This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft File: hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json) Hash identifier: ns8rLCYcldE9fti/zM99b7yj3TZdn/fxrCUKcS+uucQ= Subject key identifier: 1B:71:55:0B:06:2F:75:1B:C2:E5:79:57:1A:77:6A:06:94:7A:1F:93 Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71 Certificate issuer: /CN=8569f2100c2fc454ad07adec796b9e6f6366f071 Certificate serial: 019AF2ADCAF3FCA259294F3521EFF5DAFCCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft Manifest number: 170D Signing time: Sat 06 Dec 2025 08:01:07 +0000 Manifest this update: Sat 06 Dec 2025 08:01:07 +0000 Manifest next update: Sun 07 Dec 2025 08:01:07 +0000 Files and hashes: 1: DGpzhm41nM7fLedk99hFCmz8Km8.roa (hash: IqO6EDf3hUOlulBxBKdVUYUqdL/BY4mZlELQZfdSRIE=) 2: E5_9p_TGg2FNMpZSH1jH4wJ3rfA.roa (hash: GcTlxtoi4GEP2bLooVydD/oQvGI42+1RU87/9gjgDvc=) 3: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: hKQcSydlo8a8jOIbPTyDXrTcWTq5aWKJX3ZiX5pjG20=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:ca:f3:fc:a2:59:29:4f:35:21:ef:f5:da:fc:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071 Validity Not Before: Dec 6 08:01:07 2025 GMT Not After : Dec 7 08:01:07 2025 GMT Subject: CN=1b71550b062f751bc2e579571a776a06947a1f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:da:e0:96:60:36:d5:e9:bf:4d:5a:89:10:7e: 2c:52:8a:aa:f1:34:c3:08:3c:98:10:86:ba:8a:20: e2:6c:f8:2d:02:f7:18:e1:86:40:0b:3a:43:de:30: e4:b5:ce:c2:64:c6:39:a4:cc:9f:af:c9:5b:c3:be: a8:21:f0:86:73:7d:d6:3f:97:80:75:1f:ce:db:8d: 02:0b:dd:b0:18:4d:83:6d:be:92:17:89:f6:64:d5: 24:03:ff:78:f5:df:ad:f5:64:99:e1:1b:b4:6d:a3: f6:4f:82:92:4f:d3:9e:7a:09:bb:90:71:3c:40:61: 38:ab:4c:a0:77:de:25:9e:e0:01:0f:4c:2a:c5:46: cd:e9:f4:50:ff:e7:b2:38:cc:fc:2e:8b:27:d8:63: 55:8a:2b:a9:ae:84:36:93:18:f7:7e:39:de:db:9d: 38:03:f3:11:b6:72:64:1b:d9:74:a4:35:ea:71:66: 09:c4:cf:d0:1e:05:cf:d2:a4:0b:fe:5b:f3:2e:0b: e5:40:53:0f:fb:20:14:33:b1:f1:14:b4:3e:5d:b0: 1a:bf:74:c6:d1:8b:d4:81:87:0b:24:02:16:06:f9: 4e:b6:e4:b3:0c:2e:f3:55:76:ae:aa:46:8c:01:0d: 4e:74:06:b6:b3:d9:7c:40:0b:15:59:f1:e6:51:fd: d9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:71:55:0B:06:2F:75:1B:C2:E5:79:57:1A:77:6A:06:94:7A:1F:93 X509v3 Authority Key Identifier: keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c8:fa:ad:d9:ee:d6:cc:47:5d:bb:5f:93:21:c4:01:02:7d: 10:73:e5:8e:a1:e9:66:e0:a9:0b:f1:66:07:8a:da:cb:e5:70: 04:11:7c:a8:2b:6a:4e:d6:36:20:30:60:b0:0b:c7:94:94:aa: 54:72:84:74:b0:52:b2:6a:f5:ed:1b:5d:7f:4e:8a:69:21:ff: 48:8c:8f:9c:bd:01:f8:e0:8e:b1:b1:34:10:1e:c9:77:72:4e: e2:75:ba:19:e2:23:04:96:99:12:08:cd:e4:5a:a7:5e:55:bd: eb:80:66:9c:49:fe:50:eb:d1:b3:58:93:81:5e:20:40:6f:40: d0:82:97:85:26:c6:53:dd:78:80:93:af:af:f9:40:03:8a:df: c1:6c:26:44:89:e3:d8:39:59:d3:fe:a2:13:ad:bc:d5:7f:54: f4:70:6c:fe:9a:9d:b9:2e:ed:06:ce:88:f2:f9:8a:c5:a1:8a: 0b:c6:a4:01:6e:74:4e:03:14:3d:bf:ca:74:51:6e:48:43:07: e2:a3:8b:a5:d5:2b:17:51:0e:47:e3:03:a3:22:a4:8a:00:1d: 13:72:f6:76:89:5f:cd:8f:1a:fa:54:8a:d5:dc:1e:40:bb:fd: 6b:d5:b9:80:c7:45:a5:a5:18:2f:68:e9:cd:26:1a:f1:35:a0: 2d:9d:ef:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrcrz/KJZKU81Ie/12vzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NjlmMjEwMGMyZmM0NTRhZDA3YWRlYzc5NmI5ZTZmNjM2 NmYwNzEwHhcNMjUxMjA2MDgwMTA3WhcNMjUxMjA3MDgwMTA3WjAzMTEwLwYDVQQD EygxYjcxNTUwYjA2MmY3NTFiYzJlNTc5NTcxYTc3NmEwNjk0N2ExZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNrglmA21em/TVqJEH4sUoqq8TTD CDyYEIa6iiDibPgtAvcY4YZACzpD3jDktc7CZMY5pMyfr8lbw76oIfCGc33WP5eA dR/O240CC92wGE2Dbb6SF4n2ZNUkA/949d+t9WSZ4Ru0baP2T4KST9Oeegm7kHE8 QGE4q0ygd94lnuABD0wqxUbN6fRQ/+eyOMz8Losn2GNViiuproQ2kxj3fjne2504 A/MRtnJkG9l0pDXqcWYJxM/QHgXP0qQL/lvzLgvlQFMP+yAUM7HxFLQ+XbAav3TG 0YvUgYcLJAIWBvlOtuSzDC7zVXauqkaMAQ1OdAa2s9l8QAsVWfHmUf3Z4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtxVQsGL3UbwuV5Vxp3agaUeh+TMB8GA1UdIwQY MBaAFIVp8hAML8RUrQet7Hlrnm9jZvBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEt MjMzNmNkYjliYTlmLzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEtMjMzNmNkYjliYTlm LzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMj6rdnu 1sxHXbtfkyHEAQJ9EHPljqHpZuCpC/FmB4ray+VwBBF8qCtqTtY2IDBgsAvHlJSq VHKEdLBSsmr17Rtdf06KaSH/SIyPnL0B+OCOsbE0EB7Jd3JO4nW6GeIjBJaZEgjN 5FqnXlW964BmnEn+UOvRs1iTgV4gQG9A0IKXhSbGU914gJOvr/lAA4rfwWwmRInj 2DlZ0/6iE6281X9U9HBs/pqduS7tBs6I8vmKxaGKC8akAW50TgMUPb/KdFFuSEMH 4qOLpdUrF1EOR+MDoyKkigAdE3L2dolfzY8a+lSK1dweQLv9a9W5gMdFpaUYL2jp zSYa8TWgLZ3v9w== -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:55 2025 by rpki-client