This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft File: HAkzrn59aIUNoxv6gb_KuLGFuMo.mft (raw, json) Hash identifier: Ehz5DhgOfQv0SAfxP6Ewif24rnv4l937LDfOH+nUyy8= Subject key identifier: 8B:DB:15:0C:42:6A:E7:02:88:B6:B0:D3:A7:E4:DC:6D:80:BE:39:26 Authority key identifier: 1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA Certificate issuer: /CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca Certificate serial: 019B597747FB19E464503B9F1B7351BFE7E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft Manifest number: 0E2A Signing time: Fri 26 Dec 2025 07:02:28 +0000 Manifest this update: Fri 26 Dec 2025 07:02:28 +0000 Manifest next update: Sat 27 Dec 2025 07:02:28 +0000 Files and hashes: 1: HAkzrn59aIUNoxv6gb_KuLGFuMo.crl (hash: IsWovLkKlO7Dk9yj+l8yaqOf2mlQG+1sXfWcWCo5vs8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:47:fb:19:e4:64:50:3b:9f:1b:73:51:bf:e7:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca Validity Not Before: Dec 26 07:02:28 2025 GMT Not After : Dec 27 07:02:28 2025 GMT Subject: CN=8bdb150c426ae70288b6b0d3a7e4dc6d80be3926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cf:f4:4d:9b:21:0e:84:42:14:df:88:26:8e: c4:48:3e:d7:97:76:99:6c:50:8e:62:5d:e5:3b:97: 98:36:22:49:57:f8:0f:70:57:96:87:5c:2c:cb:fe: 73:64:18:81:cd:d3:80:f3:d9:d2:ae:3e:0e:77:e2: da:fa:13:b5:61:27:78:e3:2e:fd:ad:89:f4:c7:ae: 2d:cc:a6:78:d6:23:0e:c6:ee:3d:41:0b:eb:33:68: 01:ab:ad:44:b1:c6:c4:10:87:db:fc:9e:55:8b:8f: b3:cc:d1:25:b6:38:b7:b8:3f:df:bf:d8:75:0b:3c: de:3e:43:e3:e4:e4:08:69:c5:16:0a:39:ca:f0:1c: d0:76:7e:06:4b:58:7a:f9:c2:51:49:a5:92:f0:39: 25:3c:ce:ae:81:f3:1f:90:17:f2:3d:84:b1:39:a4: d7:5a:b2:d1:74:7f:36:97:71:bd:46:d1:76:cd:4e: db:95:3c:01:39:5a:f3:7d:d3:7d:ae:c1:94:7e:58: ea:8e:ca:62:0c:78:ee:00:ec:8b:a6:74:15:fe:5e: 6d:da:1f:4a:25:0c:ab:f4:ef:91:dd:82:54:22:59: ff:81:b9:23:73:28:5b:2e:ee:36:7a:3c:1e:42:4c: 1a:97:bc:71:b9:26:ce:11:fc:d1:93:a9:b9:7a:7d: f0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:DB:15:0C:42:6A:E7:02:88:B6:B0:D3:A7:E4:DC:6D:80:BE:39:26 X509v3 Authority Key Identifier: keyid:1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:5b:ef:57:ca:3d:6a:4e:4c:8a:64:0f:cd:b1:96:01:86:3b: 8e:f2:e9:67:a2:0d:5e:44:b2:d2:6c:10:17:8d:9a:5a:2e:db: 80:1e:7c:7c:18:27:db:72:a7:09:b9:d3:c2:51:28:9f:d7:cb: 7c:c1:b6:e1:db:5a:10:06:02:88:e1:11:87:03:fb:68:72:0d: df:15:23:df:ad:9f:ba:ce:17:a5:27:9f:d2:ff:fa:98:3f:8e: 75:48:0d:ce:34:8b:df:2c:4a:28:8f:5c:a8:2b:3e:81:44:10: 2e:98:c5:9f:38:9d:87:8e:f6:fa:18:c6:c6:c7:ec:4d:26:ae: af:ec:80:94:28:e2:e3:51:b6:a4:2a:50:ec:f2:13:74:fa:db: 24:af:19:79:c9:67:7c:25:ad:a8:2a:a2:9d:ea:30:8b:0c:24: f3:1a:98:bc:28:15:ce:d9:e5:30:0f:39:bb:ac:f1:10:27:61: ec:a7:c8:14:48:cb:de:09:28:02:af:5d:89:8e:69:f3:f7:34: f1:80:fe:1e:35:fe:9a:52:b6:29:5e:78:cf:7a:04:05:b1:4e: b0:ee:0d:34:ad:c8:e0:41:63:e5:3c:b1:f7:9e:ab:9c:8b:80: 2e:5c:c4:3d:6b:31:a3:39:93:cd:0d:82:38:9b:08:04:fd:7f: ba:6c:5e:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZd0f7GeRkUDufG3NRv+fnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDkzM2FlN2U3ZDY4ODUwZGEzMWJmYTgxYmZjYWI4YjE4 NWI4Y2EwHhcNMjUxMjI2MDcwMjI4WhcNMjUxMjI3MDcwMjI4WjAzMTEwLwYDVQQD Eyg4YmRiMTUwYzQyNmFlNzAyODhiNmIwZDNhN2U0ZGM2ZDgwYmUzOTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M/0TZshDoRCFN+IJo7ESD7Xl3aZ bFCOYl3lO5eYNiJJV/gPcFeWh1wsy/5zZBiBzdOA89nSrj4Od+La+hO1YSd44y79 rYn0x64tzKZ41iMOxu49QQvrM2gBq61EscbEEIfb/J5Vi4+zzNEltji3uD/fv9h1 CzzePkPj5OQIacUWCjnK8BzQdn4GS1h6+cJRSaWS8DklPM6ugfMfkBfyPYSxOaTX WrLRdH82l3G9RtF2zU7blTwBOVrzfdN9rsGUfljqjspiDHjuAOyLpnQV/l5t2h9K JQyr9O+R3YJUIln/gbkjcyhbLu42ejweQkwal7xxuSbOEfzRk6m5en3wMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvbFQxCaucCiLaw06fk3G2AvjkmMB8GA1UdIwQY MBaAFBwJM65+fWiFDaMb+oG/yrixhbjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFrenJuNTlhSVVOb3h2NmdiX0t1TEdGdU1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82YTRjMWQtM2E1Ny00Mzg1LWE0NmEt MzZkMGQzNTlhMWUwLzEvSEFrenJuNTlhSVVOb3h2NmdiX0t1TEdGdU1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC82YTRjMWQtM2E1Ny00Mzg1LWE0NmEtMzZkMGQzNTlhMWUw LzEvSEFrenJuNTlhSVVOb3h2NmdiX0t1TEdGdU1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo1vvV8o9 ak5MimQPzbGWAYY7jvLpZ6INXkSy0mwQF42aWi7bgB58fBgn23KnCbnTwlEon9fL fMG24dtaEAYCiOERhwP7aHIN3xUj362fus4XpSef0v/6mD+OdUgNzjSL3yxKKI9c qCs+gUQQLpjFnzidh472+hjGxsfsTSaur+yAlCji41G2pCpQ7PITdPrbJK8Zecln fCWtqCqineowiwwk8xqYvCgVztnlMA85u6zxECdh7KfIFEjL3gkoAq9diY5p8/c0 8YD+HjX+mlK2KV54z3oEBbFOsO4NNK3I4EFj5Tyx956rnIuALlzEPWsxozmTzQ2C OJsIBP1/umxeTg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:24 2025 by rpki-client