This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft File: HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft (raw, json) Hash identifier: dNEuws0TrqX8UM36wO0L7hutKy/IJoCBOwyo0t5JgjA= Subject key identifier: BA:62:D5:D9:EB:7F:33:26:C9:0C:B7:DC:EC:02:EB:85:36:02:3F:19 Authority key identifier: 1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D Certificate issuer: /CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d Certificate serial: 019AF42E35980590C059A34745BD46D0507F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft Manifest number: 02E4 Signing time: Sat 06 Dec 2025 15:01:00 +0000 Manifest this update: Sat 06 Dec 2025 15:01:00 +0000 Manifest next update: Sun 07 Dec 2025 15:01:00 +0000 Files and hashes: 1: GPBnMrccvHfLRUetSr0V2OhSV78.roa (hash: bMjAfl7v9vzL7TDoDm3Lu45G9wMjJfK+MiFqNCPT/Us=) 2: HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl (hash: tIKp/flyfxzmHd9t3hQ8OFc/2ipmbVZdk2AkT/W9reY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:35:98:05:90:c0:59:a3:47:45:bd:46:d0:50:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d5cb098cf6f7fb68a181aecda8ea38e64c5ac9d Validity Not Before: Dec 6 15:01:00 2025 GMT Not After : Dec 7 15:01:00 2025 GMT Subject: CN=ba62d5d9eb7f3326c90cb7dcec02eb8536023f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e1:9b:72:f4:e9:ee:0b:1f:fe:b9:28:3c:b3: 95:52:bc:39:39:6b:34:ee:81:a6:d8:00:0e:e7:2d: bb:ad:09:ba:f6:b9:5a:7b:d7:c0:a3:ec:66:0c:1c: 14:9a:2b:ef:cd:07:41:02:74:1c:11:71:40:3f:89: a9:3a:aa:c5:82:34:72:2c:44:49:4c:8a:9d:20:37: e4:de:ed:06:e9:98:bd:f2:b5:23:5b:41:6d:b4:0a: 02:d0:8b:0b:27:f1:ba:48:39:f3:2e:ef:0a:7b:ff: 0a:9f:76:09:1b:1e:95:87:23:8a:0e:46:5f:21:7a: fb:01:ca:f5:00:9d:23:3d:9e:e6:14:5c:d1:47:c9: d6:84:ca:90:c9:3b:6a:79:4b:ff:02:c0:49:f2:7e: f9:51:cc:2c:13:f0:93:5e:4b:59:80:33:b3:6c:e6: 03:50:43:0b:ba:14:ab:03:81:2c:52:58:94:af:d7: de:35:07:0a:db:0b:ec:37:1e:82:6b:f6:cd:55:d9: 68:5a:74:dd:59:28:64:c4:79:7c:c9:92:d8:2a:5d: 52:56:18:b5:25:5e:c7:11:8a:1b:7d:31:30:23:69: 8f:ec:03:e9:e3:1c:66:98:2e:ec:ba:7e:5d:ea:b8: d1:54:38:b2:cb:16:66:7f:71:09:0b:fa:a7:f9:de: e3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:62:D5:D9:EB:7F:33:26:C9:0C:B7:DC:EC:02:EB:85:36:02:3F:19 X509v3 Authority Key Identifier: keyid:1D:5C:B0:98:CF:6F:7F:B6:8A:18:1A:EC:DA:8E:A3:8E:64:C5:AC:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVywmM9vf7aKGBrs2o6jjmTFrJ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3d8127-44de-407b-9499-d6a43319aa21/1/HVywmM9vf7aKGBrs2o6jjmTFrJ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:4d:49:eb:15:8b:16:9f:69:ac:0f:ad:5d:03:5b:35:37:00: f6:c8:37:8c:10:e6:98:88:33:d0:33:64:a2:8d:ca:cf:c2:74: 53:78:e2:34:b1:e9:ae:8f:12:f3:fd:78:93:70:d0:46:74:53: 05:95:5e:20:37:84:e0:ff:43:41:f3:d0:bd:9b:2d:7b:89:93: d7:56:de:ad:29:b1:bb:9c:3e:af:89:ee:91:34:f7:68:57:e1: 89:e2:73:8b:49:f4:8b:22:de:b0:3a:30:d6:e3:47:95:c4:60: 1b:e1:70:0e:d0:4e:87:57:45:55:98:a9:2e:12:43:5d:88:30: 93:ab:7b:bd:3d:d0:c3:ae:f0:a9:0b:0f:81:d1:10:a4:cf:ce: ac:fe:6b:fb:3e:11:ff:89:1f:17:14:a9:90:a8:58:11:75:1e: a0:01:94:2e:2c:b8:92:01:c0:2f:41:8c:06:2f:ba:ad:c0:cf: 50:bb:fb:f5:47:f7:79:5f:fb:2d:d0:dd:84:13:ee:19:a1:70: aa:fd:db:dd:21:5b:ee:4e:a7:5c:06:e9:68:5d:01:70:58:45: 37:01:c1:d2:b5:a0:e4:16:07:80:4b:8c:2a:30:09:24:9c:16: aa:80:c3:1d:33:7d:19:5e:8d:52:66:49:6c:ec:04:a4:c8:7d: ef:87:aa:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LjWYBZDAWaNHRb1G0FB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNWNiMDk4Y2Y2ZjdmYjY4YTE4MWFlY2RhOGVhMzhlNjRj NWFjOWQwHhcNMjUxMjA2MTUwMTAwWhcNMjUxMjA3MTUwMTAwWjAzMTEwLwYDVQQD EyhiYTYyZDVkOWViN2YzMzI2YzkwY2I3ZGNlYzAyZWI4NTM2MDIzZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+GbcvTp7gsf/rkoPLOVUrw5OWs0 7oGm2AAO5y27rQm69rlae9fAo+xmDBwUmivvzQdBAnQcEXFAP4mpOqrFgjRyLERJ TIqdIDfk3u0G6Zi98rUjW0FttAoC0IsLJ/G6SDnzLu8Ke/8Kn3YJGx6VhyOKDkZf IXr7Acr1AJ0jPZ7mFFzRR8nWhMqQyTtqeUv/AsBJ8n75UcwsE/CTXktZgDOzbOYD UEMLuhSrA4EsUliUr9feNQcK2wvsNx6Ca/bNVdloWnTdWShkxHl8yZLYKl1SVhi1 JV7HEYobfTEwI2mP7APp4xxmmC7sun5d6rjRVDiyyxZmf3EJC/qn+d7jBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpi1dnrfzMmyQy33OwC64U2Aj8ZMB8GA1UdIwQY MBaAFB1csJjPb3+2ihga7NqOo45kxaydMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFZ5d21NOXZmN2FLR0JyczJvNmpqbVRGckowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zZDgxMjctNDRkZS00MDdiLTk0OTkt ZDZhNDMzMTlhYTIxLzEvSFZ5d21NOXZmN2FLR0JyczJvNmpqbVRGckowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zZDgxMjctNDRkZS00MDdiLTk0OTktZDZhNDMzMTlhYTIx LzEvSFZ5d21NOXZmN2FLR0JyczJvNmpqbVRGckowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnk1J6xWL Fp9prA+tXQNbNTcA9sg3jBDmmIgz0DNkoo3Kz8J0U3jiNLHpro8S8/14k3DQRnRT BZVeIDeE4P9DQfPQvZste4mT11berSmxu5w+r4nukTT3aFfhieJzi0n0iyLesDow 1uNHlcRgG+FwDtBOh1dFVZipLhJDXYgwk6t7vT3Qw67wqQsPgdEQpM/OrP5r+z4R /4kfFxSpkKhYEXUeoAGULiy4kgHAL0GMBi+6rcDPULv79Uf3eV/7LdDdhBPuGaFw qv3b3SFb7k6nXAbpaF0BcFhFNwHB0rWg5BYHgEuMKjAJJJwWqoDDHTN9GV6NUmZJ bOwEpMh974eqRw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:59:03 2025 by rpki-client