This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft File: HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json) Hash identifier: CPXZjPZ9v8gA8pCItgqWDjKhzAw+N9y/Zp1JLIRlmnI= Subject key identifier: 8A:BE:B5:4A:A0:37:30:59:2D:2E:AB:64:E1:DE:ED:56:79:67:24:29 Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e Certificate serial: 019B34C54A6AFAC8B3F24EB77E9E9CD0BBDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft Manifest number: 12B0 Signing time: Fri 19 Dec 2025 04:01:43 +0000 Manifest this update: Fri 19 Dec 2025 04:01:43 +0000 Manifest next update: Sat 20 Dec 2025 04:01:43 +0000 Files and hashes: 1: 1-R53mn60mfPO-u9ytNS9sF0TLSo.roa (hash: hjhxCMJ1jfwhmqAtl0YKwQAHdXKCM1yF5oO2syQVRSw=) 2: 1-f8__C0CK7ranFsqDLcjoSQhylg.roa (hash: hbKNngdHLrh0EUf98Vi5DxR2S25rV2PBVU8eQvk6JUo=) 3: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: 63TSgDAP3Gedy7SDwlbW4tldQKBbKLfhq+Iq/lwHqLk=) 4: ya8trGCL644z-VHQPggSk9_LO-E.roa (hash: s6+H/S7quTkaw3wLyBlxCmsBjkvG8cEYcGq0toHuVSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c5:4a:6a:fa:c8:b3:f2:4e:b7:7e:9e:9c:d0:bb:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e Validity Not Before: Dec 19 04:01:43 2025 GMT Not After : Dec 20 04:01:43 2025 GMT Subject: CN=8abeb54aa03730592d2eab64e1deed5679672429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e0:60:b5:a2:8f:40:1c:c4:e6:d4:10:a3:f1: ea:8f:1a:b4:2b:c2:20:3b:60:ed:f8:41:c7:ab:0e: 0a:d3:04:fa:7c:65:73:9d:e3:b3:f3:c4:3d:42:3c: 52:b7:a9:63:cc:ed:45:ef:67:61:4b:cb:04:b1:e9: 4e:f7:55:aa:bf:46:4e:b9:ae:d9:96:00:0e:5c:b4: d7:c9:39:75:1f:42:61:2f:9c:78:5b:76:83:2c:52: ed:b6:c6:44:43:10:5c:6b:86:cb:6f:dd:45:fa:fd: e3:d4:ad:7c:6c:c1:07:d4:73:19:ec:a8:1d:7c:f8: 13:f4:37:aa:18:b9:f5:d2:7a:17:39:25:15:e2:21: 49:36:95:6f:25:62:0c:c8:21:c1:de:0e:4a:f0:82: dd:8e:dd:d1:5a:b2:f2:47:a7:67:4c:90:63:69:47: f1:76:4e:5e:7b:0b:b5:3e:f4:a5:f1:cc:8a:4a:bf: 80:f5:9f:4b:a3:ae:44:1f:aa:18:55:06:59:d0:29: e9:95:30:17:43:fd:e4:31:16:51:3d:e4:ab:22:a7: e7:38:68:4f:29:1b:e3:fb:0f:f7:c3:f8:fa:fc:d9: 9f:69:00:9a:c9:65:b3:b8:59:3d:cc:a9:46:2e:f6: ad:df:4f:1b:f6:2d:4f:f8:57:7f:21:99:8b:60:17: 87:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:BE:B5:4A:A0:37:30:59:2D:2E:AB:64:E1:DE:ED:56:79:67:24:29 X509v3 Authority Key Identifier: keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ad:ec:16:68:54:09:06:c1:71:47:5f:11:d2:37:10:3f:82: d6:01:14:3b:9c:16:d4:5a:20:58:cf:a1:aa:15:46:a4:19:41: 8f:08:53:53:5b:3e:7b:ed:64:8b:69:a0:d1:35:f3:e9:bf:1d: 33:76:ca:30:9a:88:72:62:35:80:7c:b8:b5:81:85:d9:d2:69: 0a:87:cd:17:c5:9a:af:45:11:00:19:dd:fd:3e:d8:50:3a:99: 60:57:9e:99:80:cb:5f:39:19:5f:45:d1:6c:8b:fa:aa:31:28: 19:d7:bf:74:93:54:2d:6b:b2:bc:9e:1b:22:97:4b:8a:69:a1: d7:03:71:cf:f1:84:fd:05:6c:72:e3:89:60:18:21:3d:1e:59: 5a:53:4f:bd:ce:79:d0:b5:74:1a:93:b0:4c:35:08:81:03:6f: 32:72:44:43:be:f6:5d:8c:1d:88:16:0f:b6:5e:0b:3c:95:5e: 75:a4:9d:8c:72:68:07:eb:4d:36:04:86:13:ea:2b:11:ca:57: ba:01:80:4b:c8:a0:6e:e2:40:86:1a:2c:d0:86:b2:7f:2e:80: 5e:70:6f:e5:d1:e0:06:41:11:be:4e:98:8b:46:e4:0c:d7:41: 3b:43:38:5a:c8:0e:5d:8b:e1:9d:32:ec:79:19:83:e0:09:d9: cd:c3:80:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xUpq+siz8k63fp6c0LvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMDU2NTg2NWE1MzM0MDJjMmY0MzQzZmUxYWY1NDFhMDA2 ZDlkNmUwHhcNMjUxMjE5MDQwMTQzWhcNMjUxMjIwMDQwMTQzWjAzMTEwLwYDVQQD Eyg4YWJlYjU0YWEwMzczMDU5MmQyZWFiNjRlMWRlZWQ1Njc5NjcyNDI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOBgtaKPQBzE5tQQo/Hqjxq0K8Ig O2Dt+EHHqw4K0wT6fGVzneOz88Q9QjxSt6ljzO1F72dhS8sEselO91Wqv0ZOua7Z lgAOXLTXyTl1H0JhL5x4W3aDLFLttsZEQxBca4bLb91F+v3j1K18bMEH1HMZ7Kgd fPgT9DeqGLn10noXOSUV4iFJNpVvJWIMyCHB3g5K8ILdjt3RWrLyR6dnTJBjaUfx dk5eewu1PvSl8cyKSr+A9Z9Lo65EH6oYVQZZ0CnplTAXQ/3kMRZRPeSrIqfnOGhP KRvj+w/3w/j6/NmfaQCayWWzuFk9zKlGLvat308b9i1P+Fd/IZmLYBeHZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIq+tUqgNzBZLS6rZOHe7VZ5ZyQpMB8GA1UdIwQY MBaAFB8FZYZaUzQCwvQ0P+GvVBoAbZ1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUt NWM2OTA0NDdiYTg5LzEvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUtNWM2OTA0NDdiYTg5 LzEvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVa3sFmhU CQbBcUdfEdI3ED+C1gEUO5wW1FogWM+hqhVGpBlBjwhTU1s+e+1ki2mg0TXz6b8d M3bKMJqIcmI1gHy4tYGF2dJpCofNF8War0URABnd/T7YUDqZYFeemYDLXzkZX0XR bIv6qjEoGde/dJNULWuyvJ4bIpdLimmh1wNxz/GE/QVscuOJYBghPR5ZWlNPvc55 0LV0GpOwTDUIgQNvMnJEQ772XYwdiBYPtl4LPJVedaSdjHJoB+tNNgSGE+orEcpX ugGAS8igbuJAhhos0Iayfy6AXnBv5dHgBkERvk6Yi0bkDNdBO0M4WsgOXYvhnTLs eRmD4AnZzcOAgA== -----END CERTIFICATE-----Generated at Fri Dec 19 06:21:16 2025 by rpki-client