This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft File: HWtralBhpBFdUwQM_9xks7DXGng.mft (raw, json) Hash identifier: TDFliW/LhwHElTJbooFvz+v/1YSyb/e6Vu5P2Mu6BM0= Subject key identifier: D0:6D:97:58:54:EB:9C:51:29:D7:97:14:4E:95:9C:5A:E1:DE:50:50 Authority key identifier: 1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78 Certificate issuer: /CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78 Certificate serial: 019B4994C6E9642BBE03CFB81E9777115ACA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 05:00:45 +0000 Manifest this update: Tue 23 Dec 2025 05:00:45 +0000 Manifest next update: Wed 24 Dec 2025 05:00:45 +0000 Files and hashes: 1: 59rlgV96ANnvbttVckQTSpcL4gg.roa (hash: yMmqOnSAlEZI0n5Ljt8KnwxkwDwpOxx+NBJ3GGUG5bk=) 2: HWtralBhpBFdUwQM_9xks7DXGng.crl (hash: N2769SdauocRydbqliq5SRaD/NIPE30EMf0pqdslfoI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 05:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:94:c6:e9:64:2b:be:03:cf:b8:1e:97:77:11:5a:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6b6b6a5061a4115d53040cffdc64b3b0d71a78 Validity Not Before: Dec 23 05:00:45 2025 GMT Not After : Dec 24 05:00:45 2025 GMT Subject: CN=d06d975854eb9c5129d797144e959c5ae1de5050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cb:1b:d6:8f:99:fc:4f:a6:45:7d:7e:8f:56: c8:92:6a:42:eb:4c:b6:c4:c7:88:e3:c8:cc:ee:ed: 3b:40:68:77:3d:b9:03:b6:f3:24:83:46:09:b2:b5: c2:7b:e3:57:53:fa:cf:cd:d4:07:ad:78:ce:65:61: 25:b0:43:db:ce:65:9f:6f:ca:b4:cc:a7:16:e0:3d: 6e:e6:a0:2a:33:54:90:1b:38:c9:cd:28:64:7b:39: 78:2c:71:5b:2a:3d:67:f5:5f:c0:5c:bf:1e:90:a2: 59:05:44:8f:ff:78:af:da:23:27:8a:e9:96:08:33: 70:02:e0:41:ba:f6:73:55:1f:de:d4:f0:1d:39:54: 52:f5:41:b0:d5:eb:84:dd:a6:86:35:9a:86:c4:e8: c7:81:e6:76:8b:6e:58:61:95:47:98:a7:bd:09:c7: 7d:dc:7c:ee:a0:d0:6b:a8:4b:2a:c2:24:2b:3d:11: 17:c0:7a:3b:f4:ef:13:ee:a5:7b:7b:f6:cb:e1:b7: 2e:31:a7:f6:39:0a:bd:a0:30:88:91:a9:24:20:b0: 21:a4:f4:8c:81:14:75:30:bf:19:e7:d4:6e:87:b9: ac:94:77:24:7a:f5:33:0a:27:22:7a:0d:48:6e:a7: 5e:b5:9d:a1:09:9f:af:4d:5a:1b:a5:a8:8c:6d:f8: 71:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:6D:97:58:54:EB:9C:51:29:D7:97:14:4E:95:9C:5A:E1:DE:50:50 X509v3 Authority Key Identifier: keyid:1D:6B:6B:6A:50:61:A4:11:5D:53:04:0C:FF:DC:64:B3:B0:D7:1A:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWtralBhpBFdUwQM_9xks7DXGng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/9e5f54-ba3f-4b6e-9da9-bfafd622e89f/1/HWtralBhpBFdUwQM_9xks7DXGng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e9:21:e7:82:41:a2:75:f5:66:42:8e:2d:d3:cc:e9:90:90: f9:4b:cc:c6:06:02:74:4d:2b:7a:36:27:0a:23:74:41:b2:d3: 60:75:bb:74:19:8f:16:83:24:b0:84:5a:da:40:36:40:a1:8d: 18:7f:52:dd:61:7f:cf:4f:40:e9:01:65:64:6f:51:37:05:02: 53:26:6c:6d:af:7c:1a:50:48:f5:c2:44:bd:c5:0c:83:63:74: 42:39:b6:9e:56:9e:cd:5e:ec:ae:c7:f1:a2:04:89:28:60:0f: 6d:3a:2a:28:ca:b1:69:ec:81:8b:0f:18:d1:99:68:3b:4c:90: 7e:74:5e:e1:16:6b:5f:7d:1e:ee:a9:7e:09:f3:b1:ae:e5:60: 86:22:47:40:35:f6:96:1b:2a:01:24:7f:69:39:dd:7c:b6:c6: 61:88:37:e6:d2:fa:72:d1:5a:12:b2:4c:87:d8:6c:bb:c4:21: 54:86:f7:f8:f2:76:05:21:3e:85:cf:82:e0:84:3b:51:80:6f: 40:8e:17:f4:df:ac:d9:52:12:ae:16:ca:de:86:4b:79:8f:ae: 70:ba:ca:91:6b:ac:46:1c:09:49:e5:fe:20:ea:35:18:f4:db: 6c:da:d0:ac:22:f7:50:0a:b0:1d:8e:88:0b:ed:cb:2b:0f:f6: ab:fa:7e:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJlMbpZCu+A8+4Hpd3EVrKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNmI2YjZhNTA2MWE0MTE1ZDUzMDQwY2ZmZGM2NGIzYjBk NzFhNzgwHhcNMjUxMjIzMDUwMDQ1WhcNMjUxMjI0MDUwMDQ1WjAzMTEwLwYDVQQD EyhkMDZkOTc1ODU0ZWI5YzUxMjlkNzk3MTQ0ZTk1OWM1YWUxZGU1MDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqssb1o+Z/E+mRX1+j1bIkmpC60y2 xMeI48jM7u07QGh3PbkDtvMkg0YJsrXCe+NXU/rPzdQHrXjOZWElsEPbzmWfb8q0 zKcW4D1u5qAqM1SQGzjJzShkezl4LHFbKj1n9V/AXL8ekKJZBUSP/3iv2iMniumW CDNwAuBBuvZzVR/e1PAdOVRS9UGw1euE3aaGNZqGxOjHgeZ2i25YYZVHmKe9Ccd9 3HzuoNBrqEsqwiQrPREXwHo79O8T7qV7e/bL4bcuMaf2OQq9oDCIkakkILAhpPSM gRR1ML8Z59Ruh7mslHckevUzCicieg1IbqdetZ2hCZ+vTVobpaiMbfhxJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNBtl1hU65xRKdeXFE6VnFrh3lBQMB8GA1UdIwQY MBaAFB1ra2pQYaQRXVMEDP/cZLOw1xp4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFd0cmFsQmhwQkZkVXdRTV85eGtzN0RYR25nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85ZTVmNTQtYmEzZi00YjZlLTlkYTkt YmZhZmQ2MjJlODlmLzEvSFd0cmFsQmhwQkZkVXdRTV85eGtzN0RYR25nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC85ZTVmNTQtYmEzZi00YjZlLTlkYTktYmZhZmQ2MjJlODlm LzEvSFd0cmFsQmhwQkZkVXdRTV85eGtzN0RYR25nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOkh54JB onX1ZkKOLdPM6ZCQ+UvMxgYCdE0rejYnCiN0QbLTYHW7dBmPFoMksIRa2kA2QKGN GH9S3WF/z09A6QFlZG9RNwUCUyZsba98GlBI9cJEvcUMg2N0Qjm2nlaezV7srsfx ogSJKGAPbToqKMqxaeyBiw8Y0ZloO0yQfnRe4RZrX30e7ql+CfOxruVghiJHQDX2 lhsqASR/aTndfLbGYYg35tL6ctFaErJMh9hsu8QhVIb3+PJ2BSE+hc+C4IQ7UYBv QI4X9N+s2VISrhbK3oZLeY+ucLrKkWusRhwJSeX+IOo1GPTbbNrQrCL3UAqwHY6I C+3LKw/2q/p+ig== -----END CERTIFICATE-----Generated at Tue Dec 23 12:36:54 2025 by rpki-client