This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft File: HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft (raw, json) Hash identifier: rb+moRoZzTCtUpthzgmyCpKSs/cJjBounpFX5+gSY1U= Subject key identifier: 27:3C:B7:AF:E8:BF:64:66:9F:E5:96:C5:F0:3F:01:04:06:AC:D2:B9 Authority key identifier: 1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33 Certificate issuer: /CN=1f0614e195c1656a28e8b19b22784e8b55bb4533 Certificate serial: 019B0DB6C02FF2E120A00C7E60513426BC7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft Manifest number: 16C1 Signing time: Thu 11 Dec 2025 14:00:38 +0000 Manifest this update: Thu 11 Dec 2025 14:00:38 +0000 Manifest next update: Fri 12 Dec 2025 14:00:38 +0000 Files and hashes: 1: 7Uvp6r5GtLtDblaOxc-Xb4Tnilc.roa (hash: pSYNsxlb943anM3s10VieWyFa7UKpRe9Vz625JGzG6g=) 2: HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl (hash: 0p3uEx0x8csNlyeqBF45d8FWm9+keidRKLnypAfl8OM=) 3: LQ0nUG087BHLM9q435rBPVa8bMI.roa (hash: UFpnOF74KErqQ2amul9MeV32Xu5TKxE7+2JeP9LumgQ=) 4: eg7fhNdpROAUHy6qw77Qs2byi9Y.roa (hash: +DdhEKVICFbvbrCM7pp6/vAQohYV0VdhfUhy9Z1h54o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b6:c0:2f:f2:e1:20:a0:0c:7e:60:51:34:26:bc:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f0614e195c1656a28e8b19b22784e8b55bb4533 Validity Not Before: Dec 11 14:00:38 2025 GMT Not After : Dec 12 14:00:38 2025 GMT Subject: CN=273cb7afe8bf64669fe596c5f03f010406acd2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3c:d4:fa:86:33:7a:d8:66:70:4e:b2:e6:5a: d9:e3:ec:0a:0b:76:ca:48:de:8e:35:66:b8:93:83: b9:4b:f8:16:b5:3c:0f:a2:07:89:49:70:09:06:e4: 97:be:c9:99:3e:33:28:4e:30:f9:c8:2f:13:fd:8d: 05:10:b9:12:df:f3:a3:23:24:d7:18:d6:d4:86:7a: 1b:f6:6a:37:71:82:8d:76:25:52:e4:54:89:41:d2: ac:36:09:4b:62:6e:62:d3:fa:90:eb:10:d3:5f:0e: a8:10:91:80:ef:c2:ca:4e:c8:71:d4:8e:5e:a9:c8: 29:0a:51:a0:df:57:48:17:88:89:49:16:2e:55:18: 6c:41:68:79:48:46:c5:0c:0f:83:16:74:69:6c:29: 7d:fb:dd:c0:c6:e8:b9:71:43:b9:bf:28:87:c0:56: 6e:fa:3d:46:3e:07:fe:ff:25:b4:e9:fd:58:59:12: 85:80:cf:08:17:4c:ba:ca:78:c2:3c:ee:0e:5a:1c: 1a:16:69:c1:41:0a:0a:c1:a4:81:4a:27:61:86:bf: cc:9d:ca:e1:30:e8:98:67:6f:b2:48:f8:e5:25:19: 08:70:5f:99:8e:03:24:0a:3d:3a:63:ac:17:b7:ca: fc:c6:03:dd:17:46:37:82:19:94:01:87:2d:ad:46: ce:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3C:B7:AF:E8:BF:64:66:9F:E5:96:C5:F0:3F:01:04:06:AC:D2:B9 X509v3 Authority Key Identifier: keyid:1F:06:14:E1:95:C1:65:6A:28:E8:B1:9B:22:78:4E:8B:55:BB:45:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwYU4ZXBZWoo6LGbInhOi1W7RTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/10ebcc-c832-4d33-88b5-bef872daece7/1/HwYU4ZXBZWoo6LGbInhOi1W7RTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:d8:71:60:bf:d8:d6:e2:d9:44:9c:eb:6d:6a:36:d0:60:f9: e9:0b:5a:98:89:b2:d2:ba:ed:b8:b6:ef:02:02:2c:b5:ef:10: 5d:72:d5:d0:5f:8d:91:9f:c7:4d:e7:0c:b1:01:50:b2:d4:86: bc:90:95:af:b0:c7:4a:0b:fc:d1:a8:6a:10:be:a7:74:be:ab: 56:8f:48:9a:1e:36:52:a9:99:28:06:86:8f:08:64:e8:80:ae: a9:2a:3d:ef:2a:a1:4d:b2:92:79:58:85:d9:07:4b:4e:22:fb: e6:b3:15:12:c5:2e:ef:d4:53:c0:af:7e:24:be:b6:cc:79:32: de:10:b9:02:88:ab:c4:4b:3d:5f:f5:c0:79:a7:39:e1:e9:20: 79:37:8a:17:7c:d4:3c:53:55:59:ad:9d:70:f1:da:89:fd:36: 88:14:b1:6f:ab:20:b4:c4:a3:a2:24:9e:31:3b:50:ef:54:31: 9b:4f:51:31:08:15:6a:41:d1:6d:cf:d8:8f:62:17:24:72:d0: 84:18:61:3b:0a:27:c3:17:6b:ae:73:63:72:96:81:b7:d1:05: 54:d3:30:50:86:47:b6:fd:80:2a:ee:71:e8:ff:91:e1:75:73: 4c:c8:1e:2d:5e:a6:2d:fc:5f:0e:4e:36:e1:d8:06:26:5a:59: c2:8e:95:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtsAv8uEgoAx+YFE0Jrx6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMDYxNGUxOTVjMTY1NmEyOGU4YjE5YjIyNzg0ZThiNTVi YjQ1MzMwHhcNMjUxMjExMTQwMDM4WhcNMjUxMjEyMTQwMDM4WjAzMTEwLwYDVQQD EygyNzNjYjdhZmU4YmY2NDY2OWZlNTk2YzVmMDNmMDEwNDA2YWNkMmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTzU+oYzethmcE6y5lrZ4+wKC3bK SN6ONWa4k4O5S/gWtTwPogeJSXAJBuSXvsmZPjMoTjD5yC8T/Y0FELkS3/OjIyTX GNbUhnob9mo3cYKNdiVS5FSJQdKsNglLYm5i0/qQ6xDTXw6oEJGA78LKTshx1I5e qcgpClGg31dIF4iJSRYuVRhsQWh5SEbFDA+DFnRpbCl9+93Axui5cUO5vyiHwFZu +j1GPgf+/yW06f1YWRKFgM8IF0y6ynjCPO4OWhwaFmnBQQoKwaSBSidhhr/Mncrh MOiYZ2+ySPjlJRkIcF+ZjgMkCj06Y6wXt8r8xgPdF0Y3ghmUAYctrUbOvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCc8t6/ov2Rmn+WWxfA/AQQGrNK5MB8GA1UdIwQY MBaAFB8GFOGVwWVqKOixmyJ4TotVu0UzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHdZVTRaWEJaV29vNkxHYkluaE9pMVc3UlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xMGViY2MtYzgzMi00ZDMzLTg4YjUt YmVmODcyZGFlY2U3LzEvSHdZVTRaWEJaV29vNkxHYkluaE9pMVc3UlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xMGViY2MtYzgzMi00ZDMzLTg4YjUtYmVmODcyZGFlY2U3 LzEvSHdZVTRaWEJaV29vNkxHYkluaE9pMVc3UlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbNhxYL/Y 1uLZRJzrbWo20GD56QtamImy0rrtuLbvAgIste8QXXLV0F+NkZ/HTecMsQFQstSG vJCVr7DHSgv80ahqEL6ndL6rVo9Imh42UqmZKAaGjwhk6ICuqSo97yqhTbKSeViF 2QdLTiL75rMVEsUu79RTwK9+JL62zHky3hC5AoirxEs9X/XAeac54ekgeTeKF3zU PFNVWa2dcPHaif02iBSxb6sgtMSjoiSeMTtQ71Qxm09RMQgVakHRbc/Yj2IXJHLQ hBhhOwonwxdrrnNjcpaBt9EFVNMwUIZHtv2AKu5x6P+R4XVzTMgeLV6mLfxfDk42 4dgGJlpZwo6VVQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:11:18 2025 by rpki-client