This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft File: HWW3t7iY-q7nB2fQlxXENqg_zcI.mft (raw, json) Hash identifier: L5ILSv0cvwB4PzU1A7PtHLG0VHxBObOLmEQkA5jVWNQ= Subject key identifier: 5D:29:58:9B:DB:1C:05:81:4C:3F:A8:08:0F:07:5C:C3:A7:7C:D2:19 Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2 Certificate issuer: /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2 Certificate serial: 019B57F51ED2978D07AFBDB83FCF0AFDCB78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft Manifest number: 179E Signing time: Fri 26 Dec 2025 00:00:40 +0000 Manifest this update: Fri 26 Dec 2025 00:00:40 +0000 Manifest next update: Sat 27 Dec 2025 00:00:40 +0000 Files and hashes: 1: ESdFHrMTT9CdnTueAws85KzTpOo.roa (hash: EFe4+WtiIfRKsYq3EhY1PIgLIFzMrHc8WS2QY4wWHBs=) 2: HWW3t7iY-q7nB2fQlxXENqg_zcI.crl (hash: ul5HavY2JAfu4dVTAhSaeYmakYpT8vRrW8w/0ni6UW0=) 3: S7dw96BjJHjSAZkMcxGi_FB5doA.roa (hash: KE2tpzq8RhZkUzoGjIN+rbgmJi4KOhIPNewQQ1O2Z3o=) 4: lHt_Mh1w-7vs8I-ZaeWKv1xW2Ps.roa (hash: /8Glm1hc9AeZKEAxOBVRVagGt2gyvK5usk/gBvfbgls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:f5:1e:d2:97:8d:07:af:bd:b8:3f:cf:0a:fd:cb:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2 Validity Not Before: Dec 26 00:00:40 2025 GMT Not After : Dec 27 00:00:40 2025 GMT Subject: CN=5d29589bdb1c05814c3fa8080f075cc3a77cd219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:89:d5:5d:7c:73:a3:19:37:8a:5f:10:82:97: de:df:a0:58:4e:0c:41:49:97:10:29:86:15:ae:d4: c5:0f:e4:0f:8a:63:54:78:21:35:4b:bd:82:fd:82: 06:fd:68:d4:37:75:5a:bc:82:27:2c:c8:07:ff:61: ca:2d:e0:b8:24:54:9d:e7:6c:66:5b:73:df:6b:19: 24:18:76:43:0a:c2:13:0f:eb:5c:7a:55:93:a8:cc: 93:69:84:53:b4:7a:62:14:a0:9c:c5:fb:01:12:e9: 0d:d6:62:77:4a:ee:bc:ab:91:d1:5c:e8:d2:a0:5d: fc:fa:68:a0:b3:35:69:ac:53:70:e8:db:63:26:45: fb:c0:51:f5:20:09:67:3b:f2:95:a3:72:b9:1f:a5: 4e:08:85:01:13:dc:86:04:48:79:d9:a3:0a:8e:f2: 2c:0e:98:b4:08:2c:3c:a7:39:68:61:54:f3:70:52: d1:9b:61:08:fb:f8:b3:4e:10:dc:3f:f6:81:ac:56: d7:1a:9e:db:cd:a5:fb:a1:ec:21:5d:50:8c:99:8b: 1a:17:8e:90:d6:24:b2:20:ec:7a:78:4d:82:c1:2d: 7c:05:2b:9c:8a:83:58:71:a9:47:c2:c1:fc:12:4a: 1d:96:63:11:b7:3b:59:6f:28:df:d1:68:b0:76:d1: 59:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:29:58:9B:DB:1C:05:81:4C:3F:A8:08:0F:07:5C:C3:A7:7C:D2:19 X509v3 Authority Key Identifier: keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:98:1e:a4:a7:e9:53:0a:f1:10:fb:f6:d8:22:11:8d:ec:a6: e1:43:83:d5:98:87:0e:fc:86:b2:c6:3e:7b:ae:c6:df:37:f1: a0:f7:d2:50:60:b7:07:25:91:08:de:79:22:0c:bd:28:fe:2a: f0:61:cc:db:49:19:0e:46:ff:3c:2a:40:4c:33:d4:6d:80:40: d4:66:4b:6c:10:dc:44:15:20:d9:3f:c0:70:99:ac:9a:cf:3b: 1f:d8:11:ed:b0:bc:2c:a4:73:1b:6e:9b:16:21:e5:38:af:73: cb:09:ad:6a:f8:9b:a4:ee:25:d0:05:75:ba:98:49:bf:65:b2: c4:54:c5:a4:a3:e0:ab:5f:c1:15:5c:f3:0b:90:f0:42:a5:49: ed:4b:b7:85:2e:b1:73:c0:9f:19:44:51:2c:1a:88:f3:e2:af: e6:a1:7d:43:7f:43:92:b6:74:9c:34:e3:98:bb:69:4f:6e:37: 89:ac:1a:89:33:e3:e3:7d:47:3a:24:56:bf:e4:e0:ff:3b:00: 9c:a5:fe:6d:06:7b:42:b9:10:d4:b9:6e:8c:02:a4:d1:d1:ff: 26:d4:fb:73:8a:cd:18:26:a4:55:a0:2e:a3:ac:2a:a1:4c:74: 87:b9:82:f9:6f:3d:e4:b3:96:1d:ec:80:50:be:f7:ae:2b:06: 15:59:b2:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtX9R7Sl40Hr724P88K/ct4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNjViN2I3Yjg5OGZhYWVlNzA3NjdkMDk3MTVjNDM2YTgz ZmNkYzIwHhcNMjUxMjI2MDAwMDQwWhcNMjUxMjI3MDAwMDQwWjAzMTEwLwYDVQQD Eyg1ZDI5NTg5YmRiMWMwNTgxNGMzZmE4MDgwZjA3NWNjM2E3N2NkMjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYnVXXxzoxk3il8Qgpfe36BYTgxB SZcQKYYVrtTFD+QPimNUeCE1S72C/YIG/WjUN3VavIInLMgH/2HKLeC4JFSd52xm W3PfaxkkGHZDCsITD+tcelWTqMyTaYRTtHpiFKCcxfsBEukN1mJ3Su68q5HRXOjS oF38+migszVprFNw6NtjJkX7wFH1IAlnO/KVo3K5H6VOCIUBE9yGBEh52aMKjvIs Dpi0CCw8pzloYVTzcFLRm2EI+/izThDcP/aBrFbXGp7bzaX7oewhXVCMmYsaF46Q 1iSyIOx6eE2CwS18BSucioNYcalHwsH8EkodlmMRtztZbyjf0WiwdtFZ3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0pWJvbHAWBTD+oCA8HXMOnfNIZMB8GA1UdIwQY MBaAFB1lt7e4mPqu5wdn0JcVxDaoP83CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUt OGZjMzczNzU3Njg0LzEvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUtOGZjMzczNzU3Njg0 LzEvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt5gepKfp UwrxEPv22CIRjeym4UOD1ZiHDvyGssY+e67G3zfxoPfSUGC3ByWRCN55Igy9KP4q 8GHM20kZDkb/PCpATDPUbYBA1GZLbBDcRBUg2T/AcJmsms87H9gR7bC8LKRzG26b FiHlOK9zywmtavibpO4l0AV1uphJv2WyxFTFpKPgq1/BFVzzC5DwQqVJ7Uu3hS6x c8CfGURRLBqI8+Kv5qF9Q39DkrZ0nDTjmLtpT243iawaiTPj431HOiRWv+Tg/zsA nKX+bQZ7QrkQ1LlujAKk0dH/JtT7c4rNGCakVaAuo6wqoUx0h7mC+W895LOWHeyA UL73risGFVmy6Q== -----END CERTIFICATE-----Generated at Fri Dec 26 01:29:49 2025 by rpki-client