This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft File: HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft (raw, json) Hash identifier: klE1bDPJQzAmCHaVfJZ/idu8qvFHtGizJJerbDpwqmE= Subject key identifier: 0D:FB:FC:94:09:B6:80:26:68:04:37:01:97:D8:E8:B4:70:7C:15:D5 Authority key identifier: 1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33 Certificate issuer: /CN=1f0614e195c1656a28e8b19b22784e8b55bb4533 Certificate serial: 019B3079B6EB900E4129C8CFC7932906A7B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft Manifest number: 16D3 Signing time: Thu 18 Dec 2025 08:00:41 +0000 Manifest this update: Thu 18 Dec 2025 08:00:41 +0000 Manifest next update: Fri 19 Dec 2025 08:00:41 +0000 Files and hashes: 1: 7Uvp6r5GtLtDblaOxc-Xb4Tnilc.roa (hash: pSYNsxlb943anM3s10VieWyFa7UKpRe9Vz625JGzG6g=) 2: HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl (hash: /nqqQceVGUpYknt27J85cw9L8TYPK9k7LcDsDxMaXA8=) 3: LQ0nUG087BHLM9q435rBPVa8bMI.roa (hash: UFpnOF74KErqQ2amul9MeV32Xu5TKxE7+2JeP9LumgQ=) 4: eg7fhNdpROAUHy6qw77Qs2byi9Y.roa (hash: +DdhEKVICFbvbrCM7pp6/vAQohYV0VdhfUhy9Z1h54o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:79:b6:eb:90:0e:41:29:c8:cf:c7:93:29:06:a7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0614e195c1656a28e8b19b22784e8b55bb4533 Validity Not Before: Dec 18 08:00:41 2025 GMT Not After : Dec 19 08:00:41 2025 GMT Subject: CN=0dfbfc9409b680266804370197d8e8b4707c15d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:95:44:28:45:ee:cf:77:c9:53:f0:db:7f:81: b0:dd:16:f1:96:ce:41:6c:2f:ce:a6:50:84:62:df: dc:fb:eb:f0:3f:62:9a:1f:1f:4c:dc:78:d5:5d:58: e3:f8:3e:59:98:74:ab:80:b2:32:74:a6:26:76:5e: ac:9e:ad:92:02:a3:75:1d:3f:9d:9b:a0:a5:d2:df: 4c:db:27:d0:29:38:78:3f:2b:55:13:5f:b5:f6:37: fb:a1:32:d5:19:be:a1:5c:3c:43:c3:ae:29:73:c4: 4c:f3:9d:97:65:d9:02:02:0e:b1:4c:1b:35:01:3f: 70:61:0e:af:4e:b1:25:4d:8b:ea:28:04:e1:c9:91: e3:46:dc:e9:7a:aa:79:9f:72:b3:c9:0c:e5:44:e1: 10:68:b2:c8:9c:2b:dc:fe:aa:a2:54:bb:6c:9e:10: 2c:bf:62:59:fc:a7:4e:54:e5:44:10:fb:e4:c3:84: b5:b7:09:b6:5c:ed:25:1f:a3:fd:22:aa:e6:4e:bb: 42:1c:f7:d9:07:b1:11:e7:72:01:66:8f:89:26:e7: d8:79:cd:5c:88:c7:fe:2e:8f:04:51:a9:1d:a3:7b: 25:fe:6b:87:47:d7:55:57:5f:1f:b9:1b:e5:39:6b: cc:08:d0:e8:2b:17:ef:03:d6:46:02:c0:2e:e1:1f: 4e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FB:FC:94:09:B6:80:26:68:04:37:01:97:D8:E8:B4:70:7C:15:D5 X509v3 Authority Key Identifier: keyid:1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:dd:7c:55:a5:6a:23:ef:9e:57:bc:ac:85:ab:2b:40:6b:5b: b3:db:78:53:33:ab:d7:bb:67:c4:a8:3f:33:b9:f7:2f:56:a4: aa:a4:61:c0:93:0a:8a:6f:ee:cc:9f:bb:15:6e:47:0e:3e:00: ab:b8:18:27:65:85:2c:42:13:dc:ee:0d:4e:47:f8:fa:5c:9f: 3e:d1:a8:5b:ad:bb:f3:3c:39:3a:03:fb:f0:f9:fc:71:1e:b9: b9:2e:77:0b:dc:9b:24:69:31:27:8c:f4:04:69:84:9b:33:d8: 49:38:58:d4:c5:11:49:ed:94:e0:b6:18:09:3c:45:15:75:58: 7a:0e:5b:9d:52:44:22:5c:0b:9c:38:5e:93:92:d3:18:1e:9e: 2f:0f:0a:79:a0:ed:fd:97:bb:c7:cf:bd:5d:c8:18:54:67:a6: 45:ba:f5:52:52:5c:be:2b:17:0d:41:d2:08:2a:36:50:35:5b: 4b:89:18:24:1c:5b:9e:37:eb:2c:ce:3e:f0:5b:81:c8:8b:69: d9:56:90:3d:01:4c:06:50:d1:f8:a1:66:bf:1b:76:fa:2d:17: 8b:d8:df:a2:66:a2:a2:c8:05:69:6d:7c:b5:95:8e:73:d1:e7: 93:63:19:e8:9a:f7:32:0a:1e:90:41:8e:1c:2a:0b:a5:76:0a: 45:95:e3:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZswebbrkA5BKcjPx5MpBqe1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMDYxNGUxOTVjMTY1NmEyOGU4YjE5YjIyNzg0ZThiNTVi YjQ1MzMwHhcNMjUxMjE4MDgwMDQxWhcNMjUxMjE5MDgwMDQxWjAzMTEwLwYDVQQD EygwZGZiZmM5NDA5YjY4MDI2NjgwNDM3MDE5N2Q4ZThiNDcwN2MxNWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZVEKEXuz3fJU/Dbf4Gw3Rbxls5B bC/OplCEYt/c++vwP2KaHx9M3HjVXVjj+D5ZmHSrgLIydKYmdl6snq2SAqN1HT+d m6Cl0t9M2yfQKTh4PytVE1+19jf7oTLVGb6hXDxDw64pc8RM852XZdkCAg6xTBs1 AT9wYQ6vTrElTYvqKAThyZHjRtzpeqp5n3KzyQzlROEQaLLInCvc/qqiVLtsnhAs v2JZ/KdOVOVEEPvkw4S1twm2XO0lH6P9IqrmTrtCHPfZB7ER53IBZo+JJufYec1c iMf+Lo8EUakdo3sl/muHR9dVV18fuRvlOWvMCNDoKxfvA9ZGAsAu4R9OhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA37/JQJtoAmaAQ3AZfY6LRwfBXVMB8GA1UdIwQY MBaAFB8GFOGVwWVqKOixmyJ4TotVu0UzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHdZVTRaWEJaV29vNkxHYkluaE9pMVc3UlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xMGViY2MtYzgzMi00ZDMzLTg4YjUt YmVmODcyZGFlY2U3LzEvSHdZVTRaWEJaV29vNkxHYkluaE9pMVc3UlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xMGViY2MtYzgzMi00ZDMzLTg4YjUtYmVmODcyZGFlY2U3 LzEvSHdZVTRaWEJaV29vNkxHYkluaE9pMVc3UlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfN18VaVq I++eV7yshasrQGtbs9t4UzOr17tnxKg/M7n3L1akqqRhwJMKim/uzJ+7FW5HDj4A q7gYJ2WFLEIT3O4NTkf4+lyfPtGoW6278zw5OgP78Pn8cR65uS53C9ybJGkxJ4z0 BGmEmzPYSThY1MURSe2U4LYYCTxFFXVYeg5bnVJEIlwLnDhek5LTGB6eLw8KeaDt /Ze7x8+9XcgYVGemRbr1UlJcvisXDUHSCCo2UDVbS4kYJBxbnjfrLM4+8FuByItp 2VaQPQFMBlDR+KFmvxt2+i0Xi9jfomaiosgFaW18tZWOc9Hnk2MZ6Jr3MgoekEGO HCoLpXYKRZXj/w== -----END CERTIFICATE-----Generated at Thu Dec 18 12:48:30 2025 by rpki-client