This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft File: HWhumKzyo3vyrsaYB-aWQGCXnLg.mft (raw, json) Hash identifier: 52VMUb//gPF1sAdKaxZA2N9Sg95CBz/ob5hBjJMlGOc= Subject key identifier: 95:D5:6B:C8:13:13:B6:71:22:8A:39:15:25:7D:FF:0F:BB:3E:E7:35 Authority key identifier: 1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8 Certificate issuer: /CN=1d686e98acf2a37bf2aec69807e6964060979cb8 Certificate serial: 019AF19B37710A45ACA3E628668595B0DECF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:12 +0000 Manifest this update: Sat 06 Dec 2025 03:01:12 +0000 Manifest next update: Sun 07 Dec 2025 03:01:12 +0000 Files and hashes: 1: HWhumKzyo3vyrsaYB-aWQGCXnLg.crl (hash: 3FrKA1vpScuu8YHULApzw5mq41M194EWfxQSgGMV9vQ=) 2: OxE4-aNNSEdqL0e1drWJ-u6-FW8.roa (hash: 61L/5UKRIctS8qkUbe6UFwwrHK0nH/grmD/batM7eQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:37:71:0a:45:ac:a3:e6:28:66:85:95:b0:de:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d686e98acf2a37bf2aec69807e6964060979cb8 Validity Not Before: Dec 6 03:01:12 2025 GMT Not After : Dec 7 03:01:12 2025 GMT Subject: CN=95d56bc81313b671228a3915257dff0fbb3ee735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:5f:47:d2:8c:54:89:c2:23:d7:3f:e1:45: c2:73:81:33:71:ab:e5:a9:9f:01:e3:08:b0:27:34: 3e:c5:e2:71:ef:6e:15:49:ab:be:92:41:cb:fc:da: cd:7f:af:96:ed:1d:c4:79:4f:99:20:74:09:73:c0: 0e:74:e6:2a:e1:15:d1:ca:f7:51:83:7a:86:1c:c3: e3:d6:2c:c8:5a:1c:ac:a9:a0:db:19:91:ba:2f:f6: 76:92:12:2f:c0:ce:9a:31:e2:50:9d:b7:2c:a6:d1: ad:c5:4b:49:6e:47:c4:28:1a:4c:8e:b0:87:c8:f1: 59:a4:81:e9:bb:99:fd:f0:2e:c8:5a:65:a2:d2:d4: 1e:83:11:c2:07:9a:ca:cc:17:d7:09:f9:9b:a0:96: b1:f6:a1:8e:69:14:ef:43:67:54:29:b2:27:0d:23: 49:f8:0b:86:8b:62:f8:8e:a5:ca:5a:4a:f7:e0:3f: 76:43:66:5c:6f:36:1a:b8:7e:73:04:fc:68:5b:a5: 88:d5:fe:5b:c0:81:56:55:91:da:76:d7:07:44:0c: 4f:f3:62:08:d9:2f:a9:60:12:c5:9f:17:d9:d4:51: b2:58:0e:98:45:18:77:0b:4d:f9:02:c7:45:73:b9: 33:7b:d4:d8:0e:26:e9:d2:17:b2:60:1b:1b:48:33: e9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D5:6B:C8:13:13:B6:71:22:8A:39:15:25:7D:FF:0F:BB:3E:E7:35 X509v3 Authority Key Identifier: keyid:1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:46:f2:24:ab:42:74:9a:ce:e6:f5:62:e1:75:70:d3:8a:6c: bd:6f:c0:2d:18:43:68:87:f2:e8:93:a7:46:e7:09:fa:a0:01: f3:97:a4:9f:c2:52:77:9b:80:40:05:77:17:62:4a:ae:ec:d5: 57:7b:52:c3:2c:76:b6:44:f0:e6:17:62:37:5f:bf:de:11:98: c5:bc:83:b2:95:3b:bd:eb:35:9c:9d:30:d5:28:3b:72:90:f5: 6f:bb:cb:a3:57:74:f2:c2:6b:6a:e0:ea:ba:5d:61:d5:1d:d5: 3b:39:2b:73:a1:0b:c6:e2:cf:cb:2d:5a:53:06:f7:ee:e6:b8: ec:b5:ce:3a:7a:e1:8c:f7:b9:0c:77:61:d9:e3:e0:83:14:08: c7:e8:b8:21:61:0b:31:20:a8:8e:cb:a6:ea:24:c2:d6:d1:aa: 59:b4:6f:f0:38:e0:3b:21:f7:cd:bf:68:03:f8:32:7a:9d:1b: f6:d3:22:9f:89:f8:0e:f8:48:96:18:80:5a:fb:a2:31:14:20: 6f:08:44:49:3f:ac:5f:52:46:22:70:4d:dd:9b:05:c1:13:7b: 2c:3f:99:28:e4:23:62:06:c8:22:4e:b5:44:36:07:93:78:da: 8e:95:1c:f5:f9:19:7a:a8:1d:a6:d4:e2:26:03:e7:09:df:5a: b3:48:02:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzdxCkWso+YoZoWVsN7PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNjg2ZTk4YWNmMmEzN2JmMmFlYzY5ODA3ZTY5NjQwNjA5 NzljYjgwHhcNMjUxMjA2MDMwMTEyWhcNMjUxMjA3MDMwMTEyWjAzMTEwLwYDVQQD Eyg5NWQ1NmJjODEzMTNiNjcxMjI4YTM5MTUyNTdkZmYwZmJiM2VlNzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHxfR9KMVInCI9c/4UXCc4Ezcavl qZ8B4wiwJzQ+xeJx724VSau+kkHL/NrNf6+W7R3EeU+ZIHQJc8AOdOYq4RXRyvdR g3qGHMPj1izIWhysqaDbGZG6L/Z2khIvwM6aMeJQnbcsptGtxUtJbkfEKBpMjrCH yPFZpIHpu5n98C7IWmWi0tQegxHCB5rKzBfXCfmboJax9qGOaRTvQ2dUKbInDSNJ +AuGi2L4jqXKWkr34D92Q2ZcbzYauH5zBPxoW6WI1f5bwIFWVZHadtcHRAxP82II 2S+pYBLFnxfZ1FGyWA6YRRh3C035AsdFc7kze9TYDibp0heyYBsbSDPpLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXVa8gTE7ZxIoo5FSV9/w+7Puc1MB8GA1UdIwQY MBaAFB1obpis8qN78q7GmAfmlkBgl5y4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hODc3YzgtZTdjYi00NTQwLWJkNDMt NWFjZGJmNDc0NTQ4LzEvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9hODc3YzgtZTdjYi00NTQwLWJkNDMtNWFjZGJmNDc0NTQ4 LzEvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoUbyJKtC dJrO5vVi4XVw04psvW/ALRhDaIfy6JOnRucJ+qAB85ekn8JSd5uAQAV3F2JKruzV V3tSwyx2tkTw5hdiN1+/3hGYxbyDspU7ves1nJ0w1Sg7cpD1b7vLo1d08sJrauDq ul1h1R3VOzkrc6ELxuLPyy1aUwb37ua47LXOOnrhjPe5DHdh2ePggxQIx+i4IWEL MSCojsum6iTC1tGqWbRv8DjgOyH3zb9oA/gyep0b9tMin4n4DvhIlhiAWvuiMRQg bwhEST+sX1JGInBN3ZsFwRN7LD+ZKOQjYgbIIk61RDYHk3jajpUc9fkZeqgdptTi JgPnCd9as0gC1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:13:50 2025 by rpki-client