This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json) Hash identifier: /NHvnGIyFL0JYU1+iOkhAdy2Z1dd2UzcCb12+2lGJQ8= Subject key identifier: CE:8E:D6:CE:A4:85:B0:AF:AB:4C:CC:51:2D:16:7D:C4:F7:24:FC:10 Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82 Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082 Certificate serial: 019AF57790A6A7685F0082897FC856F9A8D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft Manifest number: 0442 Signing time: Sat 06 Dec 2025 21:00:44 +0000 Manifest this update: Sat 06 Dec 2025 21:00:44 +0000 Manifest next update: Sun 07 Dec 2025 21:00:44 +0000 Files and hashes: 1: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: 7Qcx/98HO6DxjWrL7PrwSFZhd6C4R8+9VSxcP50OVOk=) 2: nKTvZPJPqdCXiSwzyA9j5IjgzXg.roa (hash: IlnUSzXgTeo7Aecj19DyZcjG2TpAU9jXATfOU6kk97U=) 3: zNxBSM9LhOTwYtAP52MRH2hzZ_o.roa (hash: 51C5X4gm2WkYmwXfFe/uw6oyIL71jLkdgjDOyTD+5rc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:90:a6:a7:68:5f:00:82:89:7f:c8:56:f9:a8:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082 Validity Not Before: Dec 6 21:00:44 2025 GMT Not After : Dec 7 21:00:44 2025 GMT Subject: CN=ce8ed6cea485b0afab4ccc512d167dc4f724fc10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:96:cd:81:d0:11:c0:0b:86:67:67:6f:69:c8: d5:fe:dc:42:9f:27:4e:01:97:11:ed:20:94:b4:09: 6e:b6:37:4f:06:f5:0c:bf:df:bd:83:eb:09:36:b7: de:5e:a3:5a:fc:3e:72:85:9c:25:4f:62:c7:d0:2c: 2e:ec:cf:ad:2d:54:25:34:36:c6:f5:04:1b:50:b4: ba:35:ec:1b:e1:f0:55:ef:74:ac:b2:48:8b:cd:7f: 93:29:61:80:f3:b8:23:80:b4:ad:5d:ee:18:c7:94: 6e:ed:da:97:e5:b8:f2:32:44:de:97:8a:b3:59:af: fa:e9:a0:4c:34:9e:90:8f:3f:e3:b5:78:ec:e5:de: bb:b2:9d:ad:f2:83:56:ed:b6:26:bd:82:01:a4:79: c4:ed:f0:50:55:63:3d:de:af:48:55:77:09:35:54: 08:3a:42:1c:b2:5b:70:0d:0d:f0:0e:bb:33:93:e3: 04:f4:cd:42:c5:63:8e:54:15:b0:f2:fe:54:35:85: 35:e9:41:74:12:45:b0:e5:ea:6e:aa:e9:d0:b7:d4: 19:81:87:41:ec:c2:34:78:a0:dc:63:81:2f:8c:7f: a7:31:23:4e:a4:17:74:19:e8:d4:f2:8f:ae:92:79: b4:01:12:14:d3:76:84:58:82:1a:4d:a0:8d:07:d9: b1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8E:D6:CE:A4:85:B0:AF:AB:4C:CC:51:2D:16:7D:C4:F7:24:FC:10 X509v3 Authority Key Identifier: keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d1:44:ec:8e:b8:40:01:18:94:9d:d1:ff:fd:8e:fa:f5:32: 66:76:84:bc:0c:56:7b:fc:1b:68:5c:26:79:1c:34:3d:96:ed: ab:b3:24:78:a5:0e:9c:b9:a7:a2:90:3c:7d:2f:6e:b3:7a:c3: 68:4b:af:c3:37:bc:9f:e0:8e:5e:dd:e5:b7:4f:08:ed:31:82: d8:e9:3a:19:46:90:f8:d5:c2:b8:a9:b7:e8:f8:1d:98:5c:fd: 7c:60:50:11:ee:59:55:67:8d:62:d4:c9:e4:fb:3b:ae:0b:40: 9c:7a:52:77:e4:b5:bf:f6:2d:6e:fa:25:7e:d1:87:4a:05:1c: f8:6c:1c:c0:cd:32:5d:de:c7:0a:89:d9:7f:95:7e:91:2d:1c: 17:59:8f:ae:53:ca:06:79:19:21:5f:3b:ab:6d:76:9f:65:0e: 4f:d6:8f:59:3e:39:01:a4:91:3f:4c:b8:71:77:9b:0d:ac:57: a9:43:ab:81:79:71:3d:51:80:28:6c:92:9b:23:13:e5:db:67: c1:84:33:27:dd:da:a0:9b:3f:49:d4:a6:bb:8d:01:ea:c7:26: 73:1b:9c:fe:a1:67:2c:33:b0:20:ba:3a:52:c9:eb:40:98:b8: 16:fd:88:8e:da:ad:9f:64:78:5a:b7:47:db:75:e6:c4:f2:19: b7:cc:13:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d5Cmp2hfAIKJf8hW+ajZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGUyYTIwN2Y2OTc3MjE0YTk1N2E4ZTE0OGQxZjhiNWE1 Y2QwODIwHhcNMjUxMjA2MjEwMDQ0WhcNMjUxMjA3MjEwMDQ0WjAzMTEwLwYDVQQD EyhjZThlZDZjZWE0ODViMGFmYWI0Y2NjNTEyZDE2N2RjNGY3MjRmYzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15bNgdARwAuGZ2dvacjV/txCnydO AZcR7SCUtAlutjdPBvUMv9+9g+sJNrfeXqNa/D5yhZwlT2LH0Cwu7M+tLVQlNDbG 9QQbULS6Newb4fBV73SsskiLzX+TKWGA87gjgLStXe4Yx5Ru7dqX5bjyMkTel4qz Wa/66aBMNJ6Qjz/jtXjs5d67sp2t8oNW7bYmvYIBpHnE7fBQVWM93q9IVXcJNVQI OkIcsltwDQ3wDrszk+ME9M1CxWOOVBWw8v5UNYU16UF0EkWw5epuqunQt9QZgYdB 7MI0eKDcY4EvjH+nMSNOpBd0GejU8o+uknm0ARIU03aEWIIaTaCNB9mx0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6O1s6khbCvq0zMUS0WfcT3JPwQMB8GA1UdIwQY MBaAFIcOKiB/aXchSpV6jhSNH4taXNCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80MjExNTgtZjBjNi00NjE5LWFmYTUt OGE5NDY4N2RiYTZmLzEvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi80MjExNTgtZjBjNi00NjE5LWFmYTUtOGE5NDY4N2RiYTZm LzEvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9FE7I64 QAEYlJ3R//2O+vUyZnaEvAxWe/wbaFwmeRw0PZbtq7MkeKUOnLmnopA8fS9us3rD aEuvwze8n+COXt3lt08I7TGC2Ok6GUaQ+NXCuKm36PgdmFz9fGBQEe5ZVWeNYtTJ 5Ps7rgtAnHpSd+S1v/YtbvolftGHSgUc+GwcwM0yXd7HConZf5V+kS0cF1mPrlPK BnkZIV87q212n2UOT9aPWT45AaSRP0y4cXebDaxXqUOrgXlxPVGAKGySmyMT5dtn wYQzJ93aoJs/SdSmu40B6scmcxuc/qFnLDOwILo6UsnrQJi4Fv2Ijtqtn2R4WrdH 23XmxPIZt8wTaQ== -----END CERTIFICATE-----Generated at Sun Dec 7 07:29:27 2025 by rpki-client