This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft File: HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft (raw, json) Hash identifier: 7EbwX+8FeA4kzusdmkFmee3GZU5or3hJ53sIyeqWmJo= Subject key identifier: C0:74:F1:76:C2:C8:11:C6:46:5F:37:7C:3D:A7:0D:12:B4:C5:60:83 Authority key identifier: 1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54 Certificate issuer: /CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54 Certificate serial: 019B6CFCA68D1AE98E245BA45515FF59ACC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft Manifest number: 17A6 Signing time: Tue 30 Dec 2025 02:00:55 +0000 Manifest this update: Tue 30 Dec 2025 02:00:55 +0000 Manifest next update: Wed 31 Dec 2025 02:00:55 +0000 Files and hashes: 1: HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl (hash: ARWgw7oC5cIhrPgKMukJSMWl9uV/jTv4APhmzMk6tj8=) 2: yJY2Oeq3toKxTdk7-X31riY01hg.roa (hash: 5uMPJikDIqqkTXkRRFHehwnU8XhjCZjiCcVLwMn6QX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:a6:8d:1a:e9:8e:24:5b:a4:55:15:ff:59:ac:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54 Validity Not Before: Dec 30 02:00:55 2025 GMT Not After : Dec 31 02:00:55 2025 GMT Subject: CN=c074f176c2c811c6465f377c3da70d12b4c56083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:51:1d:13:50:80:7a:15:5e:34:8e:5f:9f:0e: 68:94:19:a3:47:0f:cd:6c:cf:ca:e3:fc:b8:aa:c2: 31:ab:17:64:d8:6f:3b:a5:3c:14:43:af:fa:32:43: d9:ef:c9:eb:37:ae:7d:2e:9f:af:c0:97:fc:48:42: d3:6d:c7:21:95:18:c7:58:9a:7c:92:a7:20:fb:0b: 29:f0:b6:e4:d9:47:72:e3:9f:b0:5d:c1:c1:88:f2: 8f:44:d6:b4:63:fe:c2:67:c6:63:da:18:6e:35:63: 58:59:7f:04:c9:c9:c6:61:99:6e:b4:aa:5f:66:f7: 7a:5c:d5:a7:59:3f:16:d8:a7:fe:fc:13:4a:2e:92: f2:c3:ab:84:5f:09:46:18:bb:a6:5c:d5:ef:1f:77: 31:e0:3a:ca:46:da:52:1d:6f:b4:63:c8:0d:a0:44: 95:52:82:41:d4:fe:3c:97:42:57:1d:61:3d:de:7c: 19:68:72:a3:f6:48:ae:f7:a1:7e:0e:52:14:da:c9: 6d:36:29:bf:80:00:12:11:42:f1:cb:4d:6d:66:a9: bc:57:8c:4f:ac:d0:fd:f8:e4:81:23:1f:bc:69:b3: fc:a9:82:c0:4d:89:12:13:0b:15:a3:8a:85:6f:8a: 21:36:a7:54:0d:36:b4:29:61:d5:95:1c:e8:56:57: dd:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:74:F1:76:C2:C8:11:C6:46:5F:37:7C:3D:A7:0D:12:B4:C5:60:83 X509v3 Authority Key Identifier: keyid:1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b2:f9:97:29:e4:b2:94:23:a2:16:90:0d:51:5e:a4:4e:02: 7e:ee:af:29:25:02:0e:30:87:8c:50:ba:31:82:cf:08:01:c2: f1:6c:4b:1d:f7:cd:5a:aa:7a:3c:aa:32:ec:b2:1a:a4:4f:f4: d0:ad:73:b9:3f:32:3d:e8:63:10:a0:63:1e:5c:c2:46:6d:14: 3c:58:d0:c3:d1:88:e4:35:13:9c:52:c0:47:88:58:c5:44:54: 5d:0e:53:b9:e4:91:9b:0e:d5:36:df:a9:54:53:46:62:57:40: 2e:ab:aa:5b:d0:7d:fb:87:3a:3e:bd:50:15:16:69:00:0c:1f: b9:74:df:17:16:2f:fe:2e:5d:f9:49:9b:e1:91:2e:af:23:1d: 2b:bd:d1:05:0e:06:b0:8e:38:73:92:6c:8a:3f:ac:66:f5:32: 34:50:0a:e0:e4:3f:28:19:a1:dd:cf:b6:2c:17:eb:a8:3c:c9: f6:10:76:bc:7f:ba:51:9e:5e:21:1a:04:e4:33:6e:6f:cb:41: 07:56:4a:ce:30:eb:44:e4:f4:54:1f:9a:18:72:40:0c:3b:2d: 13:ad:13:72:ab:02:9d:4e:9c:99:07:fb:41:6e:c1:7c:36:3b: fd:c9:ed:bb:4f:eb:fa:56:29:a7:0a:1f:2e:9f:69:57:b0:79: c4:33:b5:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZts/KaNGumOJFukVRX/WazGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMWMyMzU3ZTcwYjk3ZDAzZWQ3MGMzZDY4OGNlNTA3YzY3 NThkNTQwHhcNMjUxMjMwMDIwMDU1WhcNMjUxMjMxMDIwMDU1WjAzMTEwLwYDVQQD EyhjMDc0ZjE3NmMyYzgxMWM2NDY1ZjM3N2MzZGE3MGQxMmI0YzU2MDgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFEdE1CAehVeNI5fnw5olBmjRw/N bM/K4/y4qsIxqxdk2G87pTwUQ6/6MkPZ78nrN659Lp+vwJf8SELTbcchlRjHWJp8 kqcg+wsp8Lbk2Udy45+wXcHBiPKPRNa0Y/7CZ8Zj2hhuNWNYWX8EycnGYZlutKpf Zvd6XNWnWT8W2Kf+/BNKLpLyw6uEXwlGGLumXNXvH3cx4DrKRtpSHW+0Y8gNoESV UoJB1P48l0JXHWE93nwZaHKj9kiu96F+DlIU2sltNim/gAASEULxy01tZqm8V4xP rND9+OSBIx+8abP8qYLATYkSEwsVo4qFb4ohNqdUDTa0KWHVlRzoVlfd1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMB08XbCyBHGRl83fD2nDRK0xWCDMB8GA1UdIwQY MBaAFB4cI1fnC5fQPtcMPWiM5QfGdY1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGh3alYtY0xsOUEtMXd3OWFJemxCOFoxalZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wNTQ4NjctMTRkNC00OTIyLWJmNWYt NmRkY2ZhYzk3MGY3LzEvSGh3alYtY0xsOUEtMXd3OWFJemxCOFoxalZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8wNTQ4NjctMTRkNC00OTIyLWJmNWYtNmRkY2ZhYzk3MGY3 LzEvSGh3alYtY0xsOUEtMXd3OWFJemxCOFoxalZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfLL5lynk spQjohaQDVFepE4Cfu6vKSUCDjCHjFC6MYLPCAHC8WxLHffNWqp6PKoy7LIapE/0 0K1zuT8yPehjEKBjHlzCRm0UPFjQw9GI5DUTnFLAR4hYxURUXQ5TueSRmw7VNt+p VFNGYldALquqW9B9+4c6Pr1QFRZpAAwfuXTfFxYv/i5d+Umb4ZEuryMdK73RBQ4G sI44c5Jsij+sZvUyNFAK4OQ/KBmh3c+2LBfrqDzJ9hB2vH+6UZ5eIRoE5DNub8tB B1ZKzjDrROT0VB+aGHJADDstE60TcqsCnU6cmQf7QW7BfDY7/cntu0/r+lYppwof Lp9pV7B5xDO1eg== -----END CERTIFICATE-----Generated at Tue Dec 30 07:59:29 2025 by rpki-client