This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json) Hash identifier: KZKGLxDTjZUOBbwvqu44ui3gl8rq54/0lXkN8iSk2Fw= Subject key identifier: DF:C1:11:CA:F9:B8:0D:13:C6:97:BC:3B:CA:BB:B1:53:FA:89:5D:90 Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54 Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954 Certificate serial: 019AF2E4488D26377938AEA5769191BFB593 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft Manifest number: 1677 Signing time: Sat 06 Dec 2025 09:00:38 +0000 Manifest this update: Sat 06 Dec 2025 09:00:38 +0000 Manifest next update: Sun 07 Dec 2025 09:00:38 +0000 Files and hashes: 1: BdEPl2Neefl4GoaE_iupoW4vob4.roa (hash: iJi1nUHFyZuED4JVs82b7kN1M64TmmDeD6kSjvIrHS0=) 2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: X7r6Klv8lVjQRGh1Lv9u0ztLy5WFBzi1rC6B87uDoow=) 3: n6MPRl4HeV2oslQVZjQ3r5EuRXY.roa (hash: J3QEJ4pfKQHu+ZNIZ1/n5cXEVM04vV1h4Czaen0IJhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:48:8d:26:37:79:38:ae:a5:76:91:91:bf:b5:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954 Validity Not Before: Dec 6 09:00:38 2025 GMT Not After : Dec 7 09:00:38 2025 GMT Subject: CN=dfc111caf9b80d13c697bc3bcabbb153fa895d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a2:f6:d9:be:7e:f7:25:bd:e9:b6:55:85:bb: 05:30:2a:5f:79:04:e3:a4:64:ee:eb:b2:46:53:13: cd:4c:56:05:47:7c:c8:1a:fa:dc:f9:2d:80:7f:09: c9:b3:c0:2a:4b:33:ee:7b:76:d9:e9:c5:90:2a:00: 08:8c:8b:fe:8b:dd:89:2b:d4:0f:c2:a8:7b:31:ed: 8a:7b:ac:2a:46:e9:85:24:44:d9:f6:f3:63:99:8e: 5a:0c:c0:08:f1:2d:14:6e:81:b2:92:e7:48:c9:b4: 72:dc:74:ad:e7:94:68:e3:89:28:b9:a8:c7:58:68: 90:e0:91:d0:d4:83:b1:e4:73:fe:35:26:65:ea:86: 59:cf:fc:4e:b5:ab:cb:6a:49:f7:6a:e4:10:d7:ca: 78:c8:f8:88:c7:1d:3a:75:a9:25:78:40:d2:6f:4f: 6f:d0:de:5d:75:eb:e0:a5:aa:4e:fc:4b:fc:2c:b5: 80:4c:d4:03:4a:22:79:78:f3:a7:7b:ba:12:68:c1: c8:1c:b4:77:d8:be:8a:01:7d:38:50:ee:ff:2b:eb: 77:df:1d:6c:0c:c4:87:65:0f:44:5d:f8:70:ad:cc: d1:54:e7:16:1a:08:d2:b8:5e:14:29:e7:b1:fe:b0: 38:4c:3b:d0:85:22:de:0b:1c:31:e5:2b:42:90:2e: e5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C1:11:CA:F9:B8:0D:13:C6:97:BC:3B:CA:BB:B1:53:FA:89:5D:90 X509v3 Authority Key Identifier: keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:aa:18:c1:cd:c3:56:ec:8b:94:b3:2f:d6:76:cf:81:68:cb: 9a:7f:af:d3:78:a2:b1:16:c5:e2:dd:83:f0:fb:d0:aa:4a:ad: 60:a8:70:69:a9:f6:21:31:2d:0a:bd:72:90:8d:66:a4:ca:fd: f1:01:52:1e:34:43:47:e5:8d:2e:3e:69:6c:ee:85:5e:fb:03: 9c:49:05:d2:8f:6e:43:cd:7f:18:54:d8:de:53:e8:48:4c:b1: 92:6b:39:fb:4f:32:a4:19:e5:dc:52:fc:a4:3e:fa:3a:d3:8b: 13:98:fb:81:63:88:9a:c2:12:f7:52:7c:86:3e:d7:20:a0:04: 2e:5a:2c:5d:62:37:5e:17:99:38:05:9a:35:c9:4a:b8:d4:82: f8:69:77:83:a3:7e:4e:e5:1d:82:1d:cc:a1:73:7c:11:1d:4b: 8e:54:00:aa:ce:87:ca:63:2e:be:ad:53:dd:1b:6b:ab:a1:5d: d3:b2:f7:ba:54:2b:79:53:82:b1:37:ff:55:15:8f:76:65:41: 25:84:cc:3c:51:f1:89:a4:f2:29:12:cb:d6:9a:15:cc:fb:61: da:7c:45:bc:83:c2:b3:17:5a:db:9e:78:1a:0e:e5:64:73:5a: 3e:9f:79:a3:5e:ce:80:76:7a:05:19:46:b3:87:6d:da:39:6d: a4:f3:d1:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5EiNJjd5OK6ldpGRv7WTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1YWFhZGM1NjhmNmM5MjhmZDc2NGQ0MjFkNDJjNzFjZjU3 OTE5NTQwHhcNMjUxMjA2MDkwMDM4WhcNMjUxMjA3MDkwMDM4WjAzMTEwLwYDVQQD EyhkZmMxMTFjYWY5YjgwZDEzYzY5N2JjM2JjYWJiYjE1M2ZhODk1ZDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KL22b5+9yW96bZVhbsFMCpfeQTj pGTu67JGUxPNTFYFR3zIGvrc+S2AfwnJs8AqSzPue3bZ6cWQKgAIjIv+i92JK9QP wqh7Me2Ke6wqRumFJETZ9vNjmY5aDMAI8S0UboGykudIybRy3HSt55Ro44kouajH WGiQ4JHQ1IOx5HP+NSZl6oZZz/xOtavLakn3auQQ18p4yPiIxx06dakleEDSb09v 0N5ddevgpapO/Ev8LLWATNQDSiJ5ePOne7oSaMHIHLR32L6KAX04UO7/K+t33x1s DMSHZQ9EXfhwrczRVOcWGgjSuF4UKeex/rA4TDvQhSLeCxwx5StCkC7lAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/BEcr5uA0Txpe8O8q7sVP6iV2QMB8GA1UdIwQY MBaAFIWqrcVo9sko/XZNQh1Cxxz1eRlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMt NDVlYTM4ZGEyMjE4LzEvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMtNDVlYTM4ZGEyMjE4 LzEvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKoYwc3D VuyLlLMv1nbPgWjLmn+v03iisRbF4t2D8PvQqkqtYKhwaan2ITEtCr1ykI1mpMr9 8QFSHjRDR+WNLj5pbO6FXvsDnEkF0o9uQ81/GFTY3lPoSEyxkms5+08ypBnl3FL8 pD76OtOLE5j7gWOImsIS91J8hj7XIKAELlosXWI3XheZOAWaNclKuNSC+Gl3g6N+ TuUdgh3MoXN8ER1LjlQAqs6HymMuvq1T3Rtrq6Fd07L3ulQreVOCsTf/VRWPdmVB JYTMPFHxiaTyKRLL1poVzPth2nxFvIPCsxda2554Gg7lZHNaPp95o17OgHZ6BRlG s4dt2jltpPPR3g== -----END CERTIFICATE-----Generated at Sat Dec 6 13:26:23 2025 by rpki-client