This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft File: HApvbzqa4dpeW-h1L6sY3rKLphQ.mft (raw, json) Hash identifier: f7V8oDbbDJ0VRYfI3iNkq/6GgYdFWuLLoz2MmBWO514= Subject key identifier: 6E:8C:0C:42:8F:B4:63:79:BE:BB:81:1D:2E:F9:0E:9C:C3:FB:AD:9B Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14 Certificate issuer: /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614 Certificate serial: 019AF1D1E61920C52651D4146EEC1FD285CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft Manifest number: 0217 Signing time: Sat 06 Dec 2025 04:00:56 +0000 Manifest this update: Sat 06 Dec 2025 04:00:56 +0000 Manifest next update: Sun 07 Dec 2025 04:00:56 +0000 Files and hashes: 1: HApvbzqa4dpeW-h1L6sY3rKLphQ.crl (hash: 5VuOxZcS9w2B/eme9HNdF+x+A4pWJmECJJKrx9FcBNQ=) 2: NOVPbDKVr5wjUcGbKvJrJzmVhnw.roa (hash: wYz2fmfXZeLSC/FkxxCfmscRdqW9p4YQgw0dEkDtFvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e6:19:20:c5:26:51:d4:14:6e:ec:1f:d2:85:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614 Validity Not Before: Dec 6 04:00:56 2025 GMT Not After : Dec 7 04:00:56 2025 GMT Subject: CN=6e8c0c428fb46379bebb811d2ef90e9cc3fbad9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:72:b4:c4:2c:cc:f1:67:dc:3e:99:0a:30:5b: 55:31:7a:39:70:3c:f9:e2:a9:d8:bb:07:7d:9e:0b: 00:b8:c5:6b:a8:45:e0:98:bc:ee:85:42:a8:2f:7b: 24:53:20:56:0e:60:78:53:19:55:03:55:55:e1:ef: dd:6e:0c:44:06:ea:07:02:12:d3:cc:33:15:52:77: 9c:4a:ce:db:71:2f:ad:c1:03:ff:5f:8f:96:d3:12: 15:b0:70:1a:85:4a:45:c4:fd:34:8d:60:ad:06:26: 71:59:99:33:d5:a4:b9:9e:f7:63:75:a3:31:7b:30: 39:ee:23:be:8a:59:a9:4b:99:84:29:51:a4:b2:c3: d2:d0:ce:06:70:8e:82:4a:11:18:2a:6c:16:0c:23: 4a:cd:ce:d2:95:77:70:68:b2:70:ea:ea:14:64:ea: 26:1c:9e:34:12:e9:0a:d8:51:0c:1a:df:a9:f3:75: 7f:e4:a9:7a:14:dc:68:d7:c1:4b:cb:24:79:be:18: 92:09:11:ae:63:b6:08:18:11:69:ae:c3:76:dc:20: f3:f9:d5:b2:68:3c:1c:ea:49:41:0f:24:e6:ab:6f: 72:88:b1:9f:5d:49:9f:3e:97:c0:3a:82:23:19:8b: ef:61:07:a4:93:1c:01:89:3c:28:41:5c:e6:9f:81: 34:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8C:0C:42:8F:B4:63:79:BE:BB:81:1D:2E:F9:0E:9C:C3:FB:AD:9B X509v3 Authority Key Identifier: keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:cf:f7:e5:df:b3:fa:8c:5a:00:35:02:a1:32:49:a0:39:a1: 54:c6:78:3f:41:62:a7:9d:e4:f3:d4:5a:e7:c6:e7:d4:18:30: bd:f2:39:20:0f:70:1d:79:b1:ea:54:b5:30:7d:fd:10:93:29: 11:2d:49:fa:b9:ce:65:be:f7:d2:40:e7:9b:40:b7:bb:c2:38: f1:c0:57:bf:02:de:91:af:11:d3:89:11:37:49:76:ac:09:71: 2b:ac:8c:49:68:f8:a5:a1:3c:72:54:36:95:f0:28:c7:f9:56: c8:b7:ba:ef:11:f0:7d:76:df:a9:62:4b:9b:24:1c:fe:25:c9: 32:7a:16:74:d3:87:fa:c2:7e:24:b8:97:ea:61:c1:16:4b:36: 0f:58:16:b1:55:d6:74:23:5a:5a:16:02:41:14:fa:80:6e:c5: e2:22:23:6f:a3:44:10:b1:12:21:c1:20:87:35:c7:7b:df:2f: d8:12:b3:c4:e1:51:ee:70:63:94:45:e7:54:eb:66:82:96:6b: 2e:ee:29:04:c7:d1:ff:a4:2b:d9:c6:f7:a9:dc:59:ac:d2:10: dd:e0:51:c6:33:e5:30:13:7f:2e:f6:a5:a7:34:12:7f:79:3c: 1a:3a:96:f7:bd:83:e9:cd:12:a3:18:12:9f:00:30:b5:34:f4: 2b:f3:3b:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eYZIMUmUdQUbuwf0oXPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMGE2ZjZmM2E5YWUxZGE1ZTViZTg3NTJmYWIxOGRlYjI4 YmE2MTQwHhcNMjUxMjA2MDQwMDU2WhcNMjUxMjA3MDQwMDU2WjAzMTEwLwYDVQQD Eyg2ZThjMGM0MjhmYjQ2Mzc5YmViYjgxMWQyZWY5MGU5Y2MzZmJhZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3K0xCzM8WfcPpkKMFtVMXo5cDz5 4qnYuwd9ngsAuMVrqEXgmLzuhUKoL3skUyBWDmB4UxlVA1VV4e/dbgxEBuoHAhLT zDMVUnecSs7bcS+twQP/X4+W0xIVsHAahUpFxP00jWCtBiZxWZkz1aS5nvdjdaMx ezA57iO+ilmpS5mEKVGkssPS0M4GcI6CShEYKmwWDCNKzc7SlXdwaLJw6uoUZOom HJ40EukK2FEMGt+p83V/5Kl6FNxo18FLyyR5vhiSCRGuY7YIGBFprsN23CDz+dWy aDwc6klBDyTmq29yiLGfXUmfPpfAOoIjGYvvYQekkxwBiTwoQVzmn4E0bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6MDEKPtGN5vruBHS75DpzD+62bMB8GA1UdIwQY MBaAFBwKb286muHaXlvodS+rGN6yi6YUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFwdmJ6cWE0ZHBlVy1oMUw2c1kzcktMcGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yYTlkZDQtMTdiOC00NzNjLTgzYmYt OWFmMTA3NGMyMjdmLzEvSEFwdmJ6cWE0ZHBlVy1oMUw2c1kzcktMcGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yYTlkZDQtMTdiOC00NzNjLTgzYmYtOWFmMTA3NGMyMjdm LzEvSEFwdmJ6cWE0ZHBlVy1oMUw2c1kzcktMcGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApM/35d+z +oxaADUCoTJJoDmhVMZ4P0Fip53k89Ra58bn1BgwvfI5IA9wHXmx6lS1MH39EJMp ES1J+rnOZb730kDnm0C3u8I48cBXvwLeka8R04kRN0l2rAlxK6yMSWj4paE8clQ2 lfAox/lWyLe67xHwfXbfqWJLmyQc/iXJMnoWdNOH+sJ+JLiX6mHBFks2D1gWsVXW dCNaWhYCQRT6gG7F4iIjb6NEELESIcEghzXHe98v2BKzxOFR7nBjlEXnVOtmgpZr Lu4pBMfR/6Qr2cb3qdxZrNIQ3eBRxjPlMBN/LvalpzQSf3k8GjqW972D6c0SoxgS nwAwtTT0K/M79Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:05:38 2025 by rpki-client