This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
File: hwxYmk8iqcov-ZtMSPi99JKHFyU.mft (raw, json)
Hash identifier: Uz/J9x73aunpsqUZYWxLPZBYkz52hv26LnjawaspTa4=
Subject key identifier: E5:E3:59:4D:B9:A1:88:15:DC:FF:11:7D:5E:C3:76:49:6D:3C:FC:CD
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 019B08FE561A0BE7120EE73959BE5AFE5941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
Manifest number: 0D7E
Signing time: Wed 10 Dec 2025 16:00:44 +0000
Manifest this update: Wed 10 Dec 2025 16:00:44 +0000
Manifest next update: Thu 11 Dec 2025 16:00:44 +0000
Files and hashes: 1: 2I0oOXYbhXHZylyf-kFn5MY1Bow.roa (hash: aSJseF9prqWznLCSm3ToATrOmfQLXB1xxYnDC7T9Z2c=)
2: 2ReKdgaYtIp3NshswWa0Ynp0WRg.roa (hash: mQx2YD8epmmqsl3MP9UUukVpCGzOBVTsrzitNDkbPKs=)
3: 30HBNFGj_StP7OnHCFYamttMRRo.roa (hash: PbIcvGBa4usW/Z/wTaeMoopqObzYtvj4zgagiYvyvvY=)
4: 5JotAZkNsZmdy-emIgo1Usa9KiQ.roa (hash: KxNBmCau0tbWKOvKkyRjqvgSzYN9kgOnNbVL/mkB+N4=)
5: 5xsu0Y3uzqTy-1RyisKqfwci5WA.roa (hash: D74nFiz8tjRpYgJaiEMQCFVT7wy1biHo7nZsNpVo/uM=)
6: 8qrXy8Q6IOvmRFa2BdiyfUkrMzE.roa (hash: qRXi9zsrTMdGbyvne1sTEgP/YtX/quprNa5rw9UyfMw=)
7: 9dBG9JuRDTu6Pezri5X9qjGglbU.roa (hash: +cmNANqYW5/TEslGANWHU/0YCKjGJgRnyw8zEhIdvRo=)
8: 9xcEatshauEO3IQR_Wu414zl24Y.roa (hash: fKSjlkQxueZV9jBeE970HxiT/qHpLp4twJArvl1NDVg=)
9: FiqwKi_Q8FA9TlHVioAfs1MgqOk.roa (hash: x33V3wFNwYA9syCRIBlSbPIOI6QCWe1eYWizoYGgHZo=)
10: GmKN4KxqgbXlK5yC6foLwWm2cEw.roa (hash: mnaqpx+hD8sOt0PfJ+hg0EOs30CcivdzZkMlny/SxX8=)
11: JBJDitDPQDp7uau__zLA0UwhCgw.roa (hash: R106/g5VQisRMQ9a+37PX+GheT0rDv2YD6EjIhwfsDo=)
12: LFMXcJ3OWByQXVfJAqZ7_ocSupA.roa (hash: Up4ZD4PUB4O4YaDGDS3M7+WCfTXGSLwStZaxdawLRGY=)
13: LnB1q1PM_kJ4XevQHSSwoAwFcTY.roa (hash: e7swdzDOe/Y/3x1bZCYwD/+li1TB00/HX6iaal7aLeI=)
14: MKk2eIZdBEHoejBBXOnExSwoMxY.roa (hash: a46f0IAxws6EBAs2zTmMvZ2jH6RBYNwGRDtcrPOSWm4=)
15: OsT-YBp3DAavsitz7NLsTwnK23M.roa (hash: dhZX9nqnbfS/AF2kj1c4QAc+RypqupT6DI0pLT6f1Qk=)
16: QVKy_C-gH5SUvXuFvr2rKaKKB9o.roa (hash: bb+gerfKMtrw7ctarVTjGclt6FZ9lxxKBxWm7py7YFs=)
17: SrZ4RZPbkkulLRjDnKeeMWYxwzY.roa (hash: xB6TzyhgS5V679nPp3RIvv2qtymA4YPYZ/DhJiBNbCg=)
18: UKaRBf7raXAB65UumI4EA2EWZqM.roa (hash: 1Uq1ZdFBb9LIO9QqzDwwuSeOXeS0ihELz/teT1S+g+g=)
19: Ub4k4tmvuBu4ytTLiTecTU4ssEw.roa (hash: 5pF+00yjrBDdb0t2+5AHejMKysD3HndJHi/7ycuLpWw=)
20: YPVSkLDiWHzeuV_smRTrO2e6AgU.roa (hash: +1W/Hbl4uhL2Lv9y3DsFwhs/x9rhWXoW9vVhrNvRIik=)
21: _LaL2NGVikd-BXS-ihRrP5NY6ik.roa (hash: 8tMeMGtCDzB7YrSEIzydRyBsTv0sIFfm9Cd8vLZYHTU=)
22: _uuRs1q0kzzxOE8VMZdcXbaVR-c.roa (hash: nDyUFHiWf+ewggFbVwk2c6PxPQ54RKuKRQAD1V+EJys=)
23: coKYgTg0Uyqr4o-0bKWOP8PMY1Q.roa (hash: Y3v06GdwG+d3jF3wIYFSmFW94KvIdRSJca4xgcxfnrA=)
24: eO1Hg2bQ0LWJz736BXYL29sRTxI.roa (hash: HcMHeiosVQ+4/TAZPJOqS1U+rgX5YSFqAZBpZptf6lI=)
25: hwxYmk8iqcov-ZtMSPi99JKHFyU.crl (hash: vaQ7n/Qz6gwIpQPnq3wByKX4exB8YX17erUYBZ5lxww=)
26: lJ3ZPi004eXO28hVs7xB7jNUBVg.roa (hash: Ssdqwa1xwld2CFok5AqPxYNd1LNpZizyWKyqS6Lkp+w=)
27: n-69sBNziEDXgnEUh4AE0Iws0nY.roa (hash: gPgDtzD2p9HKr7H27H9fBhBUC/BnhSkfzNGYDw9RhRs=)
28: nG3kR04PJ4pvnNLuqvMc9aSO5Io.roa (hash: WhQZd4QXzL2/tYEwZWSw0W3wudhwSA0fhANQFT8pmNY=)
29: s649jiXFkCJpu3sQ9wPlOGSgSkA.roa (hash: /65JftPkJbj96qvwBEvTKbcXlXWX7OGD8m1xhpXjm1w=)
30: sHKnbDWYF8v5U1MKqrGRJFJuELo.roa (hash: qVQJCzy3Z998XHa+C8cs8vimL83JWc3p3pyIfEzepNY=)
31: tNQHVbwfibzVK7c351AZ9f-onjU.roa (hash: 1fVQ9lETxiE2tUgAWaLP3sly8RCYpr3iz/wk181/7cM=)
32: tXKrQfWng2kENJxIVP6nmvyouRQ.roa (hash: KdPDUqN1UacChC9TEBXr6ngTuc5vJwV5clkrQ7CDbwI=)
33: vCDztrlrNrPt9fo6YouxSjnnFVQ.roa (hash: C9gjTPImSV8XGrjP1z+30zoQvLbM1GI48tOhez4Na0Q=)
34: vFsQ9Mq1upPkaoy-Dq4nFBdEpsc.roa (hash: srXfodsjwOCQErQ12yo8W1kXt8fNUxZxxPHQ65W2hWk=)
35: wIwLqinns0huK5c5I3YcfTxRkzU.roa (hash: b6ek9YMlRgE7kLoduE9i29cEHv0OgHbP93zdTUJjBts=)
36: wOgDZdkiW7CNnk2a42GfpRveLMM.roa (hash: fZK2xuA5OS6VVpu9Qqe8Cfg/Fx5ihhnU//91+adop+w=)
37: wcVHNrkbhZ1OLGPcmEy3EALkc9Y.roa (hash: HdduppraKMbdN3fgj8TTiKr0BeBOvEfgXB12pZLJIQo=)
38: zdg7rEYd8dQenAi-bfO2kFmvZDk.roa (hash: Zng36IPUI8UvVd30RMfLhIMXyk7oHOYbotPOjThK2aU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Dec 2025 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:08:fe:56:1a:0b:e7:12:0e:e7:39:59:be:5a:fe:59:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Dec 10 16:00:44 2025 GMT
Not After : Dec 11 16:00:44 2025 GMT
Subject: CN=e5e3594db9a18815dcff117d5ec376496d3cfccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:51:dd:7c:77:6f:cc:bf:f1:a4:a5:5f:2f:
e1:df:ab:8a:56:22:71:fb:98:d9:ed:9d:48:22:9b:
b6:3c:05:e3:28:98:d7:5c:cf:af:86:35:cd:57:05:
83:6e:d5:ed:30:83:04:25:b0:13:d7:05:3e:c9:ec:
f6:27:5d:8b:b0:c1:da:29:f9:d0:05:b0:ef:94:2e:
cc:03:fa:c7:fc:52:1d:bf:0c:77:95:13:2c:b1:2e:
e1:44:5b:4a:cd:88:89:05:b9:10:4c:a2:f4:23:df:
55:c0:42:cd:d9:50:0b:ea:6b:e6:07:3e:b7:f1:d9:
d1:3a:8e:ed:df:98:2d:64:a6:3a:c1:df:73:10:84:
e0:0e:f7:e7:57:e9:67:78:0c:58:4f:2e:fd:fa:b1:
64:1f:f8:d3:cf:7b:0f:22:70:e8:31:b2:bb:2e:7c:
a3:87:d7:22:dd:b6:1a:6e:62:3b:d7:b4:df:96:86:
77:ba:3c:43:13:48:ea:fb:b6:09:ea:24:a2:30:b3:
62:6d:c4:78:f3:90:3b:e9:99:34:ad:c3:e5:2d:7b:
a8:3e:68:f4:75:66:cd:58:a3:ef:24:cb:95:44:6c:
47:61:bf:1c:86:b2:e0:c6:e3:a7:10:98:8c:4a:2e:
e2:47:f7:17:5e:40:72:50:9d:e1:4f:6f:59:cf:07:
71:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E3:59:4D:B9:A1:88:15:DC:FF:11:7D:5E:C3:76:49:6D:3C:FC:CD
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ee:f8:fa:d5:07:a3:98:08:df:2a:c8:fa:08:c0:dc:ec:e3:
80:29:71:bd:f6:43:a0:6d:56:81:26:48:0c:8d:5d:de:f6:ab:
a2:32:0b:0e:f1:4c:28:b2:b3:d0:e9:ba:92:a9:a0:f4:8e:fc:
b0:9f:98:2c:85:27:ea:a9:e3:c4:85:83:bd:ed:ea:b0:65:cb:
f1:a0:83:f5:29:4e:68:0a:31:28:4c:88:e2:d1:81:f9:57:0d:
88:02:38:02:6f:5a:35:a3:d8:2d:43:ac:4d:57:cf:a8:8d:5a:
13:49:cf:56:54:75:a0:85:f1:4e:b9:12:8f:f1:1c:7a:0b:fb:
f1:e8:5a:29:ed:19:c6:9e:c3:14:ad:78:44:12:a8:fa:ac:8d:
6e:a0:fc:47:e2:62:94:a4:b5:67:e4:cf:42:7d:a7:5d:ab:f5:
ba:a7:74:25:e7:3e:01:a1:5f:56:05:3d:6c:c3:6f:73:e6:db:
d7:bf:ba:51:c8:21:e2:12:13:93:75:0d:1c:1c:23:43:02:d4:
e5:a6:9d:2f:89:a5:d0:7f:3b:ab:03:6f:ad:8f:33:ee:44:82:
22:ea:a1:ed:fc:48:4b:87:a8:0a:b0:b7:91:0d:56:92:7c:cd:
d1:cf:f3:99:11:9e:f7:04:d6:d8:7e:fd:9e:b8:f0:e2:0f:88:
84:65:a2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 10 23:02:41 2025 by rpki-client