This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft File: HWcc95_PZtKf7A13pmp9DqG7dZs.mft (raw, json) Hash identifier: GmjODfUq8AiAy44X4Hkjnze+vUO2qWcDzMZ71OiaHao= Subject key identifier: E2:21:12:A6:30:1D:06:88:41:B3:E5:8D:09:D7:E6:CF:9D:A3:A9:E3 Authority key identifier: 1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B Certificate issuer: /CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b Certificate serial: 019B0F3792344C30EC2530F10ADE38024853 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft Manifest number: 094C Signing time: Thu 11 Dec 2025 21:00:58 +0000 Manifest this update: Thu 11 Dec 2025 21:00:58 +0000 Manifest next update: Fri 12 Dec 2025 21:00:58 +0000 Files and hashes: 1: HWcc95_PZtKf7A13pmp9DqG7dZs.crl (hash: hVaL/+KYxNd19chv+kSmlVKXrFfqFALGInvRIKOETRE=) 2: hRN9-wiS61xemcnu2IzA0-iM9GY.roa (hash: 3iVa28JdgJ+v6CoS2A5zsaGzlJ7m8oreOdh8XsM7vXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:92:34:4c:30:ec:25:30:f1:0a:de:38:02:48:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d671cf79fcf66d29fec0d77a66a7d0ea1bb759b Validity Not Before: Dec 11 21:00:58 2025 GMT Not After : Dec 12 21:00:58 2025 GMT Subject: CN=e22112a6301d068841b3e58d09d7e6cf9da3a9e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9c:ea:76:22:f9:03:2f:76:68:22:e4:a4:ef: 5c:d1:88:24:ac:d5:3a:91:f9:16:65:11:c7:28:f6: e4:c4:2a:84:e8:4b:05:db:d0:fd:c9:3c:c1:43:f9: 3a:df:85:f5:dc:64:1b:d2:35:f7:8e:bb:79:3f:01: fa:e9:f0:65:a6:59:f9:f6:c0:1a:1d:4e:6d:7a:1f: 31:71:a6:e0:c6:fb:fb:f1:51:b4:21:cf:9b:79:ad: 27:de:53:1d:f2:9a:de:fe:1d:71:ad:96:58:0e:73: 02:a5:8b:4b:a2:4d:3e:2e:d0:f8:dc:9c:b9:22:f9: ac:58:3a:da:66:6e:28:55:bf:85:de:9b:46:78:64: ec:71:5f:16:b9:d4:29:37:7a:0a:0c:45:b9:e1:75: 0d:86:f4:63:0e:15:9f:66:72:b3:16:5f:93:3d:17: 38:ce:be:03:fa:81:9a:d9:ee:80:94:11:46:75:78: 22:03:5c:cb:34:14:47:2a:4f:0c:4c:8a:fd:02:d0: 00:a2:e3:94:3b:18:06:20:3b:41:9f:d3:db:c6:fb: fc:67:ef:5b:5e:47:9b:45:cb:20:35:d3:71:a6:82: e7:29:ce:08:17:9f:87:a8:7a:b0:75:28:6e:e5:e6: e7:36:0b:90:e1:81:3c:ae:4a:35:d1:6f:7b:81:44: f8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:21:12:A6:30:1D:06:88:41:B3:E5:8D:09:D7:E6:CF:9D:A3:A9:E3 X509v3 Authority Key Identifier: keyid:1D:67:1C:F7:9F:CF:66:D2:9F:EC:0D:77:A6:6A:7D:0E:A1:BB:75:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWcc95_PZtKf7A13pmp9DqG7dZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15ab28-268d-49b9-ba4f-96fe22605323/1/HWcc95_PZtKf7A13pmp9DqG7dZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:8f:1b:9f:46:a3:c6:24:ac:91:f7:39:1d:97:20:ed:9d:b2: 67:f5:dd:99:62:8d:19:05:a9:d0:d3:f8:8a:ce:6f:7a:e7:a7: 06:61:8a:16:4f:14:13:84:99:f0:68:50:d1:70:3c:18:9f:fa: 44:50:21:25:72:77:a2:a9:ff:93:72:c1:79:2c:da:a8:ec:16: e2:b1:72:f0:80:0d:2d:e6:6f:a3:d9:06:a1:35:be:82:e9:6c: 46:35:54:15:41:f6:8d:ba:ff:47:36:d7:81:fa:32:80:20:f6: 17:3b:29:15:ab:6f:71:1d:1b:d2:ce:5a:8e:6c:ca:6e:6a:71: 6e:6c:b6:1c:a1:95:0c:69:fb:44:5b:bd:9d:53:d8:44:a6:6a: 31:76:9e:b6:d2:05:c9:8e:e1:c4:a8:b9:52:0b:eb:3e:50:7f: f7:c1:be:33:4d:86:30:f2:61:01:01:83:b4:f9:1d:db:09:15: 5a:8a:a5:72:63:c2:c9:70:fc:7e:2c:64:d6:2e:dc:49:a8:34: 99:44:67:3f:cd:90:9a:b8:a7:39:fb:23:46:6a:45:58:07:f6: f3:ba:e3:cd:12:d1:8d:c9:80:e8:b7:71:2a:29:40:91:3a:e5: 76:61:f3:b4:d2:1b:bd:c8:3a:60:82:27:3b:e5:d8:13:9a:77: 55:c4:f3:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN5I0TDDsJTDxCt44AkhTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNjcxY2Y3OWZjZjY2ZDI5ZmVjMGQ3N2E2NmE3ZDBlYTFi Yjc1OWIwHhcNMjUxMjExMjEwMDU4WhcNMjUxMjEyMjEwMDU4WjAzMTEwLwYDVQQD EyhlMjIxMTJhNjMwMWQwNjg4NDFiM2U1OGQwOWQ3ZTZjZjlkYTNhOWUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZzqdiL5Ay92aCLkpO9c0YgkrNU6 kfkWZRHHKPbkxCqE6EsF29D9yTzBQ/k634X13GQb0jX3jrt5PwH66fBlpln59sAa HU5teh8xcabgxvv78VG0Ic+bea0n3lMd8pre/h1xrZZYDnMCpYtLok0+LtD43Jy5 IvmsWDraZm4oVb+F3ptGeGTscV8WudQpN3oKDEW54XUNhvRjDhWfZnKzFl+TPRc4 zr4D+oGa2e6AlBFGdXgiA1zLNBRHKk8MTIr9AtAAouOUOxgGIDtBn9Pbxvv8Z+9b XkebRcsgNdNxpoLnKc4IF5+HqHqwdShu5ebnNguQ4YE8rko10W97gUT4cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOIhEqYwHQaIQbPljQnX5s+do6njMB8GA1UdIwQY MBaAFB1nHPefz2bSn+wNd6ZqfQ6hu3WbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFdjYzk1X1BadEtmN0ExM3BtcDlEcUc3ZFpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNWFiMjgtMjY4ZC00OWI5LWJhNGYt OTZmZTIyNjA1MzIzLzEvSFdjYzk1X1BadEtmN0ExM3BtcDlEcUc3ZFpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xNWFiMjgtMjY4ZC00OWI5LWJhNGYtOTZmZTIyNjA1MzIz LzEvSFdjYzk1X1BadEtmN0ExM3BtcDlEcUc3ZFpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASI8bn0aj xiSskfc5HZcg7Z2yZ/XdmWKNGQWp0NP4is5veuenBmGKFk8UE4SZ8GhQ0XA8GJ/6 RFAhJXJ3oqn/k3LBeSzaqOwW4rFy8IANLeZvo9kGoTW+gulsRjVUFUH2jbr/RzbX gfoygCD2FzspFatvcR0b0s5ajmzKbmpxbmy2HKGVDGn7RFu9nVPYRKZqMXaettIF yY7hxKi5UgvrPlB/98G+M02GMPJhAQGDtPkd2wkVWoqlcmPCyXD8fixk1i7cSag0 mURnP82QmrinOfsjRmpFWAf287rjzRLRjcmA6LdxKilAkTrldmHztNIbvcg6YIIn O+XYE5p3VcTzVA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:01:07 2025 by rpki-client