This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft File: HAKBccHlLIrK1NspuS0hazMvAyA.mft (raw, json) Hash identifier: sTuYNhYX45E8p4LWPf6YhOdxRhnlXQKma+UBTj+5DYQ= Subject key identifier: 09:6E:5F:A8:A5:8F:BB:76:CA:75:A7:81:2C:FD:7E:CF:FF:23:78:62 Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20 Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320 Certificate serial: 019AF19AC704199B779F215FB8E2011A24D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft Manifest number: 01D8 Signing time: Sat 06 Dec 2025 03:00:43 +0000 Manifest this update: Sat 06 Dec 2025 03:00:43 +0000 Manifest next update: Sun 07 Dec 2025 03:00:43 +0000 Files and hashes: 1: HAKBccHlLIrK1NspuS0hazMvAyA.crl (hash: gaS+XFle5yb4O9XfcWkmz2+EgtvAx/Xu45LKgbkp2dY=) 2: XsdhFSN7DeTh4eI00BDD4_zttPw.roa (hash: tFKcPxfIMyOctJnt0bo6v620CjrP47cFED0TLnvjy0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:c7:04:19:9b:77:9f:21:5f:b8:e2:01:1a:24:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320 Validity Not Before: Dec 6 03:00:43 2025 GMT Not After : Dec 7 03:00:43 2025 GMT Subject: CN=096e5fa8a58fbb76ca75a7812cfd7ecfff237862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:e3:31:09:8b:75:bf:30:02:bf:62:e8:52: 58:fa:49:95:c8:0e:23:98:df:94:8b:c0:0f:c4:0f: fd:a4:3c:08:06:1c:8d:fa:5e:d7:f1:68:4a:89:df: f3:31:1a:78:29:b7:bc:42:5c:fd:74:9d:cf:5c:26: 3e:be:6e:de:1a:f4:c0:62:e6:83:04:19:2a:19:c6: 79:d8:1c:fb:82:58:70:a4:a2:2d:68:e2:26:8a:bc: 56:26:86:66:79:65:7f:a3:fb:1a:80:d7:97:9b:ab: 18:39:47:ed:22:d4:83:3f:4c:f6:dc:7e:17:24:07: 09:74:6d:ee:1c:94:f6:cc:5d:8f:08:b0:79:86:98: a1:d5:3c:33:80:e7:ea:59:b3:1f:3a:e6:8e:dc:17: 1b:72:55:80:f5:9b:81:c0:34:4e:44:69:3a:a4:4d: 9e:f3:b6:70:fa:56:45:6c:da:8d:7a:6b:a0:e9:1c: fc:4d:92:1b:66:86:ec:b5:2f:31:c9:37:eb:77:3b: 7e:56:f5:96:91:82:bd:aa:ef:63:5b:59:62:56:ad: dc:a0:da:8d:95:b3:9a:63:c9:25:b7:d4:c0:1d:fe: a2:b7:67:27:fa:2b:e5:f2:0c:8c:df:7b:d6:9d:68: 02:5d:46:6e:ae:45:a1:45:a5:96:1d:06:62:3b:c0: ce:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6E:5F:A8:A5:8F:BB:76:CA:75:A7:81:2C:FD:7E:CF:FF:23:78:62 X509v3 Authority Key Identifier: keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:03:af:82:76:91:14:0c:95:e6:b0:48:65:2b:2d:a0:07:b4: d6:6c:32:9a:e3:a8:f7:56:17:42:99:86:02:a7:4d:e2:91:ed: 98:ca:48:bb:cf:c8:d4:92:91:7a:33:5e:18:09:43:94:98:24: 3a:59:46:15:d2:e9:e7:26:03:d9:02:3a:ea:9b:5a:bb:5c:e9: af:05:88:4d:f7:1f:23:51:94:00:0b:d9:b8:89:06:99:97:c2: b0:4c:f8:aa:4e:06:e4:fe:64:6c:7f:36:44:3e:b6:6f:d5:a4: 4e:84:2f:27:4a:91:ca:c5:2f:93:1e:5a:66:94:93:5d:30:4e: c1:64:a1:66:96:0e:81:e7:ab:59:2d:d3:ad:47:6e:05:37:f0: 5c:ca:a4:ab:23:da:b6:00:2f:24:5c:94:09:4b:4b:b2:b9:62: 82:a8:9c:e3:2b:a2:27:51:d2:cd:ab:67:42:62:e4:6a:ba:9b: 93:6a:2e:0a:0a:8b:88:0c:3a:b2:fd:18:8d:66:2e:29:75:35: 42:9e:ee:16:d8:87:ae:9f:77:48:77:98:78:48:e6:7e:d7:76: 47:4b:15:39:ab:bf:eb:b3:3b:08:f2:99:33:7f:54:9e:9f:c8: c5:1b:4a:f2:35:16:6f:2c:97:86:47:ad:55:ff:96:c7:25:aa: 94:73:c8:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmscEGZt3nyFfuOIBGiTZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDI4MTcxYzFlNTJjOGFjYWQ0ZGIyOWI5MmQyMTZiMzMy ZjAzMjAwHhcNMjUxMjA2MDMwMDQzWhcNMjUxMjA3MDMwMDQzWjAzMTEwLwYDVQQD EygwOTZlNWZhOGE1OGZiYjc2Y2E3NWE3ODEyY2ZkN2VjZmZmMjM3ODYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM3jMQmLdb8wAr9i6FJY+kmVyA4j mN+Ui8APxA/9pDwIBhyN+l7X8WhKid/zMRp4Kbe8Qlz9dJ3PXCY+vm7eGvTAYuaD BBkqGcZ52Bz7glhwpKItaOImirxWJoZmeWV/o/sagNeXm6sYOUftItSDP0z23H4X JAcJdG3uHJT2zF2PCLB5hpih1TwzgOfqWbMfOuaO3BcbclWA9ZuBwDRORGk6pE2e 87Zw+lZFbNqNemug6Rz8TZIbZobstS8xyTfrdzt+VvWWkYK9qu9jW1liVq3coNqN lbOaY8klt9TAHf6it2cn+ivl8gyM33vWnWgCXUZurkWhRaWWHQZiO8DOKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAluX6ilj7t2ynWngSz9fs//I3hiMB8GA1UdIwQY MBaAFBwCgXHB5SyKytTbKbktIWszLwMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2Yt NjRkMWIyZDU2ZTk1LzEvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2YtNjRkMWIyZDU2ZTk1 LzEvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQOvgnaR FAyV5rBIZSstoAe01mwymuOo91YXQpmGAqdN4pHtmMpIu8/I1JKRejNeGAlDlJgk OllGFdLp5yYD2QI66ptau1zprwWITfcfI1GUAAvZuIkGmZfCsEz4qk4G5P5kbH82 RD62b9WkToQvJ0qRysUvkx5aZpSTXTBOwWShZpYOgeerWS3TrUduBTfwXMqkqyPa tgAvJFyUCUtLsrligqic4yuiJ1HSzatnQmLkarqbk2ouCgqLiAw6sv0YjWYuKXU1 Qp7uFtiHrp93SHeYeEjmftd2R0sVOau/67M7CPKZM39Unp/IxRtK8jUWbyyXhket Vf+WxyWqlHPIWA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:29 2025 by rpki-client