This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/1f71bd-3c05-4516-9710-7abd07da51e5/1/HA73NQ7-NSp2AezkHDGl-DhkVic.mft File: HA73NQ7-NSp2AezkHDGl-DhkVic.mft (raw, json) Hash identifier: WakRcIqKnlxL65X9+Fvpo/rmhtQQaRCJdMrB/mgTBG0= Subject key identifier: 46:4C:6D:22:34:F8:87:BE:55:05:3F:FB:CB:F8:33:4A:CA:46:6E:7D Authority key identifier: 1C:0E:F7:35:0E:FE:35:2A:76:01:EC:E4:1C:31:A5:F8:38:64:56:27 Certificate issuer: /CN=1c0ef7350efe352a7601ece41c31a5f838645627 Certificate serial: 019AF20947ABAD5C68BFFCFDA0D3E93D5E0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA73NQ7-NSp2AezkHDGl-DhkVic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/1f71bd-3c05-4516-9710-7abd07da51e5/1/HA73NQ7-NSp2AezkHDGl-DhkVic.mft Manifest number: 8E Signing time: Sat 06 Dec 2025 05:01:25 +0000 Manifest this update: Sat 06 Dec 2025 05:01:25 +0000 Manifest next update: Sun 07 Dec 2025 05:01:25 +0000 Files and hashes: 1: HA73NQ7-NSp2AezkHDGl-DhkVic.crl (hash: Drck4pC7hVIskn31aQZoGQ8SETEYtOKqq37x+/VqjBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/1f71bd-3c05-4516-9710-7abd07da51e5/1/HA73NQ7-NSp2AezkHDGl-DhkVic.crl rsync://rpki.ripe.net/repository/DEFAULT/28/1f71bd-3c05-4516-9710-7abd07da51e5/1/HA73NQ7-NSp2AezkHDGl-DhkVic.mft rsync://rpki.ripe.net/repository/DEFAULT/HA73NQ7-NSp2AezkHDGl-DhkVic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:47:ab:ad:5c:68:bf:fc:fd:a0:d3:e9:3d:5e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c0ef7350efe352a7601ece41c31a5f838645627 Validity Not Before: Dec 6 05:01:25 2025 GMT Not After : Dec 7 05:01:25 2025 GMT Subject: CN=464c6d2234f887be55053ffbcbf8334aca466e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:41:ba:18:fb:d0:a1:b4:11:7b:29:27:f8:8e: 9b:57:ad:11:a8:f6:5f:39:dd:90:60:e1:45:89:e6: 32:02:b8:fa:fc:73:7e:5d:b0:83:21:c3:d1:da:45: 8d:ce:bb:5f:56:a3:ef:45:93:0d:47:11:e3:ae:d4: 8f:a6:1a:76:b2:5a:94:68:d0:94:ba:2e:46:bc:48: 37:84:db:74:c6:59:62:1e:45:bd:1d:23:2d:6a:0d: a6:f3:fe:c9:e4:cc:ef:a4:0c:95:a9:48:6e:06:05: 15:e1:8f:07:51:ca:46:ed:13:44:4f:dd:af:8e:b6: 53:a1:9a:d3:f4:f5:ab:0f:84:c8:6b:ad:c3:06:1a: e1:aa:e1:d2:de:4f:76:ef:ca:f4:05:18:4a:4b:f6: c1:19:e1:96:0b:ac:51:0c:ed:fd:f1:49:95:d8:40: 03:29:af:e1:05:36:c7:65:26:fb:bc:33:ce:aa:7d: 53:c4:a4:1c:14:19:aa:71:e2:91:9c:3a:16:75:4f: 9f:f5:46:31:69:4e:1e:f5:77:80:bf:1b:dd:02:03: bf:f1:ca:66:8d:5b:f7:66:9d:da:a7:67:d0:a7:24: 35:0f:d3:27:ec:a3:ce:2c:af:0d:42:21:00:be:a0: 22:69:84:c5:e6:b2:53:46:f4:0e:7e:4d:8b:09:26: 6c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4C:6D:22:34:F8:87:BE:55:05:3F:FB:CB:F8:33:4A:CA:46:6E:7D X509v3 Authority Key Identifier: keyid:1C:0E:F7:35:0E:FE:35:2A:76:01:EC:E4:1C:31:A5:F8:38:64:56:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA73NQ7-NSp2AezkHDGl-DhkVic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/1f71bd-3c05-4516-9710-7abd07da51e5/1/HA73NQ7-NSp2AezkHDGl-DhkVic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/1f71bd-3c05-4516-9710-7abd07da51e5/1/HA73NQ7-NSp2AezkHDGl-DhkVic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:21:a7:66:81:47:e5:9b:9a:7d:ef:8e:66:af:42:15:af:26: 2a:b3:db:7e:d1:d2:b3:d5:c0:d0:14:0c:c1:14:d6:a4:f9:53: d0:d1:ff:f7:86:75:25:9c:32:74:4f:ac:17:37:c0:34:98:c1: fe:3f:32:5c:b0:41:6d:d6:25:ca:39:90:79:34:19:51:00:b7: 3e:7a:25:00:f3:53:de:1f:19:b8:5b:fd:81:83:23:ef:36:dc: 9f:df:c3:2d:2c:d0:c7:81:eb:f1:e4:f2:2a:0b:54:00:df:e2: 43:b1:06:1b:ba:b1:dd:1e:8d:e5:de:1d:78:b5:26:33:06:54: 35:74:29:e5:46:ae:c4:5c:12:2d:83:c5:85:ea:6d:c0:ed:e8: 35:bf:52:c5:7d:6e:3e:20:b0:65:38:bc:10:3f:65:3a:dd:17: 64:6f:2f:3e:19:57:e8:6a:5a:1d:f1:9c:6b:c9:31:3a:3b:3d: d6:52:d4:16:80:3f:7f:21:02:b0:4f:e6:d8:52:3a:c9:8e:a2: 73:f0:af:be:f1:1f:78:dc:67:57:f6:77:27:03:ff:73:2e:27: f6:0a:3e:0b:66:89:b6:0b:bd:76:be:65:37:73:86:54:6e:04: 5e:0b:2a:f4:83:20:bc:74:03:5f:0b:62:f5:90:5b:a8:69:91: 87:be:00:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUerrVxov/z9oNPpPV4KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMGVmNzM1MGVmZTM1MmE3NjAxZWNlNDFjMzFhNWY4Mzg2 NDU2MjcwHhcNMjUxMjA2MDUwMTI1WhcNMjUxMjA3MDUwMTI1WjAzMTEwLwYDVQQD Eyg0NjRjNmQyMjM0Zjg4N2JlNTUwNTNmZmJjYmY4MzM0YWNhNDY2ZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UG6GPvQobQReykn+I6bV60RqPZf Od2QYOFFieYyArj6/HN+XbCDIcPR2kWNzrtfVqPvRZMNRxHjrtSPphp2slqUaNCU ui5GvEg3hNt0xlliHkW9HSMtag2m8/7J5MzvpAyVqUhuBgUV4Y8HUcpG7RNET92v jrZToZrT9PWrD4TIa63DBhrhquHS3k9278r0BRhKS/bBGeGWC6xRDO398UmV2EAD Ka/hBTbHZSb7vDPOqn1TxKQcFBmqceKRnDoWdU+f9UYxaU4e9XeAvxvdAgO/8cpm jVv3Zp3ap2fQpyQ1D9Mn7KPOLK8NQiEAvqAiaYTF5rJTRvQOfk2LCSZsMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZMbSI0+Ie+VQU/+8v4M0rKRm59MB8GA1UdIwQY MBaAFBwO9zUO/jUqdgHs5Bwxpfg4ZFYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEE3M05RNy1OU3AyQWV6a0hER2wtRGhrVmljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xZjcxYmQtM2MwNS00NTE2LTk3MTAt N2FiZDA3ZGE1MWU1LzEvSEE3M05RNy1OU3AyQWV6a0hER2wtRGhrVmljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8xZjcxYmQtM2MwNS00NTE2LTk3MTAtN2FiZDA3ZGE1MWU1 LzEvSEE3M05RNy1OU3AyQWV6a0hER2wtRGhrVmljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjiGnZoFH 5Zuafe+OZq9CFa8mKrPbftHSs9XA0BQMwRTWpPlT0NH/94Z1JZwydE+sFzfANJjB /j8yXLBBbdYlyjmQeTQZUQC3PnolAPNT3h8ZuFv9gYMj7zbcn9/DLSzQx4Hr8eTy KgtUAN/iQ7EGG7qx3R6N5d4deLUmMwZUNXQp5UauxFwSLYPFheptwO3oNb9SxX1u PiCwZTi8ED9lOt0XZG8vPhlX6GpaHfGca8kxOjs91lLUFoA/fyECsE/m2FI6yY6i c/CvvvEfeNxnV/Z3JwP/cy4n9go+C2aJtgu9dr5lN3OGVG4EXgsq9IMgvHQDXwti 9ZBbqGmRh74AHw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:09:09 2025 by rpki-client