This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft File: HWtralBhpBFdUwQM_9xks7DXGng.mft (raw, json) Hash identifier: ClNOk5iyITtVkQMnklmYHq/Ob2vyCaPTWCi1vdjD5WY= Subject key identifier: 5F:74:9B:49:39:4A:3B:27:9D:89:A6:D0:B2:60:49:7C:64:E7:23:6A Authority key identifier: 1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78 Certificate issuer: /CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78 Certificate serial: 019AF0BF140EB98D7C4E502BF37FD45B203A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft Manifest number: 1761 Signing time: Fri 05 Dec 2025 23:00:45 +0000 Manifest this update: Fri 05 Dec 2025 23:00:45 +0000 Manifest next update: Sat 06 Dec 2025 23:00:45 +0000 Files and hashes: 1: 59rlgV96ANnvbttVckQTSpcL4gg.roa (hash: yMmqOnSAlEZI0n5Ljt8KnwxkwDwpOxx+NBJ3GGUG5bk=) 2: HWtralBhpBFdUwQM_9xks7DXGng.crl (hash: L8y2KR5yXMqE2ifLb3sG70LWqrXrbbphJ+/mDDYTJJU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:14:0e:b9:8d:7c:4e:50:2b:f3:7f:d4:5b:20:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78 Validity Not Before: Dec 5 23:00:45 2025 GMT Not After : Dec 6 23:00:45 2025 GMT Subject: CN=5f749b49394a3b279d89a6d0b260497c64e7236a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:34:99:4d:6a:57:ae:db:a2:f6:0d:a4:0d:ca: f9:5b:e4:b3:eb:5a:88:80:e8:c4:54:1b:61:3f:55: d4:3c:a4:b3:c8:b0:06:8c:a4:df:0c:16:e2:9a:af: a3:a3:09:6f:db:3c:a5:d3:f5:c5:97:a4:9e:dd:2a: a2:31:dc:40:1b:85:86:10:7a:9f:ff:d6:b3:3e:b7: af:f9:89:07:41:b7:64:0a:45:13:2c:59:10:4f:56: 3b:70:37:4c:41:ea:6a:57:d4:8e:fb:4b:ea:05:23: 74:0b:42:53:7c:1b:45:3f:75:26:e1:30:d7:77:13: 49:d7:a6:41:5f:0d:ab:60:d0:1a:0d:e0:4a:4c:fc: b4:09:7f:a9:c3:6d:ce:56:b3:7c:1b:d7:34:3f:63: 4d:f4:6d:2c:df:70:89:b6:6b:e4:7a:61:a9:62:c2: cb:86:7e:93:f8:3e:c1:5f:ce:27:80:7e:34:df:a1: f2:68:11:88:e9:ec:83:e6:20:84:70:42:89:28:d1: 4b:73:5f:3e:52:be:54:25:ec:76:ab:6a:f9:49:7e: 95:1f:a7:8e:b4:4a:b4:23:ae:13:5c:43:af:c1:25: 5c:0a:4e:2c:b6:c7:65:54:64:1c:61:6f:1e:f1:f5: cc:2f:5a:67:d0:01:cd:30:b2:07:a4:8f:f0:e1:51: ee:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:74:9B:49:39:4A:3B:27:9D:89:A6:D0:B2:60:49:7C:64:E7:23:6A X509v3 Authority Key Identifier: keyid:1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:8a:d9:bd:28:b1:a3:4a:af:09:ac:c3:bb:bb:4d:b2:8c:88: 47:2b:f2:d6:77:8d:7a:07:0f:f2:81:2c:0b:0b:6c:36:3c:30: 10:c9:46:81:94:a6:28:a5:8f:41:39:6b:2d:04:9b:81:e9:9b: 7f:8c:2e:a9:9d:ca:ef:c5:e8:91:b2:39:d2:2c:2c:42:82:6e: 1f:e8:1f:43:b7:73:ba:e6:31:92:b1:7a:52:38:53:46:0d:99: 4d:c3:29:77:f7:02:42:3f:d3:ce:b6:aa:82:33:5e:67:29:e2: 63:46:ab:c5:78:a6:0b:f6:f0:49:1a:b7:c8:28:37:27:c0:3c: 28:68:7e:10:05:25:1d:8c:52:01:8d:61:8d:b9:85:64:6e:98: 8a:0b:8d:0d:06:24:a6:ca:c2:5f:cf:95:11:dc:36:d7:e9:82: 0d:f8:f6:d6:fa:5b:0a:fe:c2:d0:88:97:c1:bd:93:f2:bc:17: 5b:44:91:27:82:ca:32:23:8b:11:4f:b9:78:dd:4f:cc:2d:a1: 91:48:bd:35:af:8d:a1:62:e4:56:3c:fe:5e:5c:91:91:1f:eb: 72:11:45:b5:c6:dc:a2:e6:39:a3:26:31:aa:62:26:a4:8c:ae: 8d:fb:ff:8c:2e:12:5d:8b:0a:bb:e5:03:55:23:20:8c:41:64: a1:90:e6:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvxQOuY18TlAr83/UWyA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNmI2YjZhNTA2MWE0MTE1ZDUzMDQwY2ZmZGM2NGIzYjBk NzFhNzgwHhcNMjUxMjA1MjMwMDQ1WhcNMjUxMjA2MjMwMDQ1WjAzMTEwLwYDVQQD Eyg1Zjc0OWI0OTM5NGEzYjI3OWQ4OWE2ZDBiMjYwNDk3YzY0ZTcyMzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTSZTWpXrtui9g2kDcr5W+Sz61qI gOjEVBthP1XUPKSzyLAGjKTfDBbimq+jowlv2zyl0/XFl6Se3SqiMdxAG4WGEHqf /9azPrev+YkHQbdkCkUTLFkQT1Y7cDdMQepqV9SO+0vqBSN0C0JTfBtFP3Um4TDX dxNJ16ZBXw2rYNAaDeBKTPy0CX+pw23OVrN8G9c0P2NN9G0s33CJtmvkemGpYsLL hn6T+D7BX84ngH4036HyaBGI6eyD5iCEcEKJKNFLc18+Ur5UJex2q2r5SX6VH6eO tEq0I64TXEOvwSVcCk4stsdlVGQcYW8e8fXML1pn0AHNMLIHpI/w4VHuNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF90m0k5SjsnnYmm0LJgSXxk5yNqMB8GA1UdIwQY MBaAFB1ra2pQYaQRXVMEDP/cZLOw1xp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFd0cmFsQmhwQkZkVXdRTV85eGtzN0RYR25nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85ZTVmNTQtYmEzZi00YjZlLTlkYTkt YmZhZmQ2MjJlODlmLzEvSFd0cmFsQmhwQkZkVXdRTV85eGtzN0RYR25nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC85ZTVmNTQtYmEzZi00YjZlLTlkYTktYmZhZmQ2MjJlODlm LzEvSFd0cmFsQmhwQkZkVXdRTV85eGtzN0RYR25nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjorZvSix o0qvCazDu7tNsoyIRyvy1neNegcP8oEsCwtsNjwwEMlGgZSmKKWPQTlrLQSbgemb f4wuqZ3K78XokbI50iwsQoJuH+gfQ7dzuuYxkrF6UjhTRg2ZTcMpd/cCQj/Tzraq gjNeZyniY0arxXimC/bwSRq3yCg3J8A8KGh+EAUlHYxSAY1hjbmFZG6YiguNDQYk psrCX8+VEdw21+mCDfj21vpbCv7C0IiXwb2T8rwXW0SRJ4LKMiOLEU+5eN1PzC2h kUi9Na+NoWLkVjz+XlyRkR/rchFFtcbcouY5oyYxqmImpIyujfv/jC4SXYsKu+UD VSMgjEFkoZDm3A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:26:55 2025 by rpki-client