This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
File: hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json)
Hash identifier: TLxH0Z3wzHxnQLOgTQBlDW/2UNjsw5DA4MMb0UTu5ns=
Subject key identifier: 28:58:65:A9:5A:2A:1B:AB:50:8B:E8:06:56:AC:0A:CD:B5:8E:13:26
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 019B2F9E3A21BC5F7753071DF507E1219270
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
Manifest number: 0D92
Signing time: Thu 18 Dec 2025 04:00:57 +0000
Manifest this update: Thu 18 Dec 2025 04:00:57 +0000
Manifest next update: Fri 19 Dec 2025 04:00:57 +0000
Files and hashes: 1: 2I0oOXYbhXHZylyf-kFn5MY1Bow.roa (hash: aSJseF9prqWznLCSm3ToATrOmfQLXB1xxYnDC7T9Z2c=)
2: 2ReKdgaYtIp3NshswWa0Ynp0WRg.roa (hash: mQx2YD8epmmqsl3MP9UUukVpCGzOBVTsrzitNDkbPKs=)
3: 30HBNFGj_StP7OnHCFYamttMRRo.roa (hash: PbIcvGBa4usW/Z/wTaeMoopqObzYtvj4zgagiYvyvvY=)
4: 5JotAZkNsZmdy-emIgo1Usa9KiQ.roa (hash: KxNBmCau0tbWKOvKkyRjqvgSzYN9kgOnNbVL/mkB+N4=)
5: 5xsu0Y3uzqTy-1RyisKqfwci5WA.roa (hash: D74nFiz8tjRpYgJaiEMQCFVT7wy1biHo7nZsNpVo/uM=)
6: 8qrXy8Q6IOvmRFa2BdiyfUkrMzE.roa (hash: qRXi9zsrTMdGbyvne1sTEgP/YtX/quprNa5rw9UyfMw=)
7: 9dBG9JuRDTu6Pezri5X9qjGglbU.roa (hash: +cmNANqYW5/TEslGANWHU/0YCKjGJgRnyw8zEhIdvRo=)
8: 9xcEatshauEO3IQR_Wu414zl24Y.roa (hash: fKSjlkQxueZV9jBeE970HxiT/qHpLp4twJArvl1NDVg=)
9: FiqwKi_Q8FA9TlHVioAfs1MgqOk.roa (hash: x33V3wFNwYA9syCRIBlSbPIOI6QCWe1eYWizoYGgHZo=)
10: GmKN4KxqgbXlK5yC6foLwWm2cEw.roa (hash: mnaqpx+hD8sOt0PfJ+hg0EOs30CcivdzZkMlny/SxX8=)
11: JBJDitDPQDp7uau__zLA0UwhCgw.roa (hash: R106/g5VQisRMQ9a+37PX+GheT0rDv2YD6EjIhwfsDo=)
12: LFMXcJ3OWByQXVfJAqZ7_ocSupA.roa (hash: Up4ZD4PUB4O4YaDGDS3M7+WCfTXGSLwStZaxdawLRGY=)
13: LnB1q1PM_kJ4XevQHSSwoAwFcTY.roa (hash: e7swdzDOe/Y/3x1bZCYwD/+li1TB00/HX6iaal7aLeI=)
14: MKk2eIZdBEHoejBBXOnExSwoMxY.roa (hash: a46f0IAxws6EBAs2zTmMvZ2jH6RBYNwGRDtcrPOSWm4=)
15: OsT-YBp3DAavsitz7NLsTwnK23M.roa (hash: dhZX9nqnbfS/AF2kj1c4QAc+RypqupT6DI0pLT6f1Qk=)
16: QVKy_C-gH5SUvXuFvr2rKaKKB9o.roa (hash: bb+gerfKMtrw7ctarVTjGclt6FZ9lxxKBxWm7py7YFs=)
17: SrZ4RZPbkkulLRjDnKeeMWYxwzY.roa (hash: xB6TzyhgS5V679nPp3RIvv2qtymA4YPYZ/DhJiBNbCg=)
18: UKaRBf7raXAB65UumI4EA2EWZqM.roa (hash: 1Uq1ZdFBb9LIO9QqzDwwuSeOXeS0ihELz/teT1S+g+g=)
19: Ub4k4tmvuBu4ytTLiTecTU4ssEw.roa (hash: 5pF+00yjrBDdb0t2+5AHejMKysD3HndJHi/7ycuLpWw=)
20: YPVSkLDiWHzeuV_smRTrO2e6AgU.roa (hash: +1W/Hbl4uhL2Lv9y3DsFwhs/x9rhWXoW9vVhrNvRIik=)
21: _LaL2NGVikd-BXS-ihRrP5NY6ik.roa (hash: 8tMeMGtCDzB7YrSEIzydRyBsTv0sIFfm9Cd8vLZYHTU=)
22: _uuRs1q0kzzxOE8VMZdcXbaVR-c.roa (hash: nDyUFHiWf+ewggFbVwk2c6PxPQ54RKuKRQAD1V+EJys=)
23: coKYgTg0Uyqr4o-0bKWOP8PMY1Q.roa (hash: Y3v06GdwG+d3jF3wIYFSmFW94KvIdRSJca4xgcxfnrA=)
24: eO1Hg2bQ0LWJz736BXYL29sRTxI.roa (hash: HcMHeiosVQ+4/TAZPJOqS1U+rgX5YSFqAZBpZptf6lI=)
25: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: n34W2i6UtAAVaocSLnAfias2C1RGs7YD5qtHqKd0LPQ=)
26: lJ3ZPi004eXO28hVs7xB7jNUBVg.roa (hash: Ssdqwa1xwld2CFok5AqPxYNd1LNpZizyWKyqS6Lkp+w=)
27: n-69sBNziEDXgnEUh4AE0Iws0nY.roa (hash: gPgDtzD2p9HKr7H27H9fBhBUC/BnhSkfzNGYDw9RhRs=)
28: nG3kR04PJ4pvnNLuqvMc9aSO5Io.roa (hash: WhQZd4QXzL2/tYEwZWSw0W3wudhwSA0fhANQFT8pmNY=)
29: s649jiXFkCJpu3sQ9wPlOGSgSkA.roa (hash: /65JftPkJbj96qvwBEvTKbcXlXWX7OGD8m1xhpXjm1w=)
30: sHKnbDWYF8v5U1MKqrGRJFJuELo.roa (hash: qVQJCzy3Z998XHa+C8cs8vimL83JWc3p3pyIfEzepNY=)
31: tNQHVbwfibzVK7c351AZ9f-onjU.roa (hash: 1fVQ9lETxiE2tUgAWaLP3sly8RCYpr3iz/wk181/7cM=)
32: tXKrQfWng2kENJxIVP6nmvyouRQ.roa (hash: KdPDUqN1UacChC9TEBXr6ngTuc5vJwV5clkrQ7CDbwI=)
33: vCDztrlrNrPt9fo6YouxSjnnFVQ.roa (hash: C9gjTPImSV8XGrjP1z+30zoQvLbM1GI48tOhez4Na0Q=)
34: vFsQ9Mq1upPkaoy-Dq4nFBdEpsc.roa (hash: srXfodsjwOCQErQ12yo8W1kXt8fNUxZxxPHQ65W2hWk=)
35: wIwLqinns0huK5c5I3YcfTxRkzU.roa (hash: b6ek9YMlRgE7kLoduE9i29cEHv0OgHbP93zdTUJjBts=)
36: wOgDZdkiW7CNnk2a42GfpRveLMM.roa (hash: fZK2xuA5OS6VVpu9Qqe8Cfg/Fx5ihhnU//91+adop+w=)
37: wcVHNrkbhZ1OLGPcmEy3EALkc9Y.roa (hash: HdduppraKMbdN3fgj8TTiKr0BeBOvEfgXB12pZLJIQo=)
38: zdg7rEYd8dQenAi-bfO2kFmvZDk.roa (hash: Zng36IPUI8UvVd30RMfLhIMXyk7oHOYbotPOjThK2aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Dec 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:2f:9e:3a:21:bc:5f:77:53:07:1d:f5:07:e1:21:92:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Dec 18 04:00:57 2025 GMT
Not After : Dec 19 04:00:57 2025 GMT
Subject: CN=285865a95a2a1bab508be80656ac0acdb58e1326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:2c:9a:e6:4c:38:8f:a4:f5:3d:3f:f9:47:
37:54:c6:4c:35:74:40:1f:d8:d4:4f:d2:ce:85:49:
02:95:43:0c:cb:0d:4c:91:f1:b6:b2:ae:95:f7:4d:
34:e2:d8:fc:c0:c5:df:9b:3c:85:9a:94:82:23:95:
fa:ad:7b:d7:4c:1b:f3:cb:91:35:78:7d:65:28:f3:
e8:ad:ab:bf:22:54:a8:e2:17:ef:b7:e4:c8:d6:e6:
34:90:ce:7a:2d:f1:1b:15:3a:87:c1:61:cf:79:0e:
9e:08:38:0d:cd:a1:91:bd:38:47:89:42:59:10:c0:
ca:4a:92:ff:90:a4:36:93:c7:23:36:ac:ab:62:bf:
02:32:57:1d:da:c4:7c:94:73:55:ec:47:0e:bc:f9:
a2:aa:80:b7:e1:35:ad:5d:55:1c:39:4e:90:61:ad:
7a:23:a0:4b:1e:b9:34:5a:45:15:74:68:e1:47:bd:
f9:8c:a4:bb:6c:6f:35:2a:33:05:8c:fb:8f:34:96:
05:57:d7:de:66:d3:41:16:1e:78:fd:25:f2:7d:f5:
4f:53:96:2c:54:33:c2:30:f0:52:94:f8:b0:c8:34:
19:15:44:41:52:9e:9a:ae:c9:a5:3d:b8:f6:72:5a:
54:c5:42:5b:44:03:dc:bf:88:b8:ea:cd:33:7a:44:
6e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:58:65:A9:5A:2A:1B:AB:50:8B:E8:06:56:AC:0A:CD:B5:8E:13:26
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:1e:58:bb:12:63:f4:78:50:7e:e4:ce:e9:94:26:32:69:08:
b7:64:96:69:b7:37:e2:05:b3:25:bf:01:8e:95:21:e2:6d:80:
57:85:11:d4:82:35:53:f7:e9:e0:11:e8:a3:c6:24:30:81:1e:
36:a4:bb:90:6b:e4:31:1f:63:3b:af:f0:93:a8:9c:91:99:e4:
4d:01:34:c7:ab:3b:a2:34:78:82:de:92:d3:d2:a4:b5:45:99:
17:ba:b0:45:c7:76:b1:fa:32:48:3d:af:8d:8f:27:7d:11:8c:
0f:ba:9a:bf:42:cf:19:52:c3:1a:db:fe:86:0a:b7:6a:d0:6d:
3c:3a:30:d4:53:24:83:1a:ad:b5:dc:99:61:d3:e6:99:a0:d2:
89:36:70:a8:9d:df:d5:69:d4:81:ed:c8:be:96:21:d9:e0:c9:
b0:99:fb:00:12:7e:84:fc:ea:b5:27:9e:e3:77:81:cb:9d:f0:
e8:60:22:16:26:f1:71:33:2a:e7:b6:2c:46:a8:98:7d:ee:c9:
39:b8:71:16:f0:9f:a4:97:98:d3:9f:4b:7f:5e:bb:5a:0f:ff:
6e:8c:c0:6c:6e:2d:16:0e:8e:db:45:01:a2:db:1a:74:f7:ce:
eb:a8:c8:b6:5a:19:a5:58:28:49:85:f7:37:20:14:26:46:ad:
17:8c:a9:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsvnjohvF93Uwcd9QfhIZJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4
NzE3MjUwHhcNMjUxMjE4MDQwMDU3WhcNMjUxMjE5MDQwMDU3WjAzMTEwLwYDVQQD
EygyODU4NjVhOTVhMmExYmFiNTA4YmU4MDY1NmFjMGFjZGI1OGUxMzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSIsmuZMOI+k9T0/+Uc3VMZMNXRA
H9jUT9LOhUkClUMMyw1MkfG2sq6V90004tj8wMXfmzyFmpSCI5X6rXvXTBvzy5E1
eH1lKPPorau/IlSo4hfvt+TI1uY0kM56LfEbFTqHwWHPeQ6eCDgNzaGRvThHiUJZ
EMDKSpL/kKQ2k8cjNqyrYr8CMlcd2sR8lHNV7EcOvPmiqoC34TWtXVUcOU6QYa16
I6BLHrk0WkUVdGjhR735jKS7bG81KjMFjPuPNJYFV9feZtNBFh54/SXyffVPU5Ys
VDPCMPBSlPiwyDQZFURBUp6arsmlPbj2clpUxUJbRAPcv4i46s0zekRuIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFChYZalaKhurUIvoBlasCs21jhMmMB8GA1UdIwQY
MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt
ODQ5ZDNhNmI5YzJkLzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk
LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUR5YuxJj
9HhQfuTO6ZQmMmkIt2SWabc34gWzJb8BjpUh4m2AV4UR1II1U/fp4BHoo8YkMIEe
NqS7kGvkMR9jO6/wk6ickZnkTQE0x6s7ojR4gt6S09KktUWZF7qwRcd2sfoySD2v
jY8nfRGMD7qav0LPGVLDGtv+hgq3atBtPDow1FMkgxqttdyZYdPmmaDSiTZwqJ3f
1WnUge3IvpYh2eDJsJn7ABJ+hPzqtSee43eBy53w6GAiFibxcTMq57YsRqiYfe7J
ObhxFvCfpJeY059Lf167Wg//bozAbG4tFg6O20UBotsadPfO66jItloZpVgoSYX3
NyAUJkatF4ypAw==
-----END CERTIFICATE-----
Generated at Thu Dec 18 11:12:15 2025 by rpki-client