This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft File: HAICl4Occ5DfICUaXAkw5qZyvuM.mft (raw, json) Hash identifier: io1nwTrX5QB4kfsvObdl4jgT0KEQcF//vt1OrIHkLTs= Subject key identifier: D6:C1:75:58:66:EA:9F:DA:6A:EB:CB:9F:13:3D:3D:DD:CC:38:98:07 Authority key identifier: 1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3 Certificate issuer: /CN=1c020297839c7390df20251a5c0930e6a672bee3 Certificate serial: 019B2DB082C38E772FAEFCAD61397CE2A258 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft Manifest number: 178D Signing time: Wed 17 Dec 2025 19:01:41 +0000 Manifest this update: Wed 17 Dec 2025 19:01:41 +0000 Manifest next update: Thu 18 Dec 2025 19:01:41 +0000 Files and hashes: 1: AtfXci6HfqgW5bPUw4r_4peQJN8.roa (hash: bfWMisPWb7sXo+UvRMwlanirwbdgOa6DfbdcUPCEoPY=) 2: HAICl4Occ5DfICUaXAkw5qZyvuM.crl (hash: BGyZjpxyJHOBy7kbey2I7+IKJFeMrc4/YgfXEi4jocc=) 3: pxXuXU58X4H8fIZKv0CDHdg-Q8M.roa (hash: eTGcg3yr4CZi8oKJSwmwrav0KbRAU7TnVL+UEFP/RYo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:b0:82:c3:8e:77:2f:ae:fc:ad:61:39:7c:e2:a2:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c020297839c7390df20251a5c0930e6a672bee3 Validity Not Before: Dec 17 19:01:41 2025 GMT Not After : Dec 18 19:01:41 2025 GMT Subject: CN=d6c1755866ea9fda6aebcb9f133d3dddcc389807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:39:04:66:7c:ac:66:a8:6f:c0:75:01:84:39: 18:65:b2:a6:0c:84:ac:a6:2e:de:b2:f7:e6:dc:fe: 60:f6:8f:11:45:b7:fd:28:e6:90:04:5a:7d:40:dd: 25:d7:61:e2:07:7e:73:5d:25:be:08:49:78:86:81: e3:9d:69:00:60:63:37:4d:84:e4:1c:fd:24:c5:9b: a3:0e:48:4e:28:c5:96:0d:ca:f7:b6:08:e1:f6:39: 7b:f4:33:37:b9:e1:0e:c7:a0:03:80:72:4b:1c:5c: a9:48:60:1d:59:83:1b:43:b6:af:9b:fe:83:a0:14: bf:73:e7:83:68:a0:6e:f9:33:fe:51:bc:89:0c:22: 35:ec:04:f2:7f:ce:8a:74:d1:a4:c7:ea:6c:4a:d4: f6:0f:64:ed:52:b9:de:48:d7:a5:d1:06:e3:05:a4: b4:10:6b:40:9a:18:81:56:06:6d:bc:26:97:5d:3e: 64:96:d2:7d:62:d8:1b:da:50:bd:5f:4d:98:78:0e: da:99:40:43:44:fc:27:e7:23:78:07:14:66:db:ce: de:06:17:e6:ba:5f:1e:08:41:de:c0:4e:08:07:0d: 60:74:42:81:16:15:38:64:1b:3e:13:b3:19:1b:82: 0a:c8:b2:1a:69:4b:a1:ee:06:0a:48:77:c5:06:01: 65:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C1:75:58:66:EA:9F:DA:6A:EB:CB:9F:13:3D:3D:DD:CC:38:98:07 X509v3 Authority Key Identifier: keyid:1C:02:02:97:83:9C:73:90:DF:20:25:1A:5C:09:30:E6:A6:72:BE:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAICl4Occ5DfICUaXAkw5qZyvuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/79733f-5332-451b-86af-142a2b98f4c8/1/HAICl4Occ5DfICUaXAkw5qZyvuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:06:de:07:1c:15:5c:c0:e7:c6:f6:ce:27:d5:99:42:ba:9b: e4:6f:f4:60:bd:91:f8:ad:46:f9:b5:d3:36:53:77:eb:90:d1: 33:07:b1:82:b0:e0:5f:0e:20:3a:76:ab:36:da:bf:62:6d:5e: c8:c1:8a:23:d9:7c:62:20:1a:02:f5:85:f3:f2:e6:37:51:fb: 02:8a:50:c5:c2:f6:98:b5:03:67:2f:f0:93:61:29:45:44:6d: 4d:12:4f:77:3f:0a:4d:bf:cb:bf:ac:2b:cd:f8:4c:0d:a4:87: f6:ed:03:33:8c:ee:48:df:80:53:5f:d5:a1:5b:90:0c:67:55: 79:e2:20:7e:ea:af:12:07:19:3c:90:14:d2:60:cb:9f:9b:43: 17:d9:75:7e:18:e0:a5:43:af:a5:a9:01:36:b6:2e:17:46:bd: 7a:bc:b0:b7:59:aa:29:cb:20:71:e3:b6:e2:d4:9c:81:4d:0f: 44:e5:f3:00:1c:05:39:04:f9:d6:28:d0:bc:8f:c1:f0:e4:fb: 0d:42:37:b9:35:0b:c8:49:e9:49:e6:d4:7a:54:71:4a:5c:fd: a1:46:85:73:6f:37:88:df:3c:86:9f:e5:96:56:61:64:b8:16: 84:6c:96:3a:22:aa:02:5e:29:03:a2:d0:dd:d5:0c:49:fa:1b: 4f:e7:7a:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstsILDjncvrvytYTl84qJYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDIwMjk3ODM5YzczOTBkZjIwMjUxYTVjMDkzMGU2YTY3 MmJlZTMwHhcNMjUxMjE3MTkwMTQxWhcNMjUxMjE4MTkwMTQxWjAzMTEwLwYDVQQD EyhkNmMxNzU1ODY2ZWE5ZmRhNmFlYmNiOWYxMzNkM2RkZGNjMzg5ODA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzkEZnysZqhvwHUBhDkYZbKmDISs pi7esvfm3P5g9o8RRbf9KOaQBFp9QN0l12HiB35zXSW+CEl4hoHjnWkAYGM3TYTk HP0kxZujDkhOKMWWDcr3tgjh9jl79DM3ueEOx6ADgHJLHFypSGAdWYMbQ7avm/6D oBS/c+eDaKBu+TP+UbyJDCI17ATyf86KdNGkx+psStT2D2TtUrneSNel0QbjBaS0 EGtAmhiBVgZtvCaXXT5kltJ9Ytgb2lC9X02YeA7amUBDRPwn5yN4BxRm287eBhfm ul8eCEHewE4IBw1gdEKBFhU4ZBs+E7MZG4IKyLIaaUuh7gYKSHfFBgFliwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbBdVhm6p/aauvLnxM9Pd3MOJgHMB8GA1UdIwQY MBaAFBwCApeDnHOQ3yAlGlwJMOamcr7jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFJQ2w0T2NjNURmSUNVYVhBa3c1cVp5dnVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy83OTczM2YtNTMzMi00NTFiLTg2YWYt MTQyYTJiOThmNGM4LzEvSEFJQ2w0T2NjNURmSUNVYVhBa3c1cVp5dnVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy83OTczM2YtNTMzMi00NTFiLTg2YWYtMTQyYTJiOThmNGM4 LzEvSEFJQ2w0T2NjNURmSUNVYVhBa3c1cVp5dnVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgbeBxwV XMDnxvbOJ9WZQrqb5G/0YL2R+K1G+bXTNlN365DRMwexgrDgXw4gOnarNtq/Ym1e yMGKI9l8YiAaAvWF8/LmN1H7AopQxcL2mLUDZy/wk2EpRURtTRJPdz8KTb/Lv6wr zfhMDaSH9u0DM4zuSN+AU1/VoVuQDGdVeeIgfuqvEgcZPJAU0mDLn5tDF9l1fhjg pUOvpakBNrYuF0a9erywt1mqKcsgceO24tScgU0PROXzABwFOQT51ijQvI/B8OT7 DUI3uTULyEnpSebUelRxSlz9oUaFc283iN88hp/lllZhZLgWhGyWOiKqAl4pA6LQ 3dUMSfobT+d61w== -----END CERTIFICATE-----Generated at Wed Dec 17 21:25:10 2025 by rpki-client