This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json) Hash identifier: 00iLIzCYIsqJ+5kYN7mJj6UyQr38rXVJK8f38HQVb5c= Subject key identifier: ED:5C:80:52:87:C0:09:18:DC:26:49:E8:4F:3D:D8:87:D4:1E:F8:C8 Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18 Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18 Certificate serial: 019AF2092D74765B8DB79A4962904212441A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 05:01:18 +0000 Manifest this update: Sat 06 Dec 2025 05:01:18 +0000 Manifest next update: Sun 07 Dec 2025 05:01:18 +0000 Files and hashes: 1: 2eNuQu_p5ginCAZ1GWglFgX2Ois.roa (hash: w05SWnwARvBa6z4mKj9c93WMw5hgy4MoXYoHU2TqLvA=) 2: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: vy6VJmwKUswB1UejCRpC+6WihL82kObcmlgn7TPljdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:2d:74:76:5b:8d:b7:9a:49:62:90:42:12:44:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18 Validity Not Before: Dec 6 05:01:18 2025 GMT Not After : Dec 7 05:01:18 2025 GMT Subject: CN=ed5c805287c00918dc2649e84f3dd887d41ef8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:46:4f:c4:a2:af:b9:ea:bc:0a:f8:ae:bf:f1: a4:28:04:1f:f2:91:cf:b6:df:bc:60:7d:fd:b4:14: c3:18:99:78:40:93:20:91:d8:70:21:9a:10:43:9f: 73:cc:27:73:f7:a1:9c:8c:dd:3c:1a:4f:41:e6:27: b7:4a:32:2a:3e:96:0c:80:3d:60:9c:54:eb:1d:97: 48:13:62:79:9a:ec:27:da:1f:a5:fc:76:19:f4:ac: c6:f3:5e:61:b4:7b:cc:8e:e5:db:a2:7e:94:b8:1c: 44:21:7a:66:f4:03:bb:10:84:90:b8:9f:e3:3c:2b: 10:9b:1d:39:d3:bf:3a:e1:66:32:f7:09:28:97:1c: 04:26:8d:01:e9:b8:ff:a1:2f:1d:f7:3c:20:a2:fb: 17:ec:e3:e7:62:d1:71:50:e2:e8:6a:b9:53:43:90: 51:35:bc:1b:4b:da:06:3b:de:0c:52:ba:9a:cd:b6: 0d:ec:98:25:c3:62:ea:32:5c:bb:f5:ee:02:f3:52: dd:7c:dd:76:93:33:e6:d6:f2:f7:7b:ad:dd:27:44: d7:d2:8c:5a:bb:b7:df:22:f1:8e:1c:75:61:fe:dd: c9:d6:2e:0d:a9:8a:77:57:d8:15:e2:5c:f0:56:d0: 16:a9:ce:de:3c:c8:46:e2:c7:14:14:68:0d:a6:d8: e5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5C:80:52:87:C0:09:18:DC:26:49:E8:4F:3D:D8:87:D4:1E:F8:C8 X509v3 Authority Key Identifier: keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:26:14:27:ae:c4:54:be:d5:4f:4e:94:3a:e1:53:a0:d4:44: 56:7c:2a:98:25:03:18:35:c3:29:87:1f:e6:0d:a0:cb:e3:da: 01:94:2e:45:a9:5d:2e:2f:89:ff:66:7f:62:3a:8c:35:f2:31: 00:5c:82:f3:26:16:8f:cc:8b:39:55:62:3e:68:78:1b:bf:aa: f5:05:aa:8a:7c:3e:00:23:a7:88:05:d1:50:c1:f9:70:16:0b: 3e:cd:1f:6b:22:86:17:d7:cf:0b:e3:a9:88:d0:7e:a2:bd:92: 82:76:9a:c5:86:c8:9b:0d:61:30:4f:9d:da:ea:e9:c2:a5:7f: 33:a8:a3:28:a6:e8:8a:65:1e:59:fc:f2:4a:77:27:19:bd:34: 7e:5d:44:5e:b7:02:f0:61:bc:3d:26:b2:a7:c4:a4:17:0c:0f: bb:ec:27:0f:79:83:c1:fe:47:c9:75:ff:7b:18:5d:2a:14:cb: 90:4c:14:e8:bf:03:19:53:45:57:fb:47:10:70:54:ab:06:02: 6d:7b:f7:9d:26:d1:1e:5d:9e:0f:ab:f9:17:e2:64:5a:4a:6a: a7:e4:a6:63:e5:67:9f:19:c1:04:f3:de:87:87:13:a9:29:f8: f6:e2:dd:47:6d:f1:fb:a1:3d:2f:b9:ce:75:72:3b:3b:9d:eb: 18:65:35:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCS10dluNt5pJYpBCEkQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWQ3YjlmMWM0OWY4ZDEzZTFhNjdhYmNmMmZiYTM1YjBh NjZkMTgwHhcNMjUxMjA2MDUwMTE4WhcNMjUxMjA3MDUwMTE4WjAzMTEwLwYDVQQD EyhlZDVjODA1Mjg3YzAwOTE4ZGMyNjQ5ZTg0ZjNkZDg4N2Q0MWVmOGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0ZPxKKvueq8Cviuv/GkKAQf8pHP tt+8YH39tBTDGJl4QJMgkdhwIZoQQ59zzCdz96GcjN08Gk9B5ie3SjIqPpYMgD1g nFTrHZdIE2J5muwn2h+l/HYZ9KzG815htHvMjuXbon6UuBxEIXpm9AO7EISQuJ/j PCsQmx0507864WYy9wkolxwEJo0B6bj/oS8d9zwgovsX7OPnYtFxUOLoarlTQ5BR NbwbS9oGO94MUrqazbYN7Jglw2LqMly79e4C81LdfN12kzPm1vL3e63dJ0TX0oxa u7ffIvGOHHVh/t3J1i4NqYp3V9gV4lzwVtAWqc7ePMhG4scUFGgNptjlvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1cgFKHwAkY3CZJ6E892IfUHvjIMB8GA1UdIwQY MBaAFB2te58cSfjRPhpnq88vujWwpm0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zYzM5ZjAtN2U5Ny00ZWY3LTg5NDQt NWViZDhlYWVlMmM2LzEvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zYzM5ZjAtN2U5Ny00ZWY3LTg5NDQtNWViZDhlYWVlMmM2 LzEvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyYUJ67E VL7VT06UOuFToNREVnwqmCUDGDXDKYcf5g2gy+PaAZQuRaldLi+J/2Z/YjqMNfIx AFyC8yYWj8yLOVViPmh4G7+q9QWqinw+ACOniAXRUMH5cBYLPs0fayKGF9fPC+Op iNB+or2SgnaaxYbImw1hME+d2urpwqV/M6ijKKboimUeWfzySncnGb00fl1EXrcC 8GG8PSayp8SkFwwPu+wnD3mDwf5HyXX/exhdKhTLkEwU6L8DGVNFV/tHEHBUqwYC bXv3nSbRHl2eD6v5F+JkWkpqp+SmY+VnnxnBBPPeh4cTqSn49uLdR23x+6E9L7nO dXI7O53rGGU1yg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:27:44 2025 by rpki-client