This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft File: hwogf40P0mMwvNWfqEc1SdyS3uk.mft (raw, json) Hash identifier: guEajGiqVWP4b/Vr9ERFBrdeUrGmhIDdGZ/LPR4qSLk= Subject key identifier: 74:17:97:38:F9:1D:18:9F:2C:2C:DD:DB:5F:2E:37:12:91:B3:EC:4C Authority key identifier: 87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9 Certificate issuer: /CN=870a207f8d0fd26330bcd59fa8473549dc92dee9 Certificate serial: 019AF23F88A882B4E358512E0F3DDE262E17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft Manifest number: 0D25 Signing time: Sat 06 Dec 2025 06:00:41 +0000 Manifest this update: Sat 06 Dec 2025 06:00:41 +0000 Manifest next update: Sun 07 Dec 2025 06:00:41 +0000 Files and hashes: 1: U0r3hhSWvJREMqLZH2Hpa3q15Vc.roa (hash: ddXvERc2U8k9QtkbhiwQPmEstoMSyktp+JN206s3ypM=) 2: hwogf40P0mMwvNWfqEc1SdyS3uk.crl (hash: nK9Xkw8V9CO8jiN1NLGK6jKix3n9mR/oTDL/VXLpnxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:88:a8:82:b4:e3:58:51:2e:0f:3d:de:26:2e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870a207f8d0fd26330bcd59fa8473549dc92dee9 Validity Not Before: Dec 6 06:00:41 2025 GMT Not After : Dec 7 06:00:41 2025 GMT Subject: CN=74179738f91d189f2c2cdddb5f2e371291b3ec4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e6:60:5e:32:87:a1:33:82:2b:5f:b0:88:81: 60:78:6b:11:03:97:ac:b4:32:6e:1f:4e:58:77:e0: f9:c8:48:f1:98:16:00:b9:7b:5b:78:6e:5d:02:26: 29:3c:87:fe:a1:16:4f:5c:7e:57:16:c9:5b:de:5e: 00:6f:32:92:76:99:2d:c9:e2:c5:d4:42:44:45:8d: 9b:47:d4:55:7d:ad:61:9c:ef:19:9f:d8:d9:6a:3a: a0:82:11:43:70:4a:16:45:db:7b:1c:d6:fc:0b:e9: 2d:47:67:75:6e:d8:af:97:f0:36:db:a2:91:d1:a3: f7:fc:e9:c4:d3:fa:97:6a:83:33:a5:93:cb:71:bd: 04:d3:c4:11:e6:4d:fb:47:15:1f:da:99:d9:f4:ad: ab:4b:70:bb:55:36:46:32:86:cb:86:96:85:cb:12: e6:06:32:f2:44:ab:1a:13:03:ef:ec:8e:1c:17:36: 51:7a:39:69:bc:fe:ca:9d:18:28:b9:c1:d4:80:bc: 8d:85:0f:15:45:89:e1:9b:9f:cc:be:90:b4:a5:1e: f5:35:95:01:35:40:a5:8c:cc:ea:b5:7d:e4:66:65: 04:6a:b3:9d:42:91:91:8e:d4:3a:a6:e9:ee:20:79: f2:f0:0b:d4:56:1a:1f:0c:82:c5:52:75:dd:0d:c9: ac:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:17:97:38:F9:1D:18:9F:2C:2C:DD:DB:5F:2E:37:12:91:B3:EC:4C X509v3 Authority Key Identifier: keyid:87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:0e:db:1e:e0:c7:35:01:93:be:e8:56:93:29:2c:5a:2e:28: a1:f0:05:b1:df:84:2d:37:0b:38:9b:74:4c:41:f9:38:08:be: b1:6e:4e:6a:ef:ca:65:4e:47:8c:05:71:a5:59:9b:18:ff:6e: bd:eb:3c:ab:a7:91:ff:d4:ac:09:db:06:55:95:96:e3:99:21: ac:1c:5f:7b:8a:90:d2:66:b5:8a:a3:7f:39:5a:3b:31:a1:5e: 94:0b:cf:af:ef:ec:d7:8c:0a:da:c9:83:6e:06:03:19:32:c5: 6d:5e:99:31:61:39:88:13:6c:a3:f1:36:66:b8:8d:dc:f8:58: 66:6e:0f:5d:84:ee:cf:81:b0:4a:13:c0:4b:bf:c4:d3:27:13: 5b:6e:f8:05:fc:f9:50:da:21:68:62:1e:6f:18:ee:12:cc:35: 95:83:56:23:b6:71:6a:fd:86:84:26:6f:b4:13:a4:13:02:15: 8d:62:a6:75:bb:49:02:ad:98:a1:d7:bc:bc:1d:90:cd:2d:9c: 2c:3e:0a:3a:88:d6:5e:8b:b4:ff:74:80:6f:80:0a:de:52:9d: 92:23:3e:17:4a:92:ff:c1:a2:83:fe:04:fe:85:91:cd:2d:63: 06:4a:20:65:0d:ef:34:fe:a5:86:1c:98:23:68:fa:73:b8:93: 6c:df:7a:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP4iogrTjWFEuDz3eJi4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGEyMDdmOGQwZmQyNjMzMGJjZDU5ZmE4NDczNTQ5ZGM5 MmRlZTkwHhcNMjUxMjA2MDYwMDQxWhcNMjUxMjA3MDYwMDQxWjAzMTEwLwYDVQQD Eyg3NDE3OTczOGY5MWQxODlmMmMyY2RkZGI1ZjJlMzcxMjkxYjNlYzRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleZgXjKHoTOCK1+wiIFgeGsRA5es tDJuH05Yd+D5yEjxmBYAuXtbeG5dAiYpPIf+oRZPXH5XFslb3l4AbzKSdpktyeLF 1EJERY2bR9RVfa1hnO8Zn9jZajqgghFDcEoWRdt7HNb8C+ktR2d1btivl/A226KR 0aP3/OnE0/qXaoMzpZPLcb0E08QR5k37RxUf2pnZ9K2rS3C7VTZGMobLhpaFyxLm BjLyRKsaEwPv7I4cFzZRejlpvP7KnRgoucHUgLyNhQ8VRYnhm5/MvpC0pR71NZUB NUCljMzqtX3kZmUEarOdQpGRjtQ6punuIHny8AvUVhofDILFUnXdDcmsnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQXlzj5HRifLCzd218uNxKRs+xMMB8GA1UdIwQY MBaAFIcKIH+ND9JjMLzVn6hHNUnckt7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHdvZ2Y0MFAwbU13dk5XZnFFYzFTZHlTM3VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wYmRiNzgtN2U2My00NzBlLWEzOWQt ZjAwYTE5Mzg4ODFmLzEvaHdvZ2Y0MFAwbU13dk5XZnFFYzFTZHlTM3VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8wYmRiNzgtN2U2My00NzBlLWEzOWQtZjAwYTE5Mzg4ODFm LzEvaHdvZ2Y0MFAwbU13dk5XZnFFYzFTZHlTM3VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAA7bHuDH NQGTvuhWkyksWi4oofAFsd+ELTcLOJt0TEH5OAi+sW5Oau/KZU5HjAVxpVmbGP9u ves8q6eR/9SsCdsGVZWW45khrBxfe4qQ0ma1iqN/OVo7MaFelAvPr+/s14wK2smD bgYDGTLFbV6ZMWE5iBNso/E2ZriN3PhYZm4PXYTuz4GwShPAS7/E0ycTW274Bfz5 UNohaGIebxjuEsw1lYNWI7Zxav2GhCZvtBOkEwIVjWKmdbtJAq2Yode8vB2QzS2c LD4KOojWXou0/3SAb4AK3lKdkiM+F0qS/8Gig/4E/oWRzS1jBkogZQ3vNP6lhhyY I2j6c7iTbN96KQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:23:52 2025 by rpki-client