This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft File: HW2cywJxWEmzoey800toh_ZJlA8.mft (raw, json) Hash identifier: 7nTxg13N8n6h1hSHPY4pliRcYHWGrvaHBRFIOpp0xLc= Subject key identifier: A6:59:59:88:B9:29:09:E4:D4:FE:21:9A:5F:2A:97:B3:47:B3:8F:AA Authority key identifier: 1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F Certificate issuer: /CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f Certificate serial: 019AF5E6194190D5E6F660967C52B194C67F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft Manifest number: 13F8 Signing time: Sat 06 Dec 2025 23:01:28 +0000 Manifest this update: Sat 06 Dec 2025 23:01:28 +0000 Manifest next update: Sun 07 Dec 2025 23:01:28 +0000 Files and hashes: 1: HW2cywJxWEmzoey800toh_ZJlA8.crl (hash: 057winRbaAYyy+B+r6A/nL57Hd/koydHHxBMAAtATjk=) 2: z8_8mqLcOJtNw1DMnUMLdxcYTMM.roa (hash: 9R0oeP72aK5DRkFYUsVyQ3Stx8OTGpY7qc7OKrRI9JY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e6:19:41:90:d5:e6:f6:60:96:7c:52:b1:94:c6:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6d9ccb02715849b3a1ecbcd34b6887f649940f Validity Not Before: Dec 6 23:01:28 2025 GMT Not After : Dec 7 23:01:28 2025 GMT Subject: CN=a6595988b92909e4d4fe219a5f2a97b347b38faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:10:a7:72:3c:d3:2e:80:92:e9:f1:e7:ed:d1: 55:c6:9e:0d:e7:7d:06:d6:56:ea:2a:9c:56:5c:6f: 07:13:6b:f4:29:c4:b1:c9:dd:3a:ca:4e:76:84:ff: cc:97:4d:99:dd:04:31:a3:0e:dc:ae:d7:7f:6a:85: 04:db:d3:6a:11:d6:80:5a:cd:32:40:bf:6f:c0:59: 90:09:d2:a2:02:0a:b8:90:8f:ba:c5:61:a1:a8:38: 82:09:83:a8:cc:0c:40:66:1d:d3:2b:8b:be:e0:e6: c8:9f:58:82:c0:a1:1d:cf:18:df:17:c7:27:94:28: 07:37:f5:e3:20:64:94:0e:ef:29:4f:98:a5:f6:dc: 16:0f:79:4e:33:48:3d:b8:ec:b4:b3:41:90:de:a0: 31:db:5e:38:1f:e2:4a:ec:bc:3c:70:d9:b7:cc:88: 72:f3:ff:55:30:9c:44:00:b0:d5:39:5f:be:7e:44: a3:91:ea:cf:06:92:58:63:19:31:ab:63:58:65:9b: 13:45:dd:b6:57:f3:56:c9:0c:a2:48:59:02:94:ec: 44:ac:cb:ea:f1:93:61:97:e9:6b:69:36:01:ab:86: e7:8f:72:1f:d9:88:0e:ee:6a:d7:7d:1a:e6:97:78: ba:90:fb:c1:88:0d:c1:24:b3:c3:4a:97:f1:cd:45: 68:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:59:59:88:B9:29:09:E4:D4:FE:21:9A:5F:2A:97:B3:47:B3:8F:AA X509v3 Authority Key Identifier: keyid:1D:6D:9C:CB:02:71:58:49:B3:A1:EC:BC:D3:4B:68:87:F6:49:94:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HW2cywJxWEmzoey800toh_ZJlA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/0ef6de-b3f1-4430-8b49-114ffc20f9aa/1/HW2cywJxWEmzoey800toh_ZJlA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:3a:fe:45:6e:5c:a5:17:08:90:05:45:cf:aa:48:b2:cf:8e: 01:da:20:06:bb:3e:e3:3e:31:09:30:36:35:af:21:87:bf:8d: 4f:49:1a:f2:8e:4b:06:5a:23:2f:ff:06:8a:4c:d9:1f:0f:8a: fd:3d:29:98:59:02:6e:bb:2a:f5:b8:8d:30:71:37:dd:f9:aa: 12:54:a6:27:b1:bb:1f:0f:56:6b:13:42:76:ed:6e:2a:56:eb: 26:c1:8b:cb:70:b6:d7:11:91:d1:37:a4:19:c6:74:e7:86:88: 8d:f2:4a:3f:8b:1b:ba:14:d1:71:45:a3:11:38:7d:ab:83:b7: 88:05:79:f1:0c:56:76:dc:7f:88:29:28:e1:19:c0:39:2b:c3: 0b:84:b4:28:3b:4d:9f:b5:1d:41:6a:70:28:55:02:9f:d3:a2: d0:39:13:11:b4:ae:84:69:e9:34:f3:d1:e4:cc:01:57:b3:78: 7c:59:23:1f:e8:c0:7a:e3:33:22:13:4f:f2:9f:7b:cb:35:98: 76:c0:3e:98:78:5c:35:23:48:61:e5:19:b6:e5:08:cc:59:09: dd:44:a8:2c:e1:eb:2e:56:c2:5e:a8:7d:2c:8f:9b:d5:a5:84: 78:78:d0:d6:26:d7:0d:04:25:ec:26:e1:df:6b:63:df:50:87: 98:9a:b1:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15hlBkNXm9mCWfFKxlMZ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNmQ5Y2NiMDI3MTU4NDliM2ExZWNiY2QzNGI2ODg3ZjY0 OTk0MGYwHhcNMjUxMjA2MjMwMTI4WhcNMjUxMjA3MjMwMTI4WjAzMTEwLwYDVQQD EyhhNjU5NTk4OGI5MjkwOWU0ZDRmZTIxOWE1ZjJhOTdiMzQ3YjM4ZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxCncjzTLoCS6fHn7dFVxp4N530G 1lbqKpxWXG8HE2v0KcSxyd06yk52hP/Ml02Z3QQxow7crtd/aoUE29NqEdaAWs0y QL9vwFmQCdKiAgq4kI+6xWGhqDiCCYOozAxAZh3TK4u+4ObIn1iCwKEdzxjfF8cn lCgHN/XjIGSUDu8pT5il9twWD3lOM0g9uOy0s0GQ3qAx2144H+JK7Lw8cNm3zIhy 8/9VMJxEALDVOV++fkSjkerPBpJYYxkxq2NYZZsTRd22V/NWyQyiSFkClOxErMvq 8ZNhl+lraTYBq4bnj3If2YgO7mrXfRrml3i6kPvBiA3BJLPDSpfxzUVoGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZZWYi5KQnk1P4hml8ql7NHs4+qMB8GA1UdIwQY MBaAFB1tnMsCcVhJs6HsvNNLaIf2SZQPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8wZWY2ZGUtYjNmMS00NDMwLThiNDkt MTE0ZmZjMjBmOWFhLzEvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8wZWY2ZGUtYjNmMS00NDMwLThiNDktMTE0ZmZjMjBmOWFh LzEvSFcyY3l3SnhXRW16b2V5ODAwdG9oX1pKbEE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTr+RW5c pRcIkAVFz6pIss+OAdogBrs+4z4xCTA2Na8hh7+NT0ka8o5LBlojL/8GikzZHw+K /T0pmFkCbrsq9biNMHE33fmqElSmJ7G7Hw9WaxNCdu1uKlbrJsGLy3C21xGR0Tek GcZ054aIjfJKP4sbuhTRcUWjETh9q4O3iAV58QxWdtx/iCko4RnAOSvDC4S0KDtN n7UdQWpwKFUCn9Oi0DkTEbSuhGnpNPPR5MwBV7N4fFkjH+jAeuMzIhNP8p97yzWY dsA+mHhcNSNIYeUZtuUIzFkJ3USoLOHrLlbCXqh9LI+b1aWEeHjQ1ibXDQQl7Cbh 32tj31CHmJqxRw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:45:03 2025 by rpki-client