This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft File: HAKBccHlLIrK1NspuS0hazMvAyA.mft (raw, json) Hash identifier: bLVq6gLn9/K7XDYzOHaolfjJNEttYaG45bamN/s7fkQ= Subject key identifier: F7:E2:F8:9A:71:18:F7:41:82:F3:CA:54:56:E3:70:EF:32:E6:F3:ED Authority key identifier: 1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20 Certificate issuer: /CN=1c028171c1e52c8acad4db29b92d216b332f0320 Certificate serial: 019B503C50694D6BF41BF733C480F40EAC91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft Manifest number: 0209 Signing time: Wed 24 Dec 2025 12:01:28 +0000 Manifest this update: Wed 24 Dec 2025 12:01:28 +0000 Manifest next update: Thu 25 Dec 2025 12:01:28 +0000 Files and hashes: 1: HAKBccHlLIrK1NspuS0hazMvAyA.crl (hash: z8cayWABp8mVAD0h2NC2kKXwVuXL4XCJLIh7Xt04ieY=) 2: XsdhFSN7DeTh4eI00BDD4_zttPw.roa (hash: tFKcPxfIMyOctJnt0bo6v620CjrP47cFED0TLnvjy0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:3c:50:69:4d:6b:f4:1b:f7:33:c4:80:f4:0e:ac:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c028171c1e52c8acad4db29b92d216b332f0320 Validity Not Before: Dec 24 12:01:28 2025 GMT Not After : Dec 25 12:01:28 2025 GMT Subject: CN=f7e2f89a7118f74182f3ca5456e370ef32e6f3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:d5:00:fe:51:86:2c:de:25:95:13:db:e2: 00:35:88:cf:54:f4:bf:4e:c5:53:40:4d:06:69:49: 52:82:38:fc:a9:b8:3f:ba:fd:a4:9c:73:70:e1:a5: ca:95:db:3c:9d:90:af:be:11:f4:38:da:7d:ed:a1: 23:a7:7d:ed:ac:7e:3f:82:4f:0f:c7:0e:d3:99:36: 1a:11:bd:a2:42:86:36:99:2e:fb:e7:4f:99:63:ac: 0d:20:30:2b:8e:d5:07:4c:fb:5d:43:81:5e:c4:fd: f6:ab:51:b7:90:cd:9f:ed:06:a5:65:9e:98:2d:2f: 76:61:05:e5:1d:5b:94:e9:f3:b5:38:88:23:03:19: 96:3a:d6:95:7e:92:a0:d9:a3:18:34:00:1e:9b:cb: 71:2a:ff:03:e6:71:a0:1c:47:59:74:49:3b:15:8c: d0:99:50:2d:f0:3b:44:a4:3d:18:14:f4:f7:e2:38: 68:89:7e:ed:99:4a:ee:02:7e:3f:a6:a0:35:68:2a: 85:a0:c2:fc:95:0b:40:7a:1b:b8:7f:53:ba:6e:78: 7c:08:1f:a3:6d:10:ec:84:f2:e2:fd:dc:4a:0c:1c: 96:03:d3:45:09:74:55:84:0a:02:4e:68:d3:aa:94: 2f:a1:d1:5f:9a:8a:13:7f:6c:67:bf:ff:6a:44:0a: 5a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E2:F8:9A:71:18:F7:41:82:F3:CA:54:56:E3:70:EF:32:E6:F3:ED X509v3 Authority Key Identifier: keyid:1C:02:81:71:C1:E5:2C:8A:CA:D4:DB:29:B9:2D:21:6B:33:2F:03:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAKBccHlLIrK1NspuS0hazMvAyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ff63ce-cf20-43e3-ad3f-64d1b2d56e95/1/HAKBccHlLIrK1NspuS0hazMvAyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:83:0b:db:64:72:b8:1a:3d:6b:53:8e:74:a4:b9:69:13:0e: 80:b2:06:b8:9a:b8:3f:78:c7:01:0b:40:36:35:42:d7:57:85: d7:d0:04:8b:28:6d:38:e3:cd:b1:4c:b2:a3:6c:78:fd:04:f9: 32:d0:98:0b:2f:40:95:f2:16:30:38:4a:55:cd:39:2b:da:24: cf:59:d8:87:a2:f1:69:1a:91:8d:db:a7:8a:e2:fe:56:3f:88: ad:0e:c2:f9:a0:86:1a:51:14:76:a8:a4:0f:0a:15:48:81:d4: fa:83:55:57:1c:d4:9b:03:aa:a2:a5:96:c0:e0:a7:3f:bb:7d: c2:46:e5:cd:f4:d5:40:a5:a3:69:d1:58:0f:dc:b1:d1:28:a6: 74:07:51:89:1f:fa:1e:fa:9b:11:3b:3b:47:67:01:81:9b:36: 93:72:92:58:ea:72:21:51:47:c8:3f:03:fd:9d:b0:70:5e:af: 58:7d:b3:51:a4:75:ab:80:1c:b4:20:aa:2d:68:a1:0b:59:ea: fd:d7:6a:bc:77:e8:50:93:ff:ae:54:78:c7:b8:31:f0:e1:5f: 88:ab:44:c3:93:75:25:4e:d6:da:0f:23:e0:2f:7f:55:91:35: d7:64:d2:74:bb:92:ee:39:48:49:52:d2:92:2d:6e:5c:88:0c: 7d:40:26:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtQPFBpTWv0G/czxID0DqyRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDI4MTcxYzFlNTJjOGFjYWQ0ZGIyOWI5MmQyMTZiMzMy ZjAzMjAwHhcNMjUxMjI0MTIwMTI4WhcNMjUxMjI1MTIwMTI4WjAzMTEwLwYDVQQD EyhmN2UyZjg5YTcxMThmNzQxODJmM2NhNTQ1NmUzNzBlZjMyZTZmM2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHjVAP5RhizeJZUT2+IANYjPVPS/ TsVTQE0GaUlSgjj8qbg/uv2knHNw4aXKlds8nZCvvhH0ONp97aEjp33trH4/gk8P xw7TmTYaEb2iQoY2mS7750+ZY6wNIDArjtUHTPtdQ4FexP32q1G3kM2f7QalZZ6Y LS92YQXlHVuU6fO1OIgjAxmWOtaVfpKg2aMYNAAem8txKv8D5nGgHEdZdEk7FYzQ mVAt8DtEpD0YFPT34jhoiX7tmUruAn4/pqA1aCqFoML8lQtAehu4f1O6bnh8CB+j bRDshPLi/dxKDByWA9NFCXRVhAoCTmjTqpQvodFfmooTf2xnv/9qRApa/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfi+JpxGPdBgvPKVFbjcO8y5vPtMB8GA1UdIwQY MBaAFBwCgXHB5SyKytTbKbktIWszLwMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2Yt NjRkMWIyZDU2ZTk1LzEvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9mZjYzY2UtY2YyMC00M2UzLWFkM2YtNjRkMWIyZDU2ZTk1 LzEvSEFLQmNjSGxMSXJLMU5zcHVTMGhhek12QXlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIML22Ry uBo9a1OOdKS5aRMOgLIGuJq4P3jHAQtANjVC11eF19AEiyhtOOPNsUyyo2x4/QT5 MtCYCy9AlfIWMDhKVc05K9okz1nYh6LxaRqRjduniuL+Vj+IrQ7C+aCGGlEUdqik DwoVSIHU+oNVVxzUmwOqoqWWwOCnP7t9wkblzfTVQKWjadFYD9yx0SimdAdRiR/6 HvqbETs7R2cBgZs2k3KSWOpyIVFHyD8D/Z2wcF6vWH2zUaR1q4ActCCqLWihC1nq /ddqvHfoUJP/rlR4x7gx8OFfiKtEw5N1JU7W2g8j4C9/VZE112TSdLuS7jlISVLS ki1uXIgMfUAmhw== -----END CERTIFICATE-----Generated at Wed Dec 24 15:42:00 2025 by rpki-client