This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft File: hwNNK1ky3RSR3n__McfYOvcyBuI.mft (raw, json) Hash identifier: aQ+QHwUhpVGEKjLS6xhcAet3zznaYnAtvsFZ6of/N4s= Subject key identifier: E8:AC:AB:95:A6:2D:54:52:E6:BA:21:48:69:24:7F:C9:6C:E6:7A:0E Authority key identifier: 87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2 Certificate issuer: /CN=87034d2b5932dd1491de7fff31c7d83af73206e2 Certificate serial: 019AF31BA88C1C92FE93CA5A512096A7EEE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft Manifest number: 7C Signing time: Sat 06 Dec 2025 10:01:07 +0000 Manifest this update: Sat 06 Dec 2025 10:01:07 +0000 Manifest next update: Sun 07 Dec 2025 10:01:07 +0000 Files and hashes: 1: 8hT_E2lP_XAAVJsTroBoa69lbkY.roa (hash: wsftIcKlCqe+R912iWtJnREYgPP40XIaQmbFqEEoMJE=) 2: hwNNK1ky3RSR3n__McfYOvcyBuI.crl (hash: vQersBtBOnD1EKq44w87Nb14c0SeXiuYXB4fjO+4nMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:a8:8c:1c:92:fe:93:ca:5a:51:20:96:a7:ee:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87034d2b5932dd1491de7fff31c7d83af73206e2 Validity Not Before: Dec 6 10:01:07 2025 GMT Not After : Dec 7 10:01:07 2025 GMT Subject: CN=e8acab95a62d5452e6ba214869247fc96ce67a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:63:df:5f:68:b2:43:29:b3:bf:af:b8:fa:e9: 7f:17:cf:ae:cd:ff:10:f1:dd:d6:f2:47:7a:17:56: ab:c9:4d:bb:8b:7a:22:27:15:99:ec:7d:3b:0f:c7: b5:79:36:4b:81:a1:e3:0f:61:74:8e:48:1c:84:d4: f4:5c:51:3c:da:f1:95:e7:be:fa:3e:04:99:d5:cf: b5:d6:c7:2c:4b:98:2e:39:c2:57:a3:c7:be:87:eb: 5a:62:72:72:78:8f:1e:89:7e:36:00:b9:fe:a6:4d: 86:fc:7d:6c:ce:41:69:b0:00:6b:67:22:82:27:bd: 67:76:be:a5:a7:ba:50:a5:f0:d4:3e:1a:4a:d5:09: b6:05:b8:bf:f5:17:cd:72:32:39:32:7c:fc:19:02: 09:b1:ac:3b:a2:a0:15:31:3e:d3:3b:05:ef:af:ca: 4f:1b:cd:88:ba:6f:7f:ef:1b:2f:73:9b:d0:7a:64: 9d:fe:12:80:2f:7d:0a:9b:29:fb:6f:34:95:f1:bb: 8b:93:d2:09:82:2f:85:56:43:06:ad:fc:31:15:1b: 30:1c:56:c4:a8:ca:75:1e:79:3e:52:9b:da:c5:8d: 69:7f:1a:fa:9d:a7:9a:1d:ef:57:09:3b:a0:ba:2e: 21:4f:a0:a6:29:df:91:e6:da:2d:37:e9:f1:c4:9f: cf:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AC:AB:95:A6:2D:54:52:E6:BA:21:48:69:24:7F:C9:6C:E6:7A:0E X509v3 Authority Key Identifier: keyid:87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:84:f3:47:e4:47:21:93:c1:17:fe:1e:48:6e:3c:dc:01:46: 78:91:59:3c:00:22:d7:fe:2e:3e:be:13:61:0f:ec:2f:7f:e7: 33:0d:6c:96:39:10:ef:cf:f5:09:a6:17:0b:55:17:a9:a7:b6: cb:4b:e8:bc:a5:c8:e0:c7:45:28:39:b9:fc:8f:a3:62:a0:0e: a2:7a:23:43:92:dd:21:65:13:40:21:24:b7:91:39:b2:61:d4: 88:9c:20:3b:3f:54:45:f2:0d:90:4a:62:cb:1a:37:f8:3a:f1: c1:15:aa:50:f1:8b:a9:9f:ac:6d:49:8d:d3:3b:53:31:96:10: cb:c5:65:12:d4:8e:e9:a6:9e:9c:9d:cf:ae:8e:31:dc:b9:7a: 1d:55:16:59:6e:63:97:d5:cd:4e:ba:26:d4:7a:ff:a2:bb:67: c3:13:02:ec:6e:f8:f5:85:cd:6c:cc:44:ce:08:6b:ac:93:cd: 0c:93:a9:2e:a2:5b:59:d2:bc:a7:49:af:4b:32:c6:0c:05:61: 0a:b5:b9:9d:84:7f:f0:e2:aa:79:6b:82:6d:5d:2d:1f:a9:8a: b7:51:f7:16:f8:b0:bf:5c:50:43:d9:02:f5:aa:f0:88:9c:05: f7:b3:8e:1c:d5:6a:76:26:4e:26:a8:15:a4:2e:60:3e:14:6f: 2e:c5:69:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG6iMHJL+k8paUSCWp+7nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MDM0ZDJiNTkzMmRkMTQ5MWRlN2ZmZjMxYzdkODNhZjcz MjA2ZTIwHhcNMjUxMjA2MTAwMTA3WhcNMjUxMjA3MTAwMTA3WjAzMTEwLwYDVQQD EyhlOGFjYWI5NWE2MmQ1NDUyZTZiYTIxNDg2OTI0N2ZjOTZjZTY3YTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWPfX2iyQymzv6+4+ul/F8+uzf8Q 8d3W8kd6F1aryU27i3oiJxWZ7H07D8e1eTZLgaHjD2F0jkgchNT0XFE82vGV5776 PgSZ1c+11scsS5guOcJXo8e+h+taYnJyeI8eiX42ALn+pk2G/H1szkFpsABrZyKC J71ndr6lp7pQpfDUPhpK1Qm2Bbi/9RfNcjI5Mnz8GQIJsaw7oqAVMT7TOwXvr8pP G82Ium9/7xsvc5vQemSd/hKAL30Kmyn7bzSV8buLk9IJgi+FVkMGrfwxFRswHFbE qMp1Hnk+UpvaxY1pfxr6naeaHe9XCTugui4hT6CmKd+R5totN+nxxJ/PgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOisq5WmLVRS5rohSGkkf8ls5noOMB8GA1UdIwQY MBaAFIcDTStZMt0Ukd5//zHH2Dr3MgbiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHdOTksxa3kzUlNSM25fX01jZllPdmN5QnVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83MGNjNTQtYTc0OC00NWVkLTk5YWMt MzlmZjI2MTUyYWE0LzEvaHdOTksxa3kzUlNSM25fX01jZllPdmN5QnVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS83MGNjNTQtYTc0OC00NWVkLTk5YWMtMzlmZjI2MTUyYWE0 LzEvaHdOTksxa3kzUlNSM25fX01jZllPdmN5QnVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoTzR+RH IZPBF/4eSG483AFGeJFZPAAi1/4uPr4TYQ/sL3/nMw1sljkQ78/1CaYXC1UXqae2 y0vovKXI4MdFKDm5/I+jYqAOonojQ5LdIWUTQCEkt5E5smHUiJwgOz9URfINkEpi yxo3+DrxwRWqUPGLqZ+sbUmN0ztTMZYQy8VlEtSO6aaenJ3Pro4x3Ll6HVUWWW5j l9XNTrom1Hr/ortnwxMC7G749YXNbMxEzghrrJPNDJOpLqJbWdK8p0mvSzLGDAVh CrW5nYR/8OKqeWuCbV0tH6mKt1H3Fviwv1xQQ9kC9arwiJwF97OOHNVqdiZOJqgV pC5gPhRvLsVpfQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:18:14 2025 by rpki-client