This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft File: hWL0qJNlk83sba1-Ls8beb9lwFo.mft (raw, json) Hash identifier: jSi3f9gijq+7zMkNmm7QSFYYWvpMM/c/xACmW3Vlk3w= Subject key identifier: E8:8B:68:4D:30:B8:03:FD:A9:F8:4F:00:E2:1D:9B:83:2D:D5:6D:25 Authority key identifier: 85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A Certificate issuer: /CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a Certificate serial: 019B5ABF24FEE93786CA67A0BC6926081865 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft Manifest number: 167A Signing time: Fri 26 Dec 2025 13:00:34 +0000 Manifest this update: Fri 26 Dec 2025 13:00:34 +0000 Manifest next update: Sat 27 Dec 2025 13:00:34 +0000 Files and hashes: 1: AuqfHgJMLbox-SCvoHiOWVRxGtM.roa (hash: xeAvQlAlfgpUCdvO+zQfkKF/6NqDyXiaKSOgk2lfPWU=) 2: hWL0qJNlk83sba1-Ls8beb9lwFo.crl (hash: 6TA9MVnBEIvvjOB9TyoFebdZFeZ7VASSN20s+mG3la0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:24:fe:e9:37:86:ca:67:a0:bc:69:26:08:18:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8562f4a8936593cdec6dad7e2ecf1b79bf65c05a Validity Not Before: Dec 26 13:00:34 2025 GMT Not After : Dec 27 13:00:34 2025 GMT Subject: CN=e88b684d30b803fda9f84f00e21d9b832dd56d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:65:1c:38:b1:9f:d2:cd:e3:ea:8a:c4:e6:e8: ec:2c:a5:5f:70:6f:1f:15:35:7f:ba:fc:d3:fb:6b: 83:0e:e8:5e:29:15:7a:b4:e3:ad:ee:59:d4:a7:c1: b6:aa:24:d0:ad:ba:97:d6:d8:5e:d0:41:86:ce:66: ac:66:b3:45:a9:23:8a:5c:32:fa:5e:3c:2f:99:dc: 2a:60:77:4c:49:da:60:4c:d6:91:f2:4e:99:9a:7b: b8:60:db:27:be:06:15:b7:60:64:45:17:d5:aa:44: dd:1d:88:93:a2:f4:76:7f:39:f8:7b:c8:fb:d9:f3: 90:aa:9b:ea:e1:e1:ec:27:d0:b3:cf:de:a5:2c:ce: 01:68:c5:81:35:92:76:c6:8f:ac:b1:6a:ce:53:b5: 62:d4:7b:10:38:e5:a7:fa:85:33:7a:a2:41:b5:0f: d2:c6:ce:a7:06:b3:af:e7:47:86:2e:a2:8f:6d:ee: f1:cc:be:83:e6:c8:94:5b:c0:76:cc:ea:82:d6:79: de:bd:32:eb:65:01:61:ed:4f:20:c2:29:46:df:3d: f5:04:a0:f5:67:fc:e4:8e:c8:ac:e2:e2:72:79:64: 1e:f3:dc:cc:23:5a:4e:37:ed:f3:af:13:fa:b7:8d: 24:29:6f:71:e3:3b:10:20:cc:88:00:bf:28:ea:6c: 0e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8B:68:4D:30:B8:03:FD:A9:F8:4F:00:E2:1D:9B:83:2D:D5:6D:25 X509v3 Authority Key Identifier: keyid:85:62:F4:A8:93:65:93:CD:EC:6D:AD:7E:2E:CF:1B:79:BF:65:C0:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hWL0qJNlk83sba1-Ls8beb9lwFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/01e70b-945c-4817-8189-7e179466298c/1/hWL0qJNlk83sba1-Ls8beb9lwFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:12:e9:8d:62:e9:76:52:e7:53:70:a0:b7:d6:eb:a5:52:b7: fb:02:6d:e6:04:c8:50:fa:53:52:09:aa:a9:18:7d:31:0b:f6: 39:a7:9d:18:c0:bd:ed:2d:51:80:05:7b:1b:ba:33:b4:6a:34: 12:6a:5f:aa:de:af:5f:84:9a:a1:cd:b6:fa:ab:bb:da:97:1d: 81:67:8a:d9:3a:1c:29:b2:c9:23:13:55:77:cb:e6:38:3e:5a: 66:56:7f:51:3b:0c:26:df:cd:09:96:27:79:d3:71:2a:c8:3f: 82:b2:f3:cf:6d:7d:4f:07:63:fa:8c:89:7a:4c:f4:17:64:0e: 50:e4:c7:cf:0c:75:f1:48:84:af:38:e5:8b:31:11:82:3a:96: e2:22:df:d1:0b:be:1d:bc:ad:ae:4f:f7:7e:a2:13:05:69:b1: fa:72:1e:e1:8c:6c:a5:b0:58:52:77:ef:9d:12:f5:5d:df:aa: 93:05:52:96:50:fa:71:ae:cc:e6:7a:76:96:4b:e8:24:30:9b: e1:b6:19:ab:6f:c7:2c:6d:5c:9e:b3:47:32:1b:ba:d2:86:4b: f0:3d:ba:e5:b8:62:20:61:9c:05:9e:27:9f:ca:cd:0f:94:0e: b6:25:4e:ef:72:af:02:ad:bc:4b:fc:08:52:82:bc:aa:60:97: 39:11:ab:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtavyT+6TeGymegvGkmCBhlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NjJmNGE4OTM2NTkzY2RlYzZkYWQ3ZTJlY2YxYjc5YmY2 NWMwNWEwHhcNMjUxMjI2MTMwMDM0WhcNMjUxMjI3MTMwMDM0WjAzMTEwLwYDVQQD EyhlODhiNjg0ZDMwYjgwM2ZkYTlmODRmMDBlMjFkOWI4MzJkZDU2ZDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmUcOLGf0s3j6orE5ujsLKVfcG8f FTV/uvzT+2uDDuheKRV6tOOt7lnUp8G2qiTQrbqX1the0EGGzmasZrNFqSOKXDL6 XjwvmdwqYHdMSdpgTNaR8k6Zmnu4YNsnvgYVt2BkRRfVqkTdHYiTovR2fzn4e8j7 2fOQqpvq4eHsJ9Czz96lLM4BaMWBNZJ2xo+ssWrOU7Vi1HsQOOWn+oUzeqJBtQ/S xs6nBrOv50eGLqKPbe7xzL6D5siUW8B2zOqC1nnevTLrZQFh7U8gwilG3z31BKD1 Z/zkjsis4uJyeWQe89zMI1pON+3zrxP6t40kKW9x4zsQIMyIAL8o6mwO9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOiLaE0wuAP9qfhPAOIdm4Mt1W0lMB8GA1UdIwQY MBaAFIVi9KiTZZPN7G2tfi7PG3m/ZcBaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wMWU3MGItOTQ1Yy00ODE3LTgxODkt N2UxNzk0NjYyOThjLzEvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8wMWU3MGItOTQ1Yy00ODE3LTgxODktN2UxNzk0NjYyOThj LzEvaFdMMHFKTmxrODNzYmExLUxzOGJlYjlsd0ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGhLpjWLp dlLnU3Cgt9brpVK3+wJt5gTIUPpTUgmqqRh9MQv2OaedGMC97S1RgAV7G7oztGo0 Empfqt6vX4Saoc22+qu72pcdgWeK2TocKbLJIxNVd8vmOD5aZlZ/UTsMJt/NCZYn edNxKsg/grLzz219Twdj+oyJekz0F2QOUOTHzwx18UiErzjlizERgjqW4iLf0Qu+ Hbytrk/3fqITBWmx+nIe4YxspbBYUnfvnRL1Xd+qkwVSllD6ca7M5np2lkvoJDCb 4bYZq2/HLG1cnrNHMhu60oZL8D265bhiIGGcBZ4nn8rND5QOtiVO73KvAq28S/wI UoK8qmCXORGr1A== -----END CERTIFICATE-----Generated at Fri Dec 26 15:46:35 2025 by rpki-client