This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json) Hash identifier: umGkPCMbjQmifEXYyzcR0tVUTD2UXPt1qicfATyBJYY= Subject key identifier: 50:89:D0:76:14:22:82:FD:78:07:C2:08:45:D5:CF:58:64:2F:45:7F Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4 Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4 Certificate serial: 019AF12EAA737E7B31433DC19C8EA7399F8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft Manifest number: 0F7E Signing time: Sat 06 Dec 2025 01:02:38 +0000 Manifest this update: Sat 06 Dec 2025 01:02:38 +0000 Manifest next update: Sun 07 Dec 2025 01:02:38 +0000 Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: UuvJA85DXRCj9LgKKAAN+0YXvAanA1vundYur7Vk5/s=) 2: Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa (hash: ApF50P5ImmFTCYDqSebFhsxBAqXoF1l91y3xHeQhovw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:aa:73:7e:7b:31:43:3d:c1:9c:8e:a7:39:9f:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4 Validity Not Before: Dec 6 01:02:38 2025 GMT Not After : Dec 7 01:02:38 2025 GMT Subject: CN=5089d076142282fd7807c20845d5cf58642f457f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:55:91:a4:6c:d6:62:19:77:bb:ed:15:6a:3b: 20:36:02:30:24:ba:55:ab:19:00:e4:84:21:06:f2: 9e:d0:2e:38:b8:b2:e8:8a:7a:04:eb:7f:2b:a9:18: b0:59:e3:2e:5e:3b:24:82:f2:24:e1:90:51:91:4d: 87:f6:bc:34:56:0b:92:40:cd:60:81:bd:c6:1c:e0: a1:6f:d4:eb:3a:fe:f8:df:6a:70:69:5d:aa:ba:49: 33:a9:79:b7:3b:ae:de:e2:62:3d:75:98:d7:b4:a5: 0d:80:12:22:e3:cc:1f:77:9e:a2:86:6e:a3:6b:ac: be:b7:56:97:71:a2:8d:dc:d3:27:a4:ad:39:6f:b0: 5c:55:b6:39:b2:d1:35:ee:c0:39:83:22:5f:ae:a1: 4a:1d:a3:c9:19:0b:e1:21:24:1d:16:51:ca:f6:a3: 41:b0:21:d0:b3:49:f5:0e:a3:d2:0c:df:03:23:e6: d7:1f:de:bc:a8:e1:40:66:d0:90:16:9c:45:66:0c: 2e:d3:38:fc:ed:b8:74:f3:37:1e:20:0a:d5:21:6f: 0f:a5:be:8e:2a:c3:e9:95:f0:83:a6:5a:ff:7f:d7: 5c:ff:b6:48:94:26:3c:12:e9:cb:33:58:32:33:b4: 7f:49:3a:2e:72:10:e7:50:65:c7:5d:f0:65:f2:85: f6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:89:D0:76:14:22:82:FD:78:07:C2:08:45:D5:CF:58:64:2F:45:7F X509v3 Authority Key Identifier: keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:28:a7:d7:50:fd:f3:5a:99:01:f4:4a:d9:54:a1:52:dd:ab: 8d:76:76:b5:0b:11:3a:a0:1f:92:15:ea:d2:05:31:66:18:15: 7c:6d:16:7d:1b:aa:ac:2d:61:18:7a:99:03:9e:5d:5a:1b:fa: 85:6d:42:27:94:fe:fd:bc:16:f8:23:28:1a:83:f8:d6:af:6d: d4:ed:63:e9:7d:e9:eb:15:09:f7:7a:f6:8f:bd:14:8c:77:fa: 06:4d:ff:a5:f2:bc:c1:70:99:c4:88:d8:3b:21:09:18:29:f6: 69:b8:a1:f1:de:ed:d7:0f:93:1e:4c:d8:95:69:56:38:28:33: ff:c2:71:f3:ed:ac:17:5c:a8:69:52:6b:aa:e3:59:9b:5e:b4: 67:ef:3c:65:0b:60:99:83:da:90:40:5e:e7:e9:d6:e7:96:2a: 7f:56:5e:fc:a6:05:dd:64:f1:47:7d:6b:57:f8:d7:5d:f2:11: 4d:98:29:c3:1d:f2:9e:26:c8:cb:d2:50:2b:2e:13:1a:c2:ff: c4:e6:94:27:ba:eb:e7:a9:9f:07:aa:3c:2c:72:c4:14:83:84: c9:b2:66:cb:a9:08:10:02:2a:57:9a:ac:67:8f:6c:07:03:8c: 1d:ae:da:78:74:ab:f9:e5:11:a0:12:a7:3e:70:f9:b7:6a:78: 0f:3e:22:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqpzfnsxQz3BnI6nOZ+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWU0NzRkNzk1OTdkYjc1ZDFmNGQ0OTkwMWI1MjU1OGJi ZjZhZjQwHhcNMjUxMjA2MDEwMjM4WhcNMjUxMjA3MDEwMjM4WjAzMTEwLwYDVQQD Eyg1MDg5ZDA3NjE0MjI4MmZkNzgwN2MyMDg0NWQ1Y2Y1ODY0MmY0NTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFWRpGzWYhl3u+0VajsgNgIwJLpV qxkA5IQhBvKe0C44uLLoinoE638rqRiwWeMuXjskgvIk4ZBRkU2H9rw0VguSQM1g gb3GHOChb9TrOv7432pwaV2qukkzqXm3O67e4mI9dZjXtKUNgBIi48wfd56ihm6j a6y+t1aXcaKN3NMnpK05b7BcVbY5stE17sA5gyJfrqFKHaPJGQvhISQdFlHK9qNB sCHQs0n1DqPSDN8DI+bXH968qOFAZtCQFpxFZgwu0zj87bh08zceIArVIW8Ppb6O KsPplfCDplr/f9dc/7ZIlCY8EunLM1gyM7R/STouchDnUGXHXfBl8oX2VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCJ0HYUIoL9eAfCCEXVz1hkL0V/MB8GA1UdIwQY MBaAFB2uR015WX23XR9NSZAbUlWLv2r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2Et MjdmOTBiOGQ4NWU2LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2EtMjdmOTBiOGQ4NWU2 LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyin11D9 81qZAfRK2VShUt2rjXZ2tQsROqAfkhXq0gUxZhgVfG0WfRuqrC1hGHqZA55dWhv6 hW1CJ5T+/bwW+CMoGoP41q9t1O1j6X3p6xUJ93r2j70UjHf6Bk3/pfK8wXCZxIjY OyEJGCn2abih8d7t1w+THkzYlWlWOCgz/8Jx8+2sF1yoaVJrquNZm160Z+88ZQtg mYPakEBe5+nW55Yqf1Ze/KYF3WTxR31rV/jXXfIRTZgpwx3ynibIy9JQKy4TGsL/ xOaUJ7rr56mfB6o8LHLEFIOEybJmy6kIEAIqV5qsZ49sBwOMHa7aeHSr+eURoBKn PnD5t2p4Dz4i/w== -----END CERTIFICATE-----Generated at Sat Dec 6 09:43:35 2025 by rpki-client