This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft File: HagXE4U8mxjUENT_MJmrZo5ps_U.mft (raw, json) Hash identifier: F9aChl3931yOVqxcccgI/4ico4liF7tYNwZCInW6DC0= Subject key identifier: B6:50:AB:6A:FA:3B:CC:67:D2:54:71:7C:FC:AB:FB:78:7C:4C:BE:76 Authority key identifier: 1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5 Certificate issuer: /CN=1da81713853c9b18d410d4ff3099ab668e69b3f5 Certificate serial: 019B597757E2FB6520B80C8DB697C82F14B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft Manifest number: 0EB6 Signing time: Fri 26 Dec 2025 07:02:31 +0000 Manifest this update: Fri 26 Dec 2025 07:02:31 +0000 Manifest next update: Sat 27 Dec 2025 07:02:31 +0000 Files and hashes: 1: 2OZ_lpKGV37MXe5UjWqN6pJGN0I.roa (hash: /SKwcSk1TPHGfonvbfCcudrh/7BTbQOLo1nol958xWU=) 2: HagXE4U8mxjUENT_MJmrZo5ps_U.crl (hash: dxbnat3U/CvWR5diR0OIRmqciaACgrIwLjid8NI4LmA=) 3: pLab0TRjgeeCCYzGrOJ8eUnyoUY.roa (hash: eAiA3LScpHVLn6hm7FMcqWOD8wBahEBpe3kvRDh7XrA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:02:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:57:e2:fb:65:20:b8:0c:8d:b6:97:c8:2f:14:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1da81713853c9b18d410d4ff3099ab668e69b3f5 Validity Not Before: Dec 26 07:02:31 2025 GMT Not After : Dec 27 07:02:31 2025 GMT Subject: CN=b650ab6afa3bcc67d254717cfcabfb787c4cbe76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:ac:2f:39:b9:1c:60:02:53:3b:be:db:c1:f9: c2:a7:e2:eb:68:1a:01:9f:a2:15:bf:46:de:2a:83: 28:30:76:db:4f:d4:3a:37:8c:f0:68:f0:16:90:4b: 9f:a2:ce:7e:32:26:b9:d9:c6:a8:ca:71:99:c1:81: 22:f3:d8:19:98:31:26:15:08:1e:93:8b:e4:c0:5e: bb:23:a8:dc:dc:e3:3e:83:ff:6a:94:f1:51:8d:e3: 6e:89:b7:e4:cc:3b:41:aa:30:83:f6:26:e5:60:78: 5f:d7:ff:be:59:25:9d:80:65:f0:8e:17:d3:fb:38: 30:81:ca:99:8c:24:a1:6f:2a:23:d9:ff:52:88:fb: 41:da:6a:23:9d:73:1a:3a:27:48:36:e1:a2:4d:68: 2f:3b:8f:9c:0b:b8:4d:cd:9e:4b:c7:10:9e:36:f4: ec:6e:bf:1f:eb:5b:d9:84:d9:72:7c:62:cf:e0:23: 3d:43:c0:9c:12:6a:6d:68:fe:67:80:b4:0b:57:d9: 80:a8:8f:db:6d:cd:d8:f9:ea:15:76:19:c7:2a:ae: 3a:f7:c7:1c:02:f5:4d:63:cc:9e:54:27:09:5b:43: 72:82:74:9b:8e:94:f7:92:e3:c9:9d:cd:ed:13:71: ed:0e:e8:86:b4:b7:f5:fe:e7:b1:2a:99:fa:01:4f: 41:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:50:AB:6A:FA:3B:CC:67:D2:54:71:7C:FC:AB:FB:78:7C:4C:BE:76 X509v3 Authority Key Identifier: keyid:1D:A8:17:13:85:3C:9B:18:D4:10:D4:FF:30:99:AB:66:8E:69:B3:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HagXE4U8mxjUENT_MJmrZo5ps_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/d29fe7-8c22-4aaa-b8d6-660f39f64316/1/HagXE4U8mxjUENT_MJmrZo5ps_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:d7:68:12:bb:57:47:05:a7:32:fd:b7:0a:ce:f4:6e:2e:d8: 1c:d7:93:38:e9:be:f1:28:f2:4f:dd:4b:25:71:1a:4b:10:95: a5:4a:be:d4:75:3c:79:06:d5:00:79:86:2b:3e:45:c6:d0:dc: cb:bf:d5:40:05:23:b4:86:2e:10:2f:a0:8e:58:3f:0f:5a:86: 5a:06:46:b5:ea:e4:09:44:1c:e3:56:82:bd:52:7a:56:a9:13: 68:a5:22:8b:44:40:48:6f:b6:1e:16:77:20:bc:fb:e1:ff:28: 2b:08:f2:49:7c:7f:11:58:c5:39:19:e5:38:dc:f8:ac:73:26: cd:78:e1:d4:94:21:06:95:86:a6:f2:cd:bc:f6:db:4a:a5:98: 56:3e:e3:0c:e3:3c:66:3f:eb:91:57:9f:de:e0:38:a2:44:e8: 9e:ab:7e:10:4f:5b:34:ba:2c:38:e8:b0:fd:8e:d6:03:a0:09: 49:a2:2a:8c:60:09:42:fd:28:a8:d5:fd:0a:80:d2:21:89:d0: 3c:c7:23:de:fe:cb:c4:45:a6:a4:2c:ff:b2:c7:45:1a:28:e1: f3:e5:c3:af:2c:f2:d8:d0:de:01:89:67:76:8b:d0:ad:80:c8: 69:2f:7d:fb:33:39:5c:4d:23:58:a8:fb:57:8f:33:49:a8:13: 16:7d:93:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd1fi+2UguAyNtpfILxS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYTgxNzEzODUzYzliMThkNDEwZDRmZjMwOTlhYjY2OGU2 OWIzZjUwHhcNMjUxMjI2MDcwMjMxWhcNMjUxMjI3MDcwMjMxWjAzMTEwLwYDVQQD EyhiNjUwYWI2YWZhM2JjYzY3ZDI1NDcxN2NmY2FiZmI3ODdjNGNiZTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9KwvObkcYAJTO77bwfnCp+LraBoB n6IVv0beKoMoMHbbT9Q6N4zwaPAWkEufos5+Mia52caoynGZwYEi89gZmDEmFQge k4vkwF67I6jc3OM+g/9qlPFRjeNuibfkzDtBqjCD9iblYHhf1/++WSWdgGXwjhfT +zgwgcqZjCShbyoj2f9SiPtB2mojnXMaOidINuGiTWgvO4+cC7hNzZ5LxxCeNvTs br8f61vZhNlyfGLP4CM9Q8CcEmptaP5ngLQLV9mAqI/bbc3Y+eoVdhnHKq4698cc AvVNY8yeVCcJW0NygnSbjpT3kuPJnc3tE3HtDuiGtLf1/uexKpn6AU9B0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZQq2r6O8xn0lRxfPyr+3h8TL52MB8GA1UdIwQY MBaAFB2oFxOFPJsY1BDU/zCZq2aOabP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kMjlmZTctOGMyMi00YWFhLWI4ZDYt NjYwZjM5ZjY0MzE2LzEvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9kMjlmZTctOGMyMi00YWFhLWI4ZDYtNjYwZjM5ZjY0MzE2 LzEvSGFnWEU0VThteGpVRU5UX01KbXJabzVwc19VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0ddoErtX RwWnMv23Cs70bi7YHNeTOOm+8SjyT91LJXEaSxCVpUq+1HU8eQbVAHmGKz5FxtDc y7/VQAUjtIYuEC+gjlg/D1qGWgZGterkCUQc41aCvVJ6VqkTaKUii0RASG+2HhZ3 ILz74f8oKwjySXx/EVjFORnlONz4rHMmzXjh1JQhBpWGpvLNvPbbSqWYVj7jDOM8 Zj/rkVef3uA4okTonqt+EE9bNLosOOiw/Y7WA6AJSaIqjGAJQv0oqNX9CoDSIYnQ PMcj3v7LxEWmpCz/ssdFGijh8+XDryzy2NDeAYlndovQrYDIaS99+zM5XE0jWKj7 V48zSagTFn2T9w== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:22 2025 by rpki-client