This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft File: HwCwqokkw3eInj07mWCTuHpz0OE.mft (raw, json) Hash identifier: gAe6U34Lf2aT56+EKH4E/RjGKmzAsoe0G9S1QgB7JsA= Subject key identifier: DB:1A:30:01:98:BC:6C:23:D9:38:54:D6:9A:2B:9A:0D:8B:F5:87:9C Authority key identifier: 1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1 Certificate issuer: /CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1 Certificate serial: 019B33440223BFD0A562579073E226B728A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft Manifest number: 10DC Signing time: Thu 18 Dec 2025 21:00:53 +0000 Manifest this update: Thu 18 Dec 2025 21:00:53 +0000 Manifest next update: Fri 19 Dec 2025 21:00:53 +0000 Files and hashes: 1: HwCwqokkw3eInj07mWCTuHpz0OE.crl (hash: sisiUWd9UcCewq5dHDrA7gxc58kLwuIT8+ejALW7Zbc=) 2: V9AZTNgU1d002QfKUotGNDSDtvk.roa (hash: x3l+fuQjKQuMTqxTAI/mH6BtVLnUzYs7euSSf0MTbRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:02:23:bf:d0:a5:62:57:90:73:e2:26:b7:28:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1 Validity Not Before: Dec 18 21:00:53 2025 GMT Not After : Dec 19 21:00:53 2025 GMT Subject: CN=db1a300198bc6c23d93854d69a2b9a0d8bf5879c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f5:a9:10:1d:8f:33:47:58:31:6a:54:82:56: a2:ef:c6:b3:63:b2:86:50:16:e0:a6:2a:1e:1a:74: 23:82:64:1d:1a:dc:db:2d:f1:b3:e5:66:76:d9:80: c8:30:76:20:83:fe:d4:39:02:d9:41:0c:25:fd:b6: 52:c7:e7:4f:b7:c5:bc:94:6f:db:78:3d:85:96:fc: 80:63:f5:e6:77:69:ac:cf:27:98:69:08:fa:72:54: 4d:7a:41:c7:98:1a:6d:c8:b1:59:9c:60:11:52:c6: df:8c:3f:b6:bf:74:60:cc:81:0b:05:2c:66:5c:7d: f9:fd:0a:96:49:8f:3a:bc:9e:a7:ff:11:91:ae:df: b5:08:0a:80:8e:2b:d6:c8:51:4f:c1:47:a1:30:72: 07:02:c8:2e:dc:3a:25:36:01:15:e0:4f:e6:3d:25: 4e:65:c8:21:be:64:e1:ef:f3:2a:f6:d4:62:67:31: a0:f1:28:34:40:89:15:85:7f:92:90:0d:b2:95:d0: 03:ed:76:e5:99:1c:db:4f:b6:4e:2a:db:c6:33:a8: b8:38:23:e0:2a:55:bb:21:e5:54:3b:17:7b:d4:08: 9f:ae:d4:81:4e:4e:54:6d:f1:f9:f0:97:cc:45:88: 0c:fc:6b:e3:9e:f2:4b:ae:9f:c9:ba:30:97:1c:26: 93:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:1A:30:01:98:BC:6C:23:D9:38:54:D6:9A:2B:9A:0D:8B:F5:87:9C X509v3 Authority Key Identifier: keyid:1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:16:b1:41:8d:bb:78:8e:39:5f:7a:e9:98:ed:c7:19:80:8e: df:69:a9:ab:6d:f5:a2:f7:a1:72:37:54:92:58:74:a1:3c:06: ce:78:01:ea:34:54:50:13:59:8c:7e:65:fb:74:91:9d:4f:3a: 76:e0:1c:ea:85:78:6e:5f:a8:4f:2a:d8:4a:91:29:0b:ff:5d: b8:a5:2d:8c:69:a9:d3:f8:70:8f:47:ba:da:81:cf:a3:bd:57: 57:b5:ee:67:0a:5d:c9:ad:97:ad:8d:fa:37:83:14:f5:c4:b1: b7:09:c9:b2:8e:03:68:ff:d7:95:96:06:bd:72:b8:3e:13:9c: 10:5e:e5:d6:9a:dd:79:79:01:e8:3b:fe:53:73:34:c8:9f:8e: ea:ae:68:c2:ae:e4:b1:85:f6:87:f8:25:3b:92:e5:94:c3:7d: 90:32:5e:48:2d:b1:6f:ac:b0:e9:36:7b:d4:3e:84:92:d4:9e: ff:a2:37:6f:d5:7b:5f:0b:86:77:fd:37:98:01:69:df:45:2e: 36:93:af:ca:f2:e2:88:bb:ce:b6:ac:25:1f:a2:37:ce:89:24: ee:1e:c7:fc:a8:5d:aa:b9:a9:d2:24:85:3f:b0:6a:a3:94:00: 1d:41:87:fe:d2:17:c0:dc:bf:85:df:11:2e:42:6e:74:ee:af: 9b:c7:1d:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRAIjv9ClYleQc+ImtyiiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMDBiMGFhODkyNGMzNzc4ODllM2QzYjk5NjA5M2I4N2E3 M2QwZTEwHhcNMjUxMjE4MjEwMDUzWhcNMjUxMjE5MjEwMDUzWjAzMTEwLwYDVQQD EyhkYjFhMzAwMTk4YmM2YzIzZDkzODU0ZDY5YTJiOWEwZDhiZjU4NzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvWpEB2PM0dYMWpUglai78azY7KG UBbgpioeGnQjgmQdGtzbLfGz5WZ22YDIMHYgg/7UOQLZQQwl/bZSx+dPt8W8lG/b eD2FlvyAY/Xmd2mszyeYaQj6clRNekHHmBptyLFZnGARUsbfjD+2v3RgzIELBSxm XH35/QqWSY86vJ6n/xGRrt+1CAqAjivWyFFPwUehMHIHAsgu3DolNgEV4E/mPSVO ZcghvmTh7/Mq9tRiZzGg8Sg0QIkVhX+SkA2yldAD7XblmRzbT7ZOKtvGM6i4OCPg KlW7IeVUOxd71AifrtSBTk5UbfH58JfMRYgM/GvjnvJLrp/JujCXHCaTewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNsaMAGYvGwj2ThU1pormg2L9YecMB8GA1UdIwQY MBaAFB8AsKqJJMN3iJ49O5lgk7h6c9DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHdDd3Fva2t3M2VJbmowN21XQ1R1SHB6ME9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81NjE1ZWMtNTFjNS00YTRkLWI2Zjkt ZTQwN2U2MDI1YTQzLzEvSHdDd3Fva2t3M2VJbmowN21XQ1R1SHB6ME9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81NjE1ZWMtNTFjNS00YTRkLWI2ZjktZTQwN2U2MDI1YTQz LzEvSHdDd3Fva2t3M2VJbmowN21XQ1R1SHB6ME9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAihaxQY27 eI45X3rpmO3HGYCO32mpq231ovehcjdUklh0oTwGzngB6jRUUBNZjH5l+3SRnU86 duAc6oV4bl+oTyrYSpEpC/9duKUtjGmp0/hwj0e62oHPo71XV7XuZwpdya2XrY36 N4MU9cSxtwnJso4DaP/XlZYGvXK4PhOcEF7l1prdeXkB6Dv+U3M0yJ+O6q5owq7k sYX2h/glO5LllMN9kDJeSC2xb6yw6TZ71D6EktSe/6I3b9V7XwuGd/03mAFp30Uu NpOvyvLiiLvOtqwlH6I3zokk7h7H/Khdqrmp0iSFP7Bqo5QAHUGH/tIXwNy/hd8R LkJudO6vm8cdPA== -----END CERTIFICATE-----Generated at Fri Dec 19 01:26:48 2025 by rpki-client