This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json) Hash identifier: VqbLtgGXfIfBSOdMeo6qwrbiHWqxJaJkCv8ZQmTATc8= Subject key identifier: 4E:EF:DF:88:7C:72:E8:D5:03:94:32:81:95:16:BC:19:F0:F0:54:46 Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5 Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5 Certificate serial: 019AF12E68AA9EBAD0088A3A5620BA128FFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft Manifest number: 0E80 Signing time: Sat 06 Dec 2025 01:02:21 +0000 Manifest this update: Sat 06 Dec 2025 01:02:21 +0000 Manifest next update: Sun 07 Dec 2025 01:02:21 +0000 Files and hashes: 1: 2OZ_lpKGV37MXe5UjWqN6pJGN0I.roa (hash: /SKwcSk1TPHGfonvbfCcudrh/7BTbQOLo1nol958xWU=) 2: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: 1Wl1PZa8+nP+yLPdMs+DU8D1NQphrBk4RE98bv38H6Q=) 3: pLab0TRjgeeCCYzGrOJ8eUnyoUY.roa (hash: eAiA3LScpHVLn6hm7FMcqWOD8wBahEBpe3kvRDh7XrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:68:aa:9e:ba:d0:08:8a:3a:56:20:ba:12:8f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5 Validity Not Before: Dec 6 01:02:21 2025 GMT Not After : Dec 7 01:02:21 2025 GMT Subject: CN=4eefdf887c72e8d5039432819516bc19f0f05446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6d:95:c1:3d:67:8d:4f:cb:0f:1d:c6:c8:be: 13:60:e3:23:e7:bd:cf:99:64:a1:89:5a:91:63:89: 56:61:5d:fa:d8:6e:48:e6:14:b4:47:3f:34:21:99: 1f:82:7c:90:62:e1:65:1f:dc:65:5d:d5:bd:ae:da: 14:c7:14:59:51:28:92:dc:de:15:ea:85:73:b9:f3: a5:66:12:c1:4e:f1:51:16:c1:35:dd:13:55:00:90: 2a:22:07:b1:fe:ea:36:e4:53:4e:93:31:a5:fc:b3: b5:70:6e:48:3c:38:71:a1:fd:0e:ee:89:9a:c5:49: 5c:5f:23:0c:f2:ee:f8:47:8d:50:41:ea:b4:b5:bc: 5f:c4:06:6b:da:3d:32:9e:3d:16:c4:86:0a:ae:19: bd:ea:99:28:4e:72:b3:52:7f:54:c1:ce:9d:49:99: 3a:05:c2:59:ef:ce:ec:99:23:85:a1:cc:87:8c:89: c7:3f:a9:0a:72:98:99:7f:49:d3:dc:e4:ad:c4:27: f4:1f:4b:5a:2e:6b:d7:90:2d:4c:bd:b1:49:24:15: be:54:a2:27:04:08:e7:14:94:69:bc:bc:75:bf:b8: a1:62:c3:a8:10:1c:13:f8:5e:2d:ab:8b:9c:0f:11: 9e:fb:18:c7:1a:16:4f:00:34:cb:c4:4f:0f:df:ab: 3f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EF:DF:88:7C:72:E8:D5:03:94:32:81:95:16:BC:19:F0:F0:54:46 X509v3 Authority Key Identifier: keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:61:24:2b:50:4b:9f:7b:bf:80:17:95:fa:78:33:65:47:d7: cc:c5:2b:88:0b:b5:10:76:06:17:d5:07:4a:be:ce:f1:4d:cb: 75:a8:52:7e:3a:1c:2f:56:fc:f8:a4:e8:8d:0d:6a:be:28:a7: 5d:5a:ab:97:4d:f6:92:3a:7d:22:d5:0a:76:c9:2d:98:20:59: f7:44:d9:5a:77:fd:a8:3f:6b:df:5a:35:c5:d5:68:0d:7a:85: 3e:34:61:67:19:8e:98:ec:7d:3b:97:90:79:d5:2b:da:f4:35: 3f:21:d1:e4:e7:fb:33:49:b4:5e:ac:5e:cd:5f:49:e4:04:2c: 97:73:e0:a0:e8:b8:64:d3:03:8e:33:90:c6:4b:fb:46:03:c3: 52:7c:41:c4:c3:e7:ef:0a:53:27:17:b4:82:75:00:b4:cd:20: 21:d3:38:41:7e:44:f3:60:bb:85:c2:2c:39:a2:92:c1:07:03: 60:fe:50:e9:d1:f5:9e:79:82:24:5e:ae:9e:39:ec:99:72:f9: 07:7d:7f:21:e8:27:fa:6b:6b:4b:95:58:f5:81:41:3a:a6:af: 50:99:14:2b:7a:64:01:36:c3:4b:d6:c8:10:2f:7a:59:b2:40: 90:02:91:b8:fa:28:be:a6:57:01:4f:ad:91:9e:a4:e3:3e:3c: 25:70:f3:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmiqnrrQCIo6ViC6Eo//MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYTgxNzEzODUzYzliMThkNDEwZDRmZjMwOTlhYjY2OGU2 OWIzZjUwHhcNMjUxMjA2MDEwMjIxWhcNMjUxMjA3MDEwMjIxWjAzMTEwLwYDVQQD Eyg0ZWVmZGY4ODdjNzJlOGQ1MDM5NDMyODE5NTE2YmMxOWYwZjA1NDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm2VwT1njU/LDx3GyL4TYOMj573P mWShiVqRY4lWYV362G5I5hS0Rz80IZkfgnyQYuFlH9xlXdW9rtoUxxRZUSiS3N4V 6oVzufOlZhLBTvFRFsE13RNVAJAqIgex/uo25FNOkzGl/LO1cG5IPDhxof0O7oma xUlcXyMM8u74R41QQeq0tbxfxAZr2j0ynj0WxIYKrhm96pkoTnKzUn9Uwc6dSZk6 BcJZ787smSOFocyHjInHP6kKcpiZf0nT3OStxCf0H0taLmvXkC1MvbFJJBW+VKIn BAjnFJRpvLx1v7ihYsOoEBwT+F4tq4ucDxGe+xjHGhZPADTLxE8P36s/FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7v34h8cujVA5QygZUWvBnw8FRGMB8GA1UdIwQY MBaAFB2oFxOFPJsY1BDU/zCZq2aOabP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kMjlmZTctOGMyMi00YWFhLWI4ZDYt NjYwZjM5ZjY0MzE2LzEvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9kMjlmZTctOGMyMi00YWFhLWI4ZDYtNjYwZjM5ZjY0MzE2 LzEvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOGEkK1BL n3u/gBeV+ngzZUfXzMUriAu1EHYGF9UHSr7O8U3LdahSfjocL1b8+KTojQ1qviin XVqrl032kjp9ItUKdsktmCBZ90TZWnf9qD9r31o1xdVoDXqFPjRhZxmOmOx9O5eQ edUr2vQ1PyHR5Of7M0m0XqxezV9J5AQsl3PgoOi4ZNMDjjOQxkv7RgPDUnxBxMPn 7wpTJxe0gnUAtM0gIdM4QX5E82C7hcIsOaKSwQcDYP5Q6dH1nnmCJF6unjnsmXL5 B31/Iegn+mtrS5VY9YFBOqavUJkUK3pkATbDS9bIEC96WbJAkAKRuPoovqZXAU+t kZ6k4z48JXDzdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:59 2025 by rpki-client