This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft File: hLWkCydKlj5e0-8C6DmcubG7DHs.mft (raw, json) Hash identifier: I0+nphraT+tG2byHGDpSsShkPPKmPDECIYNLEhnKgvM= Subject key identifier: D2:37:26:C3:42:57:03:86:59:F2:E6:6B:AD:A4:AD:7E:22:03:C2:FC Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B Certificate issuer: /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b Certificate serial: 019B2F9E8B08F92E78D6574884612A6FDA7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft Manifest number: 1782 Signing time: Thu 18 Dec 2025 04:01:17 +0000 Manifest this update: Thu 18 Dec 2025 04:01:17 +0000 Manifest next update: Fri 19 Dec 2025 04:01:17 +0000 Files and hashes: 1: O8vYugo1IMFhRrolkiJ5A2F_9k4.roa (hash: vT082QVsehcKVaVyOGMEheCQhaYoT8jhfxj4aHEzNiI=) 2: hLWkCydKlj5e0-8C6DmcubG7DHs.crl (hash: pmZilG6oQhu/K5KDex+uoQ0DE0HKNPCD0l4yc77eNTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:8b:08:f9:2e:78:d6:57:48:84:61:2a:6f:da:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b Validity Not Before: Dec 18 04:01:17 2025 GMT Not After : Dec 19 04:01:17 2025 GMT Subject: CN=d23726c34257038659f2e66bada4ad7e2203c2fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ca:0d:5f:51:9f:56:b4:81:ee:f5:12:8b:ee: 88:e2:0d:5f:cc:39:56:7c:df:33:d9:4e:7e:f4:62: da:eb:fb:9a:88:b4:54:5d:5a:51:c8:80:41:48:3b: 1a:3b:3a:41:0a:63:74:1b:a0:06:ea:45:2f:18:75: 92:ac:a6:56:21:68:0c:ec:8e:87:90:93:8e:0d:77: 34:c5:ae:56:24:ca:13:34:05:4b:99:54:c5:5b:ee: 74:8a:71:f9:12:3e:4c:46:ce:47:3c:19:91:38:a6: 13:9f:0b:f5:f0:56:44:ce:c4:33:98:c2:04:37:fc: 6e:e8:bc:9d:50:bd:f8:bc:6b:ea:0f:30:b1:27:62: 85:ba:d7:ad:80:8f:6d:eb:23:43:8e:fd:0d:13:de: 58:22:12:df:aa:f5:21:94:a2:2d:06:31:b2:7c:36: 04:c9:81:38:30:a7:c5:15:67:23:c9:e0:c6:5a:86: 40:d4:77:da:15:9e:5f:61:e7:f5:3e:d8:d2:d0:6d: 30:73:f7:c9:ae:e2:43:06:17:e8:c9:b2:c7:ce:f0: 67:2f:b5:68:7f:f2:26:3c:94:8f:42:5a:91:5a:aa: e0:43:6f:13:0d:83:19:ce:5d:1b:2a:e1:de:af:80: fc:b7:df:41:3a:0f:69:5d:71:71:4e:ca:e7:b1:68: e5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:37:26:C3:42:57:03:86:59:F2:E6:6B:AD:A4:AD:7E:22:03:C2:FC X509v3 Authority Key Identifier: keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:83:4b:2c:e2:ae:ff:dc:12:25:70:25:46:53:79:01:9b:6b: 59:1e:dc:9f:0e:c6:4b:59:86:0d:15:d6:80:e9:f2:3c:84:8f: 90:0f:89:e1:d5:b5:86:f3:95:b2:b9:0d:ec:04:f3:bd:4e:7e: da:74:b0:e9:01:55:24:6c:50:37:d1:9d:79:35:2e:5e:b6:8d: c1:8c:e4:d8:68:0e:a9:5d:7d:db:02:ca:26:52:ac:00:89:f2: 0c:78:04:23:54:5e:f8:d7:00:5a:34:c5:e8:1d:34:95:d4:e4: 34:70:e7:4f:d5:81:e7:8c:db:64:5a:45:df:03:2f:46:38:7c: 8b:21:49:ae:02:02:e2:27:1e:4e:51:24:95:ab:c9:4f:bf:c2: 51:31:d0:a2:23:33:5b:38:42:c5:49:12:26:30:49:99:01:c8: ad:d4:ae:8e:4f:a6:2b:1d:a6:12:8e:72:20:cc:4b:d5:58:6f: 85:9d:c0:55:0b:21:5e:38:54:4f:c8:ae:5c:aa:0c:cd:c5:2f: b2:1f:cc:1e:f4:0e:05:30:bf:9c:5e:e2:f0:aa:76:1f:b7:7e: 0e:71:65:ca:83:fd:02:38:2f:28:8f:ad:72:e8:d3:c7:c2:fa: 21:83:53:c1:4f:a6:d9:39:9c:3e:e7:2b:53:90:e1:17:b6:36: 4f:e0:c8:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnosI+S541ldIhGEqb9p+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjVhNDBiMjc0YTk2M2U1ZWQzZWYwMmU4Mzk5Y2I5YjFi YjBjN2IwHhcNMjUxMjE4MDQwMTE3WhcNMjUxMjE5MDQwMTE3WjAzMTEwLwYDVQQD EyhkMjM3MjZjMzQyNTcwMzg2NTlmMmU2NmJhZGE0YWQ3ZTIyMDNjMmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsoNX1GfVrSB7vUSi+6I4g1fzDlW fN8z2U5+9GLa6/uaiLRUXVpRyIBBSDsaOzpBCmN0G6AG6kUvGHWSrKZWIWgM7I6H kJOODXc0xa5WJMoTNAVLmVTFW+50inH5Ej5MRs5HPBmROKYTnwv18FZEzsQzmMIE N/xu6LydUL34vGvqDzCxJ2KFutetgI9t6yNDjv0NE95YIhLfqvUhlKItBjGyfDYE yYE4MKfFFWcjyeDGWoZA1HfaFZ5fYef1PtjS0G0wc/fJruJDBhfoybLHzvBnL7Vo f/ImPJSPQlqRWqrgQ28TDYMZzl0bKuHer4D8t99BOg9pXXFxTsrnsWjldQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNI3JsNCVwOGWfLma62krX4iA8L8MB8GA1UdIwQY MBaAFIS1pAsnSpY+XtPvAug5nLmxuwx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExXa0N5ZEtsajVlMC04QzZEbWN1Ykc3REhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zZDk3NzctYzk5Ni00NmZjLTlkNjct YTcyMGFmODYxZmVlLzEvaExXa0N5ZEtsajVlMC04QzZEbWN1Ykc3REhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8zZDk3NzctYzk5Ni00NmZjLTlkNjctYTcyMGFmODYxZmVl LzEvaExXa0N5ZEtsajVlMC04QzZEbWN1Ykc3REhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgINLLOKu /9wSJXAlRlN5AZtrWR7cnw7GS1mGDRXWgOnyPISPkA+J4dW1hvOVsrkN7ATzvU5+ 2nSw6QFVJGxQN9GdeTUuXraNwYzk2GgOqV192wLKJlKsAInyDHgEI1Re+NcAWjTF 6B00ldTkNHDnT9WB54zbZFpF3wMvRjh8iyFJrgIC4iceTlEklavJT7/CUTHQoiMz WzhCxUkSJjBJmQHIrdSujk+mKx2mEo5yIMxL1VhvhZ3AVQshXjhUT8iuXKoMzcUv sh/MHvQOBTC/nF7i8Kp2H7d+DnFlyoP9AjgvKI+tcujTx8L6IYNTwU+m2TmcPucr U5DhF7Y2T+DINQ== -----END CERTIFICATE-----Generated at Thu Dec 18 07:48:45 2025 by rpki-client