This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json) Hash identifier: 3L92IIgVPXxrvv4Jxlu/vF+6c8RMP7TVXY1g3JLGyZc= Subject key identifier: D3:40:A9:FB:26:15:1C:AB:9C:7F:47:8D:52:FA:10:F4:47:8A:1D:45 Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5 Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5 Certificate serial: 019AF16424DDD4FC23BC80A71D99D8E10171 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft Manifest number: 146E Signing time: Sat 06 Dec 2025 02:01:03 +0000 Manifest this update: Sat 06 Dec 2025 02:01:03 +0000 Manifest next update: Sun 07 Dec 2025 02:01:03 +0000 Files and hashes: 1: ObLj8Es3CGwudgx4z3Eal1DaMsg.roa (hash: OBOYU0pVuU2YZL5sdRS5axOYzVZesgjz4ueFKZ8ujls=) 2: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: dsVsdBE9eUG80o1jc5rCpcSAXMVKmY5Rf3re6wGhc5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:24:dd:d4:fc:23:bc:80:a7:1d:99:d8:e1:01:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5 Validity Not Before: Dec 6 02:01:03 2025 GMT Not After : Dec 7 02:01:03 2025 GMT Subject: CN=d340a9fb26151cab9c7f478d52fa10f4478a1d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3e:e0:1c:59:8b:6e:ed:96:ff:33:43:b0:a5: 75:90:ee:72:81:28:4f:bd:bd:c4:54:75:a6:40:eb: 5c:0f:ea:5a:93:d2:7d:87:46:cd:6f:6f:0a:3b:c0: 11:f1:31:20:aa:17:53:98:1e:35:57:f6:af:19:de: 5c:53:f1:84:c6:bc:42:56:7a:5c:4f:c7:96:9f:6f: 91:5b:db:92:9c:a9:c6:c3:9f:7e:49:f3:0b:f5:04: fa:d6:99:00:f1:7c:ee:d5:2e:98:ef:d0:c7:e1:b2: c4:5d:c1:4e:7f:74:ea:d7:0a:0a:90:b1:35:5f:de: 13:68:15:d5:a4:65:e4:c9:47:f9:28:37:aa:a5:33: d4:3c:be:de:70:e8:75:d0:58:e6:34:13:37:66:d3: c5:17:46:08:1e:03:36:92:02:22:e2:d5:75:2e:75: 9d:6b:aa:d9:b1:5b:65:f4:b8:21:ad:54:7c:b0:8c: 10:74:04:96:09:ed:40:c9:b5:5f:16:d5:d7:c2:19: a0:81:7b:c2:84:37:2d:00:64:b1:e5:54:26:c6:65: 71:68:28:90:47:09:7c:c6:d8:2c:91:0a:8e:fa:59: 38:4d:a8:f1:48:bd:a7:28:5e:b0:22:e3:ee:42:04: e0:a1:0f:0e:a8:20:38:25:20:c5:a8:5c:07:6b:33: ff:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:40:A9:FB:26:15:1C:AB:9C:7F:47:8D:52:FA:10:F4:47:8A:1D:45 X509v3 Authority Key Identifier: keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:84:fb:c6:c0:d2:d2:44:8e:ab:af:eb:c7:5e:81:fc:df:b7: 75:f7:b2:ce:53:8f:76:b3:83:9a:97:bc:85:92:03:4f:08:7b: 08:fa:d0:45:44:86:97:b0:10:24:91:ba:5e:5b:de:55:36:e4: b6:3c:7d:05:d1:85:f9:d6:86:95:90:56:77:0e:a3:ce:5f:c2: 64:b8:15:03:b4:40:9b:30:08:d6:4b:21:27:fd:b9:1a:1c:7c: 66:72:4c:9d:ca:52:99:50:85:dd:a2:b8:b8:69:3f:0d:d4:5b: 17:8f:d1:12:68:cb:7b:c8:a7:cb:1d:4c:e5:81:53:86:1c:ee: df:e5:84:ca:69:61:37:09:de:38:34:c5:c1:e5:ba:57:4c:90: bb:d8:d8:ea:ef:18:95:25:41:cf:29:ff:8e:be:b1:75:fb:c1: c1:b6:e7:67:f2:79:8b:47:78:0e:ef:55:dc:e4:3f:23:a6:19: 6f:58:40:94:f5:9e:56:7e:45:16:e9:50:d5:c2:35:46:28:e4: 0a:f8:3b:6e:4e:c3:5b:07:6c:60:5f:40:39:54:62:0a:20:0f: 01:63:ac:d6:84:f8:57:e0:7f:93:5c:b6:17:0c:15:81:6d:39: 52:18:ec:69:4a:f1:74:33:98:e2:ff:21:32:71:2d:a0:f0:fe: 69:e2:d4:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCTd1PwjvICnHZnY4QFxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMTZhNWZhYzY1YWM1ZTljNWViYmZlZDcxNTE4Y2FlMGMx MzExYzUwHhcNMjUxMjA2MDIwMTAzWhcNMjUxMjA3MDIwMTAzWjAzMTEwLwYDVQQD EyhkMzQwYTlmYjI2MTUxY2FiOWM3ZjQ3OGQ1MmZhMTBmNDQ3OGExZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D7gHFmLbu2W/zNDsKV1kO5ygShP vb3EVHWmQOtcD+pak9J9h0bNb28KO8AR8TEgqhdTmB41V/avGd5cU/GExrxCVnpc T8eWn2+RW9uSnKnGw59+SfML9QT61pkA8Xzu1S6Y79DH4bLEXcFOf3Tq1woKkLE1 X94TaBXVpGXkyUf5KDeqpTPUPL7ecOh10FjmNBM3ZtPFF0YIHgM2kgIi4tV1LnWd a6rZsVtl9LghrVR8sIwQdASWCe1AybVfFtXXwhmggXvChDctAGSx5VQmxmVxaCiQ Rwl8xtgskQqO+lk4TajxSL2nKF6wIuPuQgTgoQ8OqCA4JSDFqFwHazP/JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNAqfsmFRyrnH9HjVL6EPRHih1FMB8GA1UdIwQY MBaAFIoWpfrGWsXpxeu/7XFRjK4MExHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUt NGNjMDFiNmY4ODQ3LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUtNGNjMDFiNmY4ODQ3 LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsYT7xsDS 0kSOq6/rx16B/N+3dfeyzlOPdrODmpe8hZIDTwh7CPrQRUSGl7AQJJG6XlveVTbk tjx9BdGF+daGlZBWdw6jzl/CZLgVA7RAmzAI1kshJ/25Ghx8ZnJMncpSmVCF3aK4 uGk/DdRbF4/REmjLe8inyx1M5YFThhzu3+WEymlhNwneODTFweW6V0yQu9jY6u8Y lSVBzyn/jr6xdfvBwbbnZ/J5i0d4Du9V3OQ/I6YZb1hAlPWeVn5FFulQ1cI1Rijk Cvg7bk7DWwdsYF9AOVRiCiAPAWOs1oT4V+B/k1y2FwwVgW05UhjsaUrxdDOY4v8h MnEtoPD+aeLUnQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:54 2025 by rpki-client