This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft File: Hw94pVpb5cAduAP0OMphG38VAwc.mft (raw, json) Hash identifier: smzqf1wX3tyJklWvurFcwpeJM3qqlINjfdzwsJ5MYPU= Subject key identifier: 61:B8:71:40:14:D4:80:9B:C2:4D:45:A2:BF:22:95:B5:B5:38:B7:F0 Authority key identifier: 1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07 Certificate issuer: /CN=1f0f78a55a5be5c01db803f438ca611b7f150307 Certificate serial: 019B19F1EDD17B71C9150D6E32FA10B68592 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft Manifest number: 0E52 Signing time: Sat 13 Dec 2025 23:00:43 +0000 Manifest this update: Sat 13 Dec 2025 23:00:43 +0000 Manifest next update: Sun 14 Dec 2025 23:00:43 +0000 Files and hashes: 1: Hw94pVpb5cAduAP0OMphG38VAwc.crl (hash: zxYA9mwntwJUxLRjqwC80BO3tUnHGbXI2j3Sz/Efun4=) 2: bQ335Qu1IpD2FIjMI78ziScUVGI.roa (hash: ZV4IqpYmx61tlbVAfX/UDuIrlcXCWTu1WQJfIwsAz60=) 3: feXIFkXjQ-D3K9RdNEN9AXi3txU.roa (hash: pbHb2pCafG3K6Mcopun8T/bJ0i5xcQ41Kx0DXDfoxEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:f1:ed:d1:7b:71:c9:15:0d:6e:32:fa:10:b6:85:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0f78a55a5be5c01db803f438ca611b7f150307 Validity Not Before: Dec 13 23:00:43 2025 GMT Not After : Dec 14 23:00:43 2025 GMT Subject: CN=61b8714014d4809bc24d45a2bf2295b5b538b7f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5a:5d:77:fe:f7:f1:96:74:1b:67:65:2f:a9: 8b:2e:9a:fe:20:06:1a:f2:ac:35:60:ad:bb:a6:f4: 8a:9d:41:00:a7:5a:aa:61:c0:c0:f0:0e:41:3f:19: a1:ed:52:00:ea:90:dc:d8:36:e1:12:b2:6c:76:69: 87:71:15:d9:fd:af:25:eb:69:80:44:e3:56:70:60: 37:9a:71:97:e1:6e:f1:27:e4:ec:c3:54:72:93:c3: 26:f3:79:26:d6:94:c3:c4:7f:8c:52:73:78:9b:75: 5e:00:3e:76:20:f3:3a:d2:db:b9:15:df:f8:15:1b: c9:c4:a6:7a:eb:65:54:e8:44:c3:e6:d0:40:f0:90: d3:86:7c:e4:b2:3f:de:51:c5:fb:17:48:11:44:99: de:09:4f:65:0e:36:ac:06:c1:99:71:39:bb:30:b6: 24:34:9e:5f:75:f3:35:65:c5:67:04:79:db:d9:75: b3:1c:c0:c1:73:60:02:e8:82:46:d7:f4:6b:4b:c7: 13:4b:6e:67:a6:d4:b9:0c:6f:81:0c:50:ea:70:5c: 81:5d:1a:d6:46:86:5b:56:90:a5:5d:85:aa:e7:13: 61:e5:37:25:03:bb:25:af:69:1b:db:a4:60:c2:7b: 05:38:2c:e7:95:4a:77:48:f7:fa:fc:11:90:23:e2: f7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B8:71:40:14:D4:80:9B:C2:4D:45:A2:BF:22:95:B5:B5:38:B7:F0 X509v3 Authority Key Identifier: keyid:1F:0F:78:A5:5A:5B:E5:C0:1D:B8:03:F4:38:CA:61:1B:7F:15:03:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hw94pVpb5cAduAP0OMphG38VAwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a50c7c-878a-47fd-8107-79f105aef8d6/1/Hw94pVpb5cAduAP0OMphG38VAwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:8e:ee:49:32:9a:6a:f0:29:c8:f9:28:b7:79:ac:fe:4e:c8: cc:f3:15:87:49:4d:b8:63:54:87:16:b6:d7:95:53:4e:7c:00: cd:7e:73:2c:35:f1:2e:74:aa:6d:bc:89:19:aa:ee:39:60:96: b8:65:a8:39:ea:90:3f:ea:95:02:cc:0b:ed:b7:25:9b:60:02: d8:97:3e:fb:a4:a9:d2:ae:bb:2c:0c:de:46:c0:48:11:43:71: 2a:64:9e:45:7a:66:11:8a:5a:0c:29:6c:a1:d9:b0:6a:9f:28: 1b:50:e1:e1:ba:a6:89:3b:1f:88:99:8a:4c:86:e3:4b:04:ba: 8e:ce:8c:50:75:0f:6b:e7:a6:47:46:66:7f:71:cb:4a:ce:39: e0:25:21:ae:a6:0a:11:17:9d:f1:18:d0:dd:b7:ef:04:ca:9e: f4:46:78:d4:a5:f5:14:dd:bc:3f:47:1a:22:69:d8:07:91:ed: ed:e4:1e:d0:b7:35:39:5c:3b:0e:c4:15:a2:ec:dd:07:d0:05: 8a:bd:43:8a:68:b2:0f:bd:09:bc:44:65:2a:9f:af:90:79:25: 9f:b6:36:d2:5d:e8:a1:3f:fd:c9:02:48:ae:15:c7:03:19:c5: 5e:ed:6f:14:0f:b4:8f:3c:6b:36:bd:b4:69:e6:bb:33:f9:3b: 87:ed:cb:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZ8e3Re3HJFQ1uMvoQtoWSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMGY3OGE1NWE1YmU1YzAxZGI4MDNmNDM4Y2E2MTFiN2Yx NTAzMDcwHhcNMjUxMjEzMjMwMDQzWhcNMjUxMjE0MjMwMDQzWjAzMTEwLwYDVQQD Eyg2MWI4NzE0MDE0ZDQ4MDliYzI0ZDQ1YTJiZjIyOTViNWI1MzhiN2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lpdd/738ZZ0G2dlL6mLLpr+IAYa 8qw1YK27pvSKnUEAp1qqYcDA8A5BPxmh7VIA6pDc2DbhErJsdmmHcRXZ/a8l62mA RONWcGA3mnGX4W7xJ+Tsw1Ryk8Mm83km1pTDxH+MUnN4m3VeAD52IPM60tu5Fd/4 FRvJxKZ662VU6ETD5tBA8JDThnzksj/eUcX7F0gRRJneCU9lDjasBsGZcTm7MLYk NJ5fdfM1ZcVnBHnb2XWzHMDBc2AC6IJG1/RrS8cTS25nptS5DG+BDFDqcFyBXRrW RoZbVpClXYWq5xNh5TclA7slr2kb26RgwnsFOCznlUp3SPf6/BGQI+L3vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGG4cUAU1ICbwk1For8ilbW1OLfwMB8GA1UdIwQY MBaAFB8PeKVaW+XAHbgD9DjKYRt/FQMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hNTBjN2MtODc4YS00N2ZkLTgxMDct NzlmMTA1YWVmOGQ2LzEvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9hNTBjN2MtODc4YS00N2ZkLTgxMDctNzlmMTA1YWVmOGQ2 LzEvSHc5NHBWcGI1Y0FkdUFQME9NcGhHMzhWQXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqY7uSTKa avApyPkot3ms/k7IzPMVh0lNuGNUhxa215VTTnwAzX5zLDXxLnSqbbyJGaruOWCW uGWoOeqQP+qVAswL7bclm2AC2Jc++6Sp0q67LAzeRsBIEUNxKmSeRXpmEYpaDCls odmwap8oG1Dh4bqmiTsfiJmKTIbjSwS6js6MUHUPa+emR0Zmf3HLSs454CUhrqYK ERed8RjQ3bfvBMqe9EZ41KX1FN28P0caImnYB5Ht7eQe0Lc1OVw7DsQVouzdB9AF ir1DimiyD70JvERlKp+vkHkln7Y20l3ooT/9yQJIrhXHAxnFXu1vFA+0jzxrNr20 aea7M/k7h+3Leg== -----END CERTIFICATE-----Generated at Sun Dec 14 07:42:24 2025 by rpki-client