This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft File: hWL0qJNlk83sba1-Ls8beb9lwFo.mft (raw, json) Hash identifier: TbAef23UFCTH6LNjNTZzoBBWImUM64/iF1GO2k+aA1s= Subject key identifier: 4D:F6:88:79:72:09:99:73:1E:A3:96:7B:CE:EE:D4:2F:D7:CB:29:EB Authority key identifier: 85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A Certificate issuer: /CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a Certificate serial: 019AF653A00850F6080D6A3A5D4C241BD227 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft Manifest number: 1646 Signing time: Sun 07 Dec 2025 01:01:06 +0000 Manifest this update: Sun 07 Dec 2025 01:01:06 +0000 Manifest next update: Mon 08 Dec 2025 01:01:06 +0000 Files and hashes: 1: AuqfHgJMLbox-SCvoHiOWVRxGtM.roa (hash: xeAvQlAlfgpUCdvO+zQfkKF/6NqDyXiaKSOgk2lfPWU=) 2: hWL0qJNlk83sba1-Ls8beb9lwFo.crl (hash: Dliha0CISlLd+Lw5Ja9HL6N2i+tHdIB/cnBb2dNxgEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:a0:08:50:f6:08:0d:6a:3a:5d:4c:24:1b:d2:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a Validity Not Before: Dec 7 01:01:06 2025 GMT Not After : Dec 8 01:01:06 2025 GMT Subject: CN=4df68879720999731ea3967bceeed42fd7cb29eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fd:eb:99:e0:7f:0d:4f:3e:8a:17:80:76:ae: aa:65:bf:1c:06:19:0d:f4:44:a6:2a:4d:f2:af:85: 95:5c:f8:9a:eb:11:ec:91:43:fb:70:23:76:01:69: 2f:17:7e:f5:5c:0d:75:84:cc:28:7d:99:23:2f:26: 4d:0a:68:43:80:74:ed:5a:19:75:9d:7f:92:d3:95: ff:ef:89:82:22:18:a2:2a:0a:9a:88:d0:7d:9c:7c: 2e:f0:32:9b:69:96:f9:03:63:60:7d:a5:ee:70:7f: cf:b1:84:2c:05:d0:3a:af:04:7a:3f:08:b1:00:4d: 54:da:af:d7:c4:94:cd:be:9f:4e:f3:77:27:34:bf: f5:bd:36:26:56:96:63:01:bf:88:02:24:e6:67:20: a3:97:09:3e:a0:8b:9d:a6:dc:77:e6:c9:21:8d:9a: d8:eb:1f:1e:fd:fc:11:0c:12:f0:2d:95:7a:22:76: 76:d0:59:e3:4b:ef:a5:33:d3:61:3b:a7:a6:37:8a: aa:09:b2:0d:21:db:23:a3:69:7b:da:30:bf:19:9f: d8:a8:9f:07:b1:c9:09:21:7b:ac:e0:6f:64:49:32: 94:c9:c3:45:07:2b:93:28:3d:38:cd:05:16:85:5d: df:e4:1b:06:3c:32:9d:3c:da:67:9c:63:b7:70:a5: 72:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F6:88:79:72:09:99:73:1E:A3:96:7B:CE:EE:D4:2F:D7:CB:29:EB X509v3 Authority Key Identifier: keyid:85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a2:a3:dc:ea:d4:3a:a4:ba:14:4d:2a:a3:d6:33:ce:ce:0c: 2c:fb:3c:49:a7:0e:5d:bf:60:ed:aa:81:87:a3:57:7a:9b:9b: e6:77:c0:e5:51:6c:63:8f:d4:3c:ad:ca:34:a1:f9:ff:3d:13: fc:77:b7:38:5f:35:d6:43:81:44:2e:cc:11:6e:6e:94:53:7f: 87:b5:56:92:93:d1:5d:f7:da:bb:0d:9f:87:2a:4a:e6:06:7c: d9:e1:a8:d6:1a:4b:7e:a0:33:1f:81:49:5a:ea:56:e4:ec:fa: f7:2d:01:7e:55:74:4e:4b:6d:ed:e1:7f:27:08:dc:a5:5d:de: db:e5:ec:9b:af:f6:3f:05:ed:6e:ee:0e:52:8f:9f:9c:65:44: d6:63:ac:f9:91:17:70:66:29:95:29:03:1f:e2:f4:f2:f6:18: 8c:58:7b:a2:b2:55:90:aa:41:92:f8:24:d7:c2:4b:46:92:50: 78:01:f6:73:32:6a:43:ab:17:4e:6c:bf:65:1c:ec:bd:eb:dd: b9:7c:b4:46:b5:79:d8:87:6c:5a:80:a3:eb:1e:67:68:b0:38: 0a:15:04:ba:60:9d:b2:d2:19:7c:e6:3d:6a:74:d4:43:98:5b: de:7c:31:f7:68:08:66:4a:36:b5:13:58:20:8f:b3:88:7c:c6: 09:e9:1a:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U6AIUPYIDWo6XUwkG9InMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NjJmNGE4OTM2NTkzY2RlYzZkYWQ3ZTJlY2YxYjc5YmY2 NWMwNWEwHhcNMjUxMjA3MDEwMTA2WhcNMjUxMjA4MDEwMTA2WjAzMTEwLwYDVQQD Eyg0ZGY2ODg3OTcyMDk5OTczMWVhMzk2N2JjZWVlZDQyZmQ3Y2IyOWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnf3rmeB/DU8+iheAdq6qZb8cBhkN 9ESmKk3yr4WVXPia6xHskUP7cCN2AWkvF371XA11hMwofZkjLyZNCmhDgHTtWhl1 nX+S05X/74mCIhiiKgqaiNB9nHwu8DKbaZb5A2NgfaXucH/PsYQsBdA6rwR6Pwix AE1U2q/XxJTNvp9O83cnNL/1vTYmVpZjAb+IAiTmZyCjlwk+oIudptx35skhjZrY 6x8e/fwRDBLwLZV6InZ20FnjS++lM9NhO6emN4qqCbINIdsjo2l72jC/GZ/YqJ8H sckJIXus4G9kSTKUycNFByuTKD04zQUWhV3f5BsGPDKdPNpnnGO3cKVywQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE32iHlyCZlzHqOWe87u1C/XyynrMB8GA1UdIwQY MBaAFIVi9KiTZZPN7G2tfi7PG3m/ZcBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wMWU3MGItOTQ1Yy00ODE3LTgxODkt N2UxNzk0NjYyOThjLzEvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wMWU3MGItOTQ1Yy00ODE3LTgxODktN2UxNzk0NjYyOThj LzEvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAaKj3OrU OqS6FE0qo9Yzzs4MLPs8SacOXb9g7aqBh6NXepub5nfA5VFsY4/UPK3KNKH5/z0T /He3OF811kOBRC7MEW5ulFN/h7VWkpPRXffauw2fhypK5gZ82eGo1hpLfqAzH4FJ WupW5Oz69y0BflV0Tktt7eF/JwjcpV3e2+Xsm6/2PwXtbu4OUo+fnGVE1mOs+ZEX cGYplSkDH+L08vYYjFh7orJVkKpBkvgk18JLRpJQeAH2czJqQ6sXTmy/ZRzsvevd uXy0RrV52IdsWoCj6x5naLA4ChUEumCdstIZfOY9anTUQ5hb3nwx92gIZko2tRNY II+ziHzGCeka5A== -----END CERTIFICATE-----Generated at Sun Dec 7 08:13:00 2025 by rpki-client