This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft File: hwogf40P0mMwvNWfqEc1SdyS3uk.mft (raw, json) Hash identifier: XsCWIKq1/n2nCXhA2wLNm23JYP4sy43Rll+33zIwxFg= Subject key identifier: 56:27:CF:FA:D8:06:DD:E5:28:A5:FA:DB:92:33:73:15:C4:B3:32:58 Authority key identifier: 87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9 Certificate issuer: /CN=870a207f8d0fd26330bcd59fa8473549dc92dee9 Certificate serial: 019B5A88ACE98CBD44D513A62E7CA6F6467E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft Manifest number: 0D5B Signing time: Fri 26 Dec 2025 12:01:05 +0000 Manifest this update: Fri 26 Dec 2025 12:01:05 +0000 Manifest next update: Sat 27 Dec 2025 12:01:05 +0000 Files and hashes: 1: U0r3hhSWvJREMqLZH2Hpa3q15Vc.roa (hash: ddXvERc2U8k9QtkbhiwQPmEstoMSyktp+JN206s3ypM=) 2: hwogf40P0mMwvNWfqEc1SdyS3uk.crl (hash: yl4KgIgpUCSRnoXvHuD1yLSvFa5zkFL5XP6K2d8peA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:ac:e9:8c:bd:44:d5:13:a6:2e:7c:a6:f6:46:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870a207f8d0fd26330bcd59fa8473549dc92dee9 Validity Not Before: Dec 26 12:01:05 2025 GMT Not After : Dec 27 12:01:05 2025 GMT Subject: CN=5627cffad806dde528a5fadb92337315c4b33258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:db:91:60:f4:14:06:cb:f1:8e:1e:99:6d:b1: 36:19:32:52:ea:4e:8d:0d:fd:df:b2:b7:23:2c:e9: f5:ca:3b:d8:6a:79:bc:da:25:80:ae:c0:5e:4c:c1: 79:9f:fe:2a:70:5b:c1:d2:35:8d:8f:55:8f:b6:20: 89:fb:11:14:ba:aa:77:bd:4b:ea:e5:43:74:09:a9: b2:0d:61:8b:89:be:7b:06:64:38:1b:e9:71:3c:1e: c1:85:55:74:06:ea:54:67:3e:7a:0c:f1:ab:c2:8f: b6:6e:64:9b:74:cd:3e:c1:17:e1:ab:dd:b3:ec:bc: 98:e2:42:55:50:6d:9c:55:3f:3b:19:f4:08:60:e3: da:3e:65:ad:79:80:ee:b8:0c:95:a5:b5:a2:f7:ff: b2:b8:1c:dd:10:65:7a:85:f3:7c:18:db:ce:5d:5a: d1:c1:cb:7a:55:60:b1:cf:c2:29:ae:04:4f:62:8c: fd:f3:43:e6:66:87:44:93:9e:b1:57:d3:fa:20:72: d2:b3:22:33:27:50:86:ea:27:f2:fa:c5:39:5e:75: 77:11:44:16:60:65:1a:88:fe:df:87:25:b5:65:94: 56:b3:a6:3b:90:fd:9f:81:e7:f9:1a:3e:e4:27:63: 6a:21:2f:a5:fd:05:b6:ae:c6:6b:0f:82:af:84:03: 08:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:27:CF:FA:D8:06:DD:E5:28:A5:FA:DB:92:33:73:15:C4:B3:32:58 X509v3 Authority Key Identifier: keyid:87:0A:20:7F:8D:0F:D2:63:30:BC:D5:9F:A8:47:35:49:DC:92:DE:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwogf40P0mMwvNWfqEc1SdyS3uk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0bdb78-7e63-470e-a39d-f00a1938881f/1/hwogf40P0mMwvNWfqEc1SdyS3uk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:f3:61:ff:5c:42:86:ca:7f:2e:a9:8c:ca:c6:c4:a6:35:b4: 6e:0e:e2:75:f1:7e:92:40:49:8f:92:de:b5:c5:90:26:2b:ec: 15:37:c0:d4:77:70:f0:ea:36:08:e9:7a:e9:5a:56:b4:f7:42: c2:e4:f9:11:f8:4c:29:7e:0a:ed:63:e8:79:01:42:a0:f8:18: 26:d6:c5:47:82:3b:c2:17:3d:5d:af:0d:6e:b8:d1:ad:c4:17: 32:c3:21:d5:4e:e5:3c:a5:97:53:05:47:fe:b4:22:9f:0f:33: 71:72:8d:41:76:cf:c0:73:aa:3d:59:5e:70:7f:59:92:14:13: c8:08:a7:90:61:81:51:ef:ae:91:7e:0c:01:83:82:74:7f:e6: c4:6f:f9:2c:48:49:82:f8:18:65:f6:93:dd:ab:a5:ca:0c:92: 61:60:39:95:27:16:29:9d:6d:78:24:35:4d:5d:b8:a4:f9:fb: 2e:ab:74:9a:ad:a3:23:fe:48:47:c2:07:4d:d7:44:54:a8:16: 1f:e5:56:6d:5c:ba:ac:1c:61:2d:1a:38:55:66:c5:5d:6d:26: ed:ba:03:7b:e8:87:e0:fc:6d:b7:71:3e:5a:e2:cd:a2:25:1f: c1:a6:1c:30:65:d4:e2:67:d4:19:e7:a6:eb:29:d4:67:da:01: ac:d3:ed:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiKzpjL1E1ROmLnym9kZ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGEyMDdmOGQwZmQyNjMzMGJjZDU5ZmE4NDczNTQ5ZGM5 MmRlZTkwHhcNMjUxMjI2MTIwMTA1WhcNMjUxMjI3MTIwMTA1WjAzMTEwLwYDVQQD Eyg1NjI3Y2ZmYWQ4MDZkZGU1MjhhNWZhZGI5MjMzNzMxNWM0YjMzMjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1duRYPQUBsvxjh6ZbbE2GTJS6k6N Df3fsrcjLOn1yjvYanm82iWArsBeTMF5n/4qcFvB0jWNj1WPtiCJ+xEUuqp3vUvq 5UN0CamyDWGLib57BmQ4G+lxPB7BhVV0BupUZz56DPGrwo+2bmSbdM0+wRfhq92z 7LyY4kJVUG2cVT87GfQIYOPaPmWteYDuuAyVpbWi9/+yuBzdEGV6hfN8GNvOXVrR wct6VWCxz8IprgRPYoz980PmZodEk56xV9P6IHLSsyIzJ1CG6ify+sU5XnV3EUQW YGUaiP7fhyW1ZZRWs6Y7kP2fgef5Gj7kJ2NqIS+l/QW2rsZrD4KvhAMIxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYnz/rYBt3lKKX625IzcxXEszJYMB8GA1UdIwQY MBaAFIcKIH+ND9JjMLzVn6hHNUnckt7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHdvZ2Y0MFAwbU13dk5XZnFFYzFTZHlTM3VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wYmRiNzgtN2U2My00NzBlLWEzOWQt ZjAwYTE5Mzg4ODFmLzEvaHdvZ2Y0MFAwbU13dk5XZnFFYzFTZHlTM3VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8wYmRiNzgtN2U2My00NzBlLWEzOWQtZjAwYTE5Mzg4ODFm LzEvaHdvZ2Y0MFAwbU13dk5XZnFFYzFTZHlTM3VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPNh/1xC hsp/LqmMysbEpjW0bg7idfF+kkBJj5LetcWQJivsFTfA1Hdw8Oo2COl66VpWtPdC wuT5EfhMKX4K7WPoeQFCoPgYJtbFR4I7whc9Xa8NbrjRrcQXMsMh1U7lPKWXUwVH /rQinw8zcXKNQXbPwHOqPVlecH9ZkhQTyAinkGGBUe+ukX4MAYOCdH/mxG/5LEhJ gvgYZfaT3aulygySYWA5lScWKZ1teCQ1TV24pPn7Lqt0mq2jI/5IR8IHTddEVKgW H+VWbVy6rBxhLRo4VWbFXW0m7boDe+iH4Pxtt3E+WuLNoiUfwaYcMGXU4mfUGeem 6ynUZ9oBrNPt1Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:24 2025 by rpki-client