This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft File: HANEzHl26gFSj9EefFpmiu_jHcs.mft (raw, json) Hash identifier: 8CtM7im81XS5M3DLzhx/rVM4jh+QGSn8080VzZk+h2g= Subject key identifier: D8:2B:32:EC:C5:61:0B:3E:69:9B:3B:A8:88:59:BB:B1:1E:E9:D2:4B Authority key identifier: 1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB Certificate issuer: /CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb Certificate serial: 019B217618A6C84731889C464055FD6E896B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft Manifest number: 0401 Signing time: Mon 15 Dec 2025 10:02:26 +0000 Manifest this update: Mon 15 Dec 2025 10:02:26 +0000 Manifest next update: Tue 16 Dec 2025 10:02:26 +0000 Files and hashes: 1: HANEzHl26gFSj9EefFpmiu_jHcs.crl (hash: cxK9/QeF7OQLBE1nFNK4avVZsACTP3c9aXmyt09TGsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:76:18:a6:c8:47:31:88:9c:46:40:55:fd:6e:89:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb Validity Not Before: Dec 15 10:02:26 2025 GMT Not After : Dec 16 10:02:26 2025 GMT Subject: CN=d82b32ecc5610b3e699b3ba88859bbb11ee9d24b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ca:3c:47:af:cd:96:7f:9e:c5:ae:9a:0e:2e: b9:67:b5:d5:c7:ff:a5:88:d9:3c:8b:b2:83:82:71: 35:1f:4d:a4:c8:61:70:ae:c4:96:31:5f:87:a9:2a: b4:b1:56:26:6f:67:08:4c:c6:26:3c:f5:4a:d7:b8: 7e:63:12:37:0a:69:80:01:d4:f3:65:df:44:74:7a: 8a:19:01:99:98:e3:35:cb:23:c1:7a:3d:4c:da:04: 07:91:12:ee:ff:4e:1b:72:eb:32:93:3b:ab:fd:50: 93:50:5d:6b:48:c6:9b:25:14:1b:c1:a6:f4:32:54: ad:80:27:0b:95:d9:01:0a:b0:cb:df:97:7e:f8:c1: 4f:65:38:84:d9:ff:91:3a:f7:58:59:dd:57:21:27: 15:a7:6d:e6:0f:24:f2:a5:c3:3f:38:ba:e4:8f:3d: ce:51:36:d8:b8:f4:c8:79:47:71:47:da:3f:30:59: 2f:c0:65:97:f5:72:76:bb:2b:5d:ac:a2:37:45:0a: 32:d4:36:4a:1b:c0:a2:ad:3e:cd:ab:7b:52:89:88: 7b:87:87:7b:dd:e7:61:a0:d7:d3:41:1f:c0:85:7a: 1b:9f:b4:3a:f1:96:5f:2e:1e:4b:50:fc:90:5d:5d: c2:9a:bf:68:48:3d:b0:ea:77:c8:55:7e:9a:2e:bb: 14:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:2B:32:EC:C5:61:0B:3E:69:9B:3B:A8:88:59:BB:B1:1E:E9:D2:4B X509v3 Authority Key Identifier: keyid:1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:51:72:b6:98:37:af:b9:de:91:bf:25:3d:b2:9b:a2:b6:b7: 5a:60:d1:55:7a:22:9c:1a:a2:53:96:cd:e7:66:66:72:a0:fe: d0:fa:18:13:80:8b:90:e9:15:29:96:3b:d6:66:c8:9c:8a:d0: f1:7a:0d:0a:08:88:4e:03:96:af:10:cf:c9:d8:79:73:74:11: 92:6a:ae:81:f5:e1:7a:e7:78:eb:9b:91:0c:a6:4f:1f:3c:9a: be:a1:f8:16:b8:d3:a2:f5:10:51:bc:ec:d4:fe:c3:1e:e2:42: 66:05:1d:e5:6d:07:78:03:b7:20:55:9b:18:ad:54:e3:8a:c9: e0:4b:ec:38:f2:a6:d5:84:05:8c:25:eb:24:66:f9:ae:47:b4: 82:53:0b:62:44:75:d9:06:7a:f6:77:f9:59:6a:a2:a1:df:47: 5a:93:c8:76:cf:72:60:12:64:9c:ca:a2:7f:2d:d7:68:bf:c8: 5f:6c:48:33:b4:0e:25:35:3f:c7:f4:96:73:ef:f3:34:75:52: 70:4f:66:e8:de:ec:82:22:6b:22:08:a3:a3:97:7d:0f:6e:a6: 98:e4:38:ca:79:4d:32:49:a9:5c:b5:1c:c0:e5:fc:27:b3:c5: 0c:84:0b:36:24:f0:a0:83:69:3e:ca:8a:47:0f:5a:7e:c5:4b: e8:0d:9e:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdhimyEcxiJxGQFX9bolrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDM0NGNjNzk3NmVhMDE1MjhmZDExZTdjNWE2NjhhZWZl MzFkY2IwHhcNMjUxMjE1MTAwMjI2WhcNMjUxMjE2MTAwMjI2WjAzMTEwLwYDVQQD EyhkODJiMzJlY2M1NjEwYjNlNjk5YjNiYTg4ODU5YmJiMTFlZTlkMjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtco8R6/Nln+exa6aDi65Z7XVx/+l iNk8i7KDgnE1H02kyGFwrsSWMV+HqSq0sVYmb2cITMYmPPVK17h+YxI3CmmAAdTz Zd9EdHqKGQGZmOM1yyPBej1M2gQHkRLu/04bcusykzur/VCTUF1rSMabJRQbwab0 MlStgCcLldkBCrDL35d++MFPZTiE2f+ROvdYWd1XIScVp23mDyTypcM/OLrkjz3O UTbYuPTIeUdxR9o/MFkvwGWX9XJ2uytdrKI3RQoy1DZKG8CirT7Nq3tSiYh7h4d7 3edhoNfTQR/AhXobn7Q68ZZfLh5LUPyQXV3Cmr9oSD2w6nfIVX6aLrsU7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNgrMuzFYQs+aZs7qIhZu7Ee6dJLMB8GA1UdIwQY MBaAFBwDRMx5duoBUo/RHnxaZorv4x3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFORXpIbDI2Z0ZTajlFZWZGcG1pdV9qSGNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iOGYwZjgtYTk2Yy00MjlmLTlkZTYt YmRmMjA0MjQ3YzRmLzEvSEFORXpIbDI2Z0ZTajlFZWZGcG1pdV9qSGNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9iOGYwZjgtYTk2Yy00MjlmLTlkZTYtYmRmMjA0MjQ3YzRm LzEvSEFORXpIbDI2Z0ZTajlFZWZGcG1pdV9qSGNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVFytpg3 r7nekb8lPbKbora3WmDRVXoinBqiU5bN52ZmcqD+0PoYE4CLkOkVKZY71mbInIrQ 8XoNCgiITgOWrxDPydh5c3QRkmqugfXheud465uRDKZPHzyavqH4FrjTovUQUbzs 1P7DHuJCZgUd5W0HeAO3IFWbGK1U44rJ4EvsOPKm1YQFjCXrJGb5rke0glMLYkR1 2QZ69nf5WWqiod9HWpPIds9yYBJknMqify3XaL/IX2xIM7QOJTU/x/SWc+/zNHVS cE9m6N7sgiJrIgijo5d9D26mmOQ4ynlNMkmpXLUcwOX8J7PFDIQLNiTwoINpPsqK Rw9afsVL6A2eZw== -----END CERTIFICATE-----Generated at Mon Dec 15 20:21:17 2025 by rpki-client