This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft File: hw4qIH9pdyFKlXqOFI0fi1pc0II.mft (raw, json) Hash identifier: A2FPeOcNSIZVz6n1KMIQOR7ojvj1S6bEMZJwBXLe2P8= Subject key identifier: AD:B0:1C:A3:C7:10:D7:8B:B1:43:8B:BC:DB:81:88:7A:C0:E9:7D:1F Authority key identifier: 87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82 Certificate issuer: /CN=870e2a207f6977214a957a8e148d1f8b5a5cd082 Certificate serial: 019B3CEC54DBBF377E5B4382A633026445C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft Manifest number: 0467 Signing time: Sat 20 Dec 2025 18:01:19 +0000 Manifest this update: Sat 20 Dec 2025 18:01:19 +0000 Manifest next update: Sun 21 Dec 2025 18:01:19 +0000 Files and hashes: 1: hw4qIH9pdyFKlXqOFI0fi1pc0II.crl (hash: 2AgV4KM6oFkbPD/WoTax9NY8NPgD61gymYci2smbTHs=) 2: nKTvZPJPqdCXiSwzyA9j5IjgzXg.roa (hash: IlnUSzXgTeo7Aecj19DyZcjG2TpAU9jXATfOU6kk97U=) 3: zNxBSM9LhOTwYtAP52MRH2hzZ_o.roa (hash: 51C5X4gm2WkYmwXfFe/uw6oyIL71jLkdgjDOyTD+5rc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:54:db:bf:37:7e:5b:43:82:a6:33:02:64:45:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870e2a207f6977214a957a8e148d1f8b5a5cd082 Validity Not Before: Dec 20 18:01:19 2025 GMT Not After : Dec 21 18:01:19 2025 GMT Subject: CN=adb01ca3c710d78bb1438bbcdb81887ac0e97d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:07:a2:76:86:a5:f9:4b:a4:e6:14:af:e9:d4: 7a:f6:c3:91:ad:2d:c9:21:03:58:9f:7f:fd:ee:a5: ec:31:d1:e4:65:29:5b:92:38:98:5a:9b:13:c8:e9: 28:c1:ef:2b:d1:1e:81:d7:20:33:98:e1:bb:7c:f9: f8:23:8f:13:5c:a8:9d:5e:af:e9:3d:fa:4d:86:4f: c4:c8:08:ef:29:71:58:f6:20:9a:af:31:09:5b:60: 03:e9:e8:8e:6b:2e:90:a9:12:55:b5:f2:39:8b:62: 9f:a6:a2:f4:95:06:46:cb:4a:b5:4e:bf:39:a2:13: 02:f7:39:07:8e:3a:0b:3e:58:75:cd:fa:1d:b6:25: 32:f7:05:87:b3:0f:c8:b3:35:b1:ac:d4:9c:1b:0e: b2:43:c6:98:b3:ed:65:24:2a:bc:d5:8b:7a:e0:74: 4d:87:cc:35:16:e0:2c:f3:f7:2d:f6:88:5b:98:54: 41:9c:d8:2c:3d:82:c9:02:4b:0f:20:89:4f:d0:31: 46:c6:ca:0e:d8:46:8f:a9:81:4c:6f:4b:9a:42:b6: 07:01:04:01:42:64:48:55:7a:14:d8:99:ae:9d:bb: 93:93:cb:99:f7:53:66:7e:13:b5:18:38:19:ad:8e: d2:7b:06:49:4a:ec:9b:d9:03:ff:1e:53:d0:0b:63: be:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B0:1C:A3:C7:10:D7:8B:B1:43:8B:BC:DB:81:88:7A:C0:E9:7D:1F X509v3 Authority Key Identifier: keyid:87:0E:2A:20:7F:69:77:21:4A:95:7A:8E:14:8D:1F:8B:5A:5C:D0:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hw4qIH9pdyFKlXqOFI0fi1pc0II.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/421158-f0c6-4619-afa5-8a94687dba6f/1/hw4qIH9pdyFKlXqOFI0fi1pc0II.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:c7:64:83:d2:76:df:1a:fe:fb:52:49:ed:d1:d1:65:20:2a: 56:98:a0:18:5d:38:fa:b4:42:79:0b:e0:01:b3:1c:67:bf:80: fd:34:01:93:13:94:16:ee:9e:94:2b:2b:15:b7:a4:41:d8:14: ec:bb:c4:be:fa:cf:4d:f2:39:ca:30:4e:bd:fe:ac:d3:b0:4d: 6d:3f:bc:94:41:7f:d9:9d:b6:55:a0:8d:76:5d:20:81:f7:f3: 87:fe:9e:b5:fe:c6:06:37:32:df:c0:5c:89:8e:23:7b:61:bb: 8d:da:07:ba:d7:31:3c:4e:f2:fa:3a:7d:7c:81:9f:a2:1f:75: da:14:eb:0e:57:8a:cc:f6:2a:e7:55:71:73:7d:21:0e:fc:81: a2:ee:81:1d:c1:5c:78:15:e2:f1:4a:d0:ce:ea:cd:08:d4:cc: 3f:88:3c:b0:98:19:4b:cf:f8:91:18:d5:97:1e:53:92:ac:e1: 60:9f:17:7f:16:85:80:7f:7d:c5:4f:9a:8d:32:3f:f9:1b:af: 54:a7:f1:7c:93:2a:d6:e2:df:a2:ea:33:a5:8c:c9:b5:9a:57: 0e:f0:bb:54:b9:54:99:86:44:9e:ac:95:c9:63:e3:b6:c6:1f: fb:1b:f9:d6:04:5e:63:a4:06:c3:85:6f:d2:f4:25:45:ec:72: 4d:05:0f:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87FTbvzd+W0OCpjMCZEXGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGUyYTIwN2Y2OTc3MjE0YTk1N2E4ZTE0OGQxZjhiNWE1 Y2QwODIwHhcNMjUxMjIwMTgwMTE5WhcNMjUxMjIxMTgwMTE5WjAzMTEwLwYDVQQD EyhhZGIwMWNhM2M3MTBkNzhiYjE0MzhiYmNkYjgxODg3YWMwZTk3ZDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Qeidoal+Uuk5hSv6dR69sORrS3J IQNYn3/97qXsMdHkZSlbkjiYWpsTyOkowe8r0R6B1yAzmOG7fPn4I48TXKidXq/p PfpNhk/EyAjvKXFY9iCarzEJW2AD6eiOay6QqRJVtfI5i2KfpqL0lQZGy0q1Tr85 ohMC9zkHjjoLPlh1zfodtiUy9wWHsw/IszWxrNScGw6yQ8aYs+1lJCq81Yt64HRN h8w1FuAs8/ct9ohbmFRBnNgsPYLJAksPIIlP0DFGxsoO2EaPqYFMb0uaQrYHAQQB QmRIVXoU2JmunbuTk8uZ91NmfhO1GDgZrY7SewZJSuyb2QP/HlPQC2O+QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2wHKPHENeLsUOLvNuBiHrA6X0fMB8GA1UdIwQY MBaAFIcOKiB/aXchSpV6jhSNH4taXNCCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80MjExNTgtZjBjNi00NjE5LWFmYTUt OGE5NDY4N2RiYTZmLzEvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi80MjExNTgtZjBjNi00NjE5LWFmYTUtOGE5NDY4N2RiYTZm LzEvaHc0cUlIOXBkeUZLbFhxT0ZJMGZpMXBjMElJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMdkg9J2 3xr++1JJ7dHRZSAqVpigGF04+rRCeQvgAbMcZ7+A/TQBkxOUFu6elCsrFbekQdgU 7LvEvvrPTfI5yjBOvf6s07BNbT+8lEF/2Z22VaCNdl0ggffzh/6etf7GBjcy38Bc iY4je2G7jdoHutcxPE7y+jp9fIGfoh912hTrDleKzPYq51Vxc30hDvyBou6BHcFc eBXi8UrQzurNCNTMP4g8sJgZS8/4kRjVlx5TkqzhYJ8XfxaFgH99xU+ajTI/+Ruv VKfxfJMq1uLfouozpYzJtZpXDvC7VLlUmYZEnqyVyWPjtsYf+xv51gReY6QGw4Vv 0vQlRexyTQUPOA== -----END CERTIFICATE-----Generated at Sun Dec 21 01:14:36 2025 by rpki-client