This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft File: hwogf40P0mMwvNWfqEc1SdyS3uk.mft (raw, json) Hash identifier: bPOFqi8KnyjiFOYCxvqcITJbm5cOWVlZfNJMAMvhq8w= Subject key identifier: 70:FB:6D:1D:F0:54:0F:B0:51:32:3F:17:CC:CB:F1:B1:89:83:25:65 Authority key identifier: 87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9 Certificate issuer: /CN=870a207f8d0fd26330bcd59fa8473549dc92dee9 Certificate serial: 019B3D90919C007F1BFB0CA361682CD8FCD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft Manifest number: 0D4C Signing time: Sat 20 Dec 2025 21:00:43 +0000 Manifest this update: Sat 20 Dec 2025 21:00:43 +0000 Manifest next update: Sun 21 Dec 2025 21:00:43 +0000 Files and hashes: 1: U0r3hhSWvJREMqLZH2Hpa3q15Vc.roa (hash: ddXvERc2U8k9QtkbhiwQPmEstoMSyktp+JN206s3ypM=) 2: hwogf40P0mMwvNWfqEc1SdyS3uk.crl (hash: x9aj6S/dxZzItkM0nxDNg62CcLchej8yCWM6c+9mVnI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:91:9c:00:7f:1b:fb:0c:a3:61:68:2c:d8:fc:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870a207f8d0fd26330bcd59fa8473549dc92dee9 Validity Not Before: Dec 20 21:00:43 2025 GMT Not After : Dec 21 21:00:43 2025 GMT Subject: CN=70fb6d1df0540fb051323f17cccbf1b189832565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0f:d7:df:4a:87:83:fe:c1:f9:74:df:d1:d8: 45:e7:5e:c4:27:22:11:e3:19:03:89:cc:6f:1a:e4: 9b:d0:4f:9b:08:74:d1:0a:76:03:51:a7:ae:26:37: 3d:fb:51:65:55:36:17:7f:72:b6:2f:f5:29:46:2d: 5b:73:96:53:aa:05:81:47:96:78:dc:57:ea:d1:5c: 24:43:96:27:b3:0b:2c:2d:00:e4:f8:2b:5c:43:97: 93:e2:b7:f6:23:e9:93:4a:e7:91:e2:27:c0:7a:69: 51:16:54:1b:93:98:a3:b6:98:0c:d8:91:10:fa:8a: 13:ba:46:0a:6a:d9:59:49:b3:a0:75:45:f1:6b:0a: 03:d5:ab:9b:6b:50:8e:8a:70:5a:10:94:a9:e3:78: 3d:eb:c5:3b:06:2b:7a:70:47:60:6c:9a:20:c1:cd: f0:db:06:e6:bf:3e:8a:04:d8:84:09:b6:23:05:32: 47:47:06:45:51:fd:4e:a0:df:9e:b4:d7:f5:85:6d: 00:a8:d5:3c:5c:c3:5f:32:6a:5f:76:f2:72:57:38: 6a:e8:bf:a0:2e:a7:f4:a6:0d:70:90:a8:23:33:8a: 0c:4d:fb:80:86:59:ac:2d:b0:2e:94:43:64:a9:00: 85:9c:9d:1a:a7:ef:49:62:32:8f:09:69:be:57:0d: 51:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FB:6D:1D:F0:54:0F:B0:51:32:3F:17:CC:CB:F1:B1:89:83:25:65 X509v3 Authority Key Identifier: keyid:87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:da:1f:7e:23:3b:5d:2c:a6:dd:46:00:bc:7b:97:1e:96:1e: 34:61:30:a2:48:07:51:34:4a:94:0c:9f:6f:b9:20:71:05:6d: f3:84:fd:f3:35:b0:7e:2f:9c:8a:b0:7e:0f:14:bc:cf:8a:d6: 75:d9:2d:8f:a9:31:ba:a3:9a:6e:3d:9d:10:9e:07:e5:99:0a: 8f:84:47:12:60:d2:7b:ce:1f:e8:80:92:0b:9f:5e:9d:9e:29: 2f:c9:bf:26:87:39:6f:0f:8f:aa:af:64:02:7a:bb:df:99:df: 1f:7c:01:c3:fd:79:48:da:86:ae:de:79:d6:96:bc:4c:7b:ea: df:4c:bb:9a:49:dc:63:25:28:03:81:c3:08:23:f9:a2:e2:c6: fb:e9:d8:98:d6:7f:49:4b:51:5e:a0:a2:32:af:be:bf:3f:bb: 1d:db:93:67:05:d7:e4:60:84:24:13:06:10:39:d4:99:35:a9: 72:00:83:58:3b:d8:54:f9:e0:35:e8:bf:01:0d:63:e4:ea:52: ae:81:c7:bc:74:3e:93:c5:e5:b6:02:95:e3:99:ff:8a:d3:34: 8b:9e:92:a3:eb:14:9e:41:eb:17:dc:9b:a2:8d:24:13:35:ad: 1e:40:38:44:f5:ae:3c:bc:b0:95:16:2c:91:7b:58:0e:de:cd: 4a:4c:1f:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kJGcAH8b+wyjYWgs2PzWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGEyMDdmOGQwZmQyNjMzMGJjZDU5ZmE4NDczNTQ5ZGM5 MmRlZTkwHhcNMjUxMjIwMjEwMDQzWhcNMjUxMjIxMjEwMDQzWjAzMTEwLwYDVQQD Eyg3MGZiNmQxZGYwNTQwZmIwNTEzMjNmMTdjY2NiZjFiMTg5ODMyNTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw/X30qHg/7B+XTf0dhF517EJyIR 4xkDicxvGuSb0E+bCHTRCnYDUaeuJjc9+1FlVTYXf3K2L/UpRi1bc5ZTqgWBR5Z4 3Ffq0VwkQ5YnswssLQDk+CtcQ5eT4rf2I+mTSueR4ifAemlRFlQbk5ijtpgM2JEQ +ooTukYKatlZSbOgdUXxawoD1auba1COinBaEJSp43g968U7Bit6cEdgbJogwc3w 2wbmvz6KBNiECbYjBTJHRwZFUf1OoN+etNf1hW0AqNU8XMNfMmpfdvJyVzhq6L+g Lqf0pg1wkKgjM4oMTfuAhlmsLbAulENkqQCFnJ0ap+9JYjKPCWm+Vw1R0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHD7bR3wVA+wUTI/F8zL8bGJgyVlMB8GA1UdIwQY MBaAFIcKIH+ND9JjMLzVn6hHNUnckt7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHdvZ2Y0MFAwbU13dk5XZnFFYzFTZHlTM3VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wYmRiNzgtN2U2My00NzBlLWEzOWQt ZjAwYTE5Mzg4ODFmLzEvaHdvZ2Y0MFAwbU13dk5XZnFFYzFTZHlTM3VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8wYmRiNzgtN2U2My00NzBlLWEzOWQtZjAwYTE5Mzg4ODFm LzEvaHdvZ2Y0MFAwbU13dk5XZnFFYzFTZHlTM3VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJNoffiM7 XSym3UYAvHuXHpYeNGEwokgHUTRKlAyfb7kgcQVt84T98zWwfi+cirB+DxS8z4rW ddktj6kxuqOabj2dEJ4H5ZkKj4RHEmDSe84f6ICSC59enZ4pL8m/Joc5bw+Pqq9k Anq735nfH3wBw/15SNqGrt551pa8THvq30y7mkncYyUoA4HDCCP5ouLG++nYmNZ/ SUtRXqCiMq++vz+7HduTZwXX5GCEJBMGEDnUmTWpcgCDWDvYVPngNei/AQ1j5OpS roHHvHQ+k8XltgKV45n/itM0i56So+sUnkHrF9yboo0kEzWtHkA4RPWuPLywlRYs kXtYDt7NSkwfnQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:37:39 2025 by rpki-client