This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft File: HANEzHl26gFSj9EefFpmiu_jHcs.mft (raw, json) Hash identifier: o46M27OfyGPYQARGD0FRg4TjPrPsLCgUrJ696fdUxeI= Subject key identifier: 28:51:8A:BD:F5:B1:62:6D:C7:19:01:62:60:C8:44:6C:BF:BE:23:B3 Authority key identifier: 1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB Certificate issuer: /CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb Certificate serial: 019AF31CA54F21B7571212FAC88A66209BA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft Manifest number: 03E9 Signing time: Sat 06 Dec 2025 10:02:12 +0000 Manifest this update: Sat 06 Dec 2025 10:02:12 +0000 Manifest next update: Sun 07 Dec 2025 10:02:12 +0000 Files and hashes: 1: HANEzHl26gFSj9EefFpmiu_jHcs.crl (hash: A31YsTpK4kBcZCeaAmGVXBiKfHJ/HE0xMZxxpNasCeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:a5:4f:21:b7:57:12:12:fa:c8:8a:66:20:9b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb Validity Not Before: Dec 6 10:02:12 2025 GMT Not After : Dec 7 10:02:12 2025 GMT Subject: CN=28518abdf5b1626dc719016260c8446cbfbe23b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:68:aa:ca:04:6e:30:7d:fc:4c:16:f2:25:c1: dc:81:2d:97:53:95:01:f1:83:91:0f:db:ab:28:42: 11:78:13:3f:d3:3f:e8:93:dc:fb:af:4c:46:16:ff: 57:bc:7c:d9:df:93:97:20:2e:68:31:5e:22:1d:f1: e4:dd:8d:10:3d:b6:c0:8e:03:cd:44:25:91:ea:8f: 38:4b:9d:a9:9f:00:b9:25:bf:36:8c:a3:6a:1e:a8: fd:dd:35:26:0d:fb:36:43:5d:35:bf:26:5e:61:d7: 07:3c:15:81:b2:72:b5:18:fb:5a:8a:99:ae:0f:79: 4d:17:e8:f9:d9:5c:23:34:95:81:56:c3:73:7f:f0: 86:73:53:9f:e9:87:4f:71:35:13:33:43:ba:40:32: 49:8f:21:bb:b7:63:15:de:79:4b:61:e0:51:01:92: e9:38:43:35:70:9e:9e:37:de:4a:c3:c8:fd:fe:f1: b2:26:d1:fd:3e:ae:72:67:5b:27:cd:85:5c:e4:05: 88:1d:9b:c9:54:60:9d:ca:19:aa:97:21:9a:94:3e: 4e:8f:04:33:25:ec:42:6c:9c:37:eb:4d:6f:52:db: af:67:81:1c:e2:7f:c0:ce:f7:d1:76:c6:37:73:79: 52:ad:37:4e:71:d5:f7:cc:8a:cc:50:c2:35:76:8e: 93:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:51:8A:BD:F5:B1:62:6D:C7:19:01:62:60:C8:44:6C:BF:BE:23:B3 X509v3 Authority Key Identifier: keyid:1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:9d:4f:4e:8f:ae:40:ef:75:f9:c0:95:da:bc:27:2a:f6:ba: ee:67:5f:21:28:44:b8:34:31:9a:6f:91:f5:31:5f:75:47:d9: 47:ce:99:cc:1b:f9:de:1b:ce:c7:78:54:62:bb:3a:1b:bb:0b: bb:85:d3:2d:fd:ce:50:2b:f7:43:f2:13:06:9a:39:2a:bb:0b: b2:63:a6:c1:3b:5d:ae:8b:23:89:0b:37:0f:5a:f4:c9:41:96: b7:3e:14:67:44:63:b7:ef:74:40:6e:98:04:ba:29:74:df:29: fd:0e:d4:12:f1:54:6d:aa:b1:29:3e:d1:9a:91:2f:e5:d8:bc: f0:9a:14:80:9a:64:1a:2d:ac:75:7f:d6:96:41:bc:93:84:6d: 13:e1:bb:e6:9c:ea:91:9e:10:ac:b3:04:f1:f3:6f:bc:72:54: 58:b1:65:27:80:7c:e4:b1:ef:b7:ce:9b:61:5f:3c:30:33:c6: 00:12:a9:5a:c6:c6:23:58:65:18:0f:65:6a:ca:f8:a2:f2:21: 68:a6:2e:d2:86:20:f6:17:e5:09:fb:57:33:d8:6e:44:c0:31: d8:ab:a8:a7:fe:99:26:89:9a:de:46:3a:54:51:93:86:a4:38: 0e:99:7e:bd:14:74:29:b4:e0:20:71:ea:3f:32:1a:06:67:2b: 80:a8:62:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHKVPIbdXEhL6yIpmIJuoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDM0NGNjNzk3NmVhMDE1MjhmZDExZTdjNWE2NjhhZWZl MzFkY2IwHhcNMjUxMjA2MTAwMjEyWhcNMjUxMjA3MTAwMjEyWjAzMTEwLwYDVQQD EygyODUxOGFiZGY1YjE2MjZkYzcxOTAxNjI2MGM4NDQ2Y2JmYmUyM2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2iqygRuMH38TBbyJcHcgS2XU5UB 8YORD9urKEIReBM/0z/ok9z7r0xGFv9XvHzZ35OXIC5oMV4iHfHk3Y0QPbbAjgPN RCWR6o84S52pnwC5Jb82jKNqHqj93TUmDfs2Q101vyZeYdcHPBWBsnK1GPtaipmu D3lNF+j52VwjNJWBVsNzf/CGc1Of6YdPcTUTM0O6QDJJjyG7t2MV3nlLYeBRAZLp OEM1cJ6eN95Kw8j9/vGyJtH9Pq5yZ1snzYVc5AWIHZvJVGCdyhmqlyGalD5OjwQz JexCbJw3601vUtuvZ4Ec4n/AzvfRdsY3c3lSrTdOcdX3zIrMUMI1do6TeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChRir31sWJtxxkBYmDIRGy/viOzMB8GA1UdIwQY MBaAFBwDRMx5duoBUo/RHnxaZorv4x3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFORXpIbDI2Z0ZTajlFZWZGcG1pdV9qSGNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iOGYwZjgtYTk2Yy00MjlmLTlkZTYt YmRmMjA0MjQ3YzRmLzEvSEFORXpIbDI2Z0ZTajlFZWZGcG1pdV9qSGNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9iOGYwZjgtYTk2Yy00MjlmLTlkZTYtYmRmMjA0MjQ3YzRm LzEvSEFORXpIbDI2Z0ZTajlFZWZGcG1pdV9qSGNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk51PTo+u QO91+cCV2rwnKva67mdfIShEuDQxmm+R9TFfdUfZR86ZzBv53hvOx3hUYrs6G7sL u4XTLf3OUCv3Q/ITBpo5KrsLsmOmwTtdrosjiQs3D1r0yUGWtz4UZ0Rjt+90QG6Y BLopdN8p/Q7UEvFUbaqxKT7RmpEv5di88JoUgJpkGi2sdX/WlkG8k4RtE+G75pzq kZ4QrLME8fNvvHJUWLFlJ4B85LHvt86bYV88MDPGABKpWsbGI1hlGA9lasr4ovIh aKYu0oYg9hflCftXM9huRMAx2Kuop/6ZJoma3kY6VFGThqQ4Dpl+vRR0KbTgIHHq PzIaBmcrgKhiFw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:39:36 2025 by rpki-client