This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft File: hpwOc330guiapnJs3YqZWKp0ER4.mft (raw, json) Hash identifier: +fiCWVyxutBP1+VsW36wRrx0ikhKJ8bxBxRquInlXeI= Subject key identifier: 6F:B0:82:7A:1D:3C:F2:57:60:55:08:D0:3E:79:1F:33:6F:CA:B4:66 Authority key identifier: 86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E Certificate issuer: /CN=869c0e737df482e89aa6726cdd8a9958aa74111e Certificate serial: 019B1238C3F387AC17F8DABA5E9CC8826AE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft Manifest number: 01D5 Signing time: Fri 12 Dec 2025 11:01:08 +0000 Manifest this update: Fri 12 Dec 2025 11:01:08 +0000 Manifest next update: Sat 13 Dec 2025 11:01:08 +0000 Files and hashes: 1: f9MGnlddFQ2IMf-Uoo2fTYxJ_co.roa (hash: kPIpbLqEj4dHSmVPx7WOIcV4CWQtCce8UvwQXn1AUT0=) 2: hpwOc330guiapnJs3YqZWKp0ER4.crl (hash: gd7IzpcmaJXDGCvp7QemYo+NOAeRKpbCbXB3oFOpbRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:38:c3:f3:87:ac:17:f8:da:ba:5e:9c:c8:82:6a:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=869c0e737df482e89aa6726cdd8a9958aa74111e Validity Not Before: Dec 12 11:01:08 2025 GMT Not After : Dec 13 11:01:08 2025 GMT Subject: CN=6fb0827a1d3cf257605508d03e791f336fcab466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1f:6a:37:4c:59:74:7f:c2:e2:0b:56:fd:20: 8a:bc:de:f7:1f:3d:19:76:75:1c:a7:97:d6:b3:84: 38:6e:da:84:1c:cc:46:35:05:d0:c9:25:98:02:fd: b2:ec:f6:43:25:40:87:04:b3:6a:5a:ef:02:83:40: 9f:0a:22:92:01:97:75:8d:49:32:46:5f:59:c8:33: bb:dc:5d:cb:f2:1c:d2:eb:fc:2b:3c:79:4b:2d:ba: ea:94:05:c7:a4:60:fe:89:8b:05:d2:78:5a:99:b8: 6b:25:2a:43:59:60:0c:c3:3c:6b:53:79:c0:7c:11: 67:b3:6f:ae:00:25:e4:66:fc:00:f2:2a:cc:48:83: a8:cc:15:82:c1:b9:9f:81:39:e4:c0:62:2a:b2:d6: fa:2e:57:c9:d9:a2:31:ef:a9:5b:d4:3e:da:ad:67: b0:94:f4:1a:47:6a:c5:7c:4b:7d:59:a5:52:42:37: 99:54:6e:93:fb:46:b7:64:bc:b6:4e:9c:b7:a5:cb: 79:8c:f0:ab:2b:b8:96:51:81:41:12:84:a5:7f:47: 1d:9b:e6:e2:ae:ca:00:92:47:d7:13:50:95:e0:1e: 93:aa:7a:4b:a9:52:26:a0:8d:be:02:7e:69:75:df: 22:12:77:da:d3:bc:fe:10:8e:e2:57:25:3e:5b:24: 02:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B0:82:7A:1D:3C:F2:57:60:55:08:D0:3E:79:1F:33:6F:CA:B4:66 X509v3 Authority Key Identifier: keyid:86:9C:0E:73:7D:F4:82:E8:9A:A6:72:6C:DD:8A:99:58:AA:74:11:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpwOc330guiapnJs3YqZWKp0ER4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/a7980b-cef8-4b53-a031-c5e0faca4a5e/1/hpwOc330guiapnJs3YqZWKp0ER4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:3a:bc:9c:70:7e:fa:37:d0:84:6f:c5:8b:80:e6:38:4f:bb: 02:c0:7a:95:fb:d2:87:6d:c0:8a:60:6a:0e:37:96:b5:1e:78: 30:c7:19:25:b1:be:75:cc:d1:1b:85:aa:71:8c:86:79:c7:5d: e0:09:36:3d:9d:46:c7:be:e1:44:2d:04:8a:23:ef:fe:7e:f0: 38:de:7b:21:ad:e4:7e:1f:a1:06:9a:1b:6c:c2:10:1c:3c:a0: 1c:72:8d:43:69:0a:43:86:fb:57:60:33:cc:0c:0a:26:95:8c: 58:28:c2:a1:8d:09:b9:7c:46:89:f7:41:0b:79:34:dd:c4:88: 98:fe:a9:ef:f3:f4:c6:8a:3a:98:b6:2d:dd:3a:28:fd:11:91: 88:ba:0d:3f:00:99:d2:0c:1b:e2:ec:85:b6:13:43:e3:c8:d5: da:7f:fa:1a:b4:bf:c9:7a:c9:c4:c1:67:64:5f:d4:58:c7:50: ee:4a:b6:da:75:10:40:b9:da:6a:cc:f4:26:6a:fa:70:ad:df: ee:d5:c4:80:f8:f1:bc:20:53:76:a8:b9:62:87:f9:b4:5a:15: 23:fb:2e:5e:39:f5:41:61:f7:c1:ea:1d:60:fa:9c:58:7e:65: 07:e3:18:0b:8b:82:ca:15:86:05:57:07:3a:7b:68:22:2e:85: 9c:e8:62:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSOMPzh6wX+Nq6XpzIgmriMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OWMwZTczN2RmNDgyZTg5YWE2NzI2Y2RkOGE5OTU4YWE3 NDExMWUwHhcNMjUxMjEyMTEwMTA4WhcNMjUxMjEzMTEwMTA4WjAzMTEwLwYDVQQD Eyg2ZmIwODI3YTFkM2NmMjU3NjA1NTA4ZDAzZTc5MWYzMzZmY2FiNDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB9qN0xZdH/C4gtW/SCKvN73Hz0Z dnUcp5fWs4Q4btqEHMxGNQXQySWYAv2y7PZDJUCHBLNqWu8Cg0CfCiKSAZd1jUky Rl9ZyDO73F3L8hzS6/wrPHlLLbrqlAXHpGD+iYsF0nhambhrJSpDWWAMwzxrU3nA fBFns2+uACXkZvwA8irMSIOozBWCwbmfgTnkwGIqstb6LlfJ2aIx76lb1D7arWew lPQaR2rFfEt9WaVSQjeZVG6T+0a3ZLy2Tpy3pct5jPCrK7iWUYFBEoSlf0cdm+bi rsoAkkfXE1CV4B6TqnpLqVImoI2+An5pdd8iEnfa07z+EI7iVyU+WyQC3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+wgnodPPJXYFUI0D55HzNvyrRmMB8GA1UdIwQY MBaAFIacDnN99ILomqZybN2KmViqdBEeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hNzk4MGItY2VmOC00YjUzLWEwMzEt YzVlMGZhY2E0YTVlLzEvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hNzk4MGItY2VmOC00YjUzLWEwMzEtYzVlMGZhY2E0YTVl LzEvaHB3T2MzMzBndWlhcG5KczNZcVpXS3AwRVI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzq8nHB+ +jfQhG/Fi4DmOE+7AsB6lfvSh23AimBqDjeWtR54MMcZJbG+dczRG4WqcYyGecdd 4Ak2PZ1Gx77hRC0EiiPv/n7wON57Ia3kfh+hBpobbMIQHDygHHKNQ2kKQ4b7V2Az zAwKJpWMWCjCoY0JuXxGifdBC3k03cSImP6p7/P0xoo6mLYt3Too/RGRiLoNPwCZ 0gwb4uyFthND48jV2n/6GrS/yXrJxMFnZF/UWMdQ7kq22nUQQLnaasz0Jmr6cK3f 7tXEgPjxvCBTdqi5Yof5tFoVI/suXjn1QWH3weodYPqcWH5lB+MYC4uCyhWGBVcH OntoIi6FnOhijA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:20:03 2025 by rpki-client