This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft File: HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft (raw, json) Hash identifier: Jdh58RKnF5ff52ZyR4tW4mVxrETamnbL2q4V6xravME= Subject key identifier: 96:71:21:F0:40:E0:4D:A5:3D:24:7E:69:20:B3:BE:03:CF:1C:14:AF Authority key identifier: 1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33 Certificate issuer: /CN=1f0614e195c1656a28e8b19b22784e8b55bb4533 Certificate serial: 019AF0BF536DED1837D22269DB4E4B502F95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft Manifest number: 16B2 Signing time: Fri 05 Dec 2025 23:01:01 +0000 Manifest this update: Fri 05 Dec 2025 23:01:01 +0000 Manifest next update: Sat 06 Dec 2025 23:01:01 +0000 Files and hashes: 1: 7Uvp6r5GtLtDblaOxc-Xb4Tnilc.roa (hash: pSYNsxlb943anM3s10VieWyFa7UKpRe9Vz625JGzG6g=) 2: HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl (hash: 8v2IA2J9CCyzdpnniOOF6JoJgDBCWear2jiaI3ahsH4=) 3: LQ0nUG087BHLM9q435rBPVa8bMI.roa (hash: UFpnOF74KErqQ2amul9MeV32Xu5TKxE7+2JeP9LumgQ=) 4: eg7fhNdpROAUHy6qw77Qs2byi9Y.roa (hash: +DdhEKVICFbvbrCM7pp6/vAQohYV0VdhfUhy9Z1h54o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:53:6d:ed:18:37:d2:22:69:db:4e:4b:50:2f:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0614e195c1656a28e8b19b22784e8b55bb4533 Validity Not Before: Dec 5 23:01:01 2025 GMT Not After : Dec 6 23:01:01 2025 GMT Subject: CN=967121f040e04da53d247e6920b3be03cf1c14af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:2d:68:6c:7d:c7:c4:88:9b:d9:1b:1b:d9: fb:47:11:62:b1:fa:4e:f8:02:42:70:0f:8d:56:45: cf:a0:be:d7:6e:47:39:ad:1b:61:88:de:34:36:99: f6:c9:c7:cb:ba:06:cd:31:4c:9b:3a:6d:aa:7f:b5: 49:e8:34:b9:ca:ec:ad:39:a2:22:15:c3:c4:4b:56: 1e:44:55:89:13:cc:62:27:33:26:50:7a:af:69:7d: 19:78:c2:b2:3f:ea:73:a0:31:2c:f4:94:2d:2d:9d: 70:ce:ac:c6:f7:74:8c:af:e3:2d:8c:29:9a:fb:af: 42:4c:9f:28:9a:e9:c3:93:22:d9:2c:a1:49:07:89: 40:85:c9:9e:a5:d5:2b:9c:e4:4f:a0:b4:5e:25:43: 41:e3:15:2a:0b:20:6f:d7:dd:9c:0f:e6:d2:03:c7: 9d:3c:54:ce:9b:8f:8f:c4:bd:43:02:47:06:7a:35: a2:27:6d:2e:f3:8d:b3:7c:76:63:df:c2:31:00:a7: 08:a7:eb:76:fb:ae:54:d2:98:1b:c2:aa:17:e2:41: 33:01:be:43:d6:ec:46:1d:a3:55:d8:ab:1a:f6:d0: b3:a4:93:ba:7e:52:1f:27:16:ce:3b:5b:dd:c1:99: c2:c8:d6:44:e4:88:07:09:dd:6a:33:0f:6b:1d:1a: 8e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:71:21:F0:40:E0:4D:A5:3D:24:7E:69:20:B3:BE:03:CF:1C:14:AF X509v3 Authority Key Identifier: keyid:1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:82:30:74:60:a8:92:6e:6f:c5:3d:c7:12:c1:ad:dc:ea:e9: 81:6c:cc:dd:1a:6d:92:0b:f3:b0:1d:d8:a0:32:2b:b0:55:90: 4d:dc:a2:5a:2f:10:7c:d5:65:89:53:d9:e8:f9:d9:02:75:25: 3a:62:b1:51:6e:fe:f0:29:c1:21:c7:19:f0:b7:8d:74:a6:b5: c8:8b:9f:5f:16:7c:ea:ae:50:fd:dc:90:29:45:ef:4f:0f:1e: bb:93:05:c8:83:e4:e4:97:35:2d:70:6a:70:3a:21:93:fd:79: 9d:3e:8f:bb:db:af:18:7a:82:59:f8:de:1f:b3:84:cd:34:6b: 48:8b:a5:3a:d0:fc:e8:3c:8c:f5:ae:6c:06:d2:98:de:c2:0c: 30:be:18:e7:d5:b4:b9:20:64:91:29:8b:92:f5:b7:5e:3d:e8: c1:dd:fe:49:b3:d9:7e:48:2c:4b:be:bb:95:06:6d:45:b4:85: 3e:98:f5:ac:f5:c4:7b:81:4f:a3:0c:34:50:95:9a:26:84:61: 3f:2a:37:25:29:98:da:4a:1d:c4:dc:1d:89:6e:d1:cd:cf:bf: 21:87:cd:20:31:2c:3c:15:81:98:81:dd:6f:01:ad:c0:20:c1: 47:f3:46:ed:bd:6d:fa:df:d1:13:54:f9:a2:71:af:4e:68:a6: cb:05:b1:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv1Nt7Rg30iJp205LUC+VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMDYxNGUxOTVjMTY1NmEyOGU4YjE5YjIyNzg0ZThiNTVi YjQ1MzMwHhcNMjUxMjA1MjMwMTAxWhcNMjUxMjA2MjMwMTAxWjAzMTEwLwYDVQQD Eyg5NjcxMjFmMDQwZTA0ZGE1M2QyNDdlNjkyMGIzYmUwM2NmMWMxNGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlQtaGx9x8SIm9kbG9n7RxFisfpO +AJCcA+NVkXPoL7Xbkc5rRthiN40Npn2ycfLugbNMUybOm2qf7VJ6DS5yuytOaIi FcPES1YeRFWJE8xiJzMmUHqvaX0ZeMKyP+pzoDEs9JQtLZ1wzqzG93SMr+MtjCma +69CTJ8omunDkyLZLKFJB4lAhcmepdUrnORPoLReJUNB4xUqCyBv192cD+bSA8ed PFTOm4+PxL1DAkcGejWiJ20u842zfHZj38IxAKcIp+t2+65U0pgbwqoX4kEzAb5D 1uxGHaNV2Ksa9tCzpJO6flIfJxbOO1vdwZnCyNZE5IgHCd1qMw9rHRqOZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZxIfBA4E2lPSR+aSCzvgPPHBSvMB8GA1UdIwQY MBaAFB8GFOGVwWVqKOixmyJ4TotVu0UzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHdZVTRaWEJaV29vNkxHYkluaE9pMVc3UlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xMGViY2MtYzgzMi00ZDMzLTg4YjUt YmVmODcyZGFlY2U3LzEvSHdZVTRaWEJaV29vNkxHYkluaE9pMVc3UlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xMGViY2MtYzgzMi00ZDMzLTg4YjUtYmVmODcyZGFlY2U3 LzEvSHdZVTRaWEJaV29vNkxHYkluaE9pMVc3UlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4IwdGCo km5vxT3HEsGt3OrpgWzM3RptkgvzsB3YoDIrsFWQTdyiWi8QfNVliVPZ6PnZAnUl OmKxUW7+8CnBIccZ8LeNdKa1yIufXxZ86q5Q/dyQKUXvTw8eu5MFyIPk5Jc1LXBq cDohk/15nT6Pu9uvGHqCWfjeH7OEzTRrSIulOtD86DyM9a5sBtKY3sIMML4Y59W0 uSBkkSmLkvW3Xj3owd3+SbPZfkgsS767lQZtRbSFPpj1rPXEe4FPoww0UJWaJoRh Pyo3JSmY2kodxNwdiW7Rzc+/IYfNIDEsPBWBmIHdbwGtwCDBR/NG7b1t+t/RE1T5 onGvTmimywWxsw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:19:50 2025 by rpki-client