This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft File: HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft (raw, json) Hash identifier: csstPnuSy7GpI4POy17CDj3gbJ59cckXQftxhpaNjd0= Subject key identifier: 00:60:0B:59:37:31:C2:A9:5E:00:5C:5B:05:58:25:BB:74:6F:1E:7F Authority key identifier: 1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54 Certificate issuer: /CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54 Certificate serial: 019B34FB5E40310920F2A615BE39A06215DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 05:00:47 +0000 Manifest this update: Fri 19 Dec 2025 05:00:47 +0000 Manifest next update: Sat 20 Dec 2025 05:00:47 +0000 Files and hashes: 1: HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl (hash: +AgdWjFDE+gRx7J8uD1HW0LJm/OdpnR4JA3X8GMiAog=) 2: yJY2Oeq3toKxTdk7-X31riY01hg.roa (hash: 5uMPJikDIqqkTXkRRFHehwnU8XhjCZjiCcVLwMn6QX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:5e:40:31:09:20:f2:a6:15:be:39:a0:62:15:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54 Validity Not Before: Dec 19 05:00:47 2025 GMT Not After : Dec 20 05:00:47 2025 GMT Subject: CN=00600b593731c2a95e005c5b055825bb746f1e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:44:26:a3:22:f1:98:48:2b:3d:de:59:45:ec: 64:be:67:ae:39:d4:89:01:f7:fd:56:6a:24:fe:35: 80:0a:fa:92:0e:24:00:d4:52:55:2b:f5:d0:6d:cc: d6:3d:5d:dd:f0:c0:ce:d9:8f:6c:1a:25:07:89:59: f3:7f:6b:e3:9a:b2:65:f1:65:b7:42:4b:ca:a6:56: 93:80:9c:64:f7:8c:6d:cb:a4:26:76:a4:59:fc:9c: 17:ed:df:c2:fb:16:6c:fb:09:2e:78:65:e9:8c:b2: eb:01:2c:3e:90:86:79:bf:24:fe:9b:a1:71:99:4a: 3b:aa:43:0e:9c:5b:36:e1:93:c0:97:57:ec:c9:65: c6:4b:87:25:a0:b1:ab:5f:04:a9:15:95:95:b1:02: 05:64:3b:e8:d1:08:0a:b9:e1:f7:7c:58:e0:be:22: b7:90:ba:fa:a7:38:ef:3d:00:db:01:90:4a:08:1b: 98:95:d3:30:85:76:88:33:a1:6f:50:bb:c6:32:72: 41:6e:28:b3:83:67:a0:80:ee:05:5f:2e:1e:81:38: c2:77:70:26:26:e1:1f:27:bb:65:be:58:9d:df:37: fc:88:7f:51:85:28:78:5f:f1:b1:89:69:d0:bc:59: 3c:93:0b:2f:29:53:6b:da:f6:86:8a:44:bd:7b:13: e7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:60:0B:59:37:31:C2:A9:5E:00:5C:5B:05:58:25:BB:74:6F:1E:7F X509v3 Authority Key Identifier: keyid:1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:74:98:0f:03:6a:d3:0a:87:5f:a3:cf:df:71:73:d7:b6:56: e5:bd:22:c9:71:98:e4:63:70:83:c7:ea:ee:4f:78:f5:9c:92: c8:3e:81:2b:47:a2:bf:5c:cc:8b:6a:7f:47:c9:0d:20:0e:d8: 6a:27:23:47:0e:c0:13:b5:bf:b0:79:11:77:8b:fa:87:e4:ac: 5c:57:f0:8e:79:3a:ee:e5:49:a1:05:ec:c7:b8:7f:14:85:22: a8:6f:1b:b1:91:ab:cf:10:e5:bd:4d:00:2b:fc:7e:49:bb:6d: 2f:07:ed:f8:d5:52:e3:e9:e2:18:ec:e8:f1:4d:d3:c2:53:3e: af:b1:b2:49:c1:32:3e:94:84:5b:b9:b5:65:0b:ef:02:d4:f3: c4:6c:9e:d1:f5:e2:0b:56:7d:ed:2b:b0:13:31:2b:26:c1:31: d2:b9:96:19:a8:40:7b:b0:58:6e:ff:32:7f:1b:ed:b6:c4:56: 01:16:82:87:51:a2:77:7c:55:a7:ad:65:c1:eb:f4:d5:78:df: a9:a1:a6:e5:cc:30:a7:cc:55:a5:95:83:b5:5b:9d:7c:58:c6: dc:3a:74:77:08:82:92:93:b3:f7:c0:52:e0:30:6e:80:a4:2e: 7f:3b:c9:d0:74:9c:80:0e:4e:69:4b:e9:c4:a9:95:38:6a:d6: ee:cb:5d:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+15AMQkg8qYVvjmgYhXbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMWMyMzU3ZTcwYjk3ZDAzZWQ3MGMzZDY4OGNlNTA3YzY3 NThkNTQwHhcNMjUxMjE5MDUwMDQ3WhcNMjUxMjIwMDUwMDQ3WjAzMTEwLwYDVQQD EygwMDYwMGI1OTM3MzFjMmE5NWUwMDVjNWIwNTU4MjViYjc0NmYxZTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0QmoyLxmEgrPd5ZRexkvmeuOdSJ Aff9Vmok/jWACvqSDiQA1FJVK/XQbczWPV3d8MDO2Y9sGiUHiVnzf2vjmrJl8WW3 QkvKplaTgJxk94xty6QmdqRZ/JwX7d/C+xZs+wkueGXpjLLrASw+kIZ5vyT+m6Fx mUo7qkMOnFs24ZPAl1fsyWXGS4cloLGrXwSpFZWVsQIFZDvo0QgKueH3fFjgviK3 kLr6pzjvPQDbAZBKCBuYldMwhXaIM6FvULvGMnJBbiizg2eggO4FXy4egTjCd3Am JuEfJ7tlvlid3zf8iH9RhSh4X/GxiWnQvFk8kwsvKVNr2vaGikS9exPnxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABgC1k3McKpXgBcWwVYJbt0bx5/MB8GA1UdIwQY MBaAFB4cI1fnC5fQPtcMPWiM5QfGdY1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGh3alYtY0xsOUEtMXd3OWFJemxCOFoxalZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wNTQ4NjctMTRkNC00OTIyLWJmNWYt NmRkY2ZhYzk3MGY3LzEvSGh3alYtY0xsOUEtMXd3OWFJemxCOFoxalZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8wNTQ4NjctMTRkNC00OTIyLWJmNWYtNmRkY2ZhYzk3MGY3 LzEvSGh3alYtY0xsOUEtMXd3OWFJemxCOFoxalZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXSYDwNq 0wqHX6PP33Fz17ZW5b0iyXGY5GNwg8fq7k949ZySyD6BK0eiv1zMi2p/R8kNIA7Y aicjRw7AE7W/sHkRd4v6h+SsXFfwjnk67uVJoQXsx7h/FIUiqG8bsZGrzxDlvU0A K/x+SbttLwft+NVS4+niGOzo8U3TwlM+r7GyScEyPpSEW7m1ZQvvAtTzxGye0fXi C1Z97SuwEzErJsEx0rmWGahAe7BYbv8yfxvttsRWARaCh1Gid3xVp61lwev01Xjf qaGm5cwwp8xVpZWDtVudfFjG3Dp0dwiCkpOz98BS4DBugKQufzvJ0HScgA5OaUvp xKmVOGrW7stdKw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:47:53 2025 by rpki-client