This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft File: HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json) Hash identifier: 7b00mS0GoilVW8ufK9AAYsjYPdD4cPGdvKAY74ijRsM= Subject key identifier: CB:23:37:F5:ED:B0:D1:06:61:AB:48:C1:D9:2C:E0:CC:E1:CC:80:0B Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e Certificate serial: 019B53AB8BC2178B7BC6AF37EBF14A9B747A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft Manifest number: 12C0 Signing time: Thu 25 Dec 2025 04:01:49 +0000 Manifest this update: Thu 25 Dec 2025 04:01:49 +0000 Manifest next update: Fri 26 Dec 2025 04:01:49 +0000 Files and hashes: 1: 1-R53mn60mfPO-u9ytNS9sF0TLSo.roa (hash: hjhxCMJ1jfwhmqAtl0YKwQAHdXKCM1yF5oO2syQVRSw=) 2: 1-f8__C0CK7ranFsqDLcjoSQhylg.roa (hash: hbKNngdHLrh0EUf98Vi5DxR2S25rV2PBVU8eQvk6JUo=) 3: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: FqxOTVX1KI/tu0BqqY/bV3qUehKfX5cLXopPx5aLLDA=) 4: ya8trGCL644z-VHQPggSk9_LO-E.roa (hash: s6+H/S7quTkaw3wLyBlxCmsBjkvG8cEYcGq0toHuVSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:8b:c2:17:8b:7b:c6:af:37:eb:f1:4a:9b:74:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e Validity Not Before: Dec 25 04:01:49 2025 GMT Not After : Dec 26 04:01:49 2025 GMT Subject: CN=cb2337f5edb0d10661ab48c1d92ce0cce1cc800b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5a:7e:78:5b:bd:a6:cc:70:52:53:0a:a1:80: 83:16:32:28:79:0b:cc:d4:95:33:1f:70:86:3d:81: 4d:e1:6a:88:d6:10:08:f1:b9:cc:58:9f:63:89:ed: 7d:a8:0f:04:2c:60:c8:a2:7e:d9:b0:b6:72:b6:12: 47:cc:88:e9:72:3f:c9:8e:a8:44:84:3e:46:43:24: 16:1b:b2:03:c8:be:a7:a3:01:69:b7:8d:16:0f:14: 84:a3:b8:e4:2c:4e:e1:14:8a:90:93:c4:b1:85:95: 3c:56:de:f4:0e:26:40:2d:28:d3:bc:4f:7c:30:a4: c2:7e:9f:df:40:c4:f4:3a:39:c2:f2:a1:93:ef:07: 4a:b7:73:05:1b:52:fa:49:31:35:35:99:67:4b:46: 57:6d:b2:b1:27:19:f5:d5:33:c3:9e:df:bd:1e:c5: 45:79:1d:a9:fb:39:dd:0c:2c:37:48:de:01:ed:c3: 9d:6f:ad:0c:1f:66:3b:06:08:51:ee:53:56:6e:5d: 43:f1:05:7f:ce:9e:21:86:87:9a:2f:6e:5c:f1:98: 5d:b8:61:9c:95:c9:3b:35:c2:c5:4c:a8:59:7c:2b: 83:fb:da:28:65:bf:cd:0c:85:5e:71:e1:81:2a:a6: 1e:9c:e7:59:dc:2a:3a:53:8e:12:d9:19:a4:af:9a: 4a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:23:37:F5:ED:B0:D1:06:61:AB:48:C1:D9:2C:E0:CC:E1:CC:80:0B X509v3 Authority Key Identifier: keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:12:e2:5e:dc:de:55:4e:0c:68:6c:31:75:65:d3:b0:4f:fa: 0a:8d:16:32:30:57:28:ff:44:18:8e:7c:08:2a:2c:46:88:c3: 18:43:16:cf:77:c0:53:a3:37:f4:c5:fb:51:d6:20:7a:03:df: d0:ce:44:34:a5:ba:51:b8:5a:88:66:63:81:d9:44:e8:86:5d: 56:da:ce:04:32:60:e2:03:a5:db:9d:b1:f4:d3:69:39:b1:b7: e0:1c:06:2d:e7:3a:bc:19:e0:be:fd:98:b3:01:89:e2:b7:b1: 4e:a2:1e:bd:fc:bb:6c:e4:b6:2d:1b:a9:dc:01:7a:49:3b:8d: 7b:c0:fc:00:1c:ab:ff:f6:de:35:9b:dc:1b:4b:43:06:60:1d: 0e:ed:14:a5:97:59:43:91:42:a9:ce:3b:c8:1e:4b:a9:c7:e9: f6:44:41:df:f0:50:b7:96:58:3c:2c:93:a0:33:79:9b:76:68: 98:c3:08:b0:3f:36:6d:33:67:29:df:47:b5:2a:8e:d7:1c:1e: 63:5f:31:6c:a1:d2:4d:de:8e:83:13:aa:8f:4d:3c:e3:9d:d7: a6:d6:1c:5e:7a:10:fa:64:9d:95:81:6f:ba:21:bf:02:33:12: ca:1c:d8:ba:e0:d0:44:7f:ba:18:81:cd:2f:70:e8:c9:e6:37: c6:e2:5a:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq4vCF4t7xq836/FKm3R6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMDU2NTg2NWE1MzM0MDJjMmY0MzQzZmUxYWY1NDFhMDA2 ZDlkNmUwHhcNMjUxMjI1MDQwMTQ5WhcNMjUxMjI2MDQwMTQ5WjAzMTEwLwYDVQQD EyhjYjIzMzdmNWVkYjBkMTA2NjFhYjQ4YzFkOTJjZTBjY2UxY2M4MDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVp+eFu9psxwUlMKoYCDFjIoeQvM 1JUzH3CGPYFN4WqI1hAI8bnMWJ9jie19qA8ELGDIon7ZsLZythJHzIjpcj/JjqhE hD5GQyQWG7IDyL6nowFpt40WDxSEo7jkLE7hFIqQk8SxhZU8Vt70DiZALSjTvE98 MKTCfp/fQMT0OjnC8qGT7wdKt3MFG1L6STE1NZlnS0ZXbbKxJxn11TPDnt+9HsVF eR2p+zndDCw3SN4B7cOdb60MH2Y7BghR7lNWbl1D8QV/zp4hhoeaL25c8ZhduGGc lck7NcLFTKhZfCuD+9ooZb/NDIVeceGBKqYenOdZ3Co6U44S2Rmkr5pKpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMsjN/XtsNEGYatIwdks4MzhzIALMB8GA1UdIwQY MBaAFB8FZYZaUzQCwvQ0P+GvVBoAbZ1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUt NWM2OTA0NDdiYTg5LzEvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUtNWM2OTA0NDdiYTg5 LzEvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPxLiXtze VU4MaGwxdWXTsE/6Co0WMjBXKP9EGI58CCosRojDGEMWz3fAU6M39MX7UdYgegPf 0M5ENKW6UbhaiGZjgdlE6IZdVtrOBDJg4gOl252x9NNpObG34BwGLec6vBngvv2Y swGJ4rexTqIevfy7bOS2LRup3AF6STuNe8D8AByr//beNZvcG0tDBmAdDu0UpZdZ Q5FCqc47yB5Lqcfp9kRB3/BQt5ZYPCyToDN5m3ZomMMIsD82bTNnKd9HtSqO1xwe Y18xbKHSTd6OgxOqj008453XptYcXnoQ+mSdlYFvuiG/AjMSyhzYuuDQRH+6GIHN L3DoyeY3xuJavQ== -----END CERTIFICATE-----Generated at Thu Dec 25 12:47:27 2025 by rpki-client