This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft File: Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json) Hash identifier: 7UmSPafcWaXQiT3KYGjsafWt+dPyEGBh944npetjBG8= Subject key identifier: 46:F4:E0:3A:C9:A7:28:F7:44:97:06:A2:91:F5:51:9F:26:D2:25:3B Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02 Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502 Certificate serial: 019AF27655D53EC553CC2311475FF15BDAAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft Manifest number: 1767 Signing time: Sat 06 Dec 2025 07:00:32 +0000 Manifest this update: Sat 06 Dec 2025 07:00:32 +0000 Manifest next update: Sun 07 Dec 2025 07:00:32 +0000 Files and hashes: 1: 76g-Yh9Ferd3lB3kSC_pOEFVc_w.roa (hash: mtYP23ZyiF5FjXJ0wDyag4TWISBNCmqIokoqkgwM24I=) 2: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: ZSY9ur+XB6FNUJ3w2Y2eR3FaD9XhoR7S6tv7MHKrAEY=) 3: clnaMm-gMiwsEYseD9VB3Kwt084.roa (hash: NpN0ynwsyxvDm6R0XnAuzGI9A3Dr8XC3OEWiSMbZf5Y=) 4: fCPoYoYgmnVqeGk9iQ9Y_u8Krrk.roa (hash: 5NqXcLS1fcDGaL4JuIaR1NwgZWlNxtw/gKtP6OVjQO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:55:d5:3e:c5:53:cc:23:11:47:5f:f1:5b:da:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502 Validity Not Before: Dec 6 07:00:32 2025 GMT Not After : Dec 7 07:00:32 2025 GMT Subject: CN=46f4e03ac9a728f7449706a291f5519f26d2253b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:61:c6:b4:71:be:1a:56:48:22:61:7e:11:f9: 31:8e:96:c2:7a:d8:4a:d8:d7:81:55:f2:1f:ec:1b: 83:38:27:20:8b:08:dd:7c:92:8a:f5:3f:14:94:96: eb:48:33:f4:21:06:db:bb:93:1e:bd:50:ca:67:9e: 0d:4b:b3:43:db:4f:8d:62:15:f4:1b:46:cf:f5:d0: 81:b8:34:0c:51:63:d5:b5:07:e5:f0:b8:c9:c2:15: 16:30:0e:21:9f:5d:47:8a:43:d2:2d:35:52:71:58: c3:8d:6d:31:58:e6:7b:81:3f:16:8a:47:c2:4c:46: e4:c6:b6:05:62:1d:4b:4e:bb:e1:fb:83:57:e9:56: 22:e2:3b:a4:9f:07:d1:50:c6:5d:e7:62:95:10:5b: 1c:85:e2:b0:05:56:19:41:0a:fc:ee:b4:08:fb:14: c2:15:9a:d4:d8:c5:cb:98:9c:51:37:41:34:c4:62: 17:0c:14:38:ca:f7:a3:d1:c5:cc:3a:02:88:64:4f: 14:c5:c5:d2:1f:00:f6:a3:e5:62:b0:fd:78:eb:45: 6c:db:ea:08:8f:5b:5f:84:d1:b2:98:d1:3e:3c:a7: 6a:79:17:e0:a8:dd:4b:44:b8:30:b6:ec:f8:b8:21: d9:0a:29:98:5b:1f:fb:cc:64:e6:1d:06:57:6c:c1: 8e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F4:E0:3A:C9:A7:28:F7:44:97:06:A2:91:F5:51:9F:26:D2:25:3B X509v3 Authority Key Identifier: keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:3e:dc:1a:57:e1:cc:7c:f3:3a:2c:0d:6c:42:c9:30:7b:3a: 8f:30:27:7c:27:3f:03:e0:e9:47:b4:62:29:b9:56:54:ad:9d: 88:a7:a0:a5:d2:84:a0:db:a6:fd:e5:87:c4:b1:08:a1:62:0a: ce:83:82:00:94:4a:6f:cd:69:75:7f:92:b5:7e:19:2f:e6:99: 13:fb:72:6e:c4:4b:22:f9:6d:34:dd:01:9b:9f:a6:44:24:e3: 03:c8:4e:bf:a5:be:2a:ad:b3:19:bd:45:ff:22:5f:ec:71:0e: 54:4b:53:4c:ac:da:8c:aa:21:9b:16:de:8e:4f:7c:e8:fe:c8: 2d:ba:69:03:94:ad:92:51:d6:b5:96:0c:8e:38:9b:f1:5d:1c: f8:2d:b5:27:40:88:12:68:5f:46:db:30:c0:fb:71:25:b2:30: d5:6d:54:a4:cf:39:a7:12:0a:37:7b:05:83:41:62:24:95:c0: 6e:a4:de:b7:1b:e6:20:71:6b:38:0e:61:fa:98:39:1b:77:59: 2b:80:87:b7:01:1b:33:38:c7:19:c1:dc:17:99:a6:24:9c:28: e3:76:6c:76:aa:0b:b7:20:b9:42:1e:7e:60:d7:84:ca:3c:39: 76:3f:3f:04:1e:fe:24:13:b4:1c:25:ed:25:7d:b9:1d:2f:7a: 85:95:de:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydlXVPsVTzCMRR1/xW9quMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYTk3Y2FlN2RlNmIyOWU1NmYwMjU5YWY1M2M5NTkyNjAz NGE1MDIwHhcNMjUxMjA2MDcwMDMyWhcNMjUxMjA3MDcwMDMyWjAzMTEwLwYDVQQD Eyg0NmY0ZTAzYWM5YTcyOGY3NDQ5NzA2YTI5MWY1NTE5ZjI2ZDIyNTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/WHGtHG+GlZIImF+EfkxjpbCethK 2NeBVfIf7BuDOCcgiwjdfJKK9T8UlJbrSDP0IQbbu5MevVDKZ54NS7ND20+NYhX0 G0bP9dCBuDQMUWPVtQfl8LjJwhUWMA4hn11HikPSLTVScVjDjW0xWOZ7gT8WikfC TEbkxrYFYh1LTrvh+4NX6VYi4juknwfRUMZd52KVEFscheKwBVYZQQr87rQI+xTC FZrU2MXLmJxRN0E0xGIXDBQ4yvej0cXMOgKIZE8UxcXSHwD2o+VisP1460Vs2+oI j1tfhNGymNE+PKdqeRfgqN1LRLgwtuz4uCHZCimYWx/7zGTmHQZXbMGO8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEb04DrJpyj3RJcGopH1UZ8m0iU7MB8GA1UdIwQY MBaAFB2pfK595rKeVvAlmvU8lZJgNKUCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84NWI2NzMtZjFhZC00M2UyLWJmZTct MGNkNzIzNmIyOWI2LzEvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC84NWI2NzMtZjFhZC00M2UyLWJmZTctMGNkNzIzNmIyOWI2 LzEvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlD7cGlfh zHzzOiwNbELJMHs6jzAnfCc/A+DpR7RiKblWVK2diKegpdKEoNum/eWHxLEIoWIK zoOCAJRKb81pdX+StX4ZL+aZE/tybsRLIvltNN0Bm5+mRCTjA8hOv6W+Kq2zGb1F /yJf7HEOVEtTTKzajKohmxbejk986P7ILbppA5StklHWtZYMjjib8V0c+C21J0CI EmhfRtswwPtxJbIw1W1UpM85pxIKN3sFg0FiJJXAbqTetxvmIHFrOA5h+pg5G3dZ K4CHtwEbMzjHGcHcF5mmJJwo43ZsdqoLtyC5Qh5+YNeEyjw5dj8/BB7+JBO0HCXt JX25HS96hZXeOQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:43:12 2025 by rpki-client