This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json) Hash identifier: wSL+/vFY29oC660gE+RNXkjnMLdufwXZ2EALOas/Vy4= Subject key identifier: AC:33:26:FC:6A:B8:D1:A4:5C:FC:7A:09:75:2B:7A:9D:FA:4E:C0:6C Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab Certificate serial: 019B3B347D51C6444172A6F63111342F3848 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft Manifest number: 0C86 Signing time: Sat 20 Dec 2025 10:00:54 +0000 Manifest this update: Sat 20 Dec 2025 10:00:54 +0000 Manifest next update: Sun 21 Dec 2025 10:00:54 +0000 Files and hashes: 1: FauikgvNNACdpAzUUwIbibw2Em4.roa (hash: 8jW5hQYV+ARAXMnoLfnFrZz8WqDDHC709Wsf3diASrY=) 2: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: ajSwyaHj3zovSorYxvWJuRzM1T72KEGmZssCUEZwUA4=) 3: Y5GCtBSidhvcw_3SSYUfDvMbzug.roa (hash: jacf0Q1rEeNMWmSXZkId8BlqjNp4I0/crgw/+VHO0/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:7d:51:c6:44:41:72:a6:f6:31:11:34:2f:38:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab Validity Not Before: Dec 20 10:00:54 2025 GMT Not After : Dec 21 10:00:54 2025 GMT Subject: CN=ac3326fc6ab8d1a45cfc7a09752b7a9dfa4ec06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e8:61:c7:20:00:44:6d:4a:51:78:6e:13:7f: 4f:71:67:ca:5f:d0:6f:7f:88:b6:87:4b:f5:05:96: 94:e3:b8:e6:e0:15:0f:9b:82:f3:47:16:43:44:82: a7:de:93:97:8e:b7:b2:53:77:e9:10:94:82:5a:21: b2:37:57:dc:95:67:8e:fc:a5:05:f5:e9:9a:25:38: 4e:13:31:20:19:c7:4f:98:b6:7a:2d:e7:f4:62:cf: ad:9c:6a:e4:13:07:1e:87:a1:72:d0:6e:25:83:2f: 1d:d1:47:fb:c6:94:98:9c:d9:95:4b:c0:85:08:98: b5:09:71:8d:9c:28:88:51:45:56:65:91:9a:25:6a: d7:29:20:56:be:db:b9:0c:45:95:5d:08:4a:26:58: 11:ba:6d:d5:d2:1e:e5:16:3c:e8:e9:a3:a4:9b:ba: 1e:6c:e5:f1:49:30:0a:04:7c:ac:ba:bc:67:b8:cd: b2:d4:df:8a:09:c4:25:18:f2:30:5d:2d:b6:a5:f2: 87:30:c2:a3:ea:35:89:c3:0e:74:a9:9d:98:a4:9d: d0:2a:1e:40:b9:e2:1a:12:a1:97:e1:a5:cc:77:6c: d5:18:1e:0d:8e:0a:d9:15:0d:41:e8:10:83:4a:91: d9:44:56:13:7d:b9:c8:7b:84:94:75:a9:bb:1b:3c: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:33:26:FC:6A:B8:D1:A4:5C:FC:7A:09:75:2B:7A:9D:FA:4E:C0:6C X509v3 Authority Key Identifier: keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:ee:3a:83:19:fd:5f:dc:35:de:88:1a:4e:75:dc:48:f9:75: 28:8e:5b:af:c9:46:01:2d:0c:00:44:f0:cb:ed:78:d8:ec:b2: 43:e9:c1:89:09:c0:45:94:39:b8:a2:29:f2:4d:d3:12:c2:2f: f7:5b:c3:df:30:08:32:20:3f:aa:fa:cc:52:1f:3d:46:d9:db: d6:46:e6:6e:be:c0:79:c2:bf:93:f5:d0:ce:f5:88:69:80:aa: c9:2a:8b:72:cd:58:5a:94:65:50:6e:48:c6:e5:02:96:74:aa: 8c:09:f9:25:fb:73:61:05:9c:fb:c9:3a:3a:c1:7d:fc:2f:0e: 9d:d1:78:29:8e:1a:ab:d6:45:62:b8:89:4e:cd:12:33:5f:30: 25:fc:46:d9:65:ef:e8:a6:d8:f6:15:6c:80:41:db:a8:34:fa: 70:b9:7f:31:83:b4:0a:d2:76:e1:1e:d8:37:be:74:9a:64:a5: 4a:96:02:09:e4:02:e1:16:9d:37:16:bf:5f:6c:cb:2f:8a:60: fc:3e:44:25:a9:f1:cf:62:36:98:0d:74:92:11:c6:40:ef:c5: de:94:68:8d:0e:06:6b:da:c5:7a:e3:0c:2c:01:5c:3f:68:d2: 63:18:57:ad:cc:ab:c7:7e:42:b3:27:a8:05:9c:3a:b1:bf:df: ef:6e:47:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NH1RxkRBcqb2MRE0LzhIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMDQ2Y2RlODUxMjgwMmIxNDkzM2IzNGEyMmY3NzY1ZTI5 NWQyYWIwHhcNMjUxMjIwMTAwMDU0WhcNMjUxMjIxMTAwMDU0WjAzMTEwLwYDVQQD EyhhYzMzMjZmYzZhYjhkMWE0NWNmYzdhMDk3NTJiN2E5ZGZhNGVjMDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOhhxyAARG1KUXhuE39PcWfKX9Bv f4i2h0v1BZaU47jm4BUPm4LzRxZDRIKn3pOXjreyU3fpEJSCWiGyN1fclWeO/KUF 9emaJThOEzEgGcdPmLZ6Lef0Ys+tnGrkEwceh6Fy0G4lgy8d0Uf7xpSYnNmVS8CF CJi1CXGNnCiIUUVWZZGaJWrXKSBWvtu5DEWVXQhKJlgRum3V0h7lFjzo6aOkm7oe bOXxSTAKBHysurxnuM2y1N+KCcQlGPIwXS22pfKHMMKj6jWJww50qZ2YpJ3QKh5A ueIaEqGX4aXMd2zVGB4NjgrZFQ1B6BCDSpHZRFYTfbnIe4SUdam7GzzeCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwzJvxquNGkXPx6CXUrep36TsBsMB8GA1UdIwQY MBaAFB8EbN6FEoArFJM7NKIvd2XildKrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHdSczNvVVNnQ3NVa3pzMG9pOTNaZUtWMHFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84MGU3NDAtMmM4Yy00NWE2LTkzOGMt MjE5YjlmNmY5MDg3LzEvSHdSczNvVVNnQ3NVa3pzMG9pOTNaZUtWMHFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS84MGU3NDAtMmM4Yy00NWE2LTkzOGMtMjE5YjlmNmY5MDg3 LzEvSHdSczNvVVNnQ3NVa3pzMG9pOTNaZUtWMHFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHe46gxn9 X9w13ogaTnXcSPl1KI5br8lGAS0MAETwy+142OyyQ+nBiQnARZQ5uKIp8k3TEsIv 91vD3zAIMiA/qvrMUh89Rtnb1kbmbr7AecK/k/XQzvWIaYCqySqLcs1YWpRlUG5I xuUClnSqjAn5JftzYQWc+8k6OsF9/C8OndF4KY4aq9ZFYriJTs0SM18wJfxG2WXv 6KbY9hVsgEHbqDT6cLl/MYO0CtJ24R7YN750mmSlSpYCCeQC4RadNxa/X2zLL4pg /D5EJanxz2I2mA10khHGQO/F3pRojQ4Ga9rFeuMMLAFcP2jSYxhXrcyrx35Csyeo BZw6sb/f725HSQ== -----END CERTIFICATE-----Generated at Sat Dec 20 16:43:51 2025 by rpki-client