This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft File: hWklE5rMSv4L6e8JhOPnvVtE6eY.mft (raw, json) Hash identifier: zxbxf0O7dArSx8gDREtgq4D660njDGyRgtKAvygtlCI= Subject key identifier: E5:77:AA:67:54:01:10:7C:F4:D9:F9:DA:BC:D1:32:01:66:07:48:7A Authority key identifier: 85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6 Certificate issuer: /CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6 Certificate serial: 019B56E340E67CEB5F8682F70F9632B1147F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft Manifest number: 1526 Signing time: Thu 25 Dec 2025 19:01:32 +0000 Manifest this update: Thu 25 Dec 2025 19:01:32 +0000 Manifest next update: Fri 26 Dec 2025 19:01:32 +0000 Files and hashes: 1: hWklE5rMSv4L6e8JhOPnvVtE6eY.crl (hash: BPo+6Ig8NnQRNnSsbVzq9u1VGzH4sTmGFENrg7jqCAY=) 2: siSVK589afKFmNB4xui803eAFA8.roa (hash: pIfAtolx6StiwhL02gSeSu2zm+FTXp7cgi/yqREz08c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:56:e3:40:e6:7c:eb:5f:86:82:f7:0f:96:32:b1:14:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=856925139acc4afe0be9ef0984e3e7bd5b44e9e6 Validity Not Before: Dec 25 19:01:32 2025 GMT Not After : Dec 26 19:01:32 2025 GMT Subject: CN=e577aa675401107cf4d9f9dabcd132016607487a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:38:f5:b5:77:7d:94:f9:58:ee:6c:83:7c:1c: 14:ec:91:8d:0b:9d:46:5a:f5:e7:a0:59:79:34:3c: b1:5d:d2:92:21:1c:94:5c:e8:ad:29:f9:fd:7b:fe: 1e:37:4e:b3:d8:21:f1:38:65:ed:ee:c1:d1:d4:ec: f0:b8:c3:4f:a5:0f:b7:37:20:0f:48:a6:3a:8a:1b: 5b:62:07:ca:1f:f7:27:e3:95:46:d6:86:8d:f7:29: d4:7c:de:2a:f2:c4:67:49:e8:1c:a2:d5:60:8f:dc: 8b:c8:8b:1a:9c:7b:1d:4f:13:82:f7:b7:fc:79:1c: c5:95:fe:a6:3b:61:b6:17:f8:9a:eb:46:33:9b:af: 59:cb:26:f2:a0:16:7d:82:f9:25:81:2a:7e:88:34: 77:0a:07:47:1f:60:f4:c0:3a:d8:4f:e9:65:0b:46: b3:a7:b5:fe:45:54:87:5b:3d:5d:c4:63:34:6d:1a: 49:1b:39:8e:2d:4a:59:7f:af:ec:96:19:e8:5d:8d: fe:da:df:28:f0:d3:0b:61:ab:f2:78:dc:0b:71:19: 07:fa:19:e5:c0:3a:ec:9e:e7:63:8b:ed:8c:08:87: f1:38:28:a5:ee:f7:e0:a5:a1:a6:fd:77:31:bc:4b: 47:aa:39:9e:7c:1b:7f:75:d8:78:57:e6:36:5a:c1: b4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:77:AA:67:54:01:10:7C:F4:D9:F9:DA:BC:D1:32:01:66:07:48:7A X509v3 Authority Key Identifier: keyid:85:69:25:13:9A:CC:4A:FE:0B:E9:EF:09:84:E3:E7:BD:5B:44:E9:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWklE5rMSv4L6e8JhOPnvVtE6eY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7c45ec-3f6b-4635-9d35-8d203ba4acc4/1/hWklE5rMSv4L6e8JhOPnvVtE6eY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:c1:a6:15:43:64:f6:9a:e8:da:f1:f5:75:44:55:25:3c:9e: 88:af:5e:3a:66:ad:63:6e:18:14:05:e1:9e:65:d5:8e:34:63: ea:b3:40:41:cc:9d:03:16:72:7f:4b:2f:38:b3:6b:ef:da:70: e2:1c:75:53:24:08:0d:63:9c:64:24:d2:52:77:66:de:e0:01: 61:4b:46:47:23:f4:06:df:27:9f:aa:17:35:91:91:ba:2d:1b: bc:8b:1c:11:33:21:cf:b0:db:78:ad:02:8f:a8:bd:90:2f:d8: f9:c8:68:1d:63:be:50:4c:23:84:fe:26:50:83:f7:39:74:36: 2b:70:38:d3:6f:3a:6a:00:cb:fd:50:25:12:63:32:41:05:89: 22:c2:e2:fe:87:78:ab:29:34:b0:dd:d9:ae:54:47:56:aa:93: 41:11:d9:4d:5a:fa:45:9c:e1:22:8a:13:26:2c:bd:2f:ea:fc: 76:37:e3:19:28:a1:cb:cc:d3:98:99:cf:78:39:6f:41:89:36: 56:7e:56:56:26:11:96:31:c8:a5:39:07:13:a9:8a:c6:36:bd: b1:ef:3c:f0:11:0d:60:f5:a0:a0:f1:36:78:78:1b:03:a5:9a: 2d:d8:f2:9c:be:ee:f3:8d:c6:fc:b3:c7:c7:67:94:70:87:4f: 1d:8b:97:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtW40DmfOtfhoL3D5YysRR/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NjkyNTEzOWFjYzRhZmUwYmU5ZWYwOTg0ZTNlN2JkNWI0 NGU5ZTYwHhcNMjUxMjI1MTkwMTMyWhcNMjUxMjI2MTkwMTMyWjAzMTEwLwYDVQQD EyhlNTc3YWE2NzU0MDExMDdjZjRkOWY5ZGFiY2QxMzIwMTY2MDc0ODdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jj1tXd9lPlY7myDfBwU7JGNC51G WvXnoFl5NDyxXdKSIRyUXOitKfn9e/4eN06z2CHxOGXt7sHR1OzwuMNPpQ+3NyAP SKY6ihtbYgfKH/cn45VG1oaN9ynUfN4q8sRnSegcotVgj9yLyIsanHsdTxOC97f8 eRzFlf6mO2G2F/ia60Yzm69ZyybyoBZ9gvklgSp+iDR3CgdHH2D0wDrYT+llC0az p7X+RVSHWz1dxGM0bRpJGzmOLUpZf6/slhnoXY3+2t8o8NMLYavyeNwLcRkH+hnl wDrsnudji+2MCIfxOCil7vfgpaGm/XcxvEtHqjmefBt/ddh4V+Y2WsG0swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOV3qmdUARB89Nn52rzRMgFmB0h6MB8GA1UdIwQY MBaAFIVpJROazEr+C+nvCYTj571bROnmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFdrbEU1ck1TdjRMNmU4SmhPUG52VnRFNmVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83YzQ1ZWMtM2Y2Yi00NjM1LTlkMzUt OGQyMDNiYTRhY2M0LzEvaFdrbEU1ck1TdjRMNmU4SmhPUG52VnRFNmVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83YzQ1ZWMtM2Y2Yi00NjM1LTlkMzUtOGQyMDNiYTRhY2M0 LzEvaFdrbEU1ck1TdjRMNmU4SmhPUG52VnRFNmVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcGmFUNk 9pro2vH1dURVJTyeiK9eOmatY24YFAXhnmXVjjRj6rNAQcydAxZyf0svOLNr79pw 4hx1UyQIDWOcZCTSUndm3uABYUtGRyP0Bt8nn6oXNZGRui0bvIscETMhz7DbeK0C j6i9kC/Y+choHWO+UEwjhP4mUIP3OXQ2K3A40286agDL/VAlEmMyQQWJIsLi/od4 qyk0sN3ZrlRHVqqTQRHZTVr6RZzhIooTJiy9L+r8djfjGSihy8zTmJnPeDlvQYk2 Vn5WViYRljHIpTkHE6mKxja9se888BENYPWgoPE2eHgbA6WaLdjynL7u843G/LPH x2eUcIdPHYuX1g== -----END CERTIFICATE-----Generated at Fri Dec 26 04:49:38 2025 by rpki-client