This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft File: hLWkCydKlj5e0-8C6DmcubG7DHs.mft (raw, json) Hash identifier: V6k4az/0/Z6DgfjC3CABCv5pvbZzJGdpRCcZznZEipM= Subject key identifier: CF:D6:C7:2A:BF:7C:F0:B0:9E:B5:C1:CB:9D:BE:C8:81:9C:A0:DA:F7 Authority key identifier: 84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B Certificate issuer: /CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b Certificate serial: 019B4100257C8ECDAF911F9B2D291C21581F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 13:01:27 +0000 Manifest this update: Sun 21 Dec 2025 13:01:27 +0000 Manifest next update: Mon 22 Dec 2025 13:01:27 +0000 Files and hashes: 1: O8vYugo1IMFhRrolkiJ5A2F_9k4.roa (hash: vT082QVsehcKVaVyOGMEheCQhaYoT8jhfxj4aHEzNiI=) 2: hLWkCydKlj5e0-8C6DmcubG7DHs.crl (hash: Z9AOqf8uwlw8FUjUFOGXDKnw81w05zE2AMg0OPVMcZY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:25:7c:8e:cd:af:91:1f:9b:2d:29:1c:21:58:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b5a40b274a963e5ed3ef02e8399cb9b1bb0c7b Validity Not Before: Dec 21 13:01:27 2025 GMT Not After : Dec 22 13:01:27 2025 GMT Subject: CN=cfd6c72abf7cf0b09eb5c1cb9dbec8819ca0daf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fa:7b:f2:17:21:64:b1:32:07:10:9b:df:28: fb:5b:09:37:84:45:ff:c1:a5:fe:f4:42:b9:35:b3: 94:af:5f:06:25:8c:ac:f6:68:46:d9:0c:be:69:f1: 55:80:0f:8e:c4:96:99:42:ec:62:c2:ff:21:59:2f: 14:ef:87:99:69:6c:1d:0d:aa:af:eb:58:cd:fe:f2: 1d:9e:6d:92:73:77:19:ae:d4:37:36:c6:fc:36:2a: bc:50:34:9b:c7:d5:31:82:9b:8f:cc:2c:4c:3a:cb: 75:6c:eb:c2:15:5e:52:6f:51:16:cd:1e:94:5c:5b: b4:75:c8:c1:37:59:5a:f9:d6:c0:e5:da:e5:64:93: 8b:8f:2b:da:30:93:5f:a9:9d:26:1b:21:2d:71:eb: d8:1f:a6:99:2a:b0:41:90:a1:cd:70:73:cf:90:9d: 86:6e:fc:39:10:8c:ac:21:12:4b:0a:ad:69:12:aa: cc:c0:bd:60:ba:7a:72:c6:32:f1:49:f9:8e:3e:fe: 1f:10:06:eb:ee:e7:e6:df:79:25:8e:63:e9:59:cb: 32:14:cd:2b:27:3d:7b:04:6f:d0:ef:1c:3a:39:53: 83:7a:d8:ad:14:40:de:96:6a:bd:69:a3:d3:18:65: e1:27:f0:9a:44:b7:62:ce:f4:17:d1:8c:89:e1:bd: 15:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D6:C7:2A:BF:7C:F0:B0:9E:B5:C1:CB:9D:BE:C8:81:9C:A0:DA:F7 X509v3 Authority Key Identifier: keyid:84:B5:A4:0B:27:4A:96:3E:5E:D3:EF:02:E8:39:9C:B9:B1:BB:0C:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLWkCydKlj5e0-8C6DmcubG7DHs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3d9777-c996-46fc-9d67-a720af861fee/1/hLWkCydKlj5e0-8C6DmcubG7DHs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:69:3a:a5:87:ac:43:e8:1a:35:f4:43:07:9a:c0:85:0c:c7: 2c:c1:ce:a5:71:4c:17:f5:92:a9:fb:0a:ef:43:25:c8:4f:39: 1d:aa:9c:83:69:be:e6:13:a0:84:5c:ec:2c:ce:60:26:a4:0e: bb:f8:2b:5d:cc:d3:89:68:c1:1f:46:2c:21:a9:d3:c7:62:5b: 59:74:5b:3b:84:81:03:8a:16:b4:cf:c1:c1:ca:64:c0:76:ad: 21:3a:14:32:91:fa:3f:56:4c:73:b4:2a:4b:4b:67:ef:c1:07: 99:fb:f9:bf:92:a2:37:1b:40:1b:4e:bc:78:7d:34:47:d1:af: 23:4b:75:97:be:fd:ea:a8:95:af:df:d2:f1:62:11:cd:08:1b: 04:b1:7d:5a:1f:5a:be:d4:de:4d:5f:98:26:64:fd:b9:69:f8: da:48:5b:aa:29:57:ec:cd:38:2e:67:aa:0d:d7:1b:f6:8a:d8: cd:10:fb:8d:db:d0:90:0e:fa:38:71:f5:d7:9e:00:45:c7:8f: ae:91:31:ce:f3:03:72:b7:e9:77:81:d8:de:51:7d:ff:b5:e0: 85:37:f6:07:6f:c3:21:74:47:27:fe:36:aa:15:e0:ae:03:79: c2:d9:71:69:2b:8f:7e:d6:aa:62:94:62:2f:d5:23:3d:0f:ec: 8b:01:6f:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBACV8js2vkR+bLSkcIVgfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjVhNDBiMjc0YTk2M2U1ZWQzZWYwMmU4Mzk5Y2I5YjFi YjBjN2IwHhcNMjUxMjIxMTMwMTI3WhcNMjUxMjIyMTMwMTI3WjAzMTEwLwYDVQQD EyhjZmQ2YzcyYWJmN2NmMGIwOWViNWMxY2I5ZGJlYzg4MTljYTBkYWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPp78hchZLEyBxCb3yj7Wwk3hEX/ waX+9EK5NbOUr18GJYys9mhG2Qy+afFVgA+OxJaZQuxiwv8hWS8U74eZaWwdDaqv 61jN/vIdnm2Sc3cZrtQ3Nsb8Niq8UDSbx9UxgpuPzCxMOst1bOvCFV5Sb1EWzR6U XFu0dcjBN1la+dbA5drlZJOLjyvaMJNfqZ0mGyEtcevYH6aZKrBBkKHNcHPPkJ2G bvw5EIysIRJLCq1pEqrMwL1gunpyxjLxSfmOPv4fEAbr7ufm33kljmPpWcsyFM0r Jz17BG/Q7xw6OVODetitFEDelmq9aaPTGGXhJ/CaRLdizvQX0YyJ4b0V2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM/Wxyq/fPCwnrXBy52+yIGcoNr3MB8GA1UdIwQY MBaAFIS1pAsnSpY+XtPvAug5nLmxuwx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExXa0N5ZEtsajVlMC04QzZEbWN1Ykc3REhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8zZDk3NzctYzk5Ni00NmZjLTlkNjct YTcyMGFmODYxZmVlLzEvaExXa0N5ZEtsajVlMC04QzZEbWN1Ykc3REhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8zZDk3NzctYzk5Ni00NmZjLTlkNjctYTcyMGFmODYxZmVl LzEvaExXa0N5ZEtsajVlMC04QzZEbWN1Ykc3REhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWk6pYes Q+gaNfRDB5rAhQzHLMHOpXFMF/WSqfsK70MlyE85Haqcg2m+5hOghFzsLM5gJqQO u/grXczTiWjBH0YsIanTx2JbWXRbO4SBA4oWtM/BwcpkwHatIToUMpH6P1ZMc7Qq S0tn78EHmfv5v5KiNxtAG068eH00R9GvI0t1l7796qiVr9/S8WIRzQgbBLF9Wh9a vtTeTV+YJmT9uWn42khbqilX7M04LmeqDdcb9orYzRD7jdvQkA76OHH1154ARceP rpExzvMDcrfpd4HY3lF9/7XghTf2B2/DIXRHJ/42qhXgrgN5wtlxaSuPftaqYpRi L9UjPQ/siwFvzg== -----END CERTIFICATE-----Generated at Sun Dec 21 15:20:24 2025 by rpki-client