This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft File: HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json) Hash identifier: PJxivIEPu9y4LLTCCpOKJ5CmaC5BqN0j8Q2CSWM3Axg= Subject key identifier: 9A:ED:3D:A4:19:F2:C3:39:41:17:0C:FB:46:AF:71:17:60:A8:40:E8 Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e Certificate serial: 019AF31C2BA2990E16BFCAD0C628CE63C026 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft Manifest number: 128E Signing time: Sat 06 Dec 2025 10:01:40 +0000 Manifest this update: Sat 06 Dec 2025 10:01:40 +0000 Manifest next update: Sun 07 Dec 2025 10:01:40 +0000 Files and hashes: 1: 1-R53mn60mfPO-u9ytNS9sF0TLSo.roa (hash: hjhxCMJ1jfwhmqAtl0YKwQAHdXKCM1yF5oO2syQVRSw=) 2: 1-f8__C0CK7ranFsqDLcjoSQhylg.roa (hash: hbKNngdHLrh0EUf98Vi5DxR2S25rV2PBVU8eQvk6JUo=) 3: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: /JzoCjQlrr278/5Z84eFuitLf3TXlFubWOoH8Ufljpk=) 4: ya8trGCL644z-VHQPggSk9_LO-E.roa (hash: s6+H/S7quTkaw3wLyBlxCmsBjkvG8cEYcGq0toHuVSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:2b:a2:99:0e:16:bf:ca:d0:c6:28:ce:63:c0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e Validity Not Before: Dec 6 10:01:40 2025 GMT Not After : Dec 7 10:01:40 2025 GMT Subject: CN=9aed3da419f2c33941170cfb46af711760a840e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ab:0f:b6:ff:b1:09:e0:c6:51:52:2c:2b:46: 4d:e9:7c:54:0d:cc:18:82:67:06:4f:d8:ca:68:5a: 25:91:cb:61:e1:fd:4d:43:07:84:3f:c8:da:b2:53: a1:39:0e:f2:4b:63:f9:2a:13:a5:4b:9f:b7:41:64: 9f:ca:61:78:68:7e:2b:20:61:1e:0e:e3:8d:78:7f: 5b:0f:6a:28:db:7e:99:9a:5e:98:0a:62:80:6f:03: 44:08:5a:84:c4:44:50:f7:35:82:3d:26:a6:60:03: d0:90:3a:36:24:96:e8:a2:a5:66:ba:f7:b7:e7:5f: ac:4f:f4:9d:ad:c5:2a:f4:7a:f3:ae:c7:ad:14:3a: 1d:45:52:12:da:cf:cf:81:5c:b5:40:05:5e:a9:39: 4c:a9:2d:bc:9f:ea:69:86:1d:87:e7:71:06:35:9b: 25:e3:b3:e8:3b:7b:09:14:9b:83:df:47:f8:d1:fe: e6:a2:27:d2:f7:b8:98:ee:3f:bb:af:f9:56:5c:f8: 26:c3:61:b3:ac:59:93:8c:54:33:ad:7e:c9:b1:77: 3f:c4:d7:0d:95:b7:41:f8:3e:05:6b:2d:55:47:9e: 45:97:e7:83:6c:04:57:c2:d3:f7:d8:c3:8a:da:90: 07:1f:8b:76:89:6b:4f:39:ee:5f:3d:92:e8:bd:db: dc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:ED:3D:A4:19:F2:C3:39:41:17:0C:FB:46:AF:71:17:60:A8:40:E8 X509v3 Authority Key Identifier: keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:d8:09:28:b2:d7:ff:34:41:4b:13:b7:e3:b6:3f:24:c0:0f: 93:f0:93:4b:80:9f:b7:b5:99:f2:2e:ff:e4:3e:06:01:ce:f2: 1f:f7:b2:6e:f4:19:de:3d:f8:dd:76:4e:cc:65:15:dd:d9:98: 67:be:8c:fb:a8:d2:89:89:56:d1:54:30:c5:cc:dd:b2:cf:6f: c9:c5:eb:2b:47:d8:fd:7b:ac:1c:5e:a0:41:f9:fb:be:8f:d0: 52:f9:2b:13:c0:b0:f6:6a:a5:37:0e:98:40:39:f5:1f:94:ca: 85:20:dc:a7:16:02:95:96:bb:30:d9:75:5d:82:31:d9:de:2a: a5:30:e0:91:f8:7d:c6:a2:4a:1c:d0:df:c9:5e:57:32:08:f6: 0f:aa:37:d0:13:d3:82:41:fe:6c:2a:61:3a:93:0f:b7:b0:2a: d0:b7:2a:68:ac:04:fd:88:10:95:53:58:fd:3f:27:6c:26:01: 87:c4:d7:46:f2:ec:c5:ed:63:ba:88:ca:1b:5a:26:ea:55:b0: 34:77:a1:8e:49:38:e8:d9:40:cc:79:82:11:9c:a0:08:7b:41: a6:7f:90:c8:45:65:1c:17:c4:b5:8b:60:11:ec:87:45:c9:6d: 9b:ce:c0:aa:27:67:19:97:ed:c6:f1:7c:5f:a9:23:32:a9:77: 7c:e8:7a:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHCuimQ4Wv8rQxijOY8AmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMDU2NTg2NWE1MzM0MDJjMmY0MzQzZmUxYWY1NDFhMDA2 ZDlkNmUwHhcNMjUxMjA2MTAwMTQwWhcNMjUxMjA3MTAwMTQwWjAzMTEwLwYDVQQD Eyg5YWVkM2RhNDE5ZjJjMzM5NDExNzBjZmI0NmFmNzExNzYwYTg0MGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqsPtv+xCeDGUVIsK0ZN6XxUDcwY gmcGT9jKaFolkcth4f1NQweEP8jaslOhOQ7yS2P5KhOlS5+3QWSfymF4aH4rIGEe DuONeH9bD2oo236Zml6YCmKAbwNECFqExERQ9zWCPSamYAPQkDo2JJbooqVmuve3 51+sT/SdrcUq9HrzrsetFDodRVIS2s/PgVy1QAVeqTlMqS28n+pphh2H53EGNZsl 47PoO3sJFJuD30f40f7moifS97iY7j+7r/lWXPgmw2GzrFmTjFQzrX7JsXc/xNcN lbdB+D4Fay1VR55Fl+eDbARXwtP32MOK2pAHH4t2iWtPOe5fPZLovdvc2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJrtPaQZ8sM5QRcM+0avcRdgqEDoMB8GA1UdIwQY MBaAFB8FZYZaUzQCwvQ0P+GvVBoAbZ1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUt NWM2OTA0NDdiYTg5LzEvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUtNWM2OTA0NDdiYTg5 LzEvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9gJKLLX /zRBSxO347Y/JMAPk/CTS4Cft7WZ8i7/5D4GAc7yH/eybvQZ3j343XZOzGUV3dmY Z76M+6jSiYlW0VQwxczdss9vycXrK0fY/XusHF6gQfn7vo/QUvkrE8Cw9mqlNw6Y QDn1H5TKhSDcpxYClZa7MNl1XYIx2d4qpTDgkfh9xqJKHNDfyV5XMgj2D6o30BPT gkH+bCphOpMPt7Aq0LcqaKwE/YgQlVNY/T8nbCYBh8TXRvLsxe1juojKG1om6lWw NHehjkk46NlAzHmCEZygCHtBpn+QyEVlHBfEtYtgEeyHRcltm87AqidnGZftxvF8 X6kjMql3fOh6dg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:06 2025 by rpki-client