This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json) Hash identifier: qDpDs6UysgZCCd8gFxfmjY3f90fUj/eVqSP8VjMweUI= Subject key identifier: EB:31:15:93:CB:C8:3D:C4:E6:12:6E:50:41:DF:EB:71:96:97:CC:59 Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c Certificate serial: 019B35D6F9A5642EE0023B8A10EA9267C883 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 09:00:39 +0000 Manifest this update: Fri 19 Dec 2025 09:00:39 +0000 Manifest next update: Sat 20 Dec 2025 09:00:39 +0000 Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: 64p3VZwCyoz1md+C0R4KcnYs5/Ynr8K+vyEmSLfCkAo=) 2: NLCwkRuxMAVqIE4s2Awhm1yzmmc.roa (hash: 7DV7f34yFMiHA1iSUlpq7Rg0BJ76/rrx0KnPa1dhIeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d6:f9:a5:64:2e:e0:02:3b:8a:10:ea:92:67:c8:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c Validity Not Before: Dec 19 09:00:39 2025 GMT Not After : Dec 20 09:00:39 2025 GMT Subject: CN=eb311593cbc83dc4e6126e5041dfeb719697cc59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:83:2d:70:65:b8:1e:89:14:78:38:c2:55:63: 43:0c:7a:08:74:b3:f1:cb:b4:22:0f:a1:67:77:be: 41:76:5a:e9:eb:96:eb:e3:d0:23:2a:ff:b7:34:96: 58:29:09:9d:df:3c:b0:af:cd:5d:3e:64:39:37:dc: c8:15:3f:a3:d9:e5:a2:7a:0f:b8:d5:0c:34:16:ca: 15:0f:c0:37:0c:9d:2a:48:28:38:99:5f:c6:d9:c0: 0f:32:6f:11:ee:e3:3e:79:fa:93:2d:38:9f:cb:cf: d8:50:40:be:6a:23:17:83:8e:9f:d4:27:94:be:2b: 96:a2:69:47:44:be:0b:1b:11:5f:5a:b4:02:02:8e: a6:f2:d8:0a:ef:05:47:76:e9:fd:4f:c2:1d:1f:38: 97:26:bd:5b:38:33:da:3d:86:cb:74:50:42:c6:db: e9:76:48:80:a0:18:17:20:8b:9d:5e:83:28:72:92: 24:a4:74:a5:c8:19:54:80:87:dc:78:34:41:dd:49: 42:77:93:f5:5d:2e:e7:d3:9d:11:cc:3e:55:40:a8: d0:55:31:53:18:b9:ca:24:43:b6:16:a9:b0:f6:28: 64:ee:5d:27:5e:03:ac:47:6a:63:67:d4:07:53:3a: 95:43:ed:4c:fa:ad:cb:8b:c0:db:24:0e:97:58:42: a1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:31:15:93:CB:C8:3D:C4:E6:12:6E:50:41:DF:EB:71:96:97:CC:59 X509v3 Authority Key Identifier: keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:c1:de:f5:a4:01:47:2a:4a:95:d7:69:4f:a4:6b:1a:34:1f: 78:03:3d:f4:ad:d6:c6:50:57:83:35:16:44:67:05:f1:5f:46: 63:b1:cb:24:9b:7e:0a:d6:0d:6a:85:1a:90:9e:a7:f3:6f:70: d8:19:a5:26:b2:84:25:6d:69:c7:37:e2:07:db:9a:c6:3b:a9: 4a:cc:75:40:03:7b:e5:a3:01:2e:a8:b1:76:8c:8d:b0:e1:d0: 0f:78:4d:02:be:21:3b:61:3d:13:65:6d:f0:26:61:84:0a:41: 0b:61:d9:7a:ae:4b:ef:ca:2f:e2:ae:6b:f6:d8:ab:9c:fc:79: c0:55:6a:53:1f:26:af:ea:db:d0:18:27:f5:04:74:f2:c3:f3: 59:b5:c6:41:5d:7c:4b:b6:e4:82:79:8c:e7:cf:4f:3d:3a:0c: 48:15:18:40:94:d6:29:02:49:ec:29:db:7b:73:b5:1f:41:79: 33:52:78:49:20:b6:5f:1d:14:3c:14:e6:30:50:86:bc:b0:40: 1f:2c:21:f1:6a:a7:e8:95:f6:3c:51:b2:27:cc:c5:bf:17:07: 50:01:83:f2:3d:48:7d:f0:71:eb:22:0f:cc:0e:8d:31:6a:49: 2d:af:1b:85:aa:42:55:15:b3:4c:63:62:72:52:ea:b7:1d:07: 5a:fa:0f:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs11vmlZC7gAjuKEOqSZ8iDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMGUyMTZlNTc5MWUxYjAxZGEyMWJjYWYzMzAwNDFhZDcy YTdlNmMwHhcNMjUxMjE5MDkwMDM5WhcNMjUxMjIwMDkwMDM5WjAzMTEwLwYDVQQD EyhlYjMxMTU5M2NiYzgzZGM0ZTYxMjZlNTA0MWRmZWI3MTk2OTdjYzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4MtcGW4HokUeDjCVWNDDHoIdLPx y7QiD6Fnd75Bdlrp65br49AjKv+3NJZYKQmd3zywr81dPmQ5N9zIFT+j2eWieg+4 1Qw0FsoVD8A3DJ0qSCg4mV/G2cAPMm8R7uM+efqTLTify8/YUEC+aiMXg46f1CeU viuWomlHRL4LGxFfWrQCAo6m8tgK7wVHdun9T8IdHziXJr1bODPaPYbLdFBCxtvp dkiAoBgXIIudXoMocpIkpHSlyBlUgIfceDRB3UlCd5P1XS7n050RzD5VQKjQVTFT GLnKJEO2Fqmw9ihk7l0nXgOsR2pjZ9QHUzqVQ+1M+q3Li8DbJA6XWEKhDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsxFZPLyD3E5hJuUEHf63GWl8xZMB8GA1UdIwQY MBaAFBwOIW5XkeGwHaIbyvMwBBrXKn5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEt MmMwZmM2YmUxZTU3LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEtMmMwZmM2YmUxZTU3 LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArsHe9aQB RypKlddpT6RrGjQfeAM99K3WxlBXgzUWRGcF8V9GY7HLJJt+CtYNaoUakJ6n829w 2BmlJrKEJW1pxzfiB9uaxjupSsx1QAN75aMBLqixdoyNsOHQD3hNAr4hO2E9E2Vt 8CZhhApBC2HZeq5L78ov4q5r9tirnPx5wFVqUx8mr+rb0Bgn9QR08sPzWbXGQV18 S7bkgnmM589PPToMSBUYQJTWKQJJ7Cnbe3O1H0F5M1J4SSC2Xx0UPBTmMFCGvLBA Hywh8Wqn6JX2PFGyJ8zFvxcHUAGD8j1IffBx6yIPzA6NMWpJLa8bhapCVRWzTGNi clLqtx0HWvoPYA== -----END CERTIFICATE-----Generated at Fri Dec 19 19:19:47 2025 by rpki-client