This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft File: hWSCS22vvTPxCjaW4ArLlIwRKjg.mft (raw, json) Hash identifier: B2fZi9OjZFqbR5qMWAmPUypFlo8zmWXrAHBAa1ha2co= Subject key identifier: 33:0F:7A:D8:F1:89:EA:00:DC:19:2F:E3:23:CD:2D:D8:A3:1D:14:18 Authority key identifier: 85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38 Certificate issuer: /CN=8564824b6dafbd33f10a3696e00acb948c112a38 Certificate serial: 019AF3F744C4925D6F27257453C5CB1873A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft Manifest number: 0596 Signing time: Sat 06 Dec 2025 14:00:59 +0000 Manifest this update: Sat 06 Dec 2025 14:00:59 +0000 Manifest next update: Sun 07 Dec 2025 14:00:59 +0000 Files and hashes: 1: hWSCS22vvTPxCjaW4ArLlIwRKjg.crl (hash: b2cgneM5eHL1Y9De0vH1grkeNWQQNNItytUGfHXr+3o=) 2: j3mlArIrCrvoTStpcqF9EPTMJII.roa (hash: zagzdTS3IOA1uItKGwOJz9trfPNv/LGCzKt9YV1P5Jw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:44:c4:92:5d:6f:27:25:74:53:c5:cb:18:73:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8564824b6dafbd33f10a3696e00acb948c112a38 Validity Not Before: Dec 6 14:00:59 2025 GMT Not After : Dec 7 14:00:59 2025 GMT Subject: CN=330f7ad8f189ea00dc192fe323cd2dd8a31d1418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e5:0c:03:97:28:61:ae:94:23:4e:0b:90:12: d9:1c:65:f5:bc:b4:7f:23:e6:8f:4f:82:89:9f:ac: 1f:06:49:2e:7e:c9:eb:75:15:f1:f2:21:46:c8:ca: 3a:47:7b:13:d9:e3:67:67:08:f8:56:15:3f:e3:e1: 3c:86:41:9d:d1:bc:15:0c:9f:a6:3c:af:a4:d7:a1: cd:16:57:29:55:6b:9a:86:cf:8c:d3:30:e0:d8:a6: 67:8c:24:da:53:17:c1:a9:b0:dc:bf:93:95:cf:5d: a0:0f:68:a6:15:9d:91:99:f2:b3:0d:53:3b:c1:db: f7:57:a9:79:2b:4e:20:c9:3d:7b:30:e5:0a:ba:6a: ab:48:9f:61:9b:64:53:75:06:87:27:20:4b:9a:2d: 12:89:85:c3:bc:60:85:a6:ce:f4:0a:e0:3d:c4:29: 68:6c:58:59:10:92:6f:c9:8b:8a:cc:a0:b5:0d:5a: d2:ac:b6:33:ec:13:17:59:1e:36:96:20:c6:66:4c: 6e:73:9b:ae:4b:7a:11:76:ee:5d:61:42:42:b5:66: 50:87:91:83:93:9f:f3:b2:e6:bf:d9:22:bc:0a:0e: 89:49:47:6e:80:0d:b4:ab:49:32:0d:3a:d5:02:bf: 2e:13:77:f4:09:49:cb:96:5c:1f:98:4e:8d:9f:55: 9e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:0F:7A:D8:F1:89:EA:00:DC:19:2F:E3:23:CD:2D:D8:A3:1D:14:18 X509v3 Authority Key Identifier: keyid:85:64:82:4B:6D:AF:BD:33:F1:0A:36:96:E0:0A:CB:94:8C:11:2A:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWSCS22vvTPxCjaW4ArLlIwRKjg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4c17b9-2d5c-4405-ac5b-c60544cf45b5/1/hWSCS22vvTPxCjaW4ArLlIwRKjg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:80:f9:e9:3c:39:b1:bf:33:2d:f3:a8:f7:cc:d3:5d:fb:ce: 55:22:60:f1:60:2d:5c:db:81:0d:c0:a0:f4:08:0e:96:42:d7: 98:c6:af:e3:bf:d7:b1:b0:16:33:f8:b3:68:e8:ca:ea:4b:ef: 20:fd:aa:fa:e9:65:b5:94:a5:da:f1:58:1d:d0:81:9a:76:13: 36:53:97:f6:c3:2c:1c:81:10:47:54:c2:2c:a3:10:83:d3:7d: 4d:b8:43:99:06:75:94:7a:14:d0:b5:dc:e8:0e:47:fc:94:9e: 16:a7:30:43:7e:d3:68:14:7d:83:24:b5:15:40:92:1c:84:85: 9e:d5:cd:74:b8:2b:7d:23:48:59:8d:2a:61:29:59:66:bb:82: 4a:86:55:1a:19:84:c0:2e:61:79:70:5f:dc:3d:11:d7:02:87: f2:a0:74:43:7d:77:f9:bb:be:a2:e5:bc:22:69:32:84:13:88: 52:b5:b2:ad:ae:3f:64:f6:0e:57:53:6f:72:0a:b9:e6:5c:97: 74:a9:c0:27:62:e5:36:f2:be:bc:d3:1f:9d:f5:7c:cf:df:5b: c9:28:de:da:cd:db:f5:f2:9d:cc:4f:94:23:f0:f8:d0:a3:23: 11:52:32:1c:1b:b9:dc:00:62:35:e9:34:d9:f7:01:2e:7d:fe: 2b:34:57:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz90TEkl1vJyV0U8XLGHOjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NjQ4MjRiNmRhZmJkMzNmMTBhMzY5NmUwMGFjYjk0OGMx MTJhMzgwHhcNMjUxMjA2MTQwMDU5WhcNMjUxMjA3MTQwMDU5WjAzMTEwLwYDVQQD EygzMzBmN2FkOGYxODllYTAwZGMxOTJmZTMyM2NkMmRkOGEzMWQxNDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+UMA5coYa6UI04LkBLZHGX1vLR/ I+aPT4KJn6wfBkkufsnrdRXx8iFGyMo6R3sT2eNnZwj4VhU/4+E8hkGd0bwVDJ+m PK+k16HNFlcpVWuahs+M0zDg2KZnjCTaUxfBqbDcv5OVz12gD2imFZ2RmfKzDVM7 wdv3V6l5K04gyT17MOUKumqrSJ9hm2RTdQaHJyBLmi0SiYXDvGCFps70CuA9xClo bFhZEJJvyYuKzKC1DVrSrLYz7BMXWR42liDGZkxuc5uuS3oRdu5dYUJCtWZQh5GD k5/zsua/2SK8Cg6JSUdugA20q0kyDTrVAr8uE3f0CUnLllwfmE6Nn1WeSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMPetjxieoA3Bkv4yPNLdijHRQYMB8GA1UdIwQY MBaAFIVkgkttr70z8Qo2luAKy5SMESo4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFdTQ1MyMnZ2VFB4Q2phVzRBckxsSXdSS2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80YzE3YjktMmQ1Yy00NDA1LWFjNWIt YzYwNTQ0Y2Y0NWI1LzEvaFdTQ1MyMnZ2VFB4Q2phVzRBckxsSXdSS2pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC80YzE3YjktMmQ1Yy00NDA1LWFjNWItYzYwNTQ0Y2Y0NWI1 LzEvaFdTQ1MyMnZ2VFB4Q2phVzRBckxsSXdSS2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzoD56Tw5 sb8zLfOo98zTXfvOVSJg8WAtXNuBDcCg9AgOlkLXmMav47/XsbAWM/izaOjK6kvv IP2q+ulltZSl2vFYHdCBmnYTNlOX9sMsHIEQR1TCLKMQg9N9TbhDmQZ1lHoU0LXc 6A5H/JSeFqcwQ37TaBR9gyS1FUCSHISFntXNdLgrfSNIWY0qYSlZZruCSoZVGhmE wC5heXBf3D0R1wKH8qB0Q313+bu+ouW8ImkyhBOIUrWyra4/ZPYOV1Nvcgq55lyX dKnAJ2LlNvK+vNMfnfV8z99bySje2s3b9fKdzE+UI/D40KMjEVIyHBu53ABiNek0 2fcBLn3+KzRXFw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:35:20 2025 by rpki-client