This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json) Hash identifier: auXeV7nkRUdAVz9jBIPoabcXg/5s4vp8WJszca34eBE= Subject key identifier: BD:6E:91:B4:83:06:1A:47:A8:A4:BB:FB:73:7E:9E:09:CB:BA:D6:49 Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5 Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5 Certificate serial: 019B2B53D8B622C916787CF1764B39FFF61C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft Manifest number: 148C Signing time: Wed 17 Dec 2025 08:01:13 +0000 Manifest this update: Wed 17 Dec 2025 08:01:13 +0000 Manifest next update: Thu 18 Dec 2025 08:01:13 +0000 Files and hashes: 1: ObLj8Es3CGwudgx4z3Eal1DaMsg.roa (hash: OBOYU0pVuU2YZL5sdRS5axOYzVZesgjz4ueFKZ8ujls=) 2: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: 0ll91ZrbdUPxdHcr3SjYsDkuAzsWOYa8zbLbdyQwa2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 08:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:53:d8:b6:22:c9:16:78:7c:f1:76:4b:39:ff:f6:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5 Validity Not Before: Dec 17 08:01:13 2025 GMT Not After : Dec 18 08:01:13 2025 GMT Subject: CN=bd6e91b483061a47a8a4bbfb737e9e09cbbad649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:07:7d:29:4b:cf:dc:55:cc:87:86:42:47:c0: db:50:f0:0f:c5:b3:9a:14:62:de:75:c4:60:71:65: f2:e7:40:58:4b:2d:3f:7f:cb:3e:fc:c0:4c:63:af: 3b:2e:4d:b5:3f:7b:c7:ab:9b:cc:d5:9a:81:40:90: c3:6b:39:17:4f:05:22:1d:87:b1:88:a6:97:59:8d: 26:7a:5b:2e:b6:ec:ce:5c:2e:98:9e:d1:4d:bd:b1: 74:11:1f:bc:06:35:a3:39:bf:a9:93:93:93:3f:43: be:99:55:a7:3f:44:dd:77:48:f3:d9:a9:d0:b8:9e: 03:eb:7b:e7:ef:48:73:16:eb:2d:91:12:20:75:7b: 14:27:34:f2:ab:04:3b:eb:ad:8c:76:f5:aa:68:37: 7b:d1:f9:3d:86:e0:d2:a2:a5:90:26:0c:0a:27:b1: 94:1f:d0:e6:54:d1:16:e7:84:ec:5d:8a:35:e5:73: 43:ba:49:b6:53:ab:a4:26:28:14:21:07:57:6c:ee: 22:c7:5e:2b:80:b0:a0:47:ca:ed:63:82:2f:66:4c: 60:14:7d:cf:7a:4d:c5:3b:a3:61:d9:c7:21:7f:6b: f7:16:24:a0:1b:80:83:2f:de:cd:d4:de:20:d4:bd: f9:b3:57:2d:0c:6e:d4:3f:f8:7c:c9:3a:88:02:e9: c1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:6E:91:B4:83:06:1A:47:A8:A4:BB:FB:73:7E:9E:09:CB:BA:D6:49 X509v3 Authority Key Identifier: keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:b0:fc:78:62:76:87:89:62:f3:9e:66:04:97:c2:b3:46:78: 98:58:47:2f:44:74:74:8b:0f:a0:05:a2:86:e1:58:65:0d:43: e9:36:25:25:29:a8:64:21:d2:33:a8:93:b8:cc:fc:e6:7c:59: 52:a2:3e:24:0b:40:eb:22:df:31:43:4d:cf:79:23:25:c7:99: b7:4a:77:e4:90:c8:f8:71:cf:ea:86:be:1b:52:6b:a5:a9:2f: f0:a7:1b:1d:66:53:9a:ee:fa:99:3b:85:40:20:df:67:1a:c2: ef:fa:4d:66:cb:c6:7f:f5:56:b6:ba:8f:80:94:a3:63:2d:82: b3:af:9d:86:02:cc:44:73:29:94:91:07:46:6f:47:8b:4b:67: 1f:da:75:ca:b7:f5:c7:a3:aa:05:7a:bf:da:9c:08:d8:1d:43: 52:24:33:53:b6:d4:a0:25:17:fc:7c:c9:be:0c:85:47:48:6d: 8e:55:c5:3d:31:0f:72:5b:51:ae:1b:c8:12:2e:c3:76:29:61: d2:bf:0a:d5:11:c9:de:36:96:57:94:db:dd:aa:61:79:7b:9e: 62:b3:86:59:42:80:7f:59:28:20:94:88:b5:cb:40:7e:79:af: 66:ec:96:57:25:c9:80:5f:41:c2:a6:01:dc:81:09:4b:8e:4c: 57:71:36:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrU9i2IskWeHzxdks5//YcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMTZhNWZhYzY1YWM1ZTljNWViYmZlZDcxNTE4Y2FlMGMx MzExYzUwHhcNMjUxMjE3MDgwMTEzWhcNMjUxMjE4MDgwMTEzWjAzMTEwLwYDVQQD EyhiZDZlOTFiNDgzMDYxYTQ3YThhNGJiZmI3MzdlOWUwOWNiYmFkNjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwd9KUvP3FXMh4ZCR8DbUPAPxbOa FGLedcRgcWXy50BYSy0/f8s+/MBMY687Lk21P3vHq5vM1ZqBQJDDazkXTwUiHYex iKaXWY0melsutuzOXC6YntFNvbF0ER+8BjWjOb+pk5OTP0O+mVWnP0Tdd0jz2anQ uJ4D63vn70hzFustkRIgdXsUJzTyqwQ7662MdvWqaDd70fk9huDSoqWQJgwKJ7GU H9DmVNEW54TsXYo15XNDukm2U6ukJigUIQdXbO4ix14rgLCgR8rtY4IvZkxgFH3P ek3FO6Nh2cchf2v3FiSgG4CDL97N1N4g1L35s1ctDG7UP/h8yTqIAunBiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1ukbSDBhpHqKS7+3N+ngnLutZJMB8GA1UdIwQY MBaAFIoWpfrGWsXpxeu/7XFRjK4MExHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUt NGNjMDFiNmY4ODQ3LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUtNGNjMDFiNmY4ODQ3 LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLD8eGJ2 h4li855mBJfCs0Z4mFhHL0R0dIsPoAWihuFYZQ1D6TYlJSmoZCHSM6iTuMz85nxZ UqI+JAtA6yLfMUNNz3kjJceZt0p35JDI+HHP6oa+G1Jrpakv8KcbHWZTmu76mTuF QCDfZxrC7/pNZsvGf/VWtrqPgJSjYy2Cs6+dhgLMRHMplJEHRm9Hi0tnH9p1yrf1 x6OqBXq/2pwI2B1DUiQzU7bUoCUX/HzJvgyFR0htjlXFPTEPcltRrhvIEi7Ddilh 0r8K1RHJ3jaWV5Tb3apheXueYrOGWUKAf1koIJSItctAfnmvZuyWVyXJgF9BwqYB 3IEJS45MV3E2zg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:01:32 2025 by rpki-client