZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8wNTQ4NjctMTRkNC00OTIyLWJmNWYtNmRkY2ZhYzk3MGY3 LzEvSGh3alYtY0xsOUEtMXd3OWFJemxCOFoxalZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouxXdTnU B/ko678nub820DCURlQPFTBtyKpW4+w+H6pPKVsOumlW85+I0TTNMDQdIOo2Lo+l HPWMJcrbFyWv2WnAAS/usI5B3rVkejuW5vAAgKYg8BpKbclYAwtVZr6N6p9p0bwi Hp1vq4kVlgMdZuYMIROdUvx01WaEcIf2K0wgPbAm7MAOBO7ablC/KH4XJMe2TCDT DzrxKeEKX8f8287HW6h/CEgeYJ9AnuZHyh9er2nHGbgGZi9sBQr0KEJf1LTaCkn9 0WWjIYMJaZAXLjdbscqMemO64OprCpGLr5ijPjvQR6dI18d6e7nVath/7SUxm+z6 WrN26XLHcz4AAw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:31 2025 by rpki-client