This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft File: HApvbzqa4dpeW-h1L6sY3rKLphQ.mft (raw, json) Hash identifier: tXF69cF1Ye4C47fY86+2qWhoZG8wvDt93vXGkBBtti8= Subject key identifier: 4E:E2:A8:78:E1:2E:FE:79:90:D7:14:3E:5C:C3:26:A9:2E:F5:81:09 Authority key identifier: 1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14 Certificate issuer: /CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614 Certificate serial: 019B3B34B7232CF66D3646178EBEEE198B7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft Manifest number: 023D Signing time: Sat 20 Dec 2025 10:01:08 +0000 Manifest this update: Sat 20 Dec 2025 10:01:08 +0000 Manifest next update: Sun 21 Dec 2025 10:01:08 +0000 Files and hashes: 1: HApvbzqa4dpeW-h1L6sY3rKLphQ.crl (hash: 9yPFNjM6EZUXkU6p3vq/2DzJ1c9T+TTGA8psYXHR3Js=) 2: NOVPbDKVr5wjUcGbKvJrJzmVhnw.roa (hash: wYz2fmfXZeLSC/FkxxCfmscRdqW9p4YQgw0dEkDtFvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:b7:23:2c:f6:6d:36:46:17:8e:be:ee:19:8b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c0a6f6f3a9ae1da5e5be8752fab18deb28ba614 Validity Not Before: Dec 20 10:01:08 2025 GMT Not After : Dec 21 10:01:08 2025 GMT Subject: CN=4ee2a878e12efe7990d7143e5cc326a92ef58109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b2:71:71:d0:14:33:8e:ab:c1:04:c0:6e:4f: ae:15:15:dd:36:16:ef:42:47:d0:c8:12:2d:5f:d5: 18:fa:25:b4:76:fc:d4:6e:7f:1d:01:07:8e:df:0f: 26:3c:b9:99:89:64:86:c7:4d:6e:7e:29:02:11:03: 1c:1b:7e:e9:40:25:bf:c8:16:a8:c2:21:51:26:d4: ef:0a:11:26:90:dd:9a:b3:84:74:89:1a:37:9f:a1: a0:8c:b3:5b:e6:92:ab:40:4c:e6:fb:ff:8e:9c:b0: 14:d7:91:f2:fd:2a:87:a1:1d:89:77:04:9b:bf:38: 5c:a9:76:dc:f7:65:8f:f1:b0:01:f7:e2:1d:a0:9d: a0:49:bf:b0:ba:c7:75:8c:74:c4:da:70:45:8d:42: 9f:f2:92:ea:d4:7f:66:80:34:e2:7d:a1:17:7b:93: 31:f3:94:32:ce:55:44:49:0c:91:98:f4:1d:22:23: 7b:20:3c:74:11:0e:32:38:73:9e:54:6f:59:f8:cd: 7f:3c:da:d5:f3:c5:09:61:75:06:a8:b1:54:a5:71: b4:46:c6:0f:7b:92:f3:c8:b2:9e:4c:45:bb:cd:40: 7e:9f:4d:b7:05:4b:36:b9:6c:b2:29:38:65:d4:2e: 5e:e7:3b:57:2a:63:61:0c:63:f7:fe:1a:e1:66:36: bd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E2:A8:78:E1:2E:FE:79:90:D7:14:3E:5C:C3:26:A9:2E:F5:81:09 X509v3 Authority Key Identifier: keyid:1C:0A:6F:6F:3A:9A:E1:DA:5E:5B:E8:75:2F:AB:18:DE:B2:8B:A6:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HApvbzqa4dpeW-h1L6sY3rKLphQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2a9dd4-17b8-473c-83bf-9af1074c227f/1/HApvbzqa4dpeW-h1L6sY3rKLphQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:f3:bf:2d:b9:89:88:fd:bc:cb:f7:6d:42:2d:47:23:c8:af: 51:98:2e:ec:08:00:a6:e7:53:0f:f6:52:97:dc:f7:f8:83:e7: bf:2c:ce:dd:be:2c:d6:47:60:55:83:93:f2:c2:31:83:11:0e: 1a:6b:14:80:a4:d8:73:d5:37:8b:c7:33:50:a2:f0:37:9b:12: 74:86:11:78:5e:6e:4e:31:44:d1:11:0f:fe:0a:8f:ad:22:8b: 8b:da:44:83:7f:50:00:4b:43:eb:1d:7d:28:93:db:1d:7e:e5: 60:4b:6a:18:c3:1e:52:91:c9:d5:71:cb:92:98:fc:e8:0d:9d: 4f:1c:fd:c9:48:c8:a5:9c:38:4d:7e:42:f9:a2:6c:7e:68:1a: 1e:44:6b:a1:cd:8f:cb:18:6f:53:c4:21:c0:60:ab:ec:a3:fa: 06:fe:bc:d1:85:32:84:3f:95:cd:ae:64:0a:83:31:4c:bb:d8: 17:af:1c:0d:b5:93:1e:11:c2:15:c6:8c:d5:fd:1f:48:19:80: 17:a1:45:23:48:05:fd:65:72:91:63:52:8a:8e:ca:59:5c:25: 97:ec:06:3d:ef:86:c5:82:02:e3:69:cd:38:e1:f8:30:70:da: 78:b0:41:70:0c:1b:0e:37:ae:09:0c:ee:25:76:ef:0d:9a:c3: c5:ab:fa:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NLcjLPZtNkYXjr7uGYt/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMGE2ZjZmM2E5YWUxZGE1ZTViZTg3NTJmYWIxOGRlYjI4 YmE2MTQwHhcNMjUxMjIwMTAwMTA4WhcNMjUxMjIxMTAwMTA4WjAzMTEwLwYDVQQD Eyg0ZWUyYTg3OGUxMmVmZTc5OTBkNzE0M2U1Y2MzMjZhOTJlZjU4MTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbJxcdAUM46rwQTAbk+uFRXdNhbv QkfQyBItX9UY+iW0dvzUbn8dAQeO3w8mPLmZiWSGx01ufikCEQMcG37pQCW/yBao wiFRJtTvChEmkN2as4R0iRo3n6GgjLNb5pKrQEzm+/+OnLAU15Hy/SqHoR2JdwSb vzhcqXbc92WP8bAB9+IdoJ2gSb+wusd1jHTE2nBFjUKf8pLq1H9mgDTifaEXe5Mx 85QyzlVESQyRmPQdIiN7IDx0EQ4yOHOeVG9Z+M1/PNrV88UJYXUGqLFUpXG0RsYP e5LzyLKeTEW7zUB+n023BUs2uWyyKThl1C5e5ztXKmNhDGP3/hrhZja9qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7iqHjhLv55kNcUPlzDJqku9YEJMB8GA1UdIwQY MBaAFBwKb286muHaXlvodS+rGN6yi6YUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFwdmJ6cWE0ZHBlVy1oMUw2c1kzcktMcGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yYTlkZDQtMTdiOC00NzNjLTgzYmYt OWFmMTA3NGMyMjdmLzEvSEFwdmJ6cWE0ZHBlVy1oMUw2c1kzcktMcGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yYTlkZDQtMTdiOC00NzNjLTgzYmYtOWFmMTA3NGMyMjdm LzEvSEFwdmJ6cWE0ZHBlVy1oMUw2c1kzcktMcGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdvO/LbmJ iP28y/dtQi1HI8ivUZgu7AgApudTD/ZSl9z3+IPnvyzO3b4s1kdgVYOT8sIxgxEO GmsUgKTYc9U3i8czUKLwN5sSdIYReF5uTjFE0REP/gqPrSKLi9pEg39QAEtD6x19 KJPbHX7lYEtqGMMeUpHJ1XHLkpj86A2dTxz9yUjIpZw4TX5C+aJsfmgaHkRroc2P yxhvU8QhwGCr7KP6Bv680YUyhD+Vza5kCoMxTLvYF68cDbWTHhHCFcaM1f0fSBmA F6FFI0gF/WVykWNSio7KWVwll+wGPe+GxYIC42nNOOH4MHDaeLBBcAwbDjeuCQzu JXbvDZrDxav6HA== -----END CERTIFICATE-----Generated at Sat Dec 20 12:19:07 2025 by rpki-client