This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft File: Has2Xsw1BFitorCUnuZ--djG9Nw.mft (raw, json) Hash identifier: V5DqSUHFJFCjZ2Bz0BtldlP6TbHjI9hetIY2G7yKZDg= Subject key identifier: EB:2B:7B:28:8E:C6:8F:13:97:CA:F9:0F:B4:E4:76:A9:A7:DC:BD:38 Authority key identifier: 1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC Certificate issuer: /CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc Certificate serial: 019AF1D1A1A98BA287F6519E59B247CFD619 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft Manifest number: 69 Signing time: Sat 06 Dec 2025 04:00:38 +0000 Manifest this update: Sat 06 Dec 2025 04:00:38 +0000 Manifest next update: Sun 07 Dec 2025 04:00:38 +0000 Files and hashes: 1: Has2Xsw1BFitorCUnuZ--djG9Nw.crl (hash: +mF8S22g3DXbzoqDx5mgDIxkJE5SKFQkGf+K9FaRWVk=) 2: jC-Q6ZUmfg331ebhgya9xds7Pis.roa (hash: kNQyj294qYsc9TLOzDaCHE1k96M030WeGgkAk10rnao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a1:a9:8b:a2:87:f6:51:9e:59:b2:47:cf:d6:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc Validity Not Before: Dec 6 04:00:38 2025 GMT Not After : Dec 7 04:00:38 2025 GMT Subject: CN=eb2b7b288ec68f1397caf90fb4e476a9a7dcbd38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6b:b6:41:4d:2d:f3:ee:24:04:87:87:ca:ed: 66:e5:27:0f:3d:bd:fe:35:54:95:51:8d:94:3b:06: bf:c3:ce:88:6d:be:ac:c7:79:b1:4f:1e:d7:dd:24: 43:f0:07:4a:9a:05:a5:95:e2:eb:aa:5a:b5:75:ff: 7e:b1:bb:8e:da:aa:14:84:2e:93:9d:02:04:c7:63: ee:26:63:34:2b:f8:30:a5:0c:2d:7a:9d:d1:70:62: 53:82:22:65:4c:c9:f7:3f:18:1a:aa:0d:3c:14:1a: 5f:3b:db:11:eb:0f:a8:8c:3f:15:99:99:da:b1:f6: ad:60:81:b6:c0:9c:ce:08:25:94:5a:16:a8:9a:a9: f1:a8:61:23:22:f0:56:f7:d9:de:34:86:ac:2f:d6: 1b:56:2e:ed:8f:d6:4f:1f:9a:37:7b:44:5e:a7:fc: f8:35:30:54:85:a9:5d:37:f9:69:d1:c5:f3:07:e7: 41:36:8d:99:4e:eb:4f:0f:05:2a:83:f2:52:de:30: 17:bb:d1:fd:36:42:27:7a:1b:86:06:86:2a:f6:a9: 05:2d:74:9d:d3:46:f9:30:13:6e:df:29:fa:ae:7e: 14:b0:64:21:c0:67:fb:6b:3c:01:8c:9d:ca:af:aa: 41:d1:2e:de:f3:f1:a5:53:a2:4b:9e:a1:2c:e5:2c: af:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:2B:7B:28:8E:C6:8F:13:97:CA:F9:0F:B4:E4:76:A9:A7:DC:BD:38 X509v3 Authority Key Identifier: keyid:1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:ba:91:42:e2:be:cf:86:ea:22:56:55:e3:dd:36:f5:f8:34: 18:c5:b0:a2:ed:09:fb:bc:12:a6:ce:2f:d1:f7:53:bf:f9:a7: 87:f4:c7:50:0f:c4:e0:56:86:59:b2:f8:68:fb:66:14:1a:bb: e9:87:12:a1:bf:7c:a4:14:73:f0:e2:07:b3:b2:b4:78:4a:3d: a3:e9:71:9d:8c:71:f7:55:11:d8:a5:09:4d:7e:d8:c7:84:12: 4a:c7:56:d6:56:49:2a:31:66:43:3e:91:f0:16:1c:52:c5:20: 19:14:ca:02:0d:73:5e:0a:c5:23:3c:42:61:a8:46:f7:a1:d4: b2:5f:b2:ae:98:bc:e7:ec:de:6f:39:1f:c7:4a:2d:f1:c4:01: ed:1c:63:6d:20:bf:bf:a8:fa:7a:2f:7e:71:51:13:1a:bf:89: 48:79:15:16:ef:cc:8d:b3:37:50:aa:01:4b:18:79:a0:08:3c: a3:2c:42:31:d9:a9:d9:c3:96:20:c4:ac:1a:2d:c3:f1:e0:89: 85:1a:ca:2c:6e:62:00:a9:1e:e6:4d:ce:70:7d:f3:7f:b9:d6: cb:c3:6b:48:e2:ea:93:42:45:a1:c9:b0:1c:eb:bd:46:9e:0e: 2d:e9:2f:a0:85:9d:fd:7d:92:ea:26:05:b3:c3:d3:97:75:cc: 59:ee:30:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0aGpi6KH9lGeWbJHz9YZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWIzNjVlY2MzNTA0NThhZGEyYjA5NDllZTY3ZWY5ZDhj NmY0ZGMwHhcNMjUxMjA2MDQwMDM4WhcNMjUxMjA3MDQwMDM4WjAzMTEwLwYDVQQD EyhlYjJiN2IyODhlYzY4ZjEzOTdjYWY5MGZiNGU0NzZhOWE3ZGNiZDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWu2QU0t8+4kBIeHyu1m5ScPPb3+ NVSVUY2UOwa/w86Ibb6sx3mxTx7X3SRD8AdKmgWlleLrqlq1df9+sbuO2qoUhC6T nQIEx2PuJmM0K/gwpQwtep3RcGJTgiJlTMn3Pxgaqg08FBpfO9sR6w+ojD8VmZna sfatYIG2wJzOCCWUWhaomqnxqGEjIvBW99neNIasL9YbVi7tj9ZPH5o3e0Rep/z4 NTBUhaldN/lp0cXzB+dBNo2ZTutPDwUqg/JS3jAXu9H9NkInehuGBoYq9qkFLXSd 00b5MBNu3yn6rn4UsGQhwGf7azwBjJ3Kr6pB0S7e8/GlU6JLnqEs5SyvVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsreyiOxo8Tl8r5D7Tkdqmn3L04MB8GA1UdIwQY MBaAFB2rNl7MNQRYraKwlJ7mfvnYxvTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGFzMlhzdzFCRml0b3JDVW51Wi0tZGpHOU53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mYThmNzgtNzZlNS00OGE5LWFiYjAt NjBhZTc2NjQ2ZGQ0LzEvSGFzMlhzdzFCRml0b3JDVW51Wi0tZGpHOU53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mYThmNzgtNzZlNS00OGE5LWFiYjAtNjBhZTc2NjQ2ZGQ0 LzEvSGFzMlhzdzFCRml0b3JDVW51Wi0tZGpHOU53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbqRQuK+ z4bqIlZV49029fg0GMWwou0J+7wSps4v0fdTv/mnh/THUA/E4FaGWbL4aPtmFBq7 6YcSob98pBRz8OIHs7K0eEo9o+lxnYxx91UR2KUJTX7Yx4QSSsdW1lZJKjFmQz6R 8BYcUsUgGRTKAg1zXgrFIzxCYahG96HUsl+yrpi85+zebzkfx0ot8cQB7RxjbSC/ v6j6ei9+cVETGr+JSHkVFu/MjbM3UKoBSxh5oAg8oyxCMdmp2cOWIMSsGi3D8eCJ hRrKLG5iAKke5k3OcH3zf7nWy8NrSOLqk0JFocmwHOu9Rp4OLekvoIWd/X2S6iYF s8PTl3XMWe4wOw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:02:27 2025 by rpki-client