This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft File: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft (raw, json) Hash identifier: dlhX4Bltsc5oykrR0YBCCFwECpLSjCfQ+S5pSiTppLo= Subject key identifier: BB:8B:EE:78:A5:7E:F7:09:A8:D6:1C:5B:AD:80:2F:8A:6D:45:6C:E0 Authority key identifier: 1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34 Certificate issuer: /CN=1da443c33de5ae43506fd2406b7653661c527334 Certificate serial: 019AF23F90BB6DF501AAB507F2413B630594 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft Manifest number: 1347 Signing time: Sat 06 Dec 2025 06:00:43 +0000 Manifest this update: Sat 06 Dec 2025 06:00:43 +0000 Manifest next update: Sun 07 Dec 2025 06:00:43 +0000 Files and hashes: 1: 38ChC54MipQ2oUyMl9LHxJPZyGY.roa (hash: oZd7O3FQ96+P+5QZC26B+0IWiqxNL14ov/QbnFUoZaY=) 2: B5goYls2pH3yBPe0gnzIkr6hsR0.roa (hash: f7c34+lBrPKMK3sy0aiejgFRmV5sKwVWcyjFvoePLVo=) 3: HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl (hash: kH0jXkWEWWZdZrDcQbunNgt632K1v1BJfzwKUYlItFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:90:bb:6d:f5:01:aa:b5:07:f2:41:3b:63:05:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1da443c33de5ae43506fd2406b7653661c527334 Validity Not Before: Dec 6 06:00:43 2025 GMT Not After : Dec 7 06:00:43 2025 GMT Subject: CN=bb8bee78a57ef709a8d61c5bad802f8a6d456ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bb:3b:e4:3c:2f:52:00:fc:e3:20:a5:fd:94: 3c:1b:38:13:f7:75:94:be:7d:fc:60:16:ee:4f:64: 24:c7:1c:46:60:29:1d:34:6d:2e:f2:2c:b3:df:15: b4:21:46:76:12:41:c1:65:27:5d:15:f4:15:fe:60: 3b:27:04:23:67:ed:a6:c8:64:f1:72:4e:e4:96:1a: 87:92:13:1d:02:6b:6b:9a:35:c1:dc:df:c0:e8:d5: 97:69:b7:62:2b:98:9d:45:97:df:41:74:b0:db:2c: e6:ed:5b:8f:df:9c:3f:40:1d:70:d9:38:52:ed:8a: 11:3f:dc:bd:4a:30:2d:bf:de:52:59:8d:31:04:c5: 2d:8c:fb:8c:fb:d9:c9:1c:8b:8c:1b:82:27:f7:05: b1:d8:f1:9d:9b:d2:78:4c:cc:85:72:c4:d4:8f:c1: fb:af:f0:98:88:d0:78:9c:fe:57:83:86:b1:fb:cf: c5:7c:d1:ae:ed:e3:2f:a7:84:8e:f5:dc:1b:cf:cb: b9:1a:0b:51:7b:59:d8:85:78:fb:08:29:ad:98:25: 73:f4:66:e5:4c:80:d1:0c:e9:79:f9:ba:57:0a:1a: 55:d0:6d:fc:bb:b8:36:63:51:5a:a8:15:40:3f:71: 38:c1:3f:f3:fc:e8:83:d5:7c:fd:ee:53:e9:a6:ca: d4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8B:EE:78:A5:7E:F7:09:A8:D6:1C:5B:AD:80:2F:8A:6D:45:6C:E0 X509v3 Authority Key Identifier: keyid:1D:A4:43:C3:3D:E5:AE:43:50:6F:D2:40:6B:76:53:66:1C:52:73:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/67a849-1106-45d0-b722-fe40a05aba7f/1/HaRDwz3lrkNQb9JAa3ZTZhxSczQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:76:e9:ac:36:b9:52:4c:42:c6:b2:eb:cd:40:01:3c:17:78: ad:a0:16:a8:d7:82:c9:18:55:fe:5b:f2:7a:60:58:66:be:ca: f8:1f:7a:a4:f8:c1:22:57:e5:e2:39:0f:88:7e:ba:c3:65:53: 77:17:1c:31:03:2c:55:ec:cc:87:bb:6f:1a:41:d5:1f:fc:02: 9b:50:5a:d8:da:bd:95:eb:85:45:80:63:3b:a7:a1:44:ba:28: b0:9a:da:af:4b:ec:64:fe:4d:ca:c0:04:e7:bf:9b:f1:ca:c3: 72:9a:4f:72:2a:f8:ec:0c:b3:a9:89:0e:7c:5f:ff:1a:d7:c9: c5:0f:37:fc:91:df:e1:81:bb:a2:ab:f7:b2:0a:4b:7b:a2:85: 90:af:59:50:4d:9c:c1:20:1d:b8:ab:85:06:1a:a5:16:cf:ea: 1c:ab:51:ba:ee:85:b9:e7:80:45:2e:77:04:0c:d8:82:8a:fb: c6:8a:df:c8:fa:b9:3f:64:72:e1:82:e0:96:91:de:af:b8:24: 89:e1:fd:ef:7f:91:99:d3:c9:4e:4b:8b:71:f6:b4:1a:27:88: 9e:4c:bd:60:07:90:a1:d5:be:09:91:c7:83:08:ee:c1:99:9d: 4b:d9:1f:e9:18:0f:3e:65:2a:7a:7e:af:6d:41:b1:1a:2f:f1: aa:46:2f:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP5C7bfUBqrUH8kE7YwWUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYTQ0M2MzM2RlNWFlNDM1MDZmZDI0MDZiNzY1MzY2MWM1 MjczMzQwHhcNMjUxMjA2MDYwMDQzWhcNMjUxMjA3MDYwMDQzWjAzMTEwLwYDVQQD EyhiYjhiZWU3OGE1N2VmNzA5YThkNjFjNWJhZDgwMmY4YTZkNDU2Y2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7s75DwvUgD84yCl/ZQ8GzgT93WU vn38YBbuT2QkxxxGYCkdNG0u8iyz3xW0IUZ2EkHBZSddFfQV/mA7JwQjZ+2myGTx ck7klhqHkhMdAmtrmjXB3N/A6NWXabdiK5idRZffQXSw2yzm7VuP35w/QB1w2ThS 7YoRP9y9SjAtv95SWY0xBMUtjPuM+9nJHIuMG4In9wWx2PGdm9J4TMyFcsTUj8H7 r/CYiNB4nP5Xg4ax+8/FfNGu7eMvp4SO9dwbz8u5GgtRe1nYhXj7CCmtmCVz9Gbl TIDRDOl5+bpXChpV0G38u7g2Y1FaqBVAP3E4wT/z/OiD1Xz97lPppsrUAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuL7nilfvcJqNYcW62AL4ptRWzgMB8GA1UdIwQY MBaAFB2kQ8M95a5DUG/SQGt2U2YcUnM0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGFSRHd6M2xya05RYjlKQWEzWlRaaHhTY3pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82N2E4NDktMTEwNi00NWQwLWI3MjIt ZmU0MGEwNWFiYTdmLzEvSGFSRHd6M2xya05RYjlKQWEzWlRaaHhTY3pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82N2E4NDktMTEwNi00NWQwLWI3MjItZmU0MGEwNWFiYTdm LzEvSGFSRHd6M2xya05RYjlKQWEzWlRaaHhTY3pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXbprDa5 UkxCxrLrzUABPBd4raAWqNeCyRhV/lvyemBYZr7K+B96pPjBIlfl4jkPiH66w2VT dxccMQMsVezMh7tvGkHVH/wCm1Ba2Nq9leuFRYBjO6ehRLoosJrar0vsZP5NysAE 57+b8crDcppPcir47AyzqYkOfF//GtfJxQ83/JHf4YG7oqv3sgpLe6KFkK9ZUE2c wSAduKuFBhqlFs/qHKtRuu6FueeARS53BAzYgor7xorfyPq5P2Ry4YLglpHer7gk ieH973+RmdPJTkuLcfa0GieInky9YAeQodW+CZHHgwjuwZmdS9kf6RgPPmUqen6v bUGxGi/xqkYv4Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:40 2025 by rpki-client