This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft File: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft (raw, json) Hash identifier: f6QSk1tEKQGMhHb/nf7VL2IMf+wz7PdXSU3FhLsYchU= Subject key identifier: F6:B8:4D:B8:8A:F5:D9:0B:73:5D:31:AC:03:8F:33:2D:9A:3B:1F:A5 Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18 Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18 Certificate serial: 019B16BA7FA74B8EB1C0057D6BB2971B7C7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft Manifest number: 1774 Signing time: Sat 13 Dec 2025 08:01:19 +0000 Manifest this update: Sat 13 Dec 2025 08:01:19 +0000 Manifest next update: Sun 14 Dec 2025 08:01:19 +0000 Files and hashes: 1: 2eNuQu_p5ginCAZ1GWglFgX2Ois.roa (hash: w05SWnwARvBa6z4mKj9c93WMw5hgy4MoXYoHU2TqLvA=) 2: Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl (hash: 0EAgWFqy46sHKzBdLPxdxCkuPk4d5Fy04d0SnM8GU1Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 08:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:ba:7f:a7:4b:8e:b1:c0:05:7d:6b:b2:97:1b:7c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18 Validity Not Before: Dec 13 08:01:19 2025 GMT Not After : Dec 14 08:01:19 2025 GMT Subject: CN=f6b84db88af5d90b735d31ac038f332d9a3b1fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e5:7f:13:53:bf:ba:74:72:7c:40:69:98:08: 14:6f:28:5a:46:8e:ed:6c:8b:91:f2:10:3d:02:b4: 03:e5:be:30:27:14:8e:b6:d0:e3:8a:c3:98:8c:31: f8:91:46:02:c7:25:d6:fa:fe:12:34:b7:8f:64:36: fe:d9:3e:0b:10:90:3b:52:3f:d3:47:65:e4:60:6e: b8:9f:28:56:49:e5:37:b6:15:94:bb:29:c5:71:82: c5:f6:69:50:cb:9f:15:52:b6:b2:ad:b6:8b:13:2b: aa:cb:f6:79:f9:a5:96:30:14:85:9f:60:ed:2e:02: 42:d8:85:fd:06:65:3a:90:87:73:82:1a:72:b1:c6: da:2d:59:5c:07:64:f1:3f:bf:d6:4a:32:81:36:2d: ae:20:93:8e:a4:19:8c:6e:04:58:a4:5c:35:87:24: 42:48:01:0c:3b:e6:05:5b:0b:4d:1d:a0:c8:0c:58: ca:c8:b2:ae:b9:6d:4c:da:48:b4:e8:62:f9:0e:7c: 5d:ce:49:e6:e0:52:c3:6c:57:be:aa:23:d9:21:f4: 11:ca:9b:0f:19:30:63:13:e8:bd:7d:08:fa:18:d8: 17:8c:b9:0f:f0:34:ab:8e:09:cb:ec:c4:ad:67:02: 5b:63:14:ce:8f:97:0e:46:97:32:03:66:1b:d4:1b: cc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B8:4D:B8:8A:F5:D9:0B:73:5D:31:AC:03:8F:33:2D:9A:3B:1F:A5 X509v3 Authority Key Identifier: keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a0:31:ac:9d:11:18:7f:11:39:e0:ef:29:a3:f6:4b:84:8a: 41:ad:99:d6:c1:43:da:ad:06:48:73:f1:e1:b8:80:97:fc:cb: 28:45:93:87:c0:72:87:64:74:87:8e:4b:fc:c7:1b:b8:ae:b1: 29:86:b1:19:18:fe:c8:78:ed:67:d8:1b:1d:7c:fe:fe:83:87: 21:6a:5c:35:13:d6:7d:84:b5:94:01:bc:ca:72:86:7e:29:d3: 9a:46:ad:29:00:8e:4d:0f:c0:b1:a9:99:66:01:47:34:b2:7e: ab:59:25:3a:bf:43:f7:bf:35:26:76:a1:e0:dc:ec:1f:26:b6: 58:cf:f9:cf:3f:33:2c:cd:ec:ff:10:c9:85:dd:81:85:3f:1e: e4:6c:f8:ee:25:aa:42:e5:a9:e1:1d:28:b6:f1:de:6a:0e:5e: 82:e1:6e:2f:8f:1b:63:14:c9:c8:9b:09:01:ac:bf:54:36:23: af:87:86:7b:21:0c:8f:73:73:d1:ab:5e:8a:44:fb:14:05:fc: 71:90:55:74:19:b3:30:9f:67:45:bc:1d:e1:d4:8d:d0:27:b1: ac:20:45:c7:f7:cd:22:6e:09:c8:cd:5a:6a:88:47:f6:96:a1: 04:25:98:c2:a8:87:a6:ea:c3:c3:26:ea:b7:d3:0c:1f:81:be: 53:8c:8e:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsWun+nS46xwAV9a7KXG3x8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWQ3YjlmMWM0OWY4ZDEzZTFhNjdhYmNmMmZiYTM1YjBh NjZkMTgwHhcNMjUxMjEzMDgwMTE5WhcNMjUxMjE0MDgwMTE5WjAzMTEwLwYDVQQD EyhmNmI4NGRiODhhZjVkOTBiNzM1ZDMxYWMwMzhmMzMyZDlhM2IxZmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOV/E1O/unRyfEBpmAgUbyhaRo7t bIuR8hA9ArQD5b4wJxSOttDjisOYjDH4kUYCxyXW+v4SNLePZDb+2T4LEJA7Uj/T R2XkYG64nyhWSeU3thWUuynFcYLF9mlQy58VUrayrbaLEyuqy/Z5+aWWMBSFn2Dt LgJC2IX9BmU6kIdzghpyscbaLVlcB2TxP7/WSjKBNi2uIJOOpBmMbgRYpFw1hyRC SAEMO+YFWwtNHaDIDFjKyLKuuW1M2ki06GL5Dnxdzknm4FLDbFe+qiPZIfQRypsP GTBjE+i9fQj6GNgXjLkP8DSrjgnL7MStZwJbYxTOj5cORpcyA2Yb1BvMBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPa4TbiK9dkLc10xrAOPMy2aOx+lMB8GA1UdIwQY MBaAFB2te58cSfjRPhpnq88vujWwpm0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zYzM5ZjAtN2U5Ny00ZWY3LTg5NDQt NWViZDhlYWVlMmM2LzEvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8zYzM5ZjAtN2U5Ny00ZWY3LTg5NDQtNWViZDhlYWVlMmM2 LzEvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKAxrJ0R GH8ROeDvKaP2S4SKQa2Z1sFD2q0GSHPx4biAl/zLKEWTh8Byh2R0h45L/McbuK6x KYaxGRj+yHjtZ9gbHXz+/oOHIWpcNRPWfYS1lAG8ynKGfinTmkatKQCOTQ/AsamZ ZgFHNLJ+q1klOr9D9781Jnah4NzsHya2WM/5zz8zLM3s/xDJhd2BhT8e5Gz47iWq QuWp4R0otvHeag5eguFuL48bYxTJyJsJAay/VDYjr4eGeyEMj3Nz0ateikT7FAX8 cZBVdBmzMJ9nRbwd4dSN0CexrCBFx/fNIm4JyM1aaohH9pahBCWYwqiHpurDwybq t9MMH4G+U4yORQ== -----END CERTIFICATE-----Generated at Sat Dec 13 12:48:21 2025 by rpki-client