This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft File: HWcc95_PZtKf7A13pmp9DqG7dZs.mft (raw, json) Hash identifier: u95RJYNZtWOJYX86I96jUzF5oFm1VZvIUZs8thKxCiI= Subject key identifier: 42:91:56:F4:6C:77:35:8A:F5:07:EB:AE:55:B3:79:73:87:62:23:3E Authority key identifier: 1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B Certificate issuer: /CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b Certificate serial: 019AF42E39DABA1553DA94AEC320480F7EDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft Manifest number: 093E Signing time: Sat 06 Dec 2025 15:01:01 +0000 Manifest this update: Sat 06 Dec 2025 15:01:01 +0000 Manifest next update: Sun 07 Dec 2025 15:01:01 +0000 Files and hashes: 1: HWcc95_PZtKf7A13pmp9DqG7dZs.crl (hash: yYmYJfPrBWVwW34Lp395S5tnPlBk0+gE9tkHmYxeGR0=) 2: hRN9-wiS61xemcnu2IzA0-iM9GY.roa (hash: 3iVa28JdgJ+v6CoS2A5zsaGzlJ7m8oreOdh8XsM7vXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:39:da:ba:15:53:da:94:ae:c3:20:48:0f:7e:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b Validity Not Before: Dec 6 15:01:01 2025 GMT Not After : Dec 7 15:01:01 2025 GMT Subject: CN=429156f46c77358af507ebae55b379738762233e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c0:5e:b8:a2:91:41:21:74:78:13:50:8c:f3: 4e:b8:73:1d:35:dd:5c:8c:a3:39:1f:55:88:e2:03: 48:d3:ea:b3:29:9c:86:04:2e:da:df:94:e5:66:56: b8:5d:af:55:18:eb:eb:d3:90:e4:4c:64:f0:a4:63: 27:c6:4f:5c:f8:f6:6d:7e:08:1d:89:71:d0:ab:d2: 54:02:98:f3:0c:b0:13:94:21:66:1a:fe:2c:a8:08: 14:4f:7d:27:c2:f2:04:b9:e9:71:02:82:e7:64:c1: ed:16:64:a7:69:e3:52:a0:6c:cc:a9:3c:6d:1d:11: 73:7d:45:3d:e8:bd:66:e8:95:58:39:f1:0c:a0:c2: 4f:85:65:ef:8e:92:9d:b4:f6:b5:74:76:c0:05:75: 68:92:9b:a3:07:60:39:59:bd:42:d6:3f:1d:da:8e: c1:76:62:cb:a4:78:73:00:ff:df:d0:65:29:2f:d3: 85:74:a2:67:a8:e4:7b:3c:81:6c:77:6c:7f:ef:ae: e9:ba:9a:d1:60:7c:f7:ee:79:30:18:95:bb:27:cc: d6:f0:d0:fa:cf:18:1a:cf:45:cc:27:72:d4:ca:f4: fe:d5:09:60:78:d6:ce:bd:0f:07:87:75:a6:8c:11: 24:4f:a8:0a:ba:56:60:6c:57:1c:43:dd:d4:a2:70: c5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:91:56:F4:6C:77:35:8A:F5:07:EB:AE:55:B3:79:73:87:62:23:3E X509v3 Authority Key Identifier: keyid:1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b4:12:84:fa:e2:d3:bb:db:38:1c:a9:28:03:f6:1d:99:bd: 68:7e:4f:4f:af:b5:e2:d6:82:30:ad:b8:19:ec:06:5f:cd:da: 7b:8c:e2:bf:55:34:51:10:8e:a3:0c:a1:bf:37:d0:9d:4b:ad: 2f:48:c6:d7:87:33:c2:0c:87:5f:1b:92:be:d7:3f:e3:fb:3b: 8c:db:00:16:ae:17:bb:ce:03:7c:3f:fa:0c:96:fb:80:4f:a4: 62:69:8b:b6:41:bb:da:dc:01:78:68:ba:5e:fa:bb:10:19:3d: 2e:bc:59:d1:86:33:0f:b4:45:c2:bd:3e:b2:78:09:c7:95:3c: 51:8a:a5:43:61:fe:1b:32:b0:d0:7f:78:96:f8:75:24:fe:51: fb:62:c8:2f:45:46:1b:c9:c4:71:46:49:3e:52:49:7d:3f:16: 5a:11:f7:64:42:09:57:19:3b:de:45:11:67:e7:1e:93:5e:f7: f9:a7:a0:e2:97:e8:05:0a:bb:45:b0:36:73:01:35:82:e1:8b: 36:c8:50:21:f5:cd:d1:4d:21:86:29:a8:06:cd:5e:08:58:b1: 6f:ba:ca:30:35:45:01:85:c5:b3:52:e2:4f:e5:72:92:bf:42: 51:03:df:b7:98:9e:13:cf:e7:0e:eb:9b:8d:bf:94:8c:3b:50: cb:26:e1:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LjnauhVT2pSuwyBID37cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNjcxY2Y3OWZjZjY2ZDI5ZmVjMGQ3N2E2NmE3ZDBlYTFi Yjc1OWIwHhcNMjUxMjA2MTUwMTAxWhcNMjUxMjA3MTUwMTAxWjAzMTEwLwYDVQQD Eyg0MjkxNTZmNDZjNzczNThhZjUwN2ViYWU1NWIzNzk3Mzg3NjIyMzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcBeuKKRQSF0eBNQjPNOuHMdNd1c jKM5H1WI4gNI0+qzKZyGBC7a35TlZla4Xa9VGOvr05DkTGTwpGMnxk9c+PZtfggd iXHQq9JUApjzDLATlCFmGv4sqAgUT30nwvIEuelxAoLnZMHtFmSnaeNSoGzMqTxt HRFzfUU96L1m6JVYOfEMoMJPhWXvjpKdtPa1dHbABXVokpujB2A5Wb1C1j8d2o7B dmLLpHhzAP/f0GUpL9OFdKJnqOR7PIFsd2x/767puprRYHz37nkwGJW7J8zW8ND6 zxgaz0XMJ3LUyvT+1QlgeNbOvQ8Hh3WmjBEkT6gKulZgbFccQ93UonDFLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKRVvRsdzWK9QfrrlWzeXOHYiM+MB8GA1UdIwQY MBaAFB1nHPefz2bSn+wNd6ZqfQ6hu3WbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFdjYzk1X1BadEtmN0ExM3BtcDlEcUc3ZFpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNWFiMjgtMjY4ZC00OWI5LWJhNGYt OTZmZTIyNjA1MzIzLzEvSFdjYzk1X1BadEtmN0ExM3BtcDlEcUc3ZFpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xNWFiMjgtMjY4ZC00OWI5LWJhNGYtOTZmZTIyNjA1MzIz LzEvSFdjYzk1X1BadEtmN0ExM3BtcDlEcUc3ZFpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrQShPri 07vbOBypKAP2HZm9aH5PT6+14taCMK24GewGX83ae4ziv1U0URCOowyhvzfQnUut L0jG14czwgyHXxuSvtc/4/s7jNsAFq4Xu84DfD/6DJb7gE+kYmmLtkG72twBeGi6 Xvq7EBk9LrxZ0YYzD7RFwr0+sngJx5U8UYqlQ2H+GzKw0H94lvh1JP5R+2LIL0VG G8nEcUZJPlJJfT8WWhH3ZEIJVxk73kURZ+cek173+aeg4pfoBQq7RbA2cwE1guGL NshQIfXN0U0hhimoBs1eCFixb7rKMDVFAYXFs1LiT+Vykr9CUQPft5ieE8/nDuub jb+UjDtQyybhAg== -----END CERTIFICATE-----Generated at Sat Dec 6 17:46:51 2025 by rpki-client