This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft File: rwmHHP1haABnerIynsumHed3V-Y.mft (raw, json) Hash identifier: P/oqOdHRsUYA0DqW7rkvrjZIyE4eWnS7kfSUxHADREU= Subject key identifier: 05:16:BB:12:5A:54:BE:27:E4:42:AD:07:EF:56:46:91:39:F5:AD:90 Authority key identifier: AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6 Certificate issuer: /CN=af09871cfd616800677ab2329ecba61de77757e6 Certificate serial: 019AF1D1A0F8626A9FB03582CEBD121A5031 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft Manifest number: 02C9 Signing time: Sat 06 Dec 2025 04:00:38 +0000 Manifest this update: Sat 06 Dec 2025 04:00:38 +0000 Manifest next update: Sun 07 Dec 2025 04:00:38 +0000 Files and hashes: 1: _TdfyDspFjo8HcBVAH4tKaY1ryc.roa (hash: HRin1YqVyIdAgsGnpfqM25NMMm45zP4o3p+MrSb9sdE=) 2: rwmHHP1haABnerIynsumHed3V-Y.crl (hash: DKaA203GYOa7crLkZ1bruIavEQdro3uy30ynlEsXzEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a0:f8:62:6a:9f:b0:35:82:ce:bd:12:1a:50:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af09871cfd616800677ab2329ecba61de77757e6 Validity Not Before: Dec 6 04:00:38 2025 GMT Not After : Dec 7 04:00:38 2025 GMT Subject: CN=0516bb125a54be27e442ad07ef56469139f5ad90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:39:fc:d1:26:ad:01:a1:3b:8e:8c:3d:ad:c0: 73:99:9d:c9:9b:d3:91:fb:95:5c:6a:13:e2:65:92: 0c:e7:83:b1:6a:f0:b9:42:bd:57:4d:69:54:4f:d8: 8c:0b:00:75:d6:63:a6:c8:60:4b:b1:55:53:93:12: 15:8f:a7:b7:cc:9d:56:59:0b:92:03:d9:bd:8a:6b: 59:1a:96:c0:f1:d3:55:b4:4e:77:61:eb:e3:0d:19: 37:7a:56:51:23:ed:50:18:a4:ad:e1:e7:23:f1:cb: df:17:c4:91:a8:f2:3b:43:bb:8a:92:81:a4:a2:b4: 5a:35:1d:b7:c7:db:49:df:3f:8f:14:ab:bd:6e:d8: 0e:f8:ca:2d:9d:ed:19:ed:d6:a7:6c:09:77:14:18: d2:47:f1:ce:b2:1b:99:83:e1:df:d6:17:3e:99:8c: 44:70:12:94:32:89:1e:55:f2:9e:f2:27:00:f7:d8: ae:0e:05:a8:d9:ae:e0:fe:25:28:a6:a4:df:37:ab: d8:ea:32:95:e8:b1:41:ef:97:c2:25:53:ee:4a:43: 1a:46:83:d6:2f:75:46:4d:34:58:76:be:d5:c5:32: 2d:60:cd:e8:96:e2:7e:a6:be:fb:5b:e0:66:cb:1f: 76:12:63:79:90:5f:ea:61:97:08:b9:da:7f:f7:73: cd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:16:BB:12:5A:54:BE:27:E4:42:AD:07:EF:56:46:91:39:F5:AD:90 X509v3 Authority Key Identifier: keyid:AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:7f:81:87:55:e0:47:0f:d7:97:d1:b6:87:c8:df:e7:c4:bc: 9d:02:12:82:7c:b9:06:b2:1b:e7:75:ae:7d:7d:cd:f6:bb:ba: ab:42:8f:fe:b0:4b:89:3e:fb:05:65:bf:a9:4b:3f:1c:a4:94: 45:81:1e:4f:84:b4:21:e4:4f:bb:01:9f:8d:91:a4:b4:63:fe: 64:b6:04:53:06:3d:03:fb:bd:92:56:31:7a:24:89:e9:fd:20: 56:17:ad:50:b0:ae:b8:26:5d:b3:77:b0:20:05:93:62:4b:e7: 06:34:a4:fe:30:b6:c5:be:c9:47:52:9b:87:d6:10:30:b7:b5: db:4b:b6:95:7f:1c:0b:3b:db:6d:0c:17:0e:b4:e6:ca:32:df: ce:f2:dd:38:49:e5:8c:23:43:90:44:f4:e1:1c:f1:64:3a:93: f8:d4:6f:f3:09:d0:b5:65:11:6b:e6:b9:01:89:9a:0f:bb:ba: 96:6e:d8:f4:09:df:56:0d:c3:37:d3:7e:92:7c:c2:5f:55:47: 95:37:83:38:7a:24:1a:0f:69:e9:ad:d2:38:b3:51:c0:ca:82: d6:f4:46:cb:8e:10:9f:b1:c8:62:ac:55:c7:2d:01:d9:2e:2d: 89:f3:d0:10:b1:40:7c:cc:f6:87:89:8c:ca:ba:f2:b7:bd:c9: 6b:39:5f:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aD4YmqfsDWCzr0SGlAxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMDk4NzFjZmQ2MTY4MDA2NzdhYjIzMjllY2JhNjFkZTc3 NzU3ZTYwHhcNMjUxMjA2MDQwMDM4WhcNMjUxMjA3MDQwMDM4WjAzMTEwLwYDVQQD EygwNTE2YmIxMjVhNTRiZTI3ZTQ0MmFkMDdlZjU2NDY5MTM5ZjVhZDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDn80SatAaE7jow9rcBzmZ3Jm9OR +5VcahPiZZIM54OxavC5Qr1XTWlUT9iMCwB11mOmyGBLsVVTkxIVj6e3zJ1WWQuS A9m9imtZGpbA8dNVtE53YevjDRk3elZRI+1QGKSt4ecj8cvfF8SRqPI7Q7uKkoGk orRaNR23x9tJ3z+PFKu9btgO+Motne0Z7danbAl3FBjSR/HOshuZg+Hf1hc+mYxE cBKUMokeVfKe8icA99iuDgWo2a7g/iUopqTfN6vY6jKV6LFB75fCJVPuSkMaRoPW L3VGTTRYdr7VxTItYM3oluJ+pr77W+Bmyx92EmN5kF/qYZcIudp/93PNJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUWuxJaVL4n5EKtB+9WRpE59a2QMB8GA1UdIwQY MBaAFK8Jhxz9YWgAZ3qyMp7Lph3nd1fmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcndtSEhQMWhhQUJuZXJJeW5zdW1IZWQzVi1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84YWQ5YjMtMGI5Zi00MjI0LTkwOWIt YjQzZGJmODk1Y2ZlLzEvcndtSEhQMWhhQUJuZXJJeW5zdW1IZWQzVi1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84YWQ5YjMtMGI5Zi00MjI0LTkwOWItYjQzZGJmODk1Y2Zl LzEvcndtSEhQMWhhQUJuZXJJeW5zdW1IZWQzVi1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmn+Bh1Xg Rw/Xl9G2h8jf58S8nQISgny5BrIb53WufX3N9ru6q0KP/rBLiT77BWW/qUs/HKSU RYEeT4S0IeRPuwGfjZGktGP+ZLYEUwY9A/u9klYxeiSJ6f0gVhetULCuuCZds3ew IAWTYkvnBjSk/jC2xb7JR1Kbh9YQMLe120u2lX8cCzvbbQwXDrTmyjLfzvLdOEnl jCNDkET04RzxZDqT+NRv8wnQtWURa+a5AYmaD7u6lm7Y9AnfVg3DN9N+knzCX1VH lTeDOHokGg9p6a3SOLNRwMqC1vRGy44Qn7HIYqxVxy0B2S4tifPQELFAfMz2h4mM yrryt73Jazlf9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:13:50 2025 by rpki-client