This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft File: HW2cywJxWEmzoey800toh_ZJlA8.mft (raw, json) Hash identifier: Avw7r0W7g6+M7wPZjtNi2NqyA5fsKAMal7x3ZLgrBOU= Subject key identifier: 5F:CA:34:7E:73:2A:0A:0E:29:5C:AE:EC:88:A2:34:98:18:93:45:59 Authority key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F Certificate issuer: /CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f Certificate serial: 019AF2091E870F5FEAEBBA05C72BFBC9DDC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft Manifest number: 13F6 Signing time: Sat 06 Dec 2025 05:01:15 +0000 Manifest this update: Sat 06 Dec 2025 05:01:15 +0000 Manifest next update: Sun 07 Dec 2025 05:01:15 +0000 Files and hashes: 1: HW2cywJxWEmzoey800toh_ZJlA8.crl (hash: 6Uo+1mQoC5WXF9Qx9Puah9Wip7Js6OTlWJNk3MKIthk=) 2: z8_8mqLcOJtNw1DMnUMLdxcYTMM.roa (hash: 9R0oeP72aK5DRkFYUsVyQ3Stx8OTGpY7qc7OKrRI9JY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:1e:87:0f:5f:ea:eb:ba:05:c7:2b:fb:c9:dd:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f Validity Not Before: Dec 6 05:01:15 2025 GMT Not After : Dec 7 05:01:15 2025 GMT Subject: CN=5fca347e732a0a0e295caeec88a2349818934559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:51:9a:11:4c:7f:f2:aa:2d:d3:6e:2e:c2:31: dc:56:a9:44:5f:cf:4a:fd:41:ba:db:b4:cb:6a:1c: fe:49:a3:56:29:f1:26:97:21:c2:a4:89:55:b4:20: 8d:be:a1:e9:d0:68:b2:2b:92:97:98:0d:95:06:01: 2f:bb:6e:d0:a8:4f:ae:8d:bd:90:a9:92:1b:f7:ef: 2a:f3:7b:90:16:c1:bc:df:be:0f:e1:ef:a2:5e:7d: 1d:45:b7:27:08:a6:db:3d:16:f0:13:e5:44:dc:95: 61:bd:f0:1f:95:37:b6:e1:45:be:c5:c0:b0:37:b2: b9:50:20:c6:a4:64:66:4d:57:18:4d:08:0d:66:13: 89:45:91:0b:a9:8c:52:a6:24:37:d8:98:0d:9e:fe: f5:4a:ee:06:18:db:9d:77:d4:13:44:fd:97:8f:c5: 54:de:e5:40:04:fb:32:21:b6:d0:85:a0:37:c8:3f: a8:ce:bb:83:58:54:32:46:4c:e2:44:af:a6:f4:0e: a4:8c:41:c0:f6:6e:f3:29:50:6e:29:51:7d:90:1a: 8e:90:8a:f0:02:f3:81:05:ea:70:04:21:68:2b:24: de:75:77:c9:a1:82:08:65:f1:91:3a:4a:c2:72:27: fb:f3:ba:2c:89:6e:f8:17:a4:97:ea:39:06:f5:31: 8f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:CA:34:7E:73:2A:0A:0E:29:5C:AE:EC:88:A2:34:98:18:93:45:59 X509v3 Authority Key Identifier: keyid:1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:5e:c7:21:c2:1d:39:7b:4e:89:fc:57:9d:71:2e:1b:25:8d: 0d:25:12:f2:bc:66:1f:67:98:ef:ce:e3:63:d1:10:ad:70:47: 25:af:ba:92:c7:28:0b:a4:9f:c6:bb:e6:76:d6:21:d6:cf:a2: 12:7f:1b:6c:4b:37:65:7d:89:37:26:14:38:d3:77:16:e3:65: f1:94:47:29:b9:f0:ce:63:f6:53:25:9a:e8:3e:2f:6c:1e:cc: 8a:56:2f:06:29:00:58:5b:a5:d0:c0:24:49:fb:00:ff:cd:3b: 81:89:e6:f7:59:f2:63:77:f1:32:72:ed:33:c8:6f:0a:d6:da: 70:5d:98:f1:98:12:7e:f5:95:b9:0e:2f:e2:95:98:e4:bd:e4: b3:71:6c:40:7b:62:39:00:46:47:13:09:77:68:7f:b0:0f:3e: c3:53:e6:91:70:19:ae:f4:23:71:d3:39:e0:3a:ad:a5:eb:f9: 98:07:0e:d6:10:8b:aa:c1:3a:d4:d7:da:19:58:b5:94:4d:95: 77:80:78:02:53:3b:6a:a3:f6:c7:41:bf:82:2d:98:8a:79:96: af:ea:c5:27:f6:23:ef:d0:11:59:a2:ba:6b:22:d2:b0:98:d6: 48:38:d1:f1:f3:28:3e:9f:a3:3e:d7:62:a8:3c:c9:be:1e:e7: 64:99:e4:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCR6HD1/q67oFxyv7yd3DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNmQ5Y2NiMDI3MTU4NDliM2ExZWNiY2QzNGI2ODg3ZjY0 OTk0MGYwHhcNMjUxMjA2MDUwMTE1WhcNMjUxMjA3MDUwMTE1WjAzMTEwLwYDVQQD Eyg1ZmNhMzQ3ZTczMmEwYTBlMjk1Y2FlZWM4OGEyMzQ5ODE4OTM0NTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylGaEUx/8qot024uwjHcVqlEX89K /UG627TLahz+SaNWKfEmlyHCpIlVtCCNvqHp0GiyK5KXmA2VBgEvu27QqE+ujb2Q qZIb9+8q83uQFsG8374P4e+iXn0dRbcnCKbbPRbwE+VE3JVhvfAflTe24UW+xcCw N7K5UCDGpGRmTVcYTQgNZhOJRZELqYxSpiQ32JgNnv71Su4GGNudd9QTRP2Xj8VU 3uVABPsyIbbQhaA3yD+ozruDWFQyRkziRK+m9A6kjEHA9m7zKVBuKVF9kBqOkIrw AvOBBepwBCFoKyTedXfJoYIIZfGROkrCcif787osiW74F6SX6jkG9TGPbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/KNH5zKgoOKVyu7IiiNJgYk0VZMB8GA1UdIwQY MBaAFB1tnMsCcVhJs6HsvNNLaIf2SZQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wZWY2ZGUtYjNmMS00NDMwLThiNDkt MTE0ZmZjMjBmOWFhLzEvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8wZWY2ZGUtYjNmMS00NDMwLThiNDktMTE0ZmZjMjBmOWFh LzEvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoF7HIcId OXtOifxXnXEuGyWNDSUS8rxmH2eY787jY9EQrXBHJa+6kscoC6SfxrvmdtYh1s+i En8bbEs3ZX2JNyYUONN3FuNl8ZRHKbnwzmP2UyWa6D4vbB7MilYvBikAWFul0MAk SfsA/807gYnm91nyY3fxMnLtM8hvCtbacF2Y8ZgSfvWVuQ4v4pWY5L3ks3FsQHti OQBGRxMJd2h/sA8+w1PmkXAZrvQjcdM54Dqtpev5mAcO1hCLqsE61NfaGVi1lE2V d4B4AlM7aqP2x0G/gi2YinmWr+rFJ/Yj79ARWaK6ayLSsJjWSDjR8fMoPp+jPtdi qDzJvh7nZJnkwQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:31 2025 by rpki-client