This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json) Hash identifier: WYqgujjulvZpNqDBvby0NhXypU9RnKyv/WrLSoVQUhg= Subject key identifier: B9:E0:63:E1:93:35:7F:A6:DA:A8:7E:7E:51:22:33:4A:F8:D6:D9:EF Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5 Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5 Certificate serial: 019AF540B54F578A797ADBBB8DEBBA3A865D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft Manifest number: 1470 Signing time: Sat 06 Dec 2025 20:00:49 +0000 Manifest this update: Sat 06 Dec 2025 20:00:49 +0000 Manifest next update: Sun 07 Dec 2025 20:00:49 +0000 Files and hashes: 1: ObLj8Es3CGwudgx4z3Eal1DaMsg.roa (hash: OBOYU0pVuU2YZL5sdRS5axOYzVZesgjz4ueFKZ8ujls=) 2: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: Ewao6r3ggKkFNkQOCCZs0GCV8Zdh7LNzIJJRlnLSG+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:b5:4f:57:8a:79:7a:db:bb:8d:eb:ba:3a:86:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5 Validity Not Before: Dec 6 20:00:49 2025 GMT Not After : Dec 7 20:00:49 2025 GMT Subject: CN=b9e063e193357fa6daa87e7e5122334af8d6d9ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d6:4f:1b:bd:29:22:7c:2a:71:1e:59:c0:6a: 31:28:00:61:99:00:f5:6a:32:a4:67:3f:af:1c:e0: 35:7c:61:81:b2:83:38:6b:90:f9:b2:da:15:98:82: 99:82:f8:5b:6c:32:cb:9f:09:a1:ac:18:0a:eb:ed: 9f:0c:61:91:fc:64:52:56:c9:01:57:4d:a8:1c:90: c2:92:67:a1:64:43:75:e7:32:5f:ae:a6:91:b6:ca: a2:a0:9f:9d:fc:2d:bc:db:16:bf:cb:70:30:24:79: 23:61:ad:4c:2c:f1:7d:f3:71:51:1a:9f:54:62:37: 3f:7a:f5:6b:a9:02:d9:c7:89:77:25:64:0a:f7:5e: 36:bd:a4:a1:82:59:82:25:49:fa:d6:eb:cb:2c:ba: cc:d1:1f:57:02:c2:d6:5b:17:01:b4:01:3a:c5:a6: f9:5a:5a:08:58:b9:35:38:0d:81:27:ab:20:58:fe: 53:c8:d2:d3:15:fb:94:20:62:0b:3a:30:5a:53:91: 9f:fb:e7:19:92:d1:b6:77:2c:e8:36:12:7a:bf:8c: d5:cc:c6:84:0e:a3:0e:48:0f:33:03:e5:4d:81:ec: 17:37:19:ea:05:5c:c3:c7:ff:2d:5d:ec:f1:d6:25: e1:8b:e3:5b:b3:d4:ab:f0:68:e6:d3:4c:30:72:d3: 5e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E0:63:E1:93:35:7F:A6:DA:A8:7E:7E:51:22:33:4A:F8:D6:D9:EF X509v3 Authority Key Identifier: keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:e1:ef:6a:9b:08:8a:1e:46:e8:eb:cf:c6:1d:91:2a:5e:eb: 5e:73:72:08:c9:94:16:58:70:cf:9b:9d:61:4b:59:3b:d5:6c: a2:36:91:b6:cb:06:3e:62:64:f3:f8:07:bd:02:b9:30:c0:9c: 02:2b:48:a7:a0:5f:95:3d:9f:3c:5c:b5:e4:f5:1e:19:bc:2d: 1e:dd:75:4b:d7:bb:0c:33:6f:bb:a9:97:89:e9:58:19:26:42: 2e:7f:05:82:54:c8:f3:3a:57:5e:90:1e:6e:15:b7:07:6e:d5: 53:e8:fe:13:b0:78:f0:61:e2:6a:1e:1e:5e:4e:dc:54:2f:67: ab:90:17:23:29:82:99:27:87:74:77:e0:13:24:3a:b8:4b:b8: 83:f5:6f:a2:6d:b6:61:0d:e6:90:b2:9c:67:53:14:f8:24:12: f2:7d:ae:4d:a8:78:c1:bf:63:de:44:b2:4a:b0:46:88:85:e1: 1e:9e:91:30:8e:fd:1d:e6:4b:5f:09:e1:59:27:19:fc:ac:ac: 11:eb:d2:00:2c:2d:3e:6a:6d:06:75:4b:49:b3:dd:01:bb:d2: 38:1d:ed:a9:59:e6:38:4a:13:92:bb:73:1b:b2:60:59:cd:cf: 97:69:fc:a7:a2:8f:c4:72:10:58:20:35:2e:6d:0b:3a:d8:15: 4b:0d:10:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QLVPV4p5etu7jeu6OoZdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMTZhNWZhYzY1YWM1ZTljNWViYmZlZDcxNTE4Y2FlMGMx MzExYzUwHhcNMjUxMjA2MjAwMDQ5WhcNMjUxMjA3MjAwMDQ5WjAzMTEwLwYDVQQD EyhiOWUwNjNlMTkzMzU3ZmE2ZGFhODdlN2U1MTIyMzM0YWY4ZDZkOWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NZPG70pInwqcR5ZwGoxKABhmQD1 ajKkZz+vHOA1fGGBsoM4a5D5stoVmIKZgvhbbDLLnwmhrBgK6+2fDGGR/GRSVskB V02oHJDCkmehZEN15zJfrqaRtsqioJ+d/C282xa/y3AwJHkjYa1MLPF983FRGp9U Yjc/evVrqQLZx4l3JWQK9142vaShglmCJUn61uvLLLrM0R9XAsLWWxcBtAE6xab5 WloIWLk1OA2BJ6sgWP5TyNLTFfuUIGILOjBaU5Gf++cZktG2dyzoNhJ6v4zVzMaE DqMOSA8zA+VNgewXNxnqBVzDx/8tXezx1iXhi+Nbs9Sr8Gjm00wwctNeTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLngY+GTNX+m2qh+flEiM0r41tnvMB8GA1UdIwQY MBaAFIoWpfrGWsXpxeu/7XFRjK4MExHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUt NGNjMDFiNmY4ODQ3LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUtNGNjMDFiNmY4ODQ3 LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmeHvapsI ih5G6OvPxh2RKl7rXnNyCMmUFlhwz5udYUtZO9VsojaRtssGPmJk8/gHvQK5MMCc AitIp6BflT2fPFy15PUeGbwtHt11S9e7DDNvu6mXielYGSZCLn8FglTI8zpXXpAe bhW3B27VU+j+E7B48GHiah4eXk7cVC9nq5AXIymCmSeHdHfgEyQ6uEu4g/Vvom22 YQ3mkLKcZ1MU+CQS8n2uTah4wb9j3kSySrBGiIXhHp6RMI79HeZLXwnhWScZ/Kys EevSACwtPmptBnVLSbPdAbvSOB3tqVnmOEoTkrtzG7JgWc3Pl2n8p6KPxHIQWCA1 Lm0LOtgVSw0Qhw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:44:57 2025 by rpki-client