This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft File: HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft (raw, json) Hash identifier: WjeevffDx2rv52PYIbGjDRLJQJTTfRvvlREmkRIvfHs= Subject key identifier: 2B:65:6C:D6:61:A8:06:A3:CA:3B:06:74:6D:0E:F0:CA:15:A4:FB:D0 Authority key identifier: 1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1 Certificate issuer: /CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1 Certificate serial: 019B4CCD606CBBCC3A5DEA8AC5DCA8E85BB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft Manifest number: 13B6 Signing time: Tue 23 Dec 2025 20:01:26 +0000 Manifest this update: Tue 23 Dec 2025 20:01:26 +0000 Manifest next update: Wed 24 Dec 2025 20:01:26 +0000 Files and hashes: 1: CSj4rvQmRyDsyaDEw0jstidXLzo.roa (hash: 3pSnEcRnf/ULKrT/Poc1HoH7UgR2xUCZ7SNrN3hfNmI=) 2: HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl (hash: 1pwEHl7AyE/7C1fRcWFJ73iNJb/lUVMEGajt/PSw7Zk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cd:60:6c:bb:cc:3a:5d:ea:8a:c5:dc:a8:e8:5b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d9c072f2db3ef1f260505bbfa0efea18c2970b1 Validity Not Before: Dec 23 20:01:26 2025 GMT Not After : Dec 24 20:01:26 2025 GMT Subject: CN=2b656cd661a806a3ca3b06746d0ef0ca15a4fbd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:fb:d2:da:50:68:20:fe:2b:0a:dd:95:5d:b8: 59:c3:1c:82:3f:ef:1d:a6:3e:67:6c:9c:5a:53:33: 22:2d:e2:0f:a7:b3:62:30:35:80:be:e0:4c:46:e2: 5e:97:52:35:be:79:1a:c3:9c:f8:29:7d:fe:4e:00: 42:77:43:8a:2b:dd:52:a6:59:d9:26:68:d4:78:a2: 40:7b:34:44:44:fe:17:06:19:dd:87:fa:ad:23:12: be:c8:27:50:55:08:8f:f2:5a:51:c1:6c:6c:a8:09: 9e:61:10:2d:f1:e9:43:1c:8d:22:8e:e7:1b:9f:2b: ce:3c:9e:78:e7:f1:96:29:5b:8c:f9:1d:d9:50:1a: 37:14:6a:45:e2:01:96:22:2a:4b:d8:94:c4:8f:1f: 67:35:af:cc:f5:aa:62:01:56:d3:2a:20:74:41:ed: 7f:bf:df:54:dd:60:0c:6f:ce:8f:a3:f6:24:da:ce: 43:95:47:de:73:c3:61:42:91:32:49:97:21:a7:48: 91:82:df:a8:d7:ef:f4:8b:e4:39:c9:0e:94:fb:d0: 29:8b:94:d2:6b:71:3b:ba:15:5f:3a:bd:7a:2e:ce: 4f:a6:4f:f1:97:95:66:ef:14:ca:bc:dd:68:e2:e9: 5c:08:6c:63:4a:fc:4e:ed:bd:0a:43:9c:73:7c:f4: 6b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:65:6C:D6:61:A8:06:A3:CA:3B:06:74:6D:0E:F0:CA:15:A4:FB:D0 X509v3 Authority Key Identifier: keyid:1D:9C:07:2F:2D:B3:EF:1F:26:05:05:BB:FA:0E:FE:A1:8C:29:70:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HZwHLy2z7x8mBQW7-g7-oYwpcLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c550e3-f024-46b8-87ec-450e24e0891d/1/HZwHLy2z7x8mBQW7-g7-oYwpcLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:15:40:ca:2a:32:75:34:4c:a5:fc:b9:0f:90:7c:e0:ce:8f: 0f:01:d7:12:55:92:9f:48:71:89:19:af:e0:44:a1:72:7f:af: db:83:15:3c:a5:e0:14:7f:ac:c5:45:25:9a:e6:19:c0:d4:4a: b7:ba:c1:78:b8:82:21:82:cd:dc:3e:f4:0b:9d:cb:b0:6e:ae: 1b:05:d8:cc:72:26:38:65:59:e7:48:70:86:2a:7e:a6:1c:8d: 65:40:21:9a:00:56:de:7e:cb:db:f6:1a:23:7f:f4:4f:66:0d: 35:c6:5e:73:65:ad:0d:9c:c0:47:4f:52:13:3d:ad:34:fa:c4: b2:8f:4b:4b:39:c9:01:c9:97:fa:c3:a5:db:7c:3a:a5:3f:18: 2d:bd:f4:86:de:08:ad:03:db:83:2d:b3:fc:4d:c0:54:0a:55: 8b:b7:ac:01:f7:45:d6:22:63:74:3e:d3:5d:cc:19:88:a4:71: 17:21:77:84:ef:b5:41:87:ff:8b:b5:8d:bc:5b:28:4b:5a:e9: 77:e3:a3:9f:2f:c5:0e:5b:83:68:d0:75:71:36:36:b8:0b:65: d1:4f:ad:86:81:3a:14:c1:56:96:67:76:63:ce:1e:21:42:a7: 76:dc:6f:c8:8f:30:60:49:02:51:0d:cd:3f:f0:79:f6:1b:fc: 73:b1:d9:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzWBsu8w6XeqKxdyo6Fu4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkOWMwNzJmMmRiM2VmMWYyNjA1MDViYmZhMGVmZWExOGMy OTcwYjEwHhcNMjUxMjIzMjAwMTI2WhcNMjUxMjI0MjAwMTI2WjAzMTEwLwYDVQQD EygyYjY1NmNkNjYxYTgwNmEzY2EzYjA2NzQ2ZDBlZjBjYTE1YTRmYmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/vS2lBoIP4rCt2VXbhZwxyCP+8d pj5nbJxaUzMiLeIPp7NiMDWAvuBMRuJel1I1vnkaw5z4KX3+TgBCd0OKK91SplnZ JmjUeKJAezRERP4XBhndh/qtIxK+yCdQVQiP8lpRwWxsqAmeYRAt8elDHI0ijucb nyvOPJ545/GWKVuM+R3ZUBo3FGpF4gGWIipL2JTEjx9nNa/M9apiAVbTKiB0Qe1/ v99U3WAMb86Po/Yk2s5DlUfec8NhQpEySZchp0iRgt+o1+/0i+Q5yQ6U+9Api5TS a3E7uhVfOr16Ls5Ppk/xl5Vm7xTKvN1o4ulcCGxjSvxO7b0KQ5xzfPRrJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtlbNZhqAajyjsGdG0O8MoVpPvQMB8GA1UdIwQY MBaAFB2cBy8ts+8fJgUFu/oO/qGMKXCxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFp3SEx5Mno3eDhtQlFXNy1nNy1vWXdwY0xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jNTUwZTMtZjAyNC00NmI4LTg3ZWMt NDUwZTI0ZTA4OTFkLzEvSFp3SEx5Mno3eDhtQlFXNy1nNy1vWXdwY0xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jNTUwZTMtZjAyNC00NmI4LTg3ZWMtNDUwZTI0ZTA4OTFk LzEvSFp3SEx5Mno3eDhtQlFXNy1nNy1vWXdwY0xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshVAyioy dTRMpfy5D5B84M6PDwHXElWSn0hxiRmv4EShcn+v24MVPKXgFH+sxUUlmuYZwNRK t7rBeLiCIYLN3D70C53LsG6uGwXYzHImOGVZ50hwhip+phyNZUAhmgBW3n7L2/Ya I3/0T2YNNcZec2WtDZzAR09SEz2tNPrEso9LSznJAcmX+sOl23w6pT8YLb30ht4I rQPbgy2z/E3AVApVi7esAfdF1iJjdD7TXcwZiKRxFyF3hO+1QYf/i7WNvFsoS1rp d+Ojny/FDluDaNB1cTY2uAtl0U+thoE6FMFWlmd2Y84eIUKndtxvyI8wYEkCUQ3N P/B59hv8c7HZLw== -----END CERTIFICATE-----Generated at Wed Dec 24 03:34:47 2025 by rpki-client