This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json) Hash identifier: 6b5koheIJLJfRKr9NvN5A7hm7AYikZTyKEfb0MFO8WQ= Subject key identifier: B1:34:48:ED:C4:5D:CF:30:76:02:A1:75:62:77:7F:56:42:82:FC:69 Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c Certificate serial: 019AF2400590257C6521884B8E592245D03B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 06:01:13 +0000 Manifest this update: Sat 06 Dec 2025 06:01:13 +0000 Manifest next update: Sun 07 Dec 2025 06:01:13 +0000 Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: mNZlFn1q1YLQDplygXoLsFe3YAyKG34v6Ad72J//kpc=) 2: NLCwkRuxMAVqIE4s2Awhm1yzmmc.roa (hash: 7DV7f34yFMiHA1iSUlpq7Rg0BJ76/rrx0KnPa1dhIeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:05:90:25:7c:65:21:88:4b:8e:59:22:45:d0:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c Validity Not Before: Dec 6 06:01:13 2025 GMT Not After : Dec 7 06:01:13 2025 GMT Subject: CN=b13448edc45dcf307602a17562777f564282fc69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5a:4d:83:4e:90:e2:9e:b6:ca:f5:72:a3:8f: 2e:35:ed:89:39:a8:d1:6e:59:3e:fd:6f:14:53:ef: c5:f4:d4:19:ef:24:8f:eb:55:8b:20:29:ca:30:ea: bf:a3:6c:23:dc:4c:ed:71:3d:46:e2:16:63:10:0e: 77:96:e5:90:d8:ee:2f:2f:e6:c0:27:22:af:f7:a6: d1:d7:d6:10:c0:f1:4f:94:f6:6c:27:39:f2:08:86: a0:92:8e:43:cb:e9:f7:f1:48:69:cf:cc:4d:b5:eb: 71:59:c6:7c:d0:10:b4:d0:f7:0f:b0:89:43:e2:93: 61:ef:7a:de:af:ff:ee:f6:59:44:e5:40:49:30:ed: 43:73:12:62:df:4c:4d:06:38:47:11:eb:0d:f2:27: 5a:7f:d4:7d:ff:5c:6f:97:a7:32:ed:19:73:90:03: 49:dd:f1:85:ab:db:dc:1d:94:18:d2:d2:37:2a:d8: aa:81:77:5c:81:d2:ab:10:75:d9:f7:8a:02:70:08: fd:99:07:a0:56:40:63:d6:53:8f:64:b0:94:c9:40: 12:83:f2:6f:89:92:73:4e:b4:ae:f2:a6:7c:b7:39: a3:cd:f5:e8:2e:f4:a3:7b:e8:74:50:04:0a:10:c0: e6:72:c9:34:48:46:c0:4f:4d:db:04:db:08:fa:6a: cf:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:34:48:ED:C4:5D:CF:30:76:02:A1:75:62:77:7F:56:42:82:FC:69 X509v3 Authority Key Identifier: keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:fd:be:01:21:67:8c:e7:e5:5d:e5:40:48:b5:69:33:9e:4b: c9:ff:26:12:c2:ba:c4:e5:5b:27:ac:4a:e4:17:bd:8a:e1:4e: 25:17:fa:dc:51:75:8c:1f:ab:16:11:72:b1:83:b5:a9:cd:8f: df:65:b6:4e:2b:6d:8f:7b:6e:0e:12:d4:53:b6:a6:a1:b5:d3: b6:37:79:3d:d2:03:72:ef:88:47:fd:f7:82:35:77:99:31:ad: 6a:bc:ba:ab:7f:7c:97:eb:36:ef:a5:61:ef:24:00:26:4a:c1: 52:26:e4:2e:67:e9:de:f9:c0:2b:5c:8c:60:7a:fe:c5:83:87: 6d:41:ea:42:84:1d:7c:41:67:fa:9e:b4:58:3c:a5:4b:11:74: c6:10:7a:11:f0:93:18:3c:91:a7:88:60:35:e4:63:7d:d3:a4: 64:54:c3:aa:66:27:1f:59:ce:29:39:5a:d7:f0:af:12:39:90: e7:8b:92:b3:8c:87:b4:f0:6f:0d:70:c0:80:37:e5:36:cb:68: a6:f1:c6:ca:ac:50:80:d4:18:9c:28:94:35:5c:85:95:ba:00: e3:ae:10:5a:71:17:77:1c:73:ef:bb:82:72:ae:3a:69:87:8a: 04:c7:93:98:a7:16:3e:98:44:ab:e0:f5:b8:b1:5b:26:9a:d0: 38:5b:46:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQAWQJXxlIYhLjlkiRdA7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMGUyMTZlNTc5MWUxYjAxZGEyMWJjYWYzMzAwNDFhZDcy YTdlNmMwHhcNMjUxMjA2MDYwMTEzWhcNMjUxMjA3MDYwMTEzWjAzMTEwLwYDVQQD EyhiMTM0NDhlZGM0NWRjZjMwNzYwMmExNzU2Mjc3N2Y1NjQyODJmYzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1pNg06Q4p62yvVyo48uNe2JOajR blk+/W8UU+/F9NQZ7ySP61WLICnKMOq/o2wj3EztcT1G4hZjEA53luWQ2O4vL+bA JyKv96bR19YQwPFPlPZsJznyCIagko5Dy+n38Uhpz8xNtetxWcZ80BC00PcPsIlD 4pNh73rer//u9llE5UBJMO1DcxJi30xNBjhHEesN8idaf9R9/1xvl6cy7RlzkANJ 3fGFq9vcHZQY0tI3KtiqgXdcgdKrEHXZ94oCcAj9mQegVkBj1lOPZLCUyUASg/Jv iZJzTrSu8qZ8tzmjzfXoLvSje+h0UAQKEMDmcsk0SEbAT03bBNsI+mrPnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLE0SO3EXc8wdgKhdWJ3f1ZCgvxpMB8GA1UdIwQY MBaAFBwOIW5XkeGwHaIbyvMwBBrXKn5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEt MmMwZmM2YmUxZTU3LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEtMmMwZmM2YmUxZTU3 LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIP2+ASFn jOflXeVASLVpM55Lyf8mEsK6xOVbJ6xK5Be9iuFOJRf63FF1jB+rFhFysYO1qc2P 32W2Tittj3tuDhLUU7amobXTtjd5PdIDcu+IR/33gjV3mTGtary6q398l+s276Vh 7yQAJkrBUibkLmfp3vnAK1yMYHr+xYOHbUHqQoQdfEFn+p60WDylSxF0xhB6EfCT GDyRp4hgNeRjfdOkZFTDqmYnH1nOKTla1/CvEjmQ54uSs4yHtPBvDXDAgDflNsto pvHGyqxQgNQYnCiUNVyFlboA464QWnEXdxxz77uCcq46aYeKBMeTmKcWPphEq+D1 uLFbJprQOFtGEw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:31:06 2025 by rpki-client