This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft File: hwNNK1ky3RSR3n__McfYOvcyBuI.mft (raw, json) Hash identifier: 5qp08vKxHAmHN8OgzgKbSx+ifkvhz8aD0zfRAtCfq24= Subject key identifier: 7E:0D:51:98:A0:77:C7:AD:45:66:0B:44:7C:49:6B:B5:91:E9:45:3B Authority key identifier: 87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2 Certificate issuer: /CN=87034d2b5932dd1491de7fff31c7d83af73206e2 Certificate serial: 019B32D69904AC45C7C8C5962DF3F6C94E9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft Manifest number: 9D Signing time: Thu 18 Dec 2025 19:01:23 +0000 Manifest this update: Thu 18 Dec 2025 19:01:23 +0000 Manifest next update: Fri 19 Dec 2025 19:01:23 +0000 Files and hashes: 1: 8hT_E2lP_XAAVJsTroBoa69lbkY.roa (hash: wsftIcKlCqe+R912iWtJnREYgPP40XIaQmbFqEEoMJE=) 2: hwNNK1ky3RSR3n__McfYOvcyBuI.crl (hash: LMyNQQqHr7dkWPT9LMIoEzp/uC9QtS6j2ARURRCmS4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:99:04:ac:45:c7:c8:c5:96:2d:f3:f6:c9:4e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87034d2b5932dd1491de7fff31c7d83af73206e2 Validity Not Before: Dec 18 19:01:23 2025 GMT Not After : Dec 19 19:01:23 2025 GMT Subject: CN=7e0d5198a077c7ad45660b447c496bb591e9453b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:d6:91:6e:6b:11:32:69:fa:74:84:d3:cd: fb:02:d7:27:58:2d:c9:e0:e0:ea:3f:13:07:62:f6: 04:fd:dd:bb:41:04:30:ad:ab:ba:25:d1:6c:11:d7: 75:88:48:9a:13:ca:ae:2e:af:47:e0:51:41:e7:56: 55:5f:b2:9c:bb:21:6c:4d:2c:14:7d:49:b7:68:9b: fb:b8:2b:01:b3:a5:95:5b:ab:53:90:79:9c:75:d2: 59:b1:80:e6:de:65:60:f7:56:37:b1:5a:75:5b:5b: 2c:8a:30:f9:cf:4e:c0:87:81:99:cc:fb:fb:42:a0: 85:3f:8a:bd:f6:b3:83:7f:6b:86:4c:ff:89:1b:cb: d1:e8:c0:4b:66:bc:1b:38:b0:b3:f2:d3:53:72:9c: 2d:dc:69:77:27:ca:58:ab:5b:eb:36:4a:54:e6:50: 76:51:26:83:e5:97:55:10:0d:5c:d8:a5:db:02:dd: 49:e2:85:54:42:46:62:00:f8:99:8b:b1:58:54:28: 6a:5e:e8:c0:cb:8f:0c:0b:42:2a:46:72:8b:8a:70: 86:26:c5:0b:84:59:07:f7:2a:bd:a6:32:02:ad:d4: e8:44:17:27:30:50:77:71:86:93:ea:0b:7c:af:c0: a5:5f:43:ea:4d:e3:94:a0:b5:ba:63:af:2a:4b:e5: 6a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0D:51:98:A0:77:C7:AD:45:66:0B:44:7C:49:6B:B5:91:E9:45:3B X509v3 Authority Key Identifier: keyid:87:03:4D:2B:59:32:DD:14:91:DE:7F:FF:31:C7:D8:3A:F7:32:06:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwNNK1ky3RSR3n__McfYOvcyBuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/70cc54-a748-45ed-99ac-39ff26152aa4/1/hwNNK1ky3RSR3n__McfYOvcyBuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:11:eb:d3:3d:7f:21:20:45:73:3a:2b:54:48:bf:de:4a:99: 4c:e2:21:09:cf:64:e0:74:d0:13:f2:da:4c:13:72:34:ff:13: bc:63:c2:00:48:1a:e2:49:56:43:1c:5f:80:21:c1:ca:fb:bd: 46:b1:28:4b:53:a4:a8:93:8c:4f:32:7d:89:79:a9:f7:0b:ac: 3b:8f:a8:9a:a9:f5:1d:2c:ad:82:95:dd:8d:f9:6e:0c:7e:bf: d8:f4:ca:06:6a:96:df:c3:d8:9a:89:79:c2:6b:89:37:b9:d4: 16:df:5a:8c:bb:19:90:50:8a:63:72:cc:cd:b8:35:af:e5:32: 14:99:06:60:fc:76:7e:18:41:ab:bf:ec:f7:91:13:3f:e5:aa: a7:75:a5:7b:d7:67:31:cd:3d:a7:87:eb:4f:ea:3a:ec:8b:e5: 5a:a1:75:fb:d5:0e:a6:f9:05:0b:f3:14:8b:3a:20:da:5a:76: ce:48:f7:d6:3f:8a:6d:74:5e:66:41:4f:1b:7c:47:95:c5:f1: 2b:46:05:7d:6e:62:82:1b:73:01:70:00:bc:de:96:d2:4e:81: 67:64:7e:3a:e2:bf:cb:5c:7b:ce:74:84:57:77:a0:c0:26:34: ce:9c:1f:74:3c:29:6b:1f:95:c0:a7:1a:53:25:00:ba:8f:b6: 35:58:08:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1pkErEXHyMWWLfP2yU6eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MDM0ZDJiNTkzMmRkMTQ5MWRlN2ZmZjMxYzdkODNhZjcz MjA2ZTIwHhcNMjUxMjE4MTkwMTIzWhcNMjUxMjE5MTkwMTIzWjAzMTEwLwYDVQQD Eyg3ZTBkNTE5OGEwNzdjN2FkNDU2NjBiNDQ3YzQ5NmJiNTkxZTk0NTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjPWkW5rETJp+nSE0837AtcnWC3J 4ODqPxMHYvYE/d27QQQwrau6JdFsEdd1iEiaE8quLq9H4FFB51ZVX7KcuyFsTSwU fUm3aJv7uCsBs6WVW6tTkHmcddJZsYDm3mVg91Y3sVp1W1ssijD5z07Ah4GZzPv7 QqCFP4q99rODf2uGTP+JG8vR6MBLZrwbOLCz8tNTcpwt3Gl3J8pYq1vrNkpU5lB2 USaD5ZdVEA1c2KXbAt1J4oVUQkZiAPiZi7FYVChqXujAy48MC0IqRnKLinCGJsUL hFkH9yq9pjICrdToRBcnMFB3cYaT6gt8r8ClX0PqTeOUoLW6Y68qS+VqmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4NUZigd8etRWYLRHxJa7WR6UU7MB8GA1UdIwQY MBaAFIcDTStZMt0Ukd5//zHH2Dr3MgbiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHdOTksxa3kzUlNSM25fX01jZllPdmN5QnVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83MGNjNTQtYTc0OC00NWVkLTk5YWMt MzlmZjI2MTUyYWE0LzEvaHdOTksxa3kzUlNSM25fX01jZllPdmN5QnVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS83MGNjNTQtYTc0OC00NWVkLTk5YWMtMzlmZjI2MTUyYWE0 LzEvaHdOTksxa3kzUlNSM25fX01jZllPdmN5QnVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIRHr0z1/ ISBFczorVEi/3kqZTOIhCc9k4HTQE/LaTBNyNP8TvGPCAEga4klWQxxfgCHByvu9 RrEoS1OkqJOMTzJ9iXmp9wusO4+omqn1HSytgpXdjfluDH6/2PTKBmqW38PYmol5 wmuJN7nUFt9ajLsZkFCKY3LMzbg1r+UyFJkGYPx2fhhBq7/s95ETP+Wqp3Wle9dn Mc09p4frT+o67IvlWqF1+9UOpvkFC/MUizog2lp2zkj31j+KbXReZkFPG3xHlcXx K0YFfW5ightzAXAAvN6W0k6BZ2R+OuK/y1x7znSEV3egwCY0zpwfdDwpax+VwKca UyUAuo+2NVgIbQ== -----END CERTIFICATE-----Generated at Fri Dec 19 04:40:55 2025 by rpki-client