This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft File: HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft (raw, json) Hash identifier: ZyUmdyJzw0u6ubNa11kyv4arbxb99bfNyZ2bNKbqSCs= Subject key identifier: D7:5D:94:11:C6:D2:6B:27:91:9C:E7:B1:D2:2E:B9:6E:0C:A8:BD:16 Authority key identifier: 1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99 Certificate issuer: /CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99 Certificate serial: 019AF2401A862086DBD2048C8A946723AF4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:01:18 +0000 Manifest this update: Sat 06 Dec 2025 06:01:18 +0000 Manifest next update: Sun 07 Dec 2025 06:01:18 +0000 Files and hashes: 1: HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl (hash: Xw1m7oAz1V6UE8zN8NNeDe3a60Jr9ZB8nQgKOFBo0RE=) 2: Rk8F0_O96bWnV23XOY1ym8DMObc.roa (hash: mN43AwUntAXDuv+4vVnXFfluzZ73Kps3qVN8w0gCSEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:1a:86:20:86:db:d2:04:8c:8a:94:67:23:af:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dfc2b36514163d389ee8fe18f8e2343fa4ddc99 Validity Not Before: Dec 6 06:01:18 2025 GMT Not After : Dec 7 06:01:18 2025 GMT Subject: CN=d75d9411c6d26b27919ce7b1d22eb96e0ca8bd16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9c:d4:a0:1a:27:b9:25:0d:29:5c:1f:95:45: 85:48:1c:0b:ef:1f:71:77:33:40:7c:e7:88:e9:7a: 9c:9f:8a:db:24:e8:f7:d3:69:f5:58:2c:de:6d:e5: 59:fc:43:a2:a0:89:0a:8c:06:10:4a:ba:9c:11:96: 3b:87:21:a4:9b:2e:41:78:f0:06:4e:0f:b1:b1:32: 84:be:85:1d:09:a3:e7:b9:7a:d3:3f:ac:8b:f5:15: 2b:d4:4c:c4:bd:3e:93:cb:f6:50:9c:38:f4:1d:c9: c8:64:f0:e2:c4:1f:48:4c:bd:c3:1c:87:9a:ed:20: 93:2e:db:b2:cc:8e:4f:98:04:dd:3e:47:3c:82:eb: af:ce:f5:e3:63:fe:a2:31:00:2e:10:1d:c7:75:62: 51:7d:fd:91:6b:d9:e1:7b:78:f3:e9:25:70:5f:f8: 2e:fc:6c:52:45:92:cd:66:d6:5f:69:fc:e8:0e:3d: c0:15:ea:19:7e:04:fb:d2:6f:b5:3f:90:f6:cb:30: 02:a1:0c:3f:0d:43:a1:cf:9f:9c:4e:1d:bc:d7:7e: bc:08:26:03:f5:38:3e:94:86:45:ae:d9:70:1d:c0: 03:b7:5c:ab:12:55:8e:43:72:67:59:fe:9a:6f:3e: 16:9b:3a:bc:7f:17:38:bc:0b:28:37:75:39:21:8b: 31:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5D:94:11:C6:D2:6B:27:91:9C:E7:B1:D2:2E:B9:6E:0C:A8:BD:16 X509v3 Authority Key Identifier: keyid:1D:FC:2B:36:51:41:63:D3:89:EE:8F:E1:8F:8E:23:43:FA:4D:DC:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/d929ab-4896-43e2-a876-01bed8782c7f/1/HfwrNlFBY9OJ7o_hj44jQ_pN3Jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:b5:1b:2b:7b:a3:09:39:2a:88:01:aa:4f:24:78:a2:50:00: d4:39:5d:d7:1a:a5:8a:4f:ca:a3:84:9c:bf:7f:86:ba:e0:59: 3e:05:30:cd:34:75:64:6a:bd:8f:d7:d4:78:19:fb:8b:2b:36: 91:d8:34:51:69:84:e3:20:39:47:ab:89:94:31:0e:3a:67:f7: f1:3d:7e:b2:7e:86:38:ee:fa:b6:f2:af:3c:2d:95:92:c0:0b: 98:52:0f:19:12:98:19:5a:d8:55:3f:f7:e6:16:a9:83:3d:3e: 17:34:bb:19:ff:70:f1:b7:60:b9:55:45:38:c3:00:62:b0:5e: 18:13:97:69:49:7a:88:9b:9f:e4:bf:df:8a:f3:09:68:5a:61: bc:f6:24:77:e1:fd:6a:ff:ce:b7:f3:f2:40:e9:7c:16:2a:2a: c5:3b:4d:9c:7d:a0:3c:2c:15:65:45:0a:f4:53:e9:1e:a4:e8: 62:e0:9a:79:5e:1a:7b:aa:34:77:06:fb:54:e2:6b:6f:72:fe: a2:0a:9b:2a:5a:c6:d7:a2:d6:d2:73:92:a3:10:74:a0:63:b4: 90:5f:42:8d:5b:a8:20:46:58:bc:cf:ac:a2:56:93:8b:e9:0e: e0:60:13:34:5a:14:91:42:1f:b4:67:19:1d:67:69:1e:46:5a: 07:6b:73:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBqGIIbb0gSMipRnI69NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkZmMyYjM2NTE0MTYzZDM4OWVlOGZlMThmOGUyMzQzZmE0 ZGRjOTkwHhcNMjUxMjA2MDYwMTE4WhcNMjUxMjA3MDYwMTE4WjAzMTEwLwYDVQQD EyhkNzVkOTQxMWM2ZDI2YjI3OTE5Y2U3YjFkMjJlYjk2ZTBjYThiZDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5zUoBonuSUNKVwflUWFSBwL7x9x dzNAfOeI6Xqcn4rbJOj302n1WCzebeVZ/EOioIkKjAYQSrqcEZY7hyGkmy5BePAG Tg+xsTKEvoUdCaPnuXrTP6yL9RUr1EzEvT6Ty/ZQnDj0HcnIZPDixB9ITL3DHIea 7SCTLtuyzI5PmATdPkc8guuvzvXjY/6iMQAuEB3HdWJRff2Ra9nhe3jz6SVwX/gu /GxSRZLNZtZfafzoDj3AFeoZfgT70m+1P5D2yzACoQw/DUOhz5+cTh281368CCYD 9Tg+lIZFrtlwHcADt1yrElWOQ3JnWf6abz4Wmzq8fxc4vAsoN3U5IYsxMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNddlBHG0msnkZznsdIuuW4MqL0WMB8GA1UdIwQY MBaAFB38KzZRQWPTie6P4Y+OI0P6TdyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9kOTI5YWItNDg5Ni00M2UyLWE4NzYt MDFiZWQ4NzgyYzdmLzEvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9kOTI5YWItNDg5Ni00M2UyLWE4NzYtMDFiZWQ4NzgyYzdm LzEvSGZ3ck5sRkJZOU9KN29faGo0NGpRX3BOM0prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLUbK3uj CTkqiAGqTyR4olAA1Dld1xqlik/Ko4Scv3+GuuBZPgUwzTR1ZGq9j9fUeBn7iys2 kdg0UWmE4yA5R6uJlDEOOmf38T1+sn6GOO76tvKvPC2VksALmFIPGRKYGVrYVT/3 5hapgz0+FzS7Gf9w8bdguVVFOMMAYrBeGBOXaUl6iJuf5L/fivMJaFphvPYkd+H9 av/Ot/PyQOl8FioqxTtNnH2gPCwVZUUK9FPpHqToYuCaeV4ae6o0dwb7VOJrb3L+ ogqbKlrG16LW0nOSoxB0oGO0kF9CjVuoIEZYvM+solaTi+kO4GATNFoUkUIftGcZ HWdpHkZaB2tzUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:07:09 2025 by rpki-client