This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft File: HANEzHl26gFSj9EefFpmiu_jHcs.mft (raw, json) Hash identifier: CDtJ/Y+NQJHt3wbtJOE0Zoq6uwUxuRYDkppKqdcK7x8= Subject key identifier: A5:CD:24:C4:DE:E8:55:F1:C7:A7:A4:82:75:A7:6E:3C:9E:5E:16:29 Authority key identifier: 1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB Certificate issuer: /CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb Certificate serial: 019B19BC5501C0C0F63635C09376043FA808 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft Manifest number: 03FD Signing time: Sat 13 Dec 2025 22:02:11 +0000 Manifest this update: Sat 13 Dec 2025 22:02:11 +0000 Manifest next update: Sun 14 Dec 2025 22:02:11 +0000 Files and hashes: 1: HANEzHl26gFSj9EefFpmiu_jHcs.crl (hash: X/ZfGeKD48ISPXV5HRd0vZYDYp2T9T3cLQQW7wBBB1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:55:01:c0:c0:f6:36:35:c0:93:76:04:3f:a8:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c0344cc7976ea01528fd11e7c5a668aefe31dcb Validity Not Before: Dec 13 22:02:11 2025 GMT Not After : Dec 14 22:02:11 2025 GMT Subject: CN=a5cd24c4dee855f1c7a7a48275a76e3c9e5e1629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:60:ae:f2:c1:43:34:aa:53:5f:47:fb:45:50: f5:e7:bc:ef:84:7c:95:0d:70:8e:f1:a5:b4:df:11: 30:b2:f5:b8:da:05:18:e5:21:56:08:4b:b8:0d:92: bf:c9:89:a6:25:83:32:12:d6:be:ad:4a:15:b6:89: 23:6f:59:d6:03:e1:48:e3:22:ef:81:23:b6:0c:93: 57:19:2f:dd:ec:72:f2:dc:6a:2d:9b:3e:5b:b6:a4: c1:76:6e:87:24:9a:bf:be:ef:5e:64:c9:b4:ae:e5: fd:af:ca:ba:92:db:40:83:2e:c3:4d:a9:33:1f:32: 75:16:17:e8:83:9d:0b:3c:a9:d1:75:cf:8c:dd:15: 95:40:71:98:7a:b4:5c:eb:3d:65:5c:07:94:80:f6: de:e8:0d:f3:ed:2d:97:1d:48:c0:79:63:79:69:7c: 43:2a:ec:8c:d5:a8:a5:84:26:97:57:a1:57:e0:16: c5:58:a6:4b:61:2f:ea:3a:92:1b:b3:20:77:e7:3f: 3b:e0:e4:a9:25:2e:db:8d:27:fa:97:f6:11:47:5b: d5:f3:e1:90:3c:13:ae:7b:9b:e3:8b:2a:e2:ee:f8: 40:ac:1e:1b:3f:ff:76:5d:2e:80:0a:33:25:73:d9: bd:02:87:5e:39:2b:8a:f5:01:87:cd:ba:68:f2:78: 11:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CD:24:C4:DE:E8:55:F1:C7:A7:A4:82:75:A7:6E:3C:9E:5E:16:29 X509v3 Authority Key Identifier: keyid:1C:03:44:CC:79:76:EA:01:52:8F:D1:1E:7C:5A:66:8A:EF:E3:1D:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HANEzHl26gFSj9EefFpmiu_jHcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8f0f8-a96c-429f-9de6-bdf204247c4f/1/HANEzHl26gFSj9EefFpmiu_jHcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:1c:af:9f:72:14:b6:a5:c1:05:44:b1:e9:1d:47:46:cd:c3: 8c:ed:9c:c3:65:6f:51:63:59:17:6c:e0:c4:19:03:66:80:da: f6:9f:d4:b0:67:b3:41:5b:b5:bc:7a:1c:e7:54:db:03:bc:fd: 8d:0a:90:14:e1:d7:ec:1e:40:55:41:53:d8:13:2b:90:bc:bb: 8a:bd:01:38:ff:fc:9b:b6:fc:70:0f:ff:23:39:fd:d0:05:65: fb:5a:6a:1a:15:35:db:f9:4f:8f:45:0f:68:0e:36:aa:23:31: 86:a2:76:6e:10:13:e1:9f:a5:1a:11:30:4e:56:76:2d:e4:53: f3:4d:7d:1f:02:e8:fb:94:04:ef:9c:3e:8a:06:6c:a7:f6:ba: 6c:b8:b9:08:1e:7f:f1:c5:8e:00:7d:60:51:47:4d:73:cf:e8: 92:5c:0e:b4:4e:fe:ca:2b:a9:e7:25:d2:df:68:b5:3b:de:2f: 61:b3:f8:fa:74:db:b8:d3:38:95:af:3f:a9:15:11:93:1e:1a: 55:ab:3c:d2:a0:dc:e5:91:ed:77:2c:91:82:52:6b:42:e2:31: b6:53:e3:24:9b:f2:8c:3e:6c:11:53:db:a3:55:df:dd:44:01: a8:07:c9:38:f1:f1:fe:fc:43:23:36:c3:6e:ac:bc:6f:2f:3e: 8d:e2:f4:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvFUBwMD2NjXAk3YEP6gIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDM0NGNjNzk3NmVhMDE1MjhmZDExZTdjNWE2NjhhZWZl MzFkY2IwHhcNMjUxMjEzMjIwMjExWhcNMjUxMjE0MjIwMjExWjAzMTEwLwYDVQQD EyhhNWNkMjRjNGRlZTg1NWYxYzdhN2E0ODI3NWE3NmUzYzllNWUxNjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGCu8sFDNKpTX0f7RVD157zvhHyV DXCO8aW03xEwsvW42gUY5SFWCEu4DZK/yYmmJYMyEta+rUoVtokjb1nWA+FI4yLv gSO2DJNXGS/d7HLy3Gotmz5btqTBdm6HJJq/vu9eZMm0ruX9r8q6kttAgy7DTakz HzJ1Fhfog50LPKnRdc+M3RWVQHGYerRc6z1lXAeUgPbe6A3z7S2XHUjAeWN5aXxD KuyM1ailhCaXV6FX4BbFWKZLYS/qOpIbsyB35z874OSpJS7bjSf6l/YRR1vV8+GQ PBOue5vjiyri7vhArB4bP/92XS6ACjMlc9m9AodeOSuK9QGHzbpo8ngRqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXNJMTe6FXxx6ekgnWnbjyeXhYpMB8GA1UdIwQY MBaAFBwDRMx5duoBUo/RHnxaZorv4x3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFORXpIbDI2Z0ZTajlFZWZGcG1pdV9qSGNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iOGYwZjgtYTk2Yy00MjlmLTlkZTYt YmRmMjA0MjQ3YzRmLzEvSEFORXpIbDI2Z0ZTajlFZWZGcG1pdV9qSGNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9iOGYwZjgtYTk2Yy00MjlmLTlkZTYtYmRmMjA0MjQ3YzRm LzEvSEFORXpIbDI2Z0ZTajlFZWZGcG1pdV9qSGNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxxyvn3IU tqXBBUSx6R1HRs3DjO2cw2VvUWNZF2zgxBkDZoDa9p/UsGezQVu1vHoc51TbA7z9 jQqQFOHX7B5AVUFT2BMrkLy7ir0BOP/8m7b8cA//Izn90AVl+1pqGhU12/lPj0UP aA42qiMxhqJ2bhAT4Z+lGhEwTlZ2LeRT8019HwLo+5QE75w+igZsp/a6bLi5CB5/ 8cWOAH1gUUdNc8/oklwOtE7+yiup5yXS32i1O94vYbP4+nTbuNM4la8/qRURkx4a Vas80qDc5ZHtdyyRglJrQuIxtlPjJJvyjD5sEVPbo1Xf3UQBqAfJOPHx/vxDIzbD bqy8by8+jeL0/A== -----END CERTIFICATE-----Generated at Sun Dec 14 00:05:51 2025 by rpki-client