This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft File: hWL0qJNlk83sba1-Ls8beb9lwFo.mft (raw, json) Hash identifier: pwW5nctnZXYKx+6I3f2FcwD4xGLUHXwgv88gLJ/j0xg= Subject key identifier: 58:57:9F:19:25:BD:EE:87:DB:6C:8C:05:20:DA:A5:9D:70:25:97:7A Authority key identifier: 85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A Certificate issuer: /CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a Certificate serial: 019B360E7053BC669188D19701E000D524CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft Manifest number: 1667 Signing time: Fri 19 Dec 2025 10:01:14 +0000 Manifest this update: Fri 19 Dec 2025 10:01:14 +0000 Manifest next update: Sat 20 Dec 2025 10:01:14 +0000 Files and hashes: 1: AuqfHgJMLbox-SCvoHiOWVRxGtM.roa (hash: xeAvQlAlfgpUCdvO+zQfkKF/6NqDyXiaKSOgk2lfPWU=) 2: hWL0qJNlk83sba1-Ls8beb9lwFo.crl (hash: XpOcRUfvTjHKyX7n38hhOre7ExPUMIVndz6PN52Swhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:0e:70:53:bc:66:91:88:d1:97:01:e0:00:d5:24:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a Validity Not Before: Dec 19 10:01:14 2025 GMT Not After : Dec 20 10:01:14 2025 GMT Subject: CN=58579f1925bdee87db6c8c0520daa59d7025977a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:18:77:a0:ec:86:b3:45:63:6c:25:77:f3:57: e8:07:6f:19:a8:a7:86:50:2f:08:c7:5d:d5:8f:87: ae:79:b2:9b:b7:4a:2b:72:ca:2d:37:29:6c:b5:ca: 09:ac:91:a5:0c:7d:75:0a:8e:a5:9c:78:7b:ed:34: b4:06:9c:52:0e:d1:56:3a:81:b4:6b:2d:d1:30:12: f4:38:dc:a2:a8:95:88:26:0e:af:17:82:26:ee:31: bf:43:7b:ce:66:3f:62:6a:77:30:a0:59:62:f9:08: 19:7a:29:6c:9b:16:5d:2a:00:3a:14:70:0f:f5:52: 0e:98:09:5b:0c:04:dd:5d:c7:3c:ed:ec:30:86:46: 92:45:bf:2a:63:6a:42:94:76:29:55:b5:1c:ff:96: b4:be:7d:37:ef:d7:f7:90:de:71:a1:17:30:64:1d: ee:f9:f9:98:72:43:db:61:c8:d5:5d:b5:eb:b8:5f: 0c:bc:63:92:ce:fa:3d:01:26:00:46:ec:b7:cd:29: 37:ec:f0:9c:53:03:0b:6b:70:78:4e:a7:06:7f:f6: ea:0b:a8:f6:3e:15:8b:93:cc:67:9b:87:ff:00:f8: 94:11:86:9e:15:f3:91:70:b9:6c:21:62:17:65:6a: 10:cd:f7:09:3d:96:1c:5d:25:cd:29:6f:64:e7:47: fb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:57:9F:19:25:BD:EE:87:DB:6C:8C:05:20:DA:A5:9D:70:25:97:7A X509v3 Authority Key Identifier: keyid:85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:55:04:a2:66:e1:4a:e8:77:e0:52:b7:a8:78:fa:0c:f8:be: 70:b4:ec:e7:ff:c2:93:92:d4:a9:07:94:cd:5d:73:84:97:32: f2:7d:79:f0:cf:d3:8e:22:4e:9d:09:bd:00:4e:a4:a3:f7:b7: 84:8e:66:f4:ed:21:d1:1c:c9:5e:40:61:f5:3e:7a:77:c3:f9: b6:eb:1d:7c:b5:4b:ed:f3:fc:b8:13:ac:ff:af:83:3e:8f:fb: 9e:b5:f3:c3:5c:dc:65:18:ca:c1:40:ae:06:ac:2f:3c:82:b6: dc:84:41:5c:62:54:9a:c1:dd:0f:c1:17:a1:9e:92:82:71:2c: ed:81:8b:d3:a3:f5:5a:e2:10:41:03:cf:ad:16:9a:3a:13:08: b2:d1:3b:f3:b0:73:c7:49:f2:ab:8e:4a:b2:80:86:7a:6e:73: 89:03:6f:82:e7:4f:7f:e8:00:f8:a5:cf:a1:0c:01:59:9c:06: 0e:b3:78:ce:29:85:99:fd:35:a7:d4:ea:0e:b3:1b:1f:34:47: 5b:c4:db:70:64:6f:b8:cf:98:60:06:e0:b7:68:b7:52:26:fa: 59:ff:7c:9e:04:35:b7:e4:30:7f:4c:b8:5d:9d:09:f8:a4:a5: 9b:0b:81:a6:8e:ab:40:84:e9:84:77:a0:61:26:8b:19:c0:e1: 30:d2:aa:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2DnBTvGaRiNGXAeAA1STMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NjJmNGE4OTM2NTkzY2RlYzZkYWQ3ZTJlY2YxYjc5YmY2 NWMwNWEwHhcNMjUxMjE5MTAwMTE0WhcNMjUxMjIwMTAwMTE0WjAzMTEwLwYDVQQD Eyg1ODU3OWYxOTI1YmRlZTg3ZGI2YzhjMDUyMGRhYTU5ZDcwMjU5NzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xh3oOyGs0VjbCV381foB28ZqKeG UC8Ix13Vj4euebKbt0orcsotNylstcoJrJGlDH11Co6lnHh77TS0BpxSDtFWOoG0 ay3RMBL0ONyiqJWIJg6vF4Im7jG/Q3vOZj9iancwoFli+QgZeilsmxZdKgA6FHAP 9VIOmAlbDATdXcc87ewwhkaSRb8qY2pClHYpVbUc/5a0vn0379f3kN5xoRcwZB3u +fmYckPbYcjVXbXruF8MvGOSzvo9ASYARuy3zSk37PCcUwMLa3B4TqcGf/bqC6j2 PhWLk8xnm4f/APiUEYaeFfORcLlsIWIXZWoQzfcJPZYcXSXNKW9k50f74QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhXnxklve6H22yMBSDapZ1wJZd6MB8GA1UdIwQY MBaAFIVi9KiTZZPN7G2tfi7PG3m/ZcBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wMWU3MGItOTQ1Yy00ODE3LTgxODkt N2UxNzk0NjYyOThjLzEvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wMWU3MGItOTQ1Yy00ODE3LTgxODktN2UxNzk0NjYyOThj LzEvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFUEombh Suh34FK3qHj6DPi+cLTs5//Ck5LUqQeUzV1zhJcy8n158M/TjiJOnQm9AE6ko/e3 hI5m9O0h0RzJXkBh9T56d8P5tusdfLVL7fP8uBOs/6+DPo/7nrXzw1zcZRjKwUCu BqwvPIK23IRBXGJUmsHdD8EXoZ6SgnEs7YGL06P1WuIQQQPPrRaaOhMIstE787Bz x0nyq45KsoCGem5ziQNvgudPf+gA+KXPoQwBWZwGDrN4zimFmf01p9TqDrMbHzRH W8TbcGRvuM+YYAbgt2i3Uib6Wf98ngQ1t+Qwf0y4XZ0J+KSlmwuBpo6rQITphHeg YSaLGcDhMNKqig== -----END CERTIFICATE-----Generated at Fri Dec 19 12:49:52 2025 by rpki-client