This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft File: HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft (raw, json) Hash identifier: fcedwMWwUmZnO26qYPmL7XrOX9l8SG0JBi4igUdhe2Y= Subject key identifier: 0C:9F:8F:F6:2D:FC:45:D5:65:65:C4:FC:06:FC:D8:16:DD:81:D8:00 Authority key identifier: 1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB Certificate issuer: /CN=1f046cde8512802b14933b34a22f7765e295d2ab Certificate serial: 019B202B5E12AC996BAE17B2FDC3EE0C66CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft Manifest number: 0C78 Signing time: Mon 15 Dec 2025 04:01:11 +0000 Manifest this update: Mon 15 Dec 2025 04:01:11 +0000 Manifest next update: Tue 16 Dec 2025 04:01:11 +0000 Files and hashes: 1: FauikgvNNACdpAzUUwIbibw2Em4.roa (hash: 8jW5hQYV+ARAXMnoLfnFrZz8WqDDHC709Wsf3diASrY=) 2: HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl (hash: /s5PmTyp8R/kw/XM7/oItt1AHvMlwPd5Q588gpnEAms=) 3: Y5GCtBSidhvcw_3SSYUfDvMbzug.roa (hash: jacf0Q1rEeNMWmSXZkId8BlqjNp4I0/crgw/+VHO0/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2b:5e:12:ac:99:6b:ae:17:b2:fd:c3:ee:0c:66:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f046cde8512802b14933b34a22f7765e295d2ab Validity Not Before: Dec 15 04:01:11 2025 GMT Not After : Dec 16 04:01:11 2025 GMT Subject: CN=0c9f8ff62dfc45d56565c4fc06fcd816dd81d800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a1:fb:fd:ba:d8:5d:ad:1e:08:ac:c0:5a:23: f4:b5:d5:0c:e7:34:88:dc:86:52:a1:2e:78:ac:c7: 50:d6:6d:57:05:80:9b:f0:45:94:33:95:d3:3b:58: 40:00:45:82:80:b8:e6:38:3a:ab:e2:e5:b0:31:45: 04:70:95:b3:e8:72:a2:91:d7:f6:54:3d:5d:b5:ab: 99:64:9a:37:21:22:76:a0:24:1c:5d:2e:96:73:6a: 30:e8:fd:b1:47:99:15:b6:f0:25:08:dc:2f:71:b4: fa:02:f7:25:76:2c:0f:68:9f:4c:60:40:72:b9:3f: 5d:16:20:0f:92:2b:07:7d:c9:53:ed:87:8d:6e:2a: b4:fd:02:56:79:18:55:a7:0d:52:ec:24:e9:86:67: b4:ea:78:e5:6f:be:27:b3:02:e6:c3:9b:10:9b:f1: 64:1d:a5:7c:71:a9:b6:72:37:93:4a:8d:f5:7f:8e: 84:d0:ea:ac:8a:56:cc:47:b9:1c:bb:b6:4a:67:27: 16:7f:98:3d:f1:fc:b3:3c:16:cf:36:be:ba:41:7d: 94:ea:ba:91:51:2e:66:e7:50:54:8c:60:2e:af:3a: a9:ea:5d:c9:45:28:d6:e1:b5:5f:2a:2e:a8:64:32: 9c:b7:0f:f7:27:b6:c6:6f:70:fd:5b:75:43:c3:8e: 44:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9F:8F:F6:2D:FC:45:D5:65:65:C4:FC:06:FC:D8:16:DD:81:D8:00 X509v3 Authority Key Identifier: keyid:1F:04:6C:DE:85:12:80:2B:14:93:3B:34:A2:2F:77:65:E2:95:D2:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HwRs3oUSgCsUkzs0oi93ZeKV0qs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/80e740-2c8c-45a6-938c-219b9f6f9087/1/HwRs3oUSgCsUkzs0oi93ZeKV0qs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:d3:ba:55:1c:cc:85:0d:e7:e2:42:04:ed:c1:5a:af:8d:24: 37:84:c4:77:7f:9d:1a:dd:bc:e6:fa:7a:f9:55:20:41:78:6c: a6:bb:92:25:d9:b1:19:cd:f2:bb:aa:6b:6b:a7:ff:42:ed:55: 26:ab:66:a1:5c:8d:a1:37:4d:61:02:28:7b:db:0d:cd:4c:56: 31:b2:09:9b:c8:e8:69:18:10:86:4f:e5:65:7a:2c:49:0c:ea: eb:e0:a6:d4:52:44:9c:bc:21:85:b1:42:22:57:05:bd:83:70: 64:c4:27:60:4c:de:5d:0e:2f:6f:a4:4a:79:cd:28:aa:54:a4: b5:7f:ec:0b:af:71:5e:f5:77:01:6e:fe:02:f1:82:b0:ec:3a: ab:d4:c2:7b:a9:e3:fe:11:09:21:f2:bd:60:5f:3a:5b:9d:43: 76:9b:b5:54:64:1e:25:b4:12:9e:a1:da:1b:93:24:b6:5d:99: b5:53:50:a4:2d:3b:d9:dd:54:af:ba:20:02:9e:ac:18:8e:08: 4a:6d:51:5f:39:68:d5:12:d7:d8:55:61:c8:53:f4:83:fa:9b: 8e:bb:af:bf:cb:67:99:36:98:3c:f6:2f:e4:28:47:b0:f2:cf: 40:d3:5f:9d:b9:95:25:ae:20:79:7e:93:37:01:80:48:65:33: ae:31:b5:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgK14SrJlrrhey/cPuDGbPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmMDQ2Y2RlODUxMjgwMmIxNDkzM2IzNGEyMmY3NzY1ZTI5 NWQyYWIwHhcNMjUxMjE1MDQwMTExWhcNMjUxMjE2MDQwMTExWjAzMTEwLwYDVQQD EygwYzlmOGZmNjJkZmM0NWQ1NjU2NWM0ZmMwNmZjZDgxNmRkODFkODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aH7/brYXa0eCKzAWiP0tdUM5zSI 3IZSoS54rMdQ1m1XBYCb8EWUM5XTO1hAAEWCgLjmODqr4uWwMUUEcJWz6HKikdf2 VD1dtauZZJo3ISJ2oCQcXS6Wc2ow6P2xR5kVtvAlCNwvcbT6AvcldiwPaJ9MYEBy uT9dFiAPkisHfclT7YeNbiq0/QJWeRhVpw1S7CTphme06njlb74nswLmw5sQm/Fk HaV8cam2cjeTSo31f46E0OqsilbMR7kcu7ZKZycWf5g98fyzPBbPNr66QX2U6rqR US5m51BUjGAurzqp6l3JRSjW4bVfKi6oZDKctw/3J7bGb3D9W3VDw45E1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyfj/Yt/EXVZWXE/Ab82BbdgdgAMB8GA1UdIwQY MBaAFB8EbN6FEoArFJM7NKIvd2XildKrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHdSczNvVVNnQ3NVa3pzMG9pOTNaZUtWMHFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS84MGU3NDAtMmM4Yy00NWE2LTkzOGMt MjE5YjlmNmY5MDg3LzEvSHdSczNvVVNnQ3NVa3pzMG9pOTNaZUtWMHFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS84MGU3NDAtMmM4Yy00NWE2LTkzOGMtMjE5YjlmNmY5MDg3 LzEvSHdSczNvVVNnQ3NVa3pzMG9pOTNaZUtWMHFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR9O6VRzM hQ3n4kIE7cFar40kN4TEd3+dGt285vp6+VUgQXhspruSJdmxGc3yu6pra6f/Qu1V JqtmoVyNoTdNYQIoe9sNzUxWMbIJm8joaRgQhk/lZXosSQzq6+Cm1FJEnLwhhbFC IlcFvYNwZMQnYEzeXQ4vb6RKec0oqlSktX/sC69xXvV3AW7+AvGCsOw6q9TCe6nj /hEJIfK9YF86W51Ddpu1VGQeJbQSnqHaG5Mktl2ZtVNQpC072d1Ur7ogAp6sGI4I Sm1RXzlo1RLX2FVhyFP0g/qbjruvv8tnmTaYPPYv5ChHsPLPQNNfnbmVJa4geX6T NwGASGUzrjG1sg== -----END CERTIFICATE-----Generated at Mon Dec 15 06:47:09 2025 by rpki-client