This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft File: Hal8rn3msp5W8CWa9TyVkmA0pQI.mft (raw, json) Hash identifier: roxQvstMcFbB+0/KaLeKg64AX8rTUITj/NNW6Knftdw= Subject key identifier: 9B:26:EB:E4:4F:5C:AE:44:69:A8:98:D7:79:20:3C:FF:46:E5:46:5F Authority key identifier: 1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02 Certificate issuer: /CN=1da97cae7de6b29e56f0259af53c95926034a502 Certificate serial: 019B1CF2D400A7B5DE9AED818CF32B996D77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft Manifest number: 177D Signing time: Sun 14 Dec 2025 13:00:34 +0000 Manifest this update: Sun 14 Dec 2025 13:00:34 +0000 Manifest next update: Mon 15 Dec 2025 13:00:34 +0000 Files and hashes: 1: 76g-Yh9Ferd3lB3kSC_pOEFVc_w.roa (hash: mtYP23ZyiF5FjXJ0wDyag4TWISBNCmqIokoqkgwM24I=) 2: Hal8rn3msp5W8CWa9TyVkmA0pQI.crl (hash: 36V27r9sAxU+fT4b9GZ/EiAk4OCJJ27vETrDvlEXdwk=) 3: clnaMm-gMiwsEYseD9VB3Kwt084.roa (hash: NpN0ynwsyxvDm6R0XnAuzGI9A3Dr8XC3OEWiSMbZf5Y=) 4: fCPoYoYgmnVqeGk9iQ9Y_u8Krrk.roa (hash: 5NqXcLS1fcDGaL4JuIaR1NwgZWlNxtw/gKtP6OVjQO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:f2:d4:00:a7:b5:de:9a:ed:81:8c:f3:2b:99:6d:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1da97cae7de6b29e56f0259af53c95926034a502 Validity Not Before: Dec 14 13:00:34 2025 GMT Not After : Dec 15 13:00:34 2025 GMT Subject: CN=9b26ebe44f5cae4469a898d779203cff46e5465f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:57:88:87:76:af:4e:28:3f:7f:0e:dd:5b:cc: 7d:0d:d7:1f:c6:14:71:6e:4a:df:1b:81:e8:56:f6: 1e:47:07:11:d2:f4:96:ab:ad:9d:3c:f1:fe:d9:23: 9a:bd:28:af:71:60:f5:29:a9:1a:e5:40:a1:2c:d9: 00:60:35:04:78:ec:96:29:c4:24:b8:d6:d8:e9:5a: 9c:fc:67:95:6f:26:9a:1d:10:13:9c:59:2c:55:ff: 6a:6a:1d:55:42:64:31:c5:b9:b8:77:62:31:3a:bc: 96:2f:5f:59:3c:b8:a5:fc:02:89:75:f9:34:f7:b9: 2d:5a:ea:95:1b:f5:3b:63:68:fb:b8:b2:84:b9:f8: e8:a6:a5:2f:4d:95:d0:4c:34:76:9a:96:9a:92:c1: 30:bf:94:de:44:7b:b7:ab:a6:2a:3d:a7:21:f6:d1: 79:92:f5:52:20:b0:44:4b:cb:5d:46:c7:17:85:c4: df:fb:20:3f:17:8f:90:07:97:e2:54:1e:25:5d:d3: db:fb:3c:00:f7:14:d0:af:6b:ec:0c:2c:e9:55:ca: 49:5a:bc:be:8d:f5:cd:c3:c0:8c:e3:12:94:3d:61: e5:cd:62:73:84:a8:a9:a1:c9:c7:76:f1:42:eb:0d: 1a:8a:f4:1d:3f:6c:02:37:97:22:bc:20:8b:75:b9: 4b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:26:EB:E4:4F:5C:AE:44:69:A8:98:D7:79:20:3C:FF:46:E5:46:5F X509v3 Authority Key Identifier: keyid:1D:A9:7C:AE:7D:E6:B2:9E:56:F0:25:9A:F5:3C:95:92:60:34:A5:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hal8rn3msp5W8CWa9TyVkmA0pQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/85b673-f1ad-43e2-bfe7-0cd7236b29b6/1/Hal8rn3msp5W8CWa9TyVkmA0pQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:fb:65:e4:6f:ab:4c:62:08:8d:b9:88:38:64:ad:f1:6b:da: 2a:e4:3b:85:03:79:00:e8:0f:6e:7f:4c:fd:80:08:49:c2:4c: c9:2a:9d:80:bc:5b:36:74:1f:81:a0:8b:1a:72:8e:49:2c:b9: 4b:07:9f:d2:22:27:2f:29:48:13:f6:94:20:ee:84:88:4d:bc: 54:06:47:60:61:3c:48:ec:7f:0b:5f:6d:a5:fc:c4:78:99:ab: 31:69:82:43:bb:bf:28:66:32:2c:37:10:e3:83:19:b1:68:85: 5c:4d:8d:48:44:af:3a:71:9f:1f:04:14:04:da:5c:7f:6a:56: ff:43:41:c7:e9:c0:3a:fd:d2:22:ae:17:9b:90:15:56:91:c4: d9:0b:ef:89:bb:7a:02:c0:e6:2a:f9:b8:5b:21:ad:89:af:6f: 90:96:38:69:38:97:c7:b4:c0:6e:e5:4b:6d:fc:98:14:a2:ff: 7b:f4:a9:9d:1f:ae:86:ab:0c:3a:39:e4:93:93:f8:a5:9a:cf: 6e:18:bb:82:a6:47:f5:11:60:04:97:8b:27:b3:dc:1d:ae:5f: 1b:e8:c0:4b:70:c9:e4:c7:54:92:3c:17:a4:fe:a6:e8:e6:21: 7d:a4:18:ea:b1:c3:99:55:a9:73:8e:32:21:7d:96:36:84:66: 36:b4:f5:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsc8tQAp7Xemu2BjPMrmW13MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYTk3Y2FlN2RlNmIyOWU1NmYwMjU5YWY1M2M5NTkyNjAz NGE1MDIwHhcNMjUxMjE0MTMwMDM0WhcNMjUxMjE1MTMwMDM0WjAzMTEwLwYDVQQD Eyg5YjI2ZWJlNDRmNWNhZTQ0NjlhODk4ZDc3OTIwM2NmZjQ2ZTU0NjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmleIh3avTig/fw7dW8x9DdcfxhRx bkrfG4HoVvYeRwcR0vSWq62dPPH+2SOavSivcWD1Kaka5UChLNkAYDUEeOyWKcQk uNbY6Vqc/GeVbyaaHRATnFksVf9qah1VQmQxxbm4d2IxOryWL19ZPLil/AKJdfk0 97ktWuqVG/U7Y2j7uLKEufjopqUvTZXQTDR2mpaaksEwv5TeRHu3q6YqPach9tF5 kvVSILBES8tdRscXhcTf+yA/F4+QB5fiVB4lXdPb+zwA9xTQr2vsDCzpVcpJWry+ jfXNw8CM4xKUPWHlzWJzhKipocnHdvFC6w0aivQdP2wCN5civCCLdblLrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsm6+RPXK5EaaiY13kgPP9G5UZfMB8GA1UdIwQY MBaAFB2pfK595rKeVvAlmvU8lZJgNKUCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC84NWI2NzMtZjFhZC00M2UyLWJmZTct MGNkNzIzNmIyOWI2LzEvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC84NWI2NzMtZjFhZC00M2UyLWJmZTctMGNkNzIzNmIyOWI2 LzEvSGFsOHJuM21zcDVXOENXYTlUeVZrbUEwcFFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPtl5G+r TGIIjbmIOGSt8WvaKuQ7hQN5AOgPbn9M/YAIScJMySqdgLxbNnQfgaCLGnKOSSy5 Swef0iInLylIE/aUIO6EiE28VAZHYGE8SOx/C19tpfzEeJmrMWmCQ7u/KGYyLDcQ 44MZsWiFXE2NSESvOnGfHwQUBNpcf2pW/0NBx+nAOv3SIq4Xm5AVVpHE2Qvvibt6 AsDmKvm4WyGtia9vkJY4aTiXx7TAbuVLbfyYFKL/e/SpnR+uhqsMOjnkk5P4pZrP bhi7gqZH9RFgBJeLJ7PcHa5fG+jAS3DJ5MdUkjwXpP6m6OYhfaQY6rHDmVWpc44y IX2WNoRmNrT1hg== -----END CERTIFICATE-----Generated at Sun Dec 14 16:19:36 2025 by rpki-client