This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft File: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft (raw, json) Hash identifier: VcT0iWIO2IbWzRmyYbXj9TVo1UKfEYu/E0cRQvp5lhc= Subject key identifier: 90:91:71:F7:95:E8:D5:B2:86:EE:45:D2:AA:90:3E:14:64:15:A9:AD Authority key identifier: 1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95 Certificate issuer: /CN=1daf46a40c246d6540d992c321b1cc3623d65995 Certificate serial: 019B1201AA2C1F3DBAA7F2371FD597B13C4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft Manifest number: 1777 Signing time: Fri 12 Dec 2025 10:00:57 +0000 Manifest this update: Fri 12 Dec 2025 10:00:57 +0000 Manifest next update: Sat 13 Dec 2025 10:00:57 +0000 Files and hashes: 1: Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl (hash: LUbw2pxeKIzIPFcJsoAbCk8FWGO/191Ra7ayCQ+Hi/E=) 2: Opi30sdjrG9y6hz36Z42PxWTDUU.roa (hash: WJCHzKFTRrVvP5KeR+6KRTbsCT7S3wqPOsU3B9ouBfA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:01:aa:2c:1f:3d:ba:a7:f2:37:1f:d5:97:b1:3c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1daf46a40c246d6540d992c321b1cc3623d65995 Validity Not Before: Dec 12 10:00:57 2025 GMT Not After : Dec 13 10:00:57 2025 GMT Subject: CN=909171f795e8d5b286ee45d2aa903e146415a9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7d:d4:2e:b1:7d:33:96:7c:80:13:c2:ff:3f: 7f:f4:41:91:d1:85:9d:c2:69:40:84:f6:41:f5:f5: 47:97:8b:41:93:8a:14:f6:2b:3e:73:19:7e:a2:0c: 0d:02:c1:1c:aa:fc:b5:76:b5:de:c2:f9:4f:07:76: bf:bf:f4:23:14:50:09:51:32:2c:23:ac:f1:53:dd: db:dc:c2:c6:d4:f3:9d:0c:08:37:b8:cb:5a:e3:a4: 32:0d:77:2d:11:95:6e:00:5c:69:63:7e:03:d7:84: 56:20:aa:2d:5b:47:d3:8c:d6:98:3b:b8:57:03:c7: e9:be:a2:6b:b5:1d:cd:fd:b4:72:0a:d2:b3:36:7e: 41:23:eb:52:c0:7e:37:af:4a:81:f9:5b:b3:a4:e8: e4:fe:d3:72:6d:23:2b:46:17:56:64:db:c4:17:27: b2:2f:d0:18:84:30:c8:91:39:54:ae:cb:ef:47:51: ab:ba:88:31:89:65:3f:a2:97:34:1b:36:51:44:be: 1d:6f:73:31:77:6f:e9:bf:41:75:ce:23:90:f7:9c: 40:6f:cc:a1:0a:65:f8:1e:ec:73:f5:bc:ac:35:f7: 38:71:31:e5:d3:fe:06:3a:51:02:d1:64:52:da:9b: 3b:c9:e1:43:77:27:9c:34:af:15:f4:b2:eb:a5:3e: 85:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:91:71:F7:95:E8:D5:B2:86:EE:45:D2:AA:90:3E:14:64:15:A9:AD X509v3 Authority Key Identifier: keyid:1D:AF:46:A4:0C:24:6D:65:40:D9:92:C3:21:B1:CC:36:23:D6:59:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/44c0ef-5da6-4ff2-b5ef-79f048bd2a7a/1/Ha9GpAwkbWVA2ZLDIbHMNiPWWZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:10:f9:09:73:d2:0c:ea:25:3d:ae:80:5f:82:81:d5:9e:fe: 8d:0b:a3:6e:62:5b:af:47:ed:19:40:d6:b3:56:ca:e0:9b:2b: b2:f6:be:cd:09:7d:51:ed:f3:36:d6:6d:b6:eb:97:97:5c:61: 56:8c:50:07:dd:28:b9:eb:f0:a7:e2:f3:58:66:b9:7b:ee:6f: 88:7a:7b:71:4e:1b:eb:6b:8a:46:8f:90:f6:ec:7f:03:d4:0c: 91:a3:4c:8d:9f:80:8a:1d:d2:97:31:0a:73:c1:9a:e5:26:08: 75:5b:b1:f0:37:33:4e:69:17:63:b9:b3:09:75:85:60:61:ef: b2:ae:3e:a3:c5:40:bd:94:0c:a3:c3:ea:7d:59:6d:21:a6:36: 5b:b3:5c:30:6e:e2:2b:98:63:d3:74:a3:ce:52:a2:39:71:9b: 90:c7:7d:86:d6:63:83:51:00:09:cc:ee:d9:39:74:9f:2a:57: 26:fa:44:0c:0b:68:f5:c2:3e:5e:4a:ae:22:73:57:00:99:8a: 7c:1d:79:27:06:d8:b4:df:d1:e8:33:16:4d:57:ef:17:c2:ec: 36:e2:fa:74:1f:f5:a6:de:dd:f0:93:6e:92:2f:ac:1d:da:8a: e0:c5:04:87:7e:5b:2d:a0:03:39:33:cd:4f:66:2b:1c:6a:2d: 07:48:89:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAaosHz26p/I3H9WXsTxOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWY0NmE0MGMyNDZkNjU0MGQ5OTJjMzIxYjFjYzM2MjNk NjU5OTUwHhcNMjUxMjEyMTAwMDU3WhcNMjUxMjEzMTAwMDU3WjAzMTEwLwYDVQQD Eyg5MDkxNzFmNzk1ZThkNWIyODZlZTQ1ZDJhYTkwM2UxNDY0MTVhOWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX3ULrF9M5Z8gBPC/z9/9EGR0YWd wmlAhPZB9fVHl4tBk4oU9is+cxl+ogwNAsEcqvy1drXewvlPB3a/v/QjFFAJUTIs I6zxU93b3MLG1POdDAg3uMta46QyDXctEZVuAFxpY34D14RWIKotW0fTjNaYO7hX A8fpvqJrtR3N/bRyCtKzNn5BI+tSwH43r0qB+VuzpOjk/tNybSMrRhdWZNvEFyey L9AYhDDIkTlUrsvvR1GruogxiWU/opc0GzZRRL4db3Mxd2/pv0F1ziOQ95xAb8yh CmX4Huxz9bysNfc4cTHl0/4GOlEC0WRS2ps7yeFDdyecNK8V9LLrpT6FTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCRcfeV6NWyhu5F0qqQPhRkFamtMB8GA1UdIwQY MBaAFB2vRqQMJG1lQNmSwyGxzDYj1lmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80NGMwZWYtNWRhNi00ZmYyLWI1ZWYt NzlmMDQ4YmQyYTdhLzEvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS80NGMwZWYtNWRhNi00ZmYyLWI1ZWYtNzlmMDQ4YmQyYTdh LzEvSGE5R3BBd2tiV1ZBMlpMREliSE1OaVBXV1pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRD5CXPS DOolPa6AX4KB1Z7+jQujbmJbr0ftGUDWs1bK4Jsrsva+zQl9Ue3zNtZttuuXl1xh VoxQB90ouevwp+LzWGa5e+5viHp7cU4b62uKRo+Q9ux/A9QMkaNMjZ+Aih3SlzEK c8Ga5SYIdVux8DczTmkXY7mzCXWFYGHvsq4+o8VAvZQMo8PqfVltIaY2W7NcMG7i K5hj03SjzlKiOXGbkMd9htZjg1EACczu2Tl0nypXJvpEDAto9cI+XkquInNXAJmK fB15JwbYtN/R6DMWTVfvF8LsNuL6dB/1pt7d8JNuki+sHdqK4MUEh35bLaADOTPN T2YrHGotB0iJrw== -----END CERTIFICATE-----Generated at Fri Dec 12 11:52:59 2025 by rpki-client