This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json) Hash identifier: fZq+IWGypAkXUDtSZApjBu31R6wDOzDxzVeieMGZRXY= Subject key identifier: F0:33:41:66:59:54:79:CE:05:C3:8A:17:D1:D4:84:13:31:53:5E:A6 Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0 Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0 Certificate serial: 019AF12EF6BBE19EA0B623759BE44623893D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft Manifest number: 0C83 Signing time: Sat 06 Dec 2025 01:02:58 +0000 Manifest this update: Sat 06 Dec 2025 01:02:58 +0000 Manifest next update: Sun 07 Dec 2025 01:02:58 +0000 Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: F3gRrBbcdJ5KtfSq1bkyU7xDrD0hVVKzd6M+ESvdOU8=) 2: 7p9fYepg7S5sPZLFet1T6ZdUO0A.roa (hash: 2r3FGqEA9Im8wCkJsvxrPrJGP9I8oT0rHkJZAkKFfAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:f6:bb:e1:9e:a0:b6:23:75:9b:e4:46:23:89:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0 Validity Not Before: Dec 6 01:02:58 2025 GMT Not After : Dec 7 01:02:58 2025 GMT Subject: CN=f0334166595479ce05c38a17d1d4841331535ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c9:39:48:6b:44:da:74:f1:22:31:6c:d0:07: f1:ab:59:4e:90:82:7a:8c:04:10:30:f1:9d:c2:cf: 84:d2:02:0d:84:86:e3:ca:1e:45:2e:ff:70:5e:cb: 3a:e4:14:37:b0:5b:37:ed:38:c3:04:3a:b4:fe:c6: ab:2a:f1:23:ec:40:b0:fa:eb:a6:97:8b:af:38:f7: a8:70:a7:a9:64:b9:3f:20:d6:02:e6:c3:49:d8:58: e7:f5:69:fe:fd:4e:b6:48:97:4d:9d:c5:93:72:87: e9:c6:50:f8:eb:ae:5a:5f:41:7d:6d:3d:01:df:7f: 54:3c:d8:a6:ad:e0:86:ae:d7:47:8e:06:e1:4f:25: 20:36:03:37:65:92:26:7e:1e:65:24:5f:ae:6f:3a: 0e:73:ff:24:6d:f4:64:f0:dd:60:2e:a2:08:03:08: 9e:0f:4f:d9:c5:a7:22:cf:9b:26:5a:ad:cb:e6:f7: a4:e2:0c:d5:88:5c:90:58:95:b1:4a:4a:d9:49:4b: b6:a0:94:77:38:70:a8:d9:5c:cf:5a:bf:9a:b2:75: 4d:3a:5f:c9:c0:54:19:e9:e3:80:43:73:6e:88:5b: 40:0f:e6:a8:73:24:97:53:9d:f1:24:5e:ee:98:79: 39:93:b3:54:c7:61:48:53:50:b9:f3:3c:83:6c:aa: 95:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:33:41:66:59:54:79:CE:05:C3:8A:17:D1:D4:84:13:31:53:5E:A6 X509v3 Authority Key Identifier: keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ea:7f:f4:c2:d7:67:ad:da:21:7c:75:51:b2:6e:0d:11:8c: 95:58:dd:c8:10:6f:fb:b2:f0:22:7d:a8:34:b8:f6:64:9d:0c: 01:93:7f:26:92:19:75:42:35:37:5e:96:5b:aa:5c:ff:69:3a: 65:e7:da:9b:cf:e4:bd:9f:94:78:5e:e0:ee:c5:f9:34:84:6e: 6f:27:b2:49:91:54:0d:24:12:ea:46:ef:0a:f1:f3:16:14:11: af:33:17:70:1e:ce:fd:6c:31:ab:cd:aa:a5:32:a5:c6:fe:66: 33:82:58:1a:0d:70:ca:01:b2:1a:27:95:a0:a8:f4:c2:35:67: 77:e2:15:37:91:cb:be:1e:06:20:ef:83:74:7f:62:69:b1:83: 75:e0:70:e7:c6:aa:6b:8f:03:01:08:43:17:2f:eb:26:5b:af: e9:e4:3f:71:12:b8:41:9f:ed:37:f2:37:7e:9a:5a:e0:71:ed: 46:57:19:81:3c:18:42:c8:ca:d9:4a:8f:1f:c0:71:8d:d3:b2: 18:36:97:2b:47:7e:96:d3:84:8e:4b:b9:cb:5d:3a:c0:67:8e: 49:35:59:20:d8:29:34:cf:60:15:3d:08:d9:c4:a0:f3:7b:47: cf:f5:30:47:ed:ca:11:d0:4e:c9:5a:d0:85:ec:c1:fc:06:5f: 36:24:94:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLva74Z6gtiN1m+RGI4k9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTY4Mjg3N2I2YzhhZjc1ZTI3NjBjZjg1NDBlNzg0NTJk NGJlYzAwHhcNMjUxMjA2MDEwMjU4WhcNMjUxMjA3MDEwMjU4WjAzMTEwLwYDVQQD EyhmMDMzNDE2NjU5NTQ3OWNlMDVjMzhhMTdkMWQ0ODQxMzMxNTM1ZWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08k5SGtE2nTxIjFs0Afxq1lOkIJ6 jAQQMPGdws+E0gINhIbjyh5FLv9wXss65BQ3sFs37TjDBDq0/sarKvEj7ECw+uum l4uvOPeocKepZLk/INYC5sNJ2Fjn9Wn+/U62SJdNncWTcofpxlD4665aX0F9bT0B 339UPNimreCGrtdHjgbhTyUgNgM3ZZImfh5lJF+ubzoOc/8kbfRk8N1gLqIIAwie D0/Zxaciz5smWq3L5vek4gzViFyQWJWxSkrZSUu2oJR3OHCo2VzPWr+asnVNOl/J wFQZ6eOAQ3NuiFtAD+aocySXU53xJF7umHk5k7NUx2FIU1C58zyDbKqV5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAzQWZZVHnOBcOKF9HUhBMxU16mMB8GA1UdIwQY MBaAFNIWgod7bIr3Xidgz4VA54RS1L7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhhQ2gzdHNpdmRlSjJEUGhVRG5oRkxVdnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85Y2M1ZTAtNzhkZi00ZGE2LWFiMGEt ZGU5NzEyYzZlN2M3LzEvMGhhQ2gzdHNpdmRlSjJEUGhVRG5oRkxVdnNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy85Y2M1ZTAtNzhkZi00ZGE2LWFiMGEtZGU5NzEyYzZlN2M3 LzEvMGhhQ2gzdHNpdmRlSjJEUGhVRG5oRkxVdnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZup/9MLX Z63aIXx1UbJuDRGMlVjdyBBv+7LwIn2oNLj2ZJ0MAZN/JpIZdUI1N16WW6pc/2k6 Zefam8/kvZ+UeF7g7sX5NIRubyeySZFUDSQS6kbvCvHzFhQRrzMXcB7O/Wwxq82q pTKlxv5mM4JYGg1wygGyGieVoKj0wjVnd+IVN5HLvh4GIO+DdH9iabGDdeBw58aq a48DAQhDFy/rJluv6eQ/cRK4QZ/tN/I3fppa4HHtRlcZgTwYQsjK2UqPH8BxjdOy GDaXK0d+ltOEjku5y106wGeOSTVZINgpNM9gFT0I2cSg83tHz/UwR+3KEdBOyVrQ hezB/AZfNiSU+w== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:32 2025 by rpki-client