This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft File: HwCwqokkw3eInj07mWCTuHpz0OE.mft (raw, json) Hash identifier: z8WW+8tLuS6j4bUoky8CQzhlTF8GQQG/6qGpXjaD1fo= Subject key identifier: 83:E6:0C:F1:E0:F6:13:3D:CD:78:65:0F:C5:95:E9:A1:36:BB:91:BB Authority key identifier: 1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1 Certificate issuer: /CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1 Certificate serial: 019B59E46C71F215ADC7BF482E5FEB8DA63C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft Manifest number: 10F0 Signing time: Fri 26 Dec 2025 09:01:40 +0000 Manifest this update: Fri 26 Dec 2025 09:01:40 +0000 Manifest next update: Sat 27 Dec 2025 09:01:40 +0000 Files and hashes: 1: HwCwqokkw3eInj07mWCTuHpz0OE.crl (hash: FbuvlnjVVsw/omTFU/msvmkLYe0sw5S+3cKPruyADug=) 2: V9AZTNgU1d002QfKUotGNDSDtvk.roa (hash: x3l+fuQjKQuMTqxTAI/mH6BtVLnUzYs7euSSf0MTbRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:6c:71:f2:15:ad:c7:bf:48:2e:5f:eb:8d:a6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f00b0aa8924c377889e3d3b996093b87a73d0e1 Validity Not Before: Dec 26 09:01:40 2025 GMT Not After : Dec 27 09:01:40 2025 GMT Subject: CN=83e60cf1e0f6133dcd78650fc595e9a136bb91bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ed:e0:21:83:c9:0c:78:c7:3a:30:c1:25:37: 85:5b:3c:48:f0:9b:7b:68:44:48:83:0b:70:4f:02: 62:f8:d0:9c:2b:a3:f1:5b:af:ab:e2:28:61:3a:8f: d9:69:83:b9:d3:7e:a9:9b:c2:9e:b1:41:f0:31:9e: d4:7f:2c:9b:5f:99:e4:5f:68:b3:a6:e3:2e:bc:37: 64:7a:c7:30:ee:c5:82:80:86:88:19:aa:14:a3:10: b7:eb:f1:e6:c3:79:7b:cd:e6:a7:d7:23:04:41:d5: ad:36:65:34:28:81:ff:7e:2c:8d:a9:43:eb:bb:36: 98:f8:83:35:1f:97:5b:49:3e:d2:f0:ce:29:af:02: 31:bb:74:c4:62:c4:d9:89:cb:b4:9b:a2:e1:21:62: 53:a8:29:0a:70:b8:7d:18:4b:31:4d:e2:6c:67:7a: e7:e3:91:42:f1:d5:56:97:df:b2:e8:0d:37:fe:a8: 60:de:7b:e4:8c:b9:0a:f9:34:3a:a2:99:58:cc:16: 4c:26:6f:90:78:8f:67:d6:15:22:95:ca:34:6d:aa: ca:38:a9:2e:cc:48:25:22:d2:f8:ce:92:08:f6:d2: b7:b3:7e:e9:90:66:34:0b:a0:37:6d:48:27:a4:ba: 78:e8:53:8f:e2:4d:fd:dd:12:e4:65:4b:c7:8a:82: 1a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E6:0C:F1:E0:F6:13:3D:CD:78:65:0F:C5:95:E9:A1:36:BB:91:BB X509v3 Authority Key Identifier: keyid:1F:00:B0:AA:89:24:C3:77:88:9E:3D:3B:99:60:93:B8:7A:73:D0:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwCwqokkw3eInj07mWCTuHpz0OE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5615ec-51c5-4a4d-b6f9-e407e6025a43/1/HwCwqokkw3eInj07mWCTuHpz0OE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:cc:55:c6:7f:55:56:e8:e4:96:0d:7d:bd:ed:b8:4f:a0:f5: 7e:4a:dc:1c:b9:8d:22:2b:f7:10:07:1b:c0:3e:9c:9b:ed:87: 02:19:e0:9a:8e:15:4e:a6:a1:ea:15:2f:61:d1:9b:22:58:90: a5:8f:41:0b:2b:1e:45:ed:b6:89:05:88:a9:2d:7d:25:51:d7: 3f:c8:67:c4:2b:e1:10:21:0c:8b:24:ea:78:90:f0:c2:c6:bd: 3c:44:77:f4:37:a7:66:36:2a:b7:b8:c4:be:34:bc:af:60:0f: 8e:e1:19:13:cc:c8:88:d8:d9:7f:c3:2c:ac:db:63:c4:a0:7d: b1:b4:2c:79:b3:54:a1:49:42:3c:6f:ef:e8:87:85:18:fb:ba: 66:f8:5d:ec:ee:b9:19:29:2c:67:52:13:13:be:38:33:5d:11: 42:30:d6:c1:5a:ec:27:d4:7a:0c:23:96:1f:fa:fa:5c:ce:45: c7:60:1a:8f:e2:54:f5:d7:b1:00:9b:39:14:f6:62:71:72:1f: c0:cd:cc:b0:4d:93:b6:f8:f5:bf:be:9f:e2:3b:2b:a1:83:eb: f9:61:08:d6:bb:8f:5a:21:6d:64:45:0d:a7:ed:ed:bd:e6:9f: b6:9b:73:dc:ea:ee:2b:a4:bb:42:58:f6:64:79:89:38:54:9b: 43:3c:fe:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5Gxx8hWtx79ILl/rjaY8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMDBiMGFhODkyNGMzNzc4ODllM2QzYjk5NjA5M2I4N2E3 M2QwZTEwHhcNMjUxMjI2MDkwMTQwWhcNMjUxMjI3MDkwMTQwWjAzMTEwLwYDVQQD Eyg4M2U2MGNmMWUwZjYxMzNkY2Q3ODY1MGZjNTk1ZTlhMTM2YmI5MWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+3gIYPJDHjHOjDBJTeFWzxI8Jt7 aERIgwtwTwJi+NCcK6PxW6+r4ihhOo/ZaYO5036pm8KesUHwMZ7UfyybX5nkX2iz puMuvDdkescw7sWCgIaIGaoUoxC36/Hmw3l7zean1yMEQdWtNmU0KIH/fiyNqUPr uzaY+IM1H5dbST7S8M4prwIxu3TEYsTZicu0m6LhIWJTqCkKcLh9GEsxTeJsZ3rn 45FC8dVWl9+y6A03/qhg3nvkjLkK+TQ6oplYzBZMJm+QeI9n1hUilco0barKOKku zEglItL4zpII9tK3s37pkGY0C6A3bUgnpLp46FOP4k393RLkZUvHioIaMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPmDPHg9hM9zXhlD8WV6aE2u5G7MB8GA1UdIwQY MBaAFB8AsKqJJMN3iJ49O5lgk7h6c9DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHdDd3Fva2t3M2VJbmowN21XQ1R1SHB6ME9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81NjE1ZWMtNTFjNS00YTRkLWI2Zjkt ZTQwN2U2MDI1YTQzLzEvSHdDd3Fva2t3M2VJbmowN21XQ1R1SHB6ME9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81NjE1ZWMtNTFjNS00YTRkLWI2ZjktZTQwN2U2MDI1YTQz LzEvSHdDd3Fva2t3M2VJbmowN21XQ1R1SHB6ME9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8xVxn9V Vujklg19ve24T6D1fkrcHLmNIiv3EAcbwD6cm+2HAhngmo4VTqah6hUvYdGbIliQ pY9BCyseRe22iQWIqS19JVHXP8hnxCvhECEMiyTqeJDwwsa9PER39DenZjYqt7jE vjS8r2APjuEZE8zIiNjZf8MsrNtjxKB9sbQsebNUoUlCPG/v6IeFGPu6Zvhd7O65 GSksZ1ITE744M10RQjDWwVrsJ9R6DCOWH/r6XM5Fx2Aaj+JU9dexAJs5FPZicXIf wM3MsE2Ttvj1v76f4jsroYPr+WEI1ruPWiFtZEUNp+3tveaftptz3OruK6S7Qlj2 ZHmJOFSbQzz+SQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:37 2025 by rpki-client