This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json) Hash identifier: Z3NSmrCG1Qf/YOZw8owxrMQdxZMfzgTJILv5bJAkzz0= Subject key identifier: 96:D4:81:26:96:F4:2F:8B:A6:AF:CE:80:1C:13:2D:B4:0E:F6:C3:B0 Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54 Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954 Certificate serial: 019AFA9DC1741B83CB1D09E613D0C43C0101 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft Manifest number: 167B Signing time: Sun 07 Dec 2025 21:00:33 +0000 Manifest this update: Sun 07 Dec 2025 21:00:33 +0000 Manifest next update: Mon 08 Dec 2025 21:00:33 +0000 Files and hashes: 1: BdEPl2Neefl4GoaE_iupoW4vob4.roa (hash: iJi1nUHFyZuED4JVs82b7kN1M64TmmDeD6kSjvIrHS0=) 2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: v2vrTX53dDUhVpxxNcO2xBFF+5JlCYt9LDencfTlOzM=) 3: n6MPRl4HeV2oslQVZjQ3r5EuRXY.roa (hash: J3QEJ4pfKQHu+ZNIZ1/n5cXEVM04vV1h4Czaen0IJhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 17:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:9d:c1:74:1b:83:cb:1d:09:e6:13:d0:c4:3c:01:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954 Validity Not Before: Dec 7 21:00:33 2025 GMT Not After : Dec 8 21:00:33 2025 GMT Subject: CN=96d4812696f42f8ba6afce801c132db40ef6c3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fa:4a:ab:68:34:b9:fb:2a:f9:53:aa:84:ab: 5d:69:dc:66:94:39:b0:3a:c6:c4:7f:de:c0:de:51: 39:7e:86:70:64:6a:bd:75:12:7e:8b:2a:05:16:41: 8f:d6:12:e2:55:7f:ee:89:d5:69:71:21:a6:80:7c: 8a:8f:63:a4:92:75:1d:57:ac:29:ef:2d:5a:97:fd: 24:58:ea:ae:5d:58:f0:bd:d9:57:a4:f0:22:d2:f8: 98:d0:78:1a:fa:4e:cd:19:a3:f7:c0:b9:47:42:83: da:96:61:c8:88:c5:6b:bd:c6:c0:f9:b6:6e:47:22: 21:27:85:86:5c:4a:78:1f:09:21:e3:c4:65:89:a9: 8a:87:ae:96:5b:cb:f2:8a:e2:b8:af:fb:9c:17:15: 08:18:7f:1a:f2:38:2c:2b:ce:9c:3a:c6:82:37:f4: 7a:87:0c:4b:c2:6f:1b:c4:d0:22:92:5e:bc:52:ed: 8c:ec:34:fb:36:5e:91:ae:da:85:4b:62:72:51:ec: 0e:da:15:19:aa:26:da:17:82:c3:a5:a4:9f:86:25: b1:e0:c1:b5:4a:bd:b8:d2:31:cb:08:99:81:67:9e: 4d:30:c3:38:e9:f5:09:8e:0a:f6:10:7e:04:0d:f7: 31:00:90:bc:fc:0d:2f:ec:20:82:36:9e:67:2d:e7: 81:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D4:81:26:96:F4:2F:8B:A6:AF:CE:80:1C:13:2D:B4:0E:F6:C3:B0 X509v3 Authority Key Identifier: keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:db:bb:1e:64:a9:fa:b9:51:63:12:8e:07:04:1b:00:bc:5c: 3b:88:92:c9:d8:5d:4e:c1:6a:cc:6b:47:b4:29:e1:28:52:8f: ac:62:0a:ab:a1:70:48:a3:aa:31:62:90:d9:d1:f3:42:49:dc: ed:72:ae:e8:9a:01:17:3c:15:bb:0a:2f:f9:c1:36:0d:cb:6c: 1f:35:a8:f4:94:67:89:a3:fa:32:f2:5e:20:40:25:3d:28:04: ff:10:89:0a:a9:b0:a1:dd:9f:ec:6f:74:8b:8e:c5:af:24:db: 81:3a:52:18:1d:8f:e2:e4:96:74:c3:c3:b6:21:41:0a:89:f8: 6f:32:f9:2a:b7:74:3d:14:31:cb:35:f4:5f:b7:46:71:fd:17: 1a:85:aa:43:fb:94:5d:5e:17:fd:64:53:5f:61:dd:b6:97:4e: b4:9e:e1:f6:8b:ed:78:85:f3:90:1b:48:49:85:63:00:93:c8: fb:35:d7:b5:62:54:62:2b:89:05:73:6d:92:48:df:e5:e1:1f: 51:20:c5:6f:30:df:8b:0a:87:04:d8:ea:73:1d:20:b5:d2:50: 87:52:3e:3c:af:fa:e4:21:f5:7b:89:1f:87:0b:06:60:cb:e3: 6f:a9:1b:70:60:f4:30:3d:c5:1c:7c:10:5f:a3:f9:de:ef:0b: b0:14:e8:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr6ncF0G4PLHQnmE9DEPAEBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1YWFhZGM1NjhmNmM5MjhmZDc2NGQ0MjFkNDJjNzFjZjU3 OTE5NTQwHhcNMjUxMjA3MjEwMDMzWhcNMjUxMjA4MjEwMDMzWjAzMTEwLwYDVQQD Eyg5NmQ0ODEyNjk2ZjQyZjhiYTZhZmNlODAxYzEzMmRiNDBlZjZjM2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PpKq2g0ufsq+VOqhKtdadxmlDmw OsbEf97A3lE5foZwZGq9dRJ+iyoFFkGP1hLiVX/uidVpcSGmgHyKj2OkknUdV6wp 7y1al/0kWOquXVjwvdlXpPAi0viY0Hga+k7NGaP3wLlHQoPalmHIiMVrvcbA+bZu RyIhJ4WGXEp4Hwkh48RliamKh66WW8vyiuK4r/ucFxUIGH8a8jgsK86cOsaCN/R6 hwxLwm8bxNAikl68Uu2M7DT7Nl6RrtqFS2JyUewO2hUZqibaF4LDpaSfhiWx4MG1 Sr240jHLCJmBZ55NMMM46fUJjgr2EH4EDfcxAJC8/A0v7CCCNp5nLeeBbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbUgSaW9C+Lpq/OgBwTLbQO9sOwMB8GA1UdIwQY MBaAFIWqrcVo9sko/XZNQh1Cxxz1eRlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMt NDVlYTM4ZGEyMjE4LzEvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMtNDVlYTM4ZGEyMjE4 LzEvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv9u7HmSp +rlRYxKOBwQbALxcO4iSydhdTsFqzGtHtCnhKFKPrGIKq6FwSKOqMWKQ2dHzQknc 7XKu6JoBFzwVuwov+cE2DctsHzWo9JRniaP6MvJeIEAlPSgE/xCJCqmwod2f7G90 i47FryTbgTpSGB2P4uSWdMPDtiFBCon4bzL5Krd0PRQxyzX0X7dGcf0XGoWqQ/uU XV4X/WRTX2HdtpdOtJ7h9ovteIXzkBtISYVjAJPI+zXXtWJUYiuJBXNtkkjf5eEf USDFbzDfiwqHBNjqcx0gtdJQh1I+PK/65CH1e4kfhwsGYMvjb6kbcGD0MD3FHHwQ X6P53u8LsBToeQ== -----END CERTIFICATE-----Generated at Mon Dec 8 01:23:14 2025 by rpki-client