This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft File: HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft (raw, json) Hash identifier: 9NgS9yAQuYeLRreJ6AGCzehJdKzqjWNrIu3hZkwDj9w= Subject key identifier: DA:9B:B4:8D:9A:8D:75:CA:67:EC:45:BB:A4:97:27:24:7B:40:7B:F9 Authority key identifier: 1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E Certificate issuer: /CN=1f0565865a533402c2f4343fe1af541a006d9d6e Certificate serial: 019AABA6C18576694690311B692393045607 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft Manifest number: 1269 Signing time: Sat 22 Nov 2025 13:00:23 +0000 Manifest this update: Sat 22 Nov 2025 13:00:23 +0000 Manifest next update: Sun 23 Nov 2025 13:00:23 +0000 Files and hashes: 1: 1-R53mn60mfPO-u9ytNS9sF0TLSo.roa (hash: hjhxCMJ1jfwhmqAtl0YKwQAHdXKCM1yF5oO2syQVRSw=) 2: 1-f8__C0CK7ranFsqDLcjoSQhylg.roa (hash: hbKNngdHLrh0EUf98Vi5DxR2S25rV2PBVU8eQvk6JUo=) 3: HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl (hash: EXg4WjEBdoQILkAjJZ8OAXE1KnbomcLT6dByDyctf/8=) 4: ya8trGCL644z-VHQPggSk9_LO-E.roa (hash: s6+H/S7quTkaw3wLyBlxCmsBjkvG8cEYcGq0toHuVSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:a6:c1:85:76:69:46:90:31:1b:69:23:93:04:56:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0565865a533402c2f4343fe1af541a006d9d6e Validity Not Before: Nov 22 13:00:23 2025 GMT Not After : Nov 23 13:00:23 2025 GMT Subject: CN=da9bb48d9a8d75ca67ec45bba49727247b407bf9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:09:30:7a:9d:43:58:00:2e:b9:67:d6:1e:73: 86:aa:ee:11:f1:9b:32:76:9e:5b:64:b0:21:54:20: 86:5b:4e:f6:c7:f2:8d:07:8a:a5:56:24:4c:6e:ec: dd:bd:93:39:a9:80:4f:66:20:d8:e9:b4:a8:d8:4b: b5:17:e1:13:7a:ce:2c:57:ed:72:d9:24:09:cf:78: 90:ec:09:23:e0:fa:23:78:9b:09:f2:02:3e:33:bd: 48:2a:4d:e2:46:68:ca:1c:ef:1e:3f:fd:41:97:8d: 62:7b:2f:af:a8:4f:1e:31:72:9e:b7:cb:2b:34:d5: ee:52:55:4a:60:13:11:1b:56:b2:c0:4b:e1:9b:97: e2:af:95:8d:21:ea:67:b8:19:ff:fb:0b:9d:bd:0b: 30:a5:51:13:10:c2:b9:48:75:52:6f:14:9f:be:2b: 75:08:5f:3d:af:77:7c:4e:b1:cb:99:44:ce:7c:5f: ff:36:39:82:e6:3e:96:6e:94:c6:59:b7:fb:5a:cd: ba:47:4d:31:71:19:ae:5b:16:29:69:30:ef:d2:75: d4:86:22:c1:34:34:57:cc:5e:83:a2:a7:74:51:89: e5:79:66:7a:2d:b3:a7:a5:9c:ed:24:3f:ee:51:eb: 22:05:e4:b2:4e:89:d5:e5:04:69:57:93:2a:d1:b6: 54:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9B:B4:8D:9A:8D:75:CA:67:EC:45:BB:A4:97:27:24:7B:40:7B:F9 X509v3 Authority Key Identifier: keyid:1F:05:65:86:5A:53:34:02:C2:F4:34:3F:E1:AF:54:1A:00:6D:9D:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwVlhlpTNALC9DQ_4a9UGgBtnW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/HwVlhlpTNALC9DQ_4a9UGgBtnW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:fa:ca:0b:69:b0:d8:c9:4e:c3:05:05:e5:48:1a:4d:78:e9: 06:7a:70:6c:48:64:22:88:31:a4:37:2d:f0:6b:68:c3:54:59: df:82:ef:e9:76:e4:63:a1:00:8a:d0:de:cd:f9:29:6a:77:39: 6c:15:aa:e0:4f:6f:cc:ec:c1:61:82:d1:60:f5:f7:9d:fc:f0: 7b:c8:77:8e:86:50:45:a9:41:cf:1d:50:9e:bb:f7:c5:07:65: 2c:36:e5:2c:25:95:fd:79:f9:9e:b6:9a:10:ed:3c:17:66:60: 9f:2c:d3:b1:0f:bd:ae:59:9b:3c:51:3c:72:31:67:33:ae:15: c4:de:36:dd:4c:9f:f2:b5:5f:f4:1c:80:9b:56:e9:5b:8b:c5: 71:de:92:c6:d5:6a:2b:11:43:da:2a:ec:b7:e6:74:d9:ea:c0: 68:87:d4:9a:fc:fd:1f:62:d4:b3:25:38:f8:d2:c3:62:60:52: 87:a7:df:ac:db:bd:d4:92:cf:68:6b:d5:83:9d:6a:3b:a1:3a: 93:34:94:14:7f:f1:54:e7:96:a2:7f:a7:49:61:8c:1c:02:72: 07:58:50:b3:18:27:30:cb:82:c7:ce:2c:78:1d:0a:25:bc:75: 28:64:e4:f4:2c:e9:29:53:26:2a:aa:07:2d:5d:d6:37:15:d4: 55:88:de:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqrpsGFdmlGkDEbaSOTBFYHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMDU2NTg2NWE1MzM0MDJjMmY0MzQzZmUxYWY1NDFhMDA2 ZDlkNmUwHhcNMjUxMTIyMTMwMDIzWhcNMjUxMTIzMTMwMDIzWjAzMTEwLwYDVQQD EyhkYTliYjQ4ZDlhOGQ3NWNhNjdlYzQ1YmJhNDk3MjcyNDdiNDA3YmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAkwep1DWAAuuWfWHnOGqu4R8Zsy dp5bZLAhVCCGW072x/KNB4qlViRMbuzdvZM5qYBPZiDY6bSo2Eu1F+ETes4sV+1y 2SQJz3iQ7Akj4PojeJsJ8gI+M71IKk3iRmjKHO8eP/1Bl41iey+vqE8eMXKet8sr NNXuUlVKYBMRG1aywEvhm5fir5WNIepnuBn/+wudvQswpVETEMK5SHVSbxSfvit1 CF89r3d8TrHLmUTOfF//NjmC5j6WbpTGWbf7Ws26R00xcRmuWxYpaTDv0nXUhiLB NDRXzF6Doqd0UYnleWZ6LbOnpZztJD/uUesiBeSyTonV5QRpV5Mq0bZUgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqbtI2ajXXKZ+xFu6SXJyR7QHv5MB8GA1UdIwQY MBaAFB8FZYZaUzQCwvQ0P+GvVBoAbZ1uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUt NWM2OTA0NDdiYTg5LzEvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85ZmU0OWYtOWVkMC00ZGIzLTliZTUtNWM2OTA0NDdiYTg5 LzEvSHdWbGhscFROQUxDOURRXzRhOVVHZ0J0blc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/rKC2mw 2MlOwwUF5UgaTXjpBnpwbEhkIogxpDct8Gtow1RZ34Lv6XbkY6EAitDezfkpanc5 bBWq4E9vzOzBYYLRYPX3nfzwe8h3joZQRalBzx1Qnrv3xQdlLDblLCWV/Xn5nraa EO08F2ZgnyzTsQ+9rlmbPFE8cjFnM64VxN423Uyf8rVf9ByAm1bpW4vFcd6SxtVq KxFD2irst+Z02erAaIfUmvz9H2LUsyU4+NLDYmBSh6ffrNu91JLPaGvVg51qO6E6 kzSUFH/xVOeWon+nSWGMHAJyB1hQsxgnMMuCx84seB0KJbx1KGTk9CzpKVMmKqoH LV3WNxXUVYje0A== -----END CERTIFICATE-----Generated at Sat Nov 22 21:39:47 2025 by rpki-client