This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json) Hash identifier: WEX/PLLaI7TS/UDfP0Lx0GFyparB3c+koYcFSVca30g= Subject key identifier: 97:67:FE:65:1C:5F:4E:BC:6E:FA:C2:9A:9F:47:4E:2D:50:5B:43:25 Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4 Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4 Certificate serial: 019ACA8F7326F5C7941D3CED4EF7C149DBAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft Manifest number: 0F6A Signing time: Fri 28 Nov 2025 13:03:09 +0000 Manifest this update: Fri 28 Nov 2025 13:03:09 +0000 Manifest next update: Sat 29 Nov 2025 13:03:09 +0000 Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: Zrr3ujYtoju2XixlmV3rMMj9BetsyHZ/IQs8Ws6EMi4=) 2: Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa (hash: ApF50P5ImmFTCYDqSebFhsxBAqXoF1l91y3xHeQhovw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ca:8f:73:26:f5:c7:94:1d:3c:ed:4e:f7:c1:49:db:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4 Validity Not Before: Nov 28 13:03:09 2025 GMT Not After : Nov 29 13:03:09 2025 GMT Subject: CN=9767fe651c5f4ebc6efac29a9f474e2d505b4325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f6:f5:00:64:4d:98:76:36:90:ba:53:e5:a4: eb:a5:7e:a0:98:89:12:17:4b:cf:02:4e:7f:e6:67: 50:81:97:4c:93:7e:a9:20:aa:4c:95:bc:72:9c:e2: 0f:04:2a:f1:e2:d1:2e:e3:5a:52:4f:dd:59:11:8c: 47:bd:43:2b:e0:a8:5b:ef:55:cb:aa:c3:7e:0c:b2: 61:a1:57:30:f8:c3:b2:cb:d6:c1:64:09:0d:69:fb: 57:62:75:3a:f4:4e:41:11:ec:d5:d9:a2:94:44:37: b5:ce:45:78:21:b1:41:06:98:63:3f:1e:8a:8f:5b: 71:9c:b6:47:14:aa:98:16:89:c0:a1:0d:dd:11:f3: 01:8f:b0:19:61:9d:e0:3a:3a:69:3c:35:47:42:70: 09:d8:5c:ac:1d:8f:6c:d0:e8:cc:45:a3:d4:64:d0: 07:75:33:64:f9:92:0d:db:73:4e:4b:b5:f6:37:99: 1a:90:df:3c:f5:75:3c:d9:17:ca:6b:0a:2f:6e:6c: f3:a8:d7:d1:14:db:c6:78:6e:a8:8d:c3:63:3c:53: 93:0e:db:19:25:ec:cb:57:55:72:be:d2:d4:1d:5a: 38:b1:97:61:46:d7:b7:ba:a9:2c:f9:54:ac:6f:da: e4:4e:2e:d7:da:18:1e:24:f5:34:24:db:b5:94:83: 78:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:67:FE:65:1C:5F:4E:BC:6E:FA:C2:9A:9F:47:4E:2D:50:5B:43:25 X509v3 Authority Key Identifier: keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b6:3b:19:6b:e4:39:83:48:4c:98:5c:38:ba:cb:a9:0d:b8: 47:88:6b:c9:9d:77:0d:d8:9f:53:16:72:84:a9:04:24:93:fc: ed:19:17:80:1e:19:cf:b8:99:68:24:3b:37:22:dc:65:ac:40: 79:03:b0:25:ac:6c:9d:06:6c:bd:55:3c:e5:0e:bd:0d:e0:98: 12:cd:c6:7a:03:94:ed:e2:64:ba:a9:71:af:1a:3a:77:ab:f3: bc:66:01:8f:ca:ab:bc:4b:97:19:ee:b1:2c:c5:bd:53:99:d9: a2:bd:fd:3c:12:80:27:01:c9:00:52:32:b4:36:6f:70:21:c1: b8:93:07:b3:4f:9f:51:8e:45:02:da:2e:70:9e:58:35:2b:27: b8:b1:87:d0:d9:5b:79:31:dc:03:ac:91:45:67:d4:99:fe:65: d1:5c:ee:e7:cb:d9:96:56:1a:cf:dd:02:d4:1f:3a:d6:5d:51: e5:a8:16:dd:ff:14:b9:89:8d:00:58:7b:78:7a:97:5e:ff:fa: c4:31:3b:38:f2:80:ff:98:2b:5f:62:6c:b2:6b:c0:c9:ed:bc: ca:8a:90:67:91:f5:07:64:aa:65:ca:5b:d9:42:2c:a9:0d:50: a6:8a:90:b3:e4:f7:bd:99:10:56:2a:a6:47:3a:2a:3c:33:a7: 22:fe:11:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrKj3Mm9ceUHTztTvfBSduqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWU0NzRkNzk1OTdkYjc1ZDFmNGQ0OTkwMWI1MjU1OGJi ZjZhZjQwHhcNMjUxMTI4MTMwMzA5WhcNMjUxMTI5MTMwMzA5WjAzMTEwLwYDVQQD Eyg5NzY3ZmU2NTFjNWY0ZWJjNmVmYWMyOWE5ZjQ3NGUyZDUwNWI0MzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfb1AGRNmHY2kLpT5aTrpX6gmIkS F0vPAk5/5mdQgZdMk36pIKpMlbxynOIPBCrx4tEu41pST91ZEYxHvUMr4Khb71XL qsN+DLJhoVcw+MOyy9bBZAkNaftXYnU69E5BEezV2aKURDe1zkV4IbFBBphjPx6K j1txnLZHFKqYFonAoQ3dEfMBj7AZYZ3gOjppPDVHQnAJ2FysHY9s0OjMRaPUZNAH dTNk+ZIN23NOS7X2N5kakN889XU82RfKawovbmzzqNfRFNvGeG6ojcNjPFOTDtsZ JezLV1VyvtLUHVo4sZdhRte3uqks+VSsb9rkTi7X2hgeJPU0JNu1lIN4twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdn/mUcX068bvrCmp9HTi1QW0MlMB8GA1UdIwQY MBaAFB2uR015WX23XR9NSZAbUlWLv2r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2Et MjdmOTBiOGQ4NWU2LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2EtMjdmOTBiOGQ4NWU2 LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG7Y7GWvk OYNITJhcOLrLqQ24R4hryZ13DdifUxZyhKkEJJP87RkXgB4Zz7iZaCQ7NyLcZaxA eQOwJaxsnQZsvVU85Q69DeCYEs3GegOU7eJkuqlxrxo6d6vzvGYBj8qrvEuXGe6x LMW9U5nZor39PBKAJwHJAFIytDZvcCHBuJMHs0+fUY5FAtoucJ5YNSsnuLGH0Nlb eTHcA6yRRWfUmf5l0Vzu58vZllYaz90C1B861l1R5agW3f8UuYmNAFh7eHqXXv/6 xDE7OPKA/5grX2JssmvAye28yoqQZ5H1B2SqZcpb2UIsqQ1QpoqQs+T3vZkQViqm RzoqPDOnIv4RCg== -----END CERTIFICATE-----Generated at Fri Nov 28 14:42:04 2025 by rpki-client