This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft File: rwmHHP1haABnerIynsumHed3V-Y.mft (raw, json) Hash identifier: zCPu1dwlRhte/maJ9wajWssRcI04vCsl9pTniUkQfEs= Subject key identifier: 3B:44:E1:17:F2:BD:D2:46:E8:D0:A6:BB:D8:59:35:81:36:37:94:96 Authority key identifier: AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6 Certificate issuer: /CN=af09871cfd616800677ab2329ecba61de77757e6 Certificate serial: 019B5DF762DCEFE3FBFED5AAB6DDAC8EC7E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft Manifest number: 0301 Signing time: Sat 27 Dec 2025 04:00:52 +0000 Manifest this update: Sat 27 Dec 2025 04:00:52 +0000 Manifest next update: Sun 28 Dec 2025 04:00:52 +0000 Files and hashes: 1: _TdfyDspFjo8HcBVAH4tKaY1ryc.roa (hash: HRin1YqVyIdAgsGnpfqM25NMMm45zP4o3p+MrSb9sdE=) 2: rwmHHP1haABnerIynsumHed3V-Y.crl (hash: 5hOgYZppeCDWhVTwAW5iPQhdZoAEvF7iDsbJBA/XME4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:f7:62:dc:ef:e3:fb:fe:d5:aa:b6:dd:ac:8e:c7:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af09871cfd616800677ab2329ecba61de77757e6 Validity Not Before: Dec 27 04:00:52 2025 GMT Not After : Dec 28 04:00:52 2025 GMT Subject: CN=3b44e117f2bdd246e8d0a6bbd859358136379496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:09:ec:bf:9f:a8:dd:7c:d0:2b:62:fd:78:e3: cb:f2:cb:68:5c:50:b3:dc:33:3f:cf:7e:eb:a4:69: f2:c2:eb:86:6f:d9:97:b0:3a:df:5d:d3:5f:6d:46: 94:72:7d:e7:1a:8a:b5:79:5e:ec:6c:18:1b:fc:d7: 0a:32:8b:b2:3b:82:11:ac:b2:37:ff:4d:84:a2:a3: ec:2c:fb:3b:db:1d:6c:52:1d:05:e4:75:c9:6c:17: f5:41:28:88:1f:4c:90:3e:10:16:ec:42:ee:16:bd: 1c:dd:5b:f4:61:ae:e6:f0:d9:f6:f1:32:bc:2b:eb: 49:15:60:c3:4c:7c:b0:7b:de:66:48:1d:bf:a5:79: 76:72:ef:a1:ee:ef:66:df:90:ee:81:a2:71:5b:44: 05:a1:91:ee:d1:d9:7e:98:fb:b3:19:d7:7b:07:15: 89:de:94:f4:f3:1d:43:cc:9d:ca:76:e9:71:60:7c: 99:65:23:a6:6e:17:cf:bd:9b:c6:91:a1:ed:23:64: 18:05:f5:2e:92:54:da:0d:a7:7b:26:6c:ec:a2:77: 3c:d1:dc:32:87:21:ec:05:b3:8f:d1:47:7e:ad:0b: 2a:a4:d8:cf:fd:8f:f7:fb:d3:10:00:88:34:90:6e: b8:10:59:bc:0c:98:06:34:cb:c4:8e:b6:ac:52:9c: ad:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:44:E1:17:F2:BD:D2:46:E8:D0:A6:BB:D8:59:35:81:36:37:94:96 X509v3 Authority Key Identifier: keyid:AF:09:87:1C:FD:61:68:00:67:7A:B2:32:9E:CB:A6:1D:E7:77:57:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwmHHP1haABnerIynsumHed3V-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8ad9b3-0b9f-4224-909b-b43dbf895cfe/1/rwmHHP1haABnerIynsumHed3V-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:62:10:be:2f:4d:1d:8b:b9:fe:24:e8:60:d7:c2:4e:01:68: 4b:de:0a:7a:b8:d0:ab:56:5d:74:1c:6f:6e:bd:eb:03:44:0f: da:b8:0b:ba:11:8c:88:fb:1e:de:b9:63:0a:bf:81:af:7f:0d: a3:df:0d:08:ab:0f:bb:2a:e5:fd:0f:9f:05:bd:51:67:5b:fb: ab:6a:b6:f2:1e:e3:fb:bb:ad:6d:40:56:7a:da:3a:93:ed:cf: af:c9:1b:55:54:00:4d:ee:4a:be:cd:70:53:cd:00:7c:03:f4: 64:60:b7:fd:a5:e3:69:43:05:91:b3:3e:3b:13:a4:a0:c5:c3: 44:76:e6:1f:00:9d:45:82:08:d9:b9:b8:16:bf:06:cb:5f:e5: 5c:2c:0c:7d:a4:74:93:b0:c1:91:42:47:85:5c:af:e7:42:1e: 47:cb:99:3d:31:6b:31:96:bb:26:84:e3:27:1a:4b:83:b6:ad: 4d:d9:13:82:04:6d:00:1c:b7:36:dd:7e:a8:dc:ca:1d:b7:d7: db:1b:e7:68:88:66:f2:75:f4:6c:e1:90:af:db:58:1a:f1:f6: 1b:24:e0:a4:a4:c1:18:cc:6b:4d:6e:db:b9:3e:13:c7:11:5c: a8:8e:4c:a9:a6:82:c1:a4:5b:56:d2:66:89:c9:5b:d7:97:4a: ff:23:c1:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtd92Lc7+P7/tWqtt2sjsfiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmMDk4NzFjZmQ2MTY4MDA2NzdhYjIzMjllY2JhNjFkZTc3 NzU3ZTYwHhcNMjUxMjI3MDQwMDUyWhcNMjUxMjI4MDQwMDUyWjAzMTEwLwYDVQQD EygzYjQ0ZTExN2YyYmRkMjQ2ZThkMGE2YmJkODU5MzU4MTM2Mzc5NDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQnsv5+o3XzQK2L9eOPL8stoXFCz 3DM/z37rpGnywuuGb9mXsDrfXdNfbUaUcn3nGoq1eV7sbBgb/NcKMouyO4IRrLI3 /02EoqPsLPs72x1sUh0F5HXJbBf1QSiIH0yQPhAW7ELuFr0c3Vv0Ya7m8Nn28TK8 K+tJFWDDTHywe95mSB2/pXl2cu+h7u9m35DugaJxW0QFoZHu0dl+mPuzGdd7BxWJ 3pT08x1DzJ3KdulxYHyZZSOmbhfPvZvGkaHtI2QYBfUuklTaDad7Jmzsonc80dwy hyHsBbOP0Ud+rQsqpNjP/Y/3+9MQAIg0kG64EFm8DJgGNMvEjrasUpyt0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDtE4RfyvdJG6NCmu9hZNYE2N5SWMB8GA1UdIwQY MBaAFK8Jhxz9YWgAZ3qyMp7Lph3nd1fmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcndtSEhQMWhhQUJuZXJJeW5zdW1IZWQzVi1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84YWQ5YjMtMGI5Zi00MjI0LTkwOWIt YjQzZGJmODk1Y2ZlLzEvcndtSEhQMWhhQUJuZXJJeW5zdW1IZWQzVi1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84YWQ5YjMtMGI5Zi00MjI0LTkwOWItYjQzZGJmODk1Y2Zl LzEvcndtSEhQMWhhQUJuZXJJeW5zdW1IZWQzVi1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKGIQvi9N HYu5/iToYNfCTgFoS94KerjQq1ZddBxvbr3rA0QP2rgLuhGMiPse3rljCr+Br38N o98NCKsPuyrl/Q+fBb1RZ1v7q2q28h7j+7utbUBWeto6k+3Pr8kbVVQATe5Kvs1w U80AfAP0ZGC3/aXjaUMFkbM+OxOkoMXDRHbmHwCdRYII2bm4Fr8Gy1/lXCwMfaR0 k7DBkUJHhVyv50IeR8uZPTFrMZa7JoTjJxpLg7atTdkTggRtABy3Nt1+qNzKHbfX 2xvnaIhm8nX0bOGQr9tYGvH2GyTgpKTBGMxrTW7buT4TxxFcqI5MqaaCwaRbVtJm iclb15dK/yPBGw== -----END CERTIFICATE-----Generated at Sat Dec 27 09:47:48 2025 by rpki-client