This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft File: hWnyEAwvxFStB63seWueb2Nm8HE.mft (raw, json) Hash identifier: nQTuJzUKIV3zDoBeQsEH9F46/yxv3L4YdubgY/MZve8= Subject key identifier: DA:F5:25:5B:EE:97:07:C9:C1:35:3D:95:07:AE:C2:BE:20:5B:61:18 Authority key identifier: 85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71 Certificate issuer: /CN=8569f2100c2fc454ad07adec796b9e6f6366f071 Certificate serial: 019B0FA5CB6621A5D868000DFA9AD6F5FCF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft Manifest number: 171C Signing time: Thu 11 Dec 2025 23:01:22 +0000 Manifest this update: Thu 11 Dec 2025 23:01:22 +0000 Manifest next update: Fri 12 Dec 2025 23:01:22 +0000 Files and hashes: 1: DGpzhm41nM7fLedk99hFCmz8Km8.roa (hash: IqO6EDf3hUOlulBxBKdVUYUqdL/BY4mZlELQZfdSRIE=) 2: E5_9p_TGg2FNMpZSH1jH4wJ3rfA.roa (hash: GcTlxtoi4GEP2bLooVydD/oQvGI42+1RU87/9gjgDvc=) 3: hWnyEAwvxFStB63seWueb2Nm8HE.crl (hash: THgsYj6xYsC/sZ6SzlROyI9NddJ3MqpsEsfV9TLzsRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:a5:cb:66:21:a5:d8:68:00:0d:fa:9a:d6:f5:fc:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8569f2100c2fc454ad07adec796b9e6f6366f071 Validity Not Before: Dec 11 23:01:22 2025 GMT Not After : Dec 12 23:01:22 2025 GMT Subject: CN=daf5255bee9707c9c1353d9507aec2be205b6118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0f:07:5d:11:51:ae:00:47:93:d5:a4:97:ae: 2d:f9:f0:16:c8:83:ae:b2:7d:f2:60:de:c8:a3:76: 83:16:0e:02:b8:47:b6:4f:97:35:36:b5:61:6f:11: b9:82:27:3c:6b:7c:ee:59:e5:26:7d:f7:43:b2:da: e3:bb:9d:09:c4:b4:f6:69:83:81:59:36:58:7e:29: a6:be:72:11:2f:fb:18:9b:3c:54:dc:29:37:c8:a5: 5c:ff:8e:9c:ef:d7:97:68:08:12:b5:19:19:3b:fa: 7c:4b:ca:4d:02:fb:94:fe:70:39:39:06:f0:c6:5b: 16:19:d7:11:33:d3:76:e7:b8:19:8e:c9:2a:27:9d: fb:95:32:46:39:16:44:54:68:71:32:76:3c:9d:9e: 41:1f:3d:73:65:62:70:da:f0:4a:fb:a7:49:df:17: da:a9:7a:a5:b5:2b:27:f6:01:0b:f9:7c:e5:9d:91: 47:6e:9d:9a:49:b1:7d:99:95:52:61:d0:56:03:c8: ca:c1:44:b2:50:ce:5f:ec:16:db:b3:74:9a:1d:c8: 5c:41:c0:a3:c4:31:77:bd:5a:84:6f:2a:41:ba:3c: ab:ec:a4:33:b7:19:dd:7a:2e:80:5e:96:c5:c2:f5: 7b:e2:77:75:84:c8:c4:34:13:53:b8:6d:7c:ca:6e: c9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F5:25:5B:EE:97:07:C9:C1:35:3D:95:07:AE:C2:BE:20:5B:61:18 X509v3 Authority Key Identifier: keyid:85:69:F2:10:0C:2F:C4:54:AD:07:AD:EC:79:6B:9E:6F:63:66:F0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWnyEAwvxFStB63seWueb2Nm8HE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/92656f-eb32-402a-a331-2336cdb9ba9f/1/hWnyEAwvxFStB63seWueb2Nm8HE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:62:a1:37:22:b7:4b:ca:0b:e5:b4:c7:7b:eb:01:6d:62:6d: e1:d5:6c:1e:a6:2d:8e:42:61:71:a3:89:2e:11:2f:2a:d9:42: 3c:18:3f:b6:97:57:c4:e1:9d:90:5f:fe:ec:d5:af:39:4e:e1: 92:f7:1a:3d:88:f9:58:c6:5a:5b:56:e2:74:ef:50:cd:0c:d2: 5b:dc:bd:c1:bd:ad:2c:d8:34:f6:cd:a8:c4:a7:ba:b2:d5:af: 1c:3c:96:0a:dc:77:c3:62:18:e8:11:36:a9:30:b2:ee:5d:cd: d7:ee:6e:d1:ff:80:43:96:68:0e:ec:e4:56:4c:09:52:4b:11: 4a:25:c3:39:5b:12:a1:aa:ce:b2:34:61:fe:00:46:e4:ef:4c: 93:30:2d:47:25:78:55:6b:94:ff:5d:19:f3:9c:46:de:b3:83: df:65:69:c8:4b:f1:e8:34:47:29:b0:ae:2b:b3:fe:d2:f3:4d: 70:21:08:b6:ff:55:ee:6f:f6:38:2d:75:57:71:a0:7d:ad:26: 9c:31:f4:8b:ae:23:37:28:12:49:5e:03:c6:82:2a:32:60:7d: d2:f2:2f:b9:f1:aa:c1:85:a3:63:74:9b:07:a6:7a:47:6a:e4: 6c:8a:c4:61:f8:9a:94:fe:c8:68:db:42:b9:85:38:30:db:26: 8b:44:33:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPpctmIaXYaAAN+prW9fzxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NjlmMjEwMGMyZmM0NTRhZDA3YWRlYzc5NmI5ZTZmNjM2 NmYwNzEwHhcNMjUxMjExMjMwMTIyWhcNMjUxMjEyMjMwMTIyWjAzMTEwLwYDVQQD EyhkYWY1MjU1YmVlOTcwN2M5YzEzNTNkOTUwN2FlYzJiZTIwNWI2MTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Q8HXRFRrgBHk9Wkl64t+fAWyIOu sn3yYN7Io3aDFg4CuEe2T5c1NrVhbxG5gic8a3zuWeUmffdDstrju50JxLT2aYOB WTZYfimmvnIRL/sYmzxU3Ck3yKVc/46c79eXaAgStRkZO/p8S8pNAvuU/nA5OQbw xlsWGdcRM9N257gZjskqJ537lTJGORZEVGhxMnY8nZ5BHz1zZWJw2vBK+6dJ3xfa qXqltSsn9gEL+XzlnZFHbp2aSbF9mZVSYdBWA8jKwUSyUM5f7Bbbs3SaHchcQcCj xDF3vVqEbypBujyr7KQztxndei6AXpbFwvV74nd1hMjENBNTuG18ym7JfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNr1JVvulwfJwTU9lQeuwr4gW2EYMB8GA1UdIwQY MBaAFIVp8hAML8RUrQet7Hlrnm9jZvBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEt MjMzNmNkYjliYTlmLzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MjY1NmYtZWIzMi00MDJhLWEzMzEtMjMzNmNkYjliYTlm LzEvaFdueUVBd3Z4RlN0QjYzc2VXdWViMk5tOEhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGKhNyK3 S8oL5bTHe+sBbWJt4dVsHqYtjkJhcaOJLhEvKtlCPBg/tpdXxOGdkF/+7NWvOU7h kvcaPYj5WMZaW1bidO9QzQzSW9y9wb2tLNg09s2oxKe6stWvHDyWCtx3w2IY6BE2 qTCy7l3N1+5u0f+AQ5ZoDuzkVkwJUksRSiXDOVsSoarOsjRh/gBG5O9MkzAtRyV4 VWuU/10Z85xG3rOD32VpyEvx6DRHKbCuK7P+0vNNcCEItv9V7m/2OC11V3Ggfa0m nDH0i64jNygSSV4DxoIqMmB90vIvufGqwYWjY3SbB6Z6R2rkbIrEYfialP7IaNtC uYU4MNsmi0QzKQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:47:10 2025 by rpki-client