This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft File: HWW3t7iY-q7nB2fQlxXENqg_zcI.mft (raw, json) Hash identifier: yPoauQjQzc+dvtU+mH1J1RJCl9Op+y+vLm1ez/lfSAo= Subject key identifier: B5:DC:D2:28:57:49:F0:1D:21:2D:C6:AF:06:BA:C5:00:76:7F:AC:8E Authority key identifier: 1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2 Certificate issuer: /CN=1d65b7b7b898faaee70767d09715c436a83fcdc2 Certificate serial: 019B0AB59EE7945A707BA09125E9875EEDE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft Manifest number: 1776 Signing time: Thu 11 Dec 2025 00:00:33 +0000 Manifest this update: Thu 11 Dec 2025 00:00:33 +0000 Manifest next update: Fri 12 Dec 2025 00:00:33 +0000 Files and hashes: 1: ESdFHrMTT9CdnTueAws85KzTpOo.roa (hash: EFe4+WtiIfRKsYq3EhY1PIgLIFzMrHc8WS2QY4wWHBs=) 2: HWW3t7iY-q7nB2fQlxXENqg_zcI.crl (hash: Y3qjUdAKk1AjJkXzZrkd5WLwwy5avPULcBm36kSXMog=) 3: S7dw96BjJHjSAZkMcxGi_FB5doA.roa (hash: KE2tpzq8RhZkUzoGjIN+rbgmJi4KOhIPNewQQ1O2Z3o=) 4: lHt_Mh1w-7vs8I-ZaeWKv1xW2Ps.roa (hash: /8Glm1hc9AeZKEAxOBVRVagGt2gyvK5usk/gBvfbgls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:b5:9e:e7:94:5a:70:7b:a0:91:25:e9:87:5e:ed:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d65b7b7b898faaee70767d09715c436a83fcdc2 Validity Not Before: Dec 11 00:00:33 2025 GMT Not After : Dec 12 00:00:33 2025 GMT Subject: CN=b5dcd2285749f01d212dc6af06bac500767fac8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:72:da:93:ba:10:aa:c3:46:2e:50:a6:03:78: 91:d2:27:dd:75:3f:e1:53:66:2e:be:2b:ed:4a:26: 75:0a:85:19:cb:c5:c2:4f:c7:fc:90:d6:e6:51:25: 01:24:05:a1:af:88:bd:ca:f8:67:9e:47:3d:60:0f: 04:54:a4:7c:27:1f:59:5d:45:53:ca:47:70:3a:82: 4f:8b:ff:25:3a:0b:14:00:b3:62:e4:4f:7e:98:ca: ac:75:99:7c:ee:d2:7a:12:28:38:e5:0e:e8:24:92: 11:6e:2f:48:31:74:f3:84:03:1c:4c:e9:85:b7:56: cf:bd:0c:4b:49:34:64:18:63:bb:e6:94:1f:7f:ef: 27:de:f8:dd:32:14:eb:a5:d6:85:de:7d:d1:e4:7c: 9b:71:a7:4b:43:a3:e3:d4:71:1d:50:c1:10:7d:5d: 05:67:f2:2f:dc:54:65:a0:7b:57:5d:92:51:f9:d7: 01:e1:22:2b:4c:ee:12:9b:52:78:36:09:05:48:13: be:27:ff:94:ac:41:f8:c5:32:42:3e:97:a9:78:ff: c3:9a:85:3f:6c:f2:50:39:90:2a:a6:17:67:64:da: 87:23:f9:73:ba:b0:d8:53:a1:f3:09:77:28:f8:93: 55:bc:14:a6:35:02:eb:1d:4e:3b:20:29:fe:e7:92: 15:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DC:D2:28:57:49:F0:1D:21:2D:C6:AF:06:BA:C5:00:76:7F:AC:8E X509v3 Authority Key Identifier: keyid:1D:65:B7:B7:B8:98:FA:AE:E7:07:67:D0:97:15:C4:36:A8:3F:CD:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HWW3t7iY-q7nB2fQlxXENqg_zcI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/deaef1-6241-49ab-9825-8fc373757684/1/HWW3t7iY-q7nB2fQlxXENqg_zcI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e7:92:0c:47:f8:f9:f3:12:4a:c8:5a:cf:6c:90:05:79:36: 81:8f:55:16:35:6f:b3:11:b9:06:66:a8:a6:45:68:6b:0b:3a: 2f:85:f6:20:05:5d:84:05:d5:9a:9f:91:c5:7a:30:1a:d8:e5: 5f:f1:1b:42:c9:14:3c:78:dc:b9:4e:74:92:26:87:36:2c:6e: b2:7f:76:4e:0a:f1:d4:2c:4b:f0:09:0a:42:09:0a:1c:c1:ba: 2c:00:d2:f9:27:e1:25:00:c2:27:93:91:81:74:5b:48:8b:64: f3:6a:33:0c:54:60:38:3f:17:4a:23:5c:57:5e:d5:19:cb:a0: ac:7e:bb:1c:42:57:4c:18:5d:3a:40:5d:6a:b7:66:85:f3:88: 1e:da:c9:9b:53:11:84:ca:78:8e:07:21:8d:50:0f:24:12:0e: f7:91:cc:2a:7e:9d:a1:0c:0e:cf:8f:38:2d:e7:f5:99:78:d7: 36:45:14:01:1a:3d:b1:4a:2b:41:f3:a2:e0:b2:33:d5:1a:10: 96:a4:67:05:e7:30:dd:47:b1:72:f9:5f:50:22:05:73:53:a4: 37:0d:b7:76:4a:04:68:2c:ff:da:3a:2c:79:b7:24:70:1e:d3: 90:41:b0:7b:36:73:f7:04:05:97:2c:d4:92:af:aa:37:c1:08: 84:03:25:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsKtZ7nlFpwe6CRJemHXu3iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNjViN2I3Yjg5OGZhYWVlNzA3NjdkMDk3MTVjNDM2YTgz ZmNkYzIwHhcNMjUxMjExMDAwMDMzWhcNMjUxMjEyMDAwMDMzWjAzMTEwLwYDVQQD EyhiNWRjZDIyODU3NDlmMDFkMjEyZGM2YWYwNmJhYzUwMDc2N2ZhYzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXLak7oQqsNGLlCmA3iR0ifddT/h U2YuvivtSiZ1CoUZy8XCT8f8kNbmUSUBJAWhr4i9yvhnnkc9YA8EVKR8Jx9ZXUVT ykdwOoJPi/8lOgsUALNi5E9+mMqsdZl87tJ6Eig45Q7oJJIRbi9IMXTzhAMcTOmF t1bPvQxLSTRkGGO75pQff+8n3vjdMhTrpdaF3n3R5HybcadLQ6Pj1HEdUMEQfV0F Z/Iv3FRloHtXXZJR+dcB4SIrTO4Sm1J4NgkFSBO+J/+UrEH4xTJCPpepeP/DmoU/ bPJQOZAqphdnZNqHI/lzurDYU6HzCXco+JNVvBSmNQLrHU47ICn+55IVVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXc0ihXSfAdIS3Grwa6xQB2f6yOMB8GA1UdIwQY MBaAFB1lt7e4mPqu5wdn0JcVxDaoP83CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUt OGZjMzczNzU3Njg0LzEvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9kZWFlZjEtNjI0MS00OWFiLTk4MjUtOGZjMzczNzU3Njg0 LzEvSFdXM3Q3aVktcTduQjJmUWx4WEVOcWdfemNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALueSDEf4 +fMSSshaz2yQBXk2gY9VFjVvsxG5BmaopkVoaws6L4X2IAVdhAXVmp+RxXowGtjl X/EbQskUPHjcuU50kiaHNixusn92Tgrx1CxL8AkKQgkKHMG6LADS+SfhJQDCJ5OR gXRbSItk82ozDFRgOD8XSiNcV17VGcugrH67HEJXTBhdOkBdardmhfOIHtrJm1MR hMp4jgchjVAPJBIO95HMKn6doQwOz484Lef1mXjXNkUUARo9sUorQfOi4LIz1RoQ lqRnBecw3UexcvlfUCIFc1OkNw23dkoEaCz/2josebckcB7TkEGwezZz9wQFlyzU kq+qN8EIhAMl/Q== -----END CERTIFICATE-----Generated at Thu Dec 11 05:20:47 2025 by rpki-client