This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft File: hwNNK1ky3RSR3n__McfYOvcyBuI.mft (raw, json) Hash identifier: JsVeyvx02AqdJTgrahM4IM8HteRyJuaT80PEqkb/9ac= Subject key identifier: DA:2F:EA:38:0A:0F:CA:FD:C4:05:18:A8:89:C1:28:26:8C:22:3B:A9 Authority key identifier: 87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2 Certificate issuer: /CN=87034d2b5932dd1491de7fff31c7d83af73206e2 Certificate serial: 019B405B1B87BDA827B947BFD587AA200553 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft Manifest number: A4 Signing time: Sun 21 Dec 2025 10:01:11 +0000 Manifest this update: Sun 21 Dec 2025 10:01:11 +0000 Manifest next update: Mon 22 Dec 2025 10:01:11 +0000 Files and hashes: 1: 8hT_E2lP_XAAVJsTroBoa69lbkY.roa (hash: wsftIcKlCqe+R912iWtJnREYgPP40XIaQmbFqEEoMJE=) 2: hwNNK1ky3RSR3n__McfYOvcyBuI.crl (hash: oypJ/fWpwHw2OVI2CmmPBDGvfETF736h20aaqPuPOdA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:1b:87:bd:a8:27:b9:47:bf:d5:87:aa:20:05:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87034d2b5932dd1491de7fff31c7d83af73206e2 Validity Not Before: Dec 21 10:01:11 2025 GMT Not After : Dec 22 10:01:11 2025 GMT Subject: CN=da2fea380a0fcafdc40518a889c128268c223ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0c:d8:4b:ab:99:9a:4b:87:8f:cf:81:35:84: ca:c8:4c:25:dc:3d:78:1b:b5:ac:90:59:e4:2e:b6: de:b9:21:56:4b:95:1d:10:b9:91:37:9f:30:d7:c6: c1:37:08:8e:3b:e2:97:91:c9:6f:66:3b:d3:d3:bb: fd:18:4c:ec:1e:5c:b0:10:20:f9:fc:bd:86:f0:d3: d3:ee:15:06:e3:6d:e5:98:a3:62:e2:bc:e8:f0:4f: f6:77:cf:3a:90:d3:71:38:15:6f:ee:36:59:ea:68: a4:15:4a:cd:16:80:46:7a:67:a0:f2:e1:a6:9b:eb: 23:35:7a:37:e1:9a:04:b0:c8:2b:5f:0f:f5:dc:6c: 2e:0a:29:2d:47:15:57:fc:2e:b6:d1:7c:a1:49:37: b3:93:b3:4a:29:bc:64:f5:62:43:c4:d8:f9:8d:25: 53:08:7e:71:c2:00:de:d6:bd:f1:4f:3e:0f:60:1e: 66:15:f7:6c:14:2e:e6:36:1c:30:e4:24:b1:2e:bd: ec:1a:30:cb:4d:4a:f7:5f:a1:72:eb:6e:d5:ef:d0: d0:b9:3a:ab:f0:b5:a3:76:82:f8:23:7c:12:45:2e: be:47:f6:1a:55:cd:18:a5:0d:99:6b:ca:94:cb:4a: 83:52:c2:82:cb:7d:4a:6c:da:33:b0:d0:8d:d8:24: 6c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:2F:EA:38:0A:0F:CA:FD:C4:05:18:A8:89:C1:28:26:8C:22:3B:A9 X509v3 Authority Key Identifier: keyid:87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:b5:68:4d:02:3c:74:fa:d8:3a:15:24:17:ea:9b:9e:76:96: 1c:6e:db:e2:ee:55:04:16:26:15:bc:fa:b5:99:e5:9c:54:a6: 61:ed:34:25:64:b8:c5:e2:e1:58:f0:ea:58:31:34:45:a5:3b: ee:a5:a6:c0:23:37:da:65:f9:58:d2:d7:84:46:7a:ef:0c:ff: d8:ce:ef:b2:48:f5:11:86:c8:04:34:eb:be:55:23:0c:11:a4: 63:21:25:6e:b7:75:3e:20:f8:a2:dd:58:e7:e7:09:3b:90:56: e7:75:1e:c9:20:92:2e:f3:34:73:b2:9b:37:0a:80:ce:30:d8: a3:f7:16:3c:c9:b8:6e:21:21:d7:56:a7:dd:ba:06:ac:93:94: 3a:40:a6:a7:12:1d:a3:20:b4:48:7c:f1:16:22:a0:46:bb:0c: 15:1f:96:94:81:ea:79:05:fc:77:01:75:0f:bc:5b:b6:c3:d0: 9c:d7:cc:39:de:d8:83:bf:9f:7f:7d:f3:fb:da:30:84:03:fd: 16:69:a2:bc:d8:f1:a8:8b:ab:9e:d9:68:69:82:8e:70:0a:48: fb:b5:60:db:97:5a:26:6c:85:a8:56:35:a9:2b:8a:af:e9:83: 11:91:bc:98:ff:2d:b5:fc:0a:66:67:f7:31:ec:32:df:b4:4b: 9f:32:8d:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWxuHvagnuUe/1YeqIAVTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MDM0ZDJiNTkzMmRkMTQ5MWRlN2ZmZjMxYzdkODNhZjcz MjA2ZTIwHhcNMjUxMjIxMTAwMTExWhcNMjUxMjIyMTAwMTExWjAzMTEwLwYDVQQD EyhkYTJmZWEzODBhMGZjYWZkYzQwNTE4YTg4OWMxMjgyNjhjMjIzYmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAzYS6uZmkuHj8+BNYTKyEwl3D14 G7WskFnkLrbeuSFWS5UdELmRN58w18bBNwiOO+KXkclvZjvT07v9GEzsHlywECD5 /L2G8NPT7hUG423lmKNi4rzo8E/2d886kNNxOBVv7jZZ6mikFUrNFoBGemeg8uGm m+sjNXo34ZoEsMgrXw/13GwuCiktRxVX/C620XyhSTezk7NKKbxk9WJDxNj5jSVT CH5xwgDe1r3xTz4PYB5mFfdsFC7mNhww5CSxLr3sGjDLTUr3X6Fy627V79DQuTqr 8LWjdoL4I3wSRS6+R/YaVc0YpQ2Za8qUy0qDUsKCy31KbNozsNCN2CRsdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNov6jgKD8r9xAUYqInBKCaMIjupMB8GA1UdIwQY MBaAFIcDTStZMt0Ukd5//zHH2Dr3MgbiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHdOTksxa3kzUlNSM25fX01jZllPdmN5QnVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83MGNjNTQtYTc0OC00NWVkLTk5YWMt MzlmZjI2MTUyYWE0LzEvaHdOTksxa3kzUlNSM25fX01jZllPdmN5QnVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS83MGNjNTQtYTc0OC00NWVkLTk5YWMtMzlmZjI2MTUyYWE0 LzEvaHdOTksxa3kzUlNSM25fX01jZllPdmN5QnVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7VoTQI8 dPrYOhUkF+qbnnaWHG7b4u5VBBYmFbz6tZnlnFSmYe00JWS4xeLhWPDqWDE0RaU7 7qWmwCM32mX5WNLXhEZ67wz/2M7vskj1EYbIBDTrvlUjDBGkYyElbrd1PiD4ot1Y 5+cJO5BW53UeySCSLvM0c7KbNwqAzjDYo/cWPMm4biEh11an3boGrJOUOkCmpxId oyC0SHzxFiKgRrsMFR+WlIHqeQX8dwF1D7xbtsPQnNfMOd7Yg7+ff33z+9owhAP9 FmmivNjxqIurntloaYKOcApI+7Vg25daJmyFqFY1qSuKr+mDEZG8mP8ttfwKZmf3 Mewy37RLnzKN9w== -----END CERTIFICATE-----Generated at Sun Dec 21 17:16:01 2025 by rpki-client