This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft File: HWhumKzyo3vyrsaYB-aWQGCXnLg.mft (raw, json) Hash identifier: IGFAV+LsPKQRK8clukAyxAgkQhMPew+Kh6VLaul7dTM= Subject key identifier: 7D:17:55:E0:8A:FF:2E:CA:B4:64:C4:91:32:F9:45:88:39:0F:7B:82 Authority key identifier: 1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8 Certificate issuer: /CN=1d686e98acf2a37bf2aec69807e6964060979cb8 Certificate serial: 019B372160ECECBE0A35D411DE15EAA4518A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 15:01:32 +0000 Manifest this update: Fri 19 Dec 2025 15:01:32 +0000 Manifest next update: Sat 20 Dec 2025 15:01:32 +0000 Files and hashes: 1: HWhumKzyo3vyrsaYB-aWQGCXnLg.crl (hash: EGQ/hacpdfSraRCo/A9jxU9GP6b9Ut6pGTx2b3mBDcM=) 2: OxE4-aNNSEdqL0e1drWJ-u6-FW8.roa (hash: 61L/5UKRIctS8qkUbe6UFwwrHK0nH/grmD/batM7eQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 15:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:21:60:ec:ec:be:0a:35:d4:11:de:15:ea:a4:51:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d686e98acf2a37bf2aec69807e6964060979cb8 Validity Not Before: Dec 19 15:01:32 2025 GMT Not After : Dec 20 15:01:32 2025 GMT Subject: CN=7d1755e08aff2ecab464c49132f94588390f7b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d8:e8:1b:75:b6:60:e7:88:6f:5f:2e:7a:5e: 5c:33:f5:e7:24:e5:48:d7:9f:29:88:bc:37:03:f1: 1c:59:9d:a6:f8:81:26:57:04:7d:63:15:10:74:6e: 32:89:3d:9e:75:76:07:43:98:ad:a7:5b:f8:1e:a2: 3e:e3:46:de:21:19:98:78:7a:84:e8:3d:74:68:80: 57:f3:ae:ee:96:a3:76:4c:e1:3b:a1:69:38:d9:ab: aa:28:18:bc:85:3a:dc:75:36:d8:41:66:9c:91:79: 10:0a:f3:d7:63:6a:10:c4:ff:ac:49:8b:ac:78:47: 94:ab:9b:8d:bc:3c:3e:64:91:ab:ef:0a:28:e5:e9: 1a:7b:70:39:94:79:21:19:ed:1c:c4:67:23:24:a7: 4a:bc:24:56:76:2b:8f:f3:1d:f7:56:ef:83:8c:4f: 31:23:19:7b:1b:96:43:9c:24:df:d5:76:5d:75:b9: eb:34:2b:43:f4:ad:de:03:14:bd:13:3d:f6:61:13: 3f:e1:71:6e:ff:e1:3c:de:7e:fe:5b:3d:c4:24:3a: fc:57:f5:1d:cb:7b:34:d5:44:3d:3e:ef:db:c8:07: 38:99:9e:cb:96:b9:b5:66:cf:83:c6:bb:24:70:fd: 19:40:a7:f8:12:9f:87:c1:04:e6:fd:aa:68:63:82: bc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:17:55:E0:8A:FF:2E:CA:B4:64:C4:91:32:F9:45:88:39:0F:7B:82 X509v3 Authority Key Identifier: keyid:1D:68:6E:98:AC:F2:A3:7B:F2:AE:C6:98:07:E6:96:40:60:97:9C:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWhumKzyo3vyrsaYB-aWQGCXnLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a877c8-e7cb-4540-bd43-5acdbf474548/1/HWhumKzyo3vyrsaYB-aWQGCXnLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:da:74:6f:ae:dd:a6:b3:f1:78:39:03:03:6e:23:05:6e:46: f0:36:13:db:f4:2b:ed:aa:b9:61:66:8b:b3:de:df:36:e0:7e: 85:b4:ab:5e:86:5d:09:82:1b:e2:44:95:9b:48:01:92:04:ec: c4:24:6d:60:ec:31:ef:c5:ca:16:04:55:7a:c6:4b:23:46:2a: 2b:0a:62:76:d3:49:8e:29:45:7a:ad:58:93:73:88:ef:3a:f3: 4b:7c:02:f6:11:3c:34:3b:05:26:2e:e4:f6:9a:eb:72:f1:16: 67:22:68:fe:54:ee:7a:d3:ee:d8:3d:be:96:d2:0d:64:fc:1c: ec:d3:59:1f:6e:2d:e0:68:28:f9:0b:e6:f4:e4:ac:fb:64:27: 07:17:3d:81:44:0a:78:e3:01:ab:0f:d1:73:c2:4c:28:36:9a: 10:50:66:49:d9:75:df:8f:ff:42:ad:3d:b0:91:34:1e:95:1d: e5:6e:10:a3:78:b2:c2:ff:0c:a3:22:64:53:d7:47:16:0d:50: 20:e4:8a:34:49:c4:69:db:12:7d:41:1a:4f:3c:1b:ac:cf:80: 26:e4:24:c1:08:e1:76:20:b2:91:a8:b2:5f:5a:bd:57:62:f8: b7:e0:52:f3:19:8c:c2:9c:56:00:a1:34:0d:66:8c:80:c0:93: 31:45:d9:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3IWDs7L4KNdQR3hXqpFGKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNjg2ZTk4YWNmMmEzN2JmMmFlYzY5ODA3ZTY5NjQwNjA5 NzljYjgwHhcNMjUxMjE5MTUwMTMyWhcNMjUxMjIwMTUwMTMyWjAzMTEwLwYDVQQD Eyg3ZDE3NTVlMDhhZmYyZWNhYjQ2NGM0OTEzMmY5NDU4ODM5MGY3YjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9joG3W2YOeIb18uel5cM/XnJOVI 158piLw3A/EcWZ2m+IEmVwR9YxUQdG4yiT2edXYHQ5itp1v4HqI+40beIRmYeHqE 6D10aIBX867ulqN2TOE7oWk42auqKBi8hTrcdTbYQWackXkQCvPXY2oQxP+sSYus eEeUq5uNvDw+ZJGr7woo5ekae3A5lHkhGe0cxGcjJKdKvCRWdiuP8x33Vu+DjE8x Ixl7G5ZDnCTf1XZddbnrNCtD9K3eAxS9Ez32YRM/4XFu/+E83n7+Wz3EJDr8V/Ud y3s01UQ9Pu/byAc4mZ7Llrm1Zs+DxrskcP0ZQKf4Ep+HwQTm/apoY4K8RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH0XVeCK/y7KtGTEkTL5RYg5D3uCMB8GA1UdIwQY MBaAFB1obpis8qN78q7GmAfmlkBgl5y4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hODc3YzgtZTdjYi00NTQwLWJkNDMt NWFjZGJmNDc0NTQ4LzEvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9hODc3YzgtZTdjYi00NTQwLWJkNDMtNWFjZGJmNDc0NTQ4 LzEvSFdodW1LenlvM3Z5cnNhWUItYVdRR0NYbkxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9p0b67d prPxeDkDA24jBW5G8DYT2/Qr7aq5YWaLs97fNuB+hbSrXoZdCYIb4kSVm0gBkgTs xCRtYOwx78XKFgRVesZLI0YqKwpidtNJjilFeq1Yk3OI7zrzS3wC9hE8NDsFJi7k 9prrcvEWZyJo/lTuetPu2D2+ltINZPwc7NNZH24t4Ggo+Qvm9OSs+2QnBxc9gUQK eOMBqw/Rc8JMKDaaEFBmSdl134//Qq09sJE0HpUd5W4Qo3iywv8MoyJkU9dHFg1Q IOSKNEnEadsSfUEaTzwbrM+AJuQkwQjhdiCykaiyX1q9V2L4t+BS8xmMwpxWAKE0 DWaMgMCTMUXZAA== -----END CERTIFICATE-----Generated at Fri Dec 19 21:07:42 2025 by rpki-client