This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft File: HWhumKzyo3vyrsaYB-aWQGCXnLg.mft (raw, json) Hash identifier: FUFSFP+K9BaYW+Blo259VVRq5woXZSgaIi28aKvxbvI= Subject key identifier: 9F:59:F9:14:92:77:2F:A4:EB:14:07:EC:95:17:82:88:C1:01:BF:FF Authority key identifier: 1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8 Certificate issuer: /CN=1d686e98acf2a37bf2aec69807e6964060979cb8 Certificate serial: 019B6F21F9D72F9AAECB1512D6A1A32F31A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft Manifest number: 17A1 Signing time: Tue 30 Dec 2025 12:00:56 +0000 Manifest this update: Tue 30 Dec 2025 12:00:56 +0000 Manifest next update: Wed 31 Dec 2025 12:00:56 +0000 Files and hashes: 1: HWhumKzyo3vyrsaYB-aWQGCXnLg.crl (hash: D39W16zPHRKDzmhxhsvpzyEryOGxV6vHa06+yHTwbKM=) 2: OxE4-aNNSEdqL0e1drWJ-u6-FW8.roa (hash: 61L/5UKRIctS8qkUbe6UFwwrHK0nH/grmD/batM7eQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:21:f9:d7:2f:9a:ae:cb:15:12:d6:a1:a3:2f:31:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d686e98acf2a37bf2aec69807e6964060979cb8 Validity Not Before: Dec 30 12:00:56 2025 GMT Not After : Dec 31 12:00:56 2025 GMT Subject: CN=9f59f91492772fa4eb1407ec95178288c101bfff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b5:04:2f:e9:d1:6a:48:0a:62:ed:47:4a:8f: 17:df:30:96:ed:6a:64:41:ff:44:f7:19:06:79:68: b3:08:e5:df:11:b6:ac:cf:5b:e2:2b:e2:dd:8d:bd: 16:a3:b3:5a:05:23:5c:73:95:a5:46:5f:ca:9c:23: 0a:9b:f6:5c:cd:45:ae:4b:88:1f:00:b4:43:7c:75: 2e:37:d4:f8:83:a3:98:f7:8d:f4:61:cf:97:78:4b: 52:d0:a3:94:77:b4:78:ff:09:46:88:37:44:ca:ac: 6d:da:74:13:c6:eb:15:01:4b:e6:6c:f3:34:2a:86: 0e:74:85:65:34:a2:46:c9:2a:6d:f3:39:65:a1:ef: 42:08:00:64:06:7a:74:24:64:b9:41:17:87:c6:9f: 20:8f:ea:5e:d3:9e:fd:bf:0c:61:7c:ce:a1:6d:d1: 0e:e6:08:5b:1a:ca:1d:d9:c1:67:93:87:e5:5a:2b: 5c:4c:a1:19:51:6e:db:c3:88:5f:8f:8e:cd:b4:35: 82:cc:4a:3b:c0:05:96:81:3e:e9:c3:8f:b9:87:aa: e5:dd:0a:b4:79:61:2b:5c:6f:93:41:48:e8:96:34: 0a:a0:52:af:e4:1f:98:89:7b:59:90:b8:b2:8c:51: a0:01:53:07:4c:12:d0:d3:3c:eb:00:eb:63:4e:72: 1d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:59:F9:14:92:77:2F:A4:EB:14:07:EC:95:17:82:88:C1:01:BF:FF X509v3 Authority Key Identifier: keyid:1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:59:68:98:dd:5f:39:7c:6e:37:8a:26:5d:79:0c:10:be:bb: 3d:49:52:89:77:4b:a9:7f:56:55:df:65:e8:e3:6a:d4:67:40: 78:94:3b:d0:0d:ae:ee:d5:52:46:cb:27:83:82:f6:a9:b2:9d: 8a:ed:81:78:80:e2:3e:79:c7:c5:f6:6c:73:4e:21:bc:08:8a: 41:70:0b:f9:d8:ea:65:16:12:be:b5:b4:ae:3c:d4:03:7e:61: 4c:2e:65:2b:0f:e5:e4:e1:e6:f8:b9:21:d3:37:d6:b4:0a:3f: 44:a1:38:4b:a7:d5:4b:64:93:fc:f8:5d:bc:b6:8c:79:dd:82: c2:8d:e4:cc:7d:e1:fb:71:5d:49:dd:3b:fc:ff:2c:ab:0d:83: fa:cf:38:15:bc:15:88:cb:63:80:20:57:c4:1f:6f:01:67:6e: 03:58:eb:96:ad:02:86:78:a8:08:67:44:ca:17:68:9c:d6:3f: b7:cc:19:5d:9b:c0:ff:fc:1b:e0:90:db:bf:b9:e7:f1:8c:2a: 58:f7:3f:44:49:12:1c:cd:41:9c:37:95:c8:00:96:bb:04:24: 2c:80:a9:2a:6c:b4:4d:13:47:e9:20:80:d0:7c:d1:f9:ff:2c: 01:fd:47:92:42:7c:1c:a0:b4:b0:9d:62:ee:e2:58:19:b0:1c: c5:79:8e:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvIfnXL5quyxUS1qGjLzGgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNjg2ZTk4YWNmMmEzN2JmMmFlYzY5ODA3ZTY5NjQwNjA5 NzljYjgwHhcNMjUxMjMwMTIwMDU2WhcNMjUxMjMxMTIwMDU2WjAzMTEwLwYDVQQD Eyg5ZjU5ZjkxNDkyNzcyZmE0ZWIxNDA3ZWM5NTE3ODI4OGMxMDFiZmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLUEL+nRakgKYu1HSo8X3zCW7Wpk Qf9E9xkGeWizCOXfEbasz1viK+Ldjb0Wo7NaBSNcc5WlRl/KnCMKm/ZczUWuS4gf ALRDfHUuN9T4g6OY9430Yc+XeEtS0KOUd7R4/wlGiDdEyqxt2nQTxusVAUvmbPM0 KoYOdIVlNKJGySpt8zlloe9CCABkBnp0JGS5QReHxp8gj+pe0579vwxhfM6hbdEO 5ghbGsod2cFnk4flWitcTKEZUW7bw4hfj47NtDWCzEo7wAWWgT7pw4+5h6rl3Qq0 eWErXG+TQUjoljQKoFKv5B+YiXtZkLiyjFGgAVMHTBLQ0zzrAOtjTnIdKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9Z+RSSdy+k6xQH7JUXgojBAb//MB8GA1UdIwQY MBaAFB1obpis8qN78q7GmAfmlkBgl5y4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hODc3YzgtZTdjYi00NTQwLWJkNDMt NWFjZGJmNDc0NTQ4LzEvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9hODc3YzgtZTdjYi00NTQwLWJkNDMtNWFjZGJmNDc0NTQ4 LzEvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVlomN1f OXxuN4omXXkMEL67PUlSiXdLqX9WVd9l6ONq1GdAeJQ70A2u7tVSRssng4L2qbKd iu2BeIDiPnnHxfZsc04hvAiKQXAL+djqZRYSvrW0rjzUA35hTC5lKw/l5OHm+Lkh 0zfWtAo/RKE4S6fVS2ST/PhdvLaMed2Cwo3kzH3h+3FdSd07/P8sqw2D+s84FbwV iMtjgCBXxB9vAWduA1jrlq0ChnioCGdEyhdonNY/t8wZXZvA//wb4JDbv7nn8Ywq WPc/REkSHM1BnDeVyACWuwQkLICpKmy0TRNH6SCA0HzR+f8sAf1HkkJ8HKC0sJ1i 7uJYGbAcxXmOsA== -----END CERTIFICATE-----Generated at Tue Dec 30 20:20:36 2025 by rpki-client