This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft File: HWHLS77lzdfs7adWCqJJxtEfI6k.mft (raw, json) Hash identifier: ao1xd/MjHiMNZo9+rhp9GSA3qdO2AOxEcRMhqOEVeh8= Subject key identifier: 13:75:BA:C1:68:F8:D0:F2:AF:D7:3A:01:72:6C:D5:EA:EA:D9:21:D9 Authority key identifier: 1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9 Certificate issuer: /CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9 Certificate serial: 019B51BCB260EE181D8B290622FAF0F5A572 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft Manifest number: 0EBA Signing time: Wed 24 Dec 2025 19:01:19 +0000 Manifest this update: Wed 24 Dec 2025 19:01:19 +0000 Manifest next update: Thu 25 Dec 2025 19:01:19 +0000 Files and hashes: 1: HWHLS77lzdfs7adWCqJJxtEfI6k.crl (hash: fEDBZAHagTjTritQ4oJjN5tpMsK3wtlj/c16UpNjWqE=) 2: RPmjQPRT6ThSraH9_mRiL0MDtOs.roa (hash: whApUZJ7ydquVhB+yjQTmZxwrY2+CBwkk7L36wahsAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 14:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:51:bc:b2:60:ee:18:1d:8b:29:06:22:fa:f0:f5:a5:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d61cb4bbee5cdd7eceda7560aa249c6d11f23a9 Validity Not Before: Dec 24 19:01:19 2025 GMT Not After : Dec 25 19:01:19 2025 GMT Subject: CN=1375bac168f8d0f2afd73a01726cd5eaead921d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:36:86:d9:1a:b3:0e:f6:d7:e7:95:b3:48:48: 69:38:c5:14:aa:33:1b:33:a2:f0:1f:35:64:74:56: a7:52:6f:7b:74:f4:a9:98:51:6d:e5:6c:1d:f7:fe: 9d:ab:e1:d2:87:6f:30:84:61:29:c3:42:2f:e1:75: 63:c7:4d:b1:b7:86:74:86:3d:e8:b1:8a:56:93:89: 53:82:c4:94:c1:53:d6:d6:30:45:3b:d0:1d:46:a7: f2:73:f4:b5:f2:52:d5:91:df:25:a7:bc:61:68:07: 37:bc:d7:a9:e1:05:8d:13:7c:2d:99:ea:34:d8:5a: 40:ac:0b:9e:ef:eb:f3:c4:61:4c:ac:7a:7f:2c:6c: f8:c3:a5:05:ad:ec:14:f2:18:47:ad:d2:19:d8:46: 32:61:98:7b:7b:cb:7f:6d:c1:39:47:fb:4b:3e:c4: 8c:cf:b0:04:1a:61:88:d1:6c:aa:ac:5e:d5:75:6f: b6:05:53:b9:59:dd:48:9c:7f:31:01:b4:67:67:82: c5:9a:55:c7:34:12:05:62:b0:7d:90:27:61:d6:62: fe:e5:ea:e8:ea:89:eb:f3:b9:63:c5:53:bc:50:76: f3:a7:a2:7a:95:6e:c9:66:c9:b9:0f:a4:f4:35:fe: 11:2e:60:10:26:10:18:68:d7:18:d2:d3:e0:eb:19: 29:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:75:BA:C1:68:F8:D0:F2:AF:D7:3A:01:72:6C:D5:EA:EA:D9:21:D9 X509v3 Authority Key Identifier: keyid:1D:61:CB:4B:BE:E5:CD:D7:EC:ED:A7:56:0A:A2:49:C6:D1:1F:23:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWHLS77lzdfs7adWCqJJxtEfI6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/b2f5f9-d34a-47a3-bb54-0871fdb6a4fa/1/HWHLS77lzdfs7adWCqJJxtEfI6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:69:9a:02:0b:cd:e0:5a:0b:d0:84:09:67:f6:65:66:6a:19: ee:02:61:6b:59:22:c7:c8:b2:e4:ac:05:38:06:24:74:62:fb: db:da:3e:b6:07:db:fb:fa:aa:67:86:29:36:8e:98:30:6a:15: 37:84:d9:37:22:93:b4:7a:59:78:87:75:8d:0f:ae:e2:f7:61: 02:57:42:88:85:c2:25:22:44:81:27:bb:86:d1:55:c7:88:19: 8a:2b:a6:a9:11:98:dc:b0:e9:06:41:42:22:d6:0a:58:00:3f: b8:6b:9e:df:44:57:f3:1e:d2:58:fb:b0:33:77:ef:73:2d:02: f8:b6:8a:e0:64:93:57:03:e3:c0:08:b5:e9:64:3a:d3:0c:74: 9c:af:dd:b6:8c:60:a8:56:5a:9c:aa:10:ac:6d:f3:07:49:9b: 6a:bf:f1:72:3d:4f:37:97:f6:3d:28:4b:e2:f6:fc:53:02:30: 11:3b:fb:93:6e:2a:fc:ce:08:cb:ad:e3:95:a0:14:12:a8:ec: 97:c2:0e:60:0b:bc:ef:1d:82:63:c9:cb:48:9b:ee:c1:f6:cc: d8:c2:09:d2:a0:59:ee:ca:87:34:9c:68:74:ca:b9:01:b4:7a: 33:0b:bb:76:36:9c:18:c5:4d:1b:1c:05:d4:28:fb:c7:27:c9: eb:df:58:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtRvLJg7hgdiykGIvrw9aVyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNjFjYjRiYmVlNWNkZDdlY2VkYTc1NjBhYTI0OWM2ZDEx ZjIzYTkwHhcNMjUxMjI0MTkwMTE5WhcNMjUxMjI1MTkwMTE5WjAzMTEwLwYDVQQD EygxMzc1YmFjMTY4ZjhkMGYyYWZkNzNhMDE3MjZjZDVlYWVhZDkyMWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjaG2RqzDvbX55WzSEhpOMUUqjMb M6LwHzVkdFanUm97dPSpmFFt5Wwd9/6dq+HSh28whGEpw0Iv4XVjx02xt4Z0hj3o sYpWk4lTgsSUwVPW1jBFO9AdRqfyc/S18lLVkd8lp7xhaAc3vNep4QWNE3wtmeo0 2FpArAue7+vzxGFMrHp/LGz4w6UFrewU8hhHrdIZ2EYyYZh7e8t/bcE5R/tLPsSM z7AEGmGI0WyqrF7VdW+2BVO5Wd1InH8xAbRnZ4LFmlXHNBIFYrB9kCdh1mL+5ero 6onr87ljxVO8UHbzp6J6lW7JZsm5D6T0Nf4RLmAQJhAYaNcY0tPg6xkpIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBN1usFo+NDyr9c6AXJs1erq2SHZMB8GA1UdIwQY MBaAFB1hy0u+5c3X7O2nVgqiScbRHyOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFdITFM3N2x6ZGZzN2FkV0NxSkp4dEVmSTZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9iMmY1ZjktZDM0YS00N2EzLWJiNTQt MDg3MWZkYjZhNGZhLzEvSFdITFM3N2x6ZGZzN2FkV0NxSkp4dEVmSTZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9iMmY1ZjktZDM0YS00N2EzLWJiNTQtMDg3MWZkYjZhNGZh LzEvSFdITFM3N2x6ZGZzN2FkV0NxSkp4dEVmSTZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb2maAgvN 4FoL0IQJZ/ZlZmoZ7gJha1kix8iy5KwFOAYkdGL729o+tgfb+/qqZ4YpNo6YMGoV N4TZNyKTtHpZeId1jQ+u4vdhAldCiIXCJSJEgSe7htFVx4gZiiumqRGY3LDpBkFC ItYKWAA/uGue30RX8x7SWPuwM3fvcy0C+LaK4GSTVwPjwAi16WQ60wx0nK/dtoxg qFZanKoQrG3zB0mbar/xcj1PN5f2PShL4vb8UwIwETv7k24q/M4Iy63jlaAUEqjs l8IOYAu87x2CY8nLSJvuwfbM2MIJ0qBZ7sqHNJxodMq5AbR6Mwu7djacGMVNGxwF 1Cj7xyfJ699YWA== -----END CERTIFICATE-----Generated at Wed Dec 24 19:59:29 2025 by rpki-client