This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft File: HpWgaWae1adm7ujr3DLjn7FIQQs.mft (raw, json) Hash identifier: 4CelBXfkNOSvfeBNWwrs1/R1d6YtACU0785l+V90RJo= Subject key identifier: 51:57:96:C2:07:F8:C6:53:A8:E3:7D:D9:57:75:FD:73:83:DD:D9:B6 Authority key identifier: 1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B Certificate issuer: /CN=1e95a069669ed5a766eee8ebdc32e39fb148410b Certificate serial: 019B5A88967261ED3DA80052B7C4A3132D03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft Manifest number: 14AA Signing time: Fri 26 Dec 2025 12:00:59 +0000 Manifest this update: Fri 26 Dec 2025 12:00:59 +0000 Manifest next update: Sat 27 Dec 2025 12:00:59 +0000 Files and hashes: 1: 2BtQZNhdik9gU2AxYKHe9sYV-jc.asa (hash: lui6LaPwr93Rb+GSmojwCYHODV1kcUqrYGkCHlqnR8A=) 2: DaVvwNhmLZ7YvB4G_4EErsgVRto.roa (hash: 9N2XrCoRGQ94Srik137EIdOpwG9c0HxGyO4AFS+YxkQ=) 3: EE-7mUbhx9KxjOOFL_gLvWWkadQ.asa (hash: t1XpCpEie7R6wo68sBwiFDumeKIC2cwJWRKzfOt5Hjs=) 4: HpWgaWae1adm7ujr3DLjn7FIQQs.crl (hash: 1n9fNXytKVxFCl2Xb0xt9mYWMKyWDeLYwSHMk+iHnPA=) 5: pytEa-hARvoLd3GQvwYYDRHNcGk.roa (hash: CeTqphbY0xTbKA/3SAMN5LszwjCvt48mPFIksGd51N4=) 6: xWdPGfUORMQyu6s_IZTLuvQgjEM.roa (hash: u3ucBkdHsz588P9alUa6oJQ8UkwrPk4NtV/qBLr/KPI=) 7: zAa2W4c_Lpg5E8JhcdxcgQpn4XM.roa (hash: fZicMsW0n0Wa64JFWSQyGvTz4WH8A1OwPR9VKQ0B65U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:96:72:61:ed:3d:a8:00:52:b7:c4:a3:13:2d:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e95a069669ed5a766eee8ebdc32e39fb148410b Validity Not Before: Dec 26 12:00:59 2025 GMT Not After : Dec 27 12:00:59 2025 GMT Subject: CN=515796c207f8c653a8e37dd95775fd7383ddd9b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8d:e8:84:6f:2c:68:83:5c:67:c0:02:26:12: 5c:6c:90:35:fb:22:5e:84:4d:ad:37:e8:fb:88:1c: b9:ea:9f:5e:34:bc:f8:90:4b:e3:7d:f0:84:88:f1: 14:3f:74:e9:5a:dd:dd:e0:69:83:3d:b2:db:a6:df: 5a:28:3c:81:30:3d:1b:b0:f9:fa:13:d7:90:6f:f5: ef:f5:5b:85:6c:9f:4b:42:91:0e:df:33:d1:e0:09: ec:20:88:e4:f9:09:e8:08:f0:e6:e1:10:df:05:6d: 01:fc:d2:93:02:9b:7b:e9:df:f2:e6:d5:fc:ce:f8: 91:9e:f3:e2:56:84:ff:f5:dd:2f:33:05:a0:3a:6c: 0e:52:66:e3:74:b0:4d:fd:91:d8:f0:4c:8e:fd:c6: 17:05:49:72:f7:ea:db:0d:9a:8e:8a:9d:f3:b9:6b: eb:a3:35:61:f2:9e:47:13:94:12:c6:2c:8d:09:a2: a6:21:57:08:9e:70:ff:f9:b9:81:b7:28:c8:93:5e: 0a:0a:d9:23:d2:74:57:9f:44:ad:79:19:7c:17:df: e2:1a:34:df:a2:52:33:f7:da:72:1d:97:6e:2e:02: 3a:c5:cd:0b:e7:30:fa:f8:de:23:22:4b:30:d7:1a: b0:d5:ac:ec:06:32:57:27:c1:ef:25:5b:05:5b:88: 52:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:57:96:C2:07:F8:C6:53:A8:E3:7D:D9:57:75:FD:73:83:DD:D9:B6 X509v3 Authority Key Identifier: keyid:1E:95:A0:69:66:9E:D5:A7:66:EE:E8:EB:DC:32:E3:9F:B1:48:41:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HpWgaWae1adm7ujr3DLjn7FIQQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/107456-df53-424d-9320-933bfa592b1d/1/HpWgaWae1adm7ujr3DLjn7FIQQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:a8:54:71:4e:d3:86:e9:6e:ee:d2:0e:51:10:2b:fe:07:6f: cf:f6:f9:cc:09:94:72:8d:13:40:b3:13:b1:4c:48:78:61:06: 9e:fc:85:41:c7:0d:64:ad:fc:9a:ab:09:49:eb:fd:eb:02:2a: 25:86:56:45:de:72:cf:4b:ad:7a:48:e5:78:d9:24:07:ea:1f: a4:bf:44:c5:74:1e:12:e0:a2:68:5e:11:16:04:c3:a2:f5:b1: 33:d2:45:aa:be:aa:be:4a:f6:61:2f:af:20:ba:56:e2:af:08: 08:e8:64:27:c3:85:35:eb:4d:80:e5:95:1a:47:08:03:88:c8: ba:23:2a:72:65:64:90:1c:8f:32:d2:53:04:8e:ba:91:4d:84: 5c:b2:ea:f4:d6:df:35:0f:1e:d7:c7:09:47:7a:a5:00:06:30: 83:87:e8:bc:e6:9f:50:19:27:6b:87:97:05:ba:65:ba:77:1f: 18:7a:1f:3f:39:e0:d0:26:ca:6b:74:84:55:d6:52:8e:8e:18: ba:4c:b4:60:f4:50:40:c4:19:09:84:04:0b:c2:95:28:05:ee: 6a:ff:2e:79:32:d7:be:e8:e9:35:3e:55:11:41:d8:ff:8a:ca: 5f:b2:ac:64:d9:8f:2b:94:91:b0:13:a7:17:28:1c:ba:8e:8c: 7d:e8:f8:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiJZyYe09qABSt8SjEy0DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOTVhMDY5NjY5ZWQ1YTc2NmVlZThlYmRjMzJlMzlmYjE0 ODQxMGIwHhcNMjUxMjI2MTIwMDU5WhcNMjUxMjI3MTIwMDU5WjAzMTEwLwYDVQQD Eyg1MTU3OTZjMjA3ZjhjNjUzYThlMzdkZDk1Nzc1ZmQ3MzgzZGRkOWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso3ohG8saINcZ8ACJhJcbJA1+yJe hE2tN+j7iBy56p9eNLz4kEvjffCEiPEUP3TpWt3d4GmDPbLbpt9aKDyBMD0bsPn6 E9eQb/Xv9VuFbJ9LQpEO3zPR4AnsIIjk+QnoCPDm4RDfBW0B/NKTApt76d/y5tX8 zviRnvPiVoT/9d0vMwWgOmwOUmbjdLBN/ZHY8EyO/cYXBUly9+rbDZqOip3zuWvr ozVh8p5HE5QSxiyNCaKmIVcInnD/+bmBtyjIk14KCtkj0nRXn0SteRl8F9/iGjTf olIz99pyHZduLgI6xc0L5zD6+N4jIksw1xqw1azsBjJXJ8HvJVsFW4hSZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFXlsIH+MZTqON92Vd1/XOD3dm2MB8GA1UdIwQY MBaAFB6VoGlmntWnZu7o69wy45+xSEELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHBXZ2FXYWUxYWRtN3VqcjNETGpuN0ZJUVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xMDc0NTYtZGY1My00MjRkLTkzMjAt OTMzYmZhNTkyYjFkLzEvSHBXZ2FXYWUxYWRtN3VqcjNETGpuN0ZJUVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xMDc0NTYtZGY1My00MjRkLTkzMjAtOTMzYmZhNTkyYjFk LzEvSHBXZ2FXYWUxYWRtN3VqcjNETGpuN0ZJUVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArqhUcU7T hulu7tIOURAr/gdvz/b5zAmUco0TQLMTsUxIeGEGnvyFQccNZK38mqsJSev96wIq JYZWRd5yz0utekjleNkkB+ofpL9ExXQeEuCiaF4RFgTDovWxM9JFqr6qvkr2YS+v ILpW4q8ICOhkJ8OFNetNgOWVGkcIA4jIuiMqcmVkkByPMtJTBI66kU2EXLLq9Nbf NQ8e18cJR3qlAAYwg4fovOafUBkna4eXBbpluncfGHofPzng0CbKa3SEVdZSjo4Y uky0YPRQQMQZCYQEC8KVKAXuav8ueTLXvujpNT5VEUHY/4rKX7KsZNmPK5SRsBOn Fygcuo6Mfej4Hg== -----END CERTIFICATE-----Generated at Fri Dec 26 16:02:28 2025 by rpki-client