This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft File: Has2Xsw1BFitorCUnuZ--djG9Nw.mft (raw, json) Hash identifier: uvlhMfU3ctV27w7BLBGQnfthQHJ0BpYiUzRO3v6kuok= Subject key identifier: 1D:94:D6:CA:0B:EA:65:D5:68:04:C7:A9:AF:F1:0E:C2:AD:4C:2A:05 Authority key identifier: 1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC Certificate issuer: /CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc Certificate serial: 019B3D22BE3984823B5A0FC24F5A3288D6C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft Manifest number: 90 Signing time: Sat 20 Dec 2025 19:00:45 +0000 Manifest this update: Sat 20 Dec 2025 19:00:45 +0000 Manifest next update: Sun 21 Dec 2025 19:00:45 +0000 Files and hashes: 1: Has2Xsw1BFitorCUnuZ--djG9Nw.crl (hash: bjO0drJoud+GRAc8kv3gbd1dCmXm8PtjksU6yPB5+8E=) 2: jC-Q6ZUmfg331ebhgya9xds7Pis.roa (hash: kNQyj294qYsc9TLOzDaCHE1k96M030WeGgkAk10rnao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:22:be:39:84:82:3b:5a:0f:c2:4f:5a:32:88:d6:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc Validity Not Before: Dec 20 19:00:45 2025 GMT Not After : Dec 21 19:00:45 2025 GMT Subject: CN=1d94d6ca0bea65d56804c7a9aff10ec2ad4c2a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:66:fa:66:2f:3f:fb:a0:de:e7:45:17:5d:7a: 80:af:eb:b6:cc:e5:fa:1a:27:75:bd:b8:92:8e:b9: 0b:64:4f:55:d5:58:07:37:f6:86:c6:7a:a2:bf:de: 4b:5b:ae:53:8a:62:65:bc:0a:14:e3:81:31:f3:79: 84:3c:5a:4d:2b:6e:dd:26:90:15:24:f0:4f:d7:d4: 7b:d2:44:22:2b:b7:7d:c3:8d:d5:bc:fc:a0:9b:48: 96:64:fd:b9:34:da:fd:8a:93:b7:f3:3a:26:7d:28: 3b:aa:8f:81:d8:90:ca:58:82:95:28:b1:39:99:3b: 34:b5:cd:e1:52:8f:b4:cf:04:4a:3b:74:cd:ef:de: 94:e5:9e:5e:37:18:78:27:7b:1c:cd:61:17:b4:42: 2d:9c:f2:fd:e1:9e:20:dc:40:6c:d0:53:b2:ef:ef: 73:38:71:ca:77:e2:70:55:92:af:9c:9b:e7:bc:d6: 4f:73:84:10:7d:f2:87:b2:37:f2:aa:9d:08:93:37: 80:fb:aa:fc:31:3d:b3:49:e3:80:cd:41:09:90:bd: e9:51:f4:90:7b:6f:6b:a5:89:b9:a4:86:20:3a:d9: b4:f9:51:d1:96:2b:1e:a6:cf:36:29:4d:ef:30:62: 2d:ff:6d:90:fe:ac:da:fe:98:47:57:ac:f7:3f:cd: e3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:94:D6:CA:0B:EA:65:D5:68:04:C7:A9:AF:F1:0E:C2:AD:4C:2A:05 X509v3 Authority Key Identifier: keyid:1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:23:26:a1:16:31:f3:64:81:59:10:60:e2:65:2f:0a:dc:86: d1:ad:ec:a6:c8:bb:6a:3d:ce:8d:d0:8c:c0:e7:7e:70:39:ce: 09:69:f9:b7:5f:61:ff:dc:73:09:b6:77:83:37:19:72:44:57: a4:54:b5:39:32:19:1e:fc:10:80:5e:3a:b7:8c:89:e2:72:bc: e4:03:c4:a1:a5:5c:13:6c:d7:92:bc:b4:c0:ce:7b:3f:7f:32: a7:cc:e0:1c:8c:d4:a3:4e:d4:1c:04:b9:46:90:8d:93:c8:54: 6a:4f:d1:cc:14:90:39:c4:b8:89:1a:87:06:f7:4e:9b:7d:bc: 60:73:75:fd:95:e2:39:a2:9d:16:28:c8:07:3d:fc:69:fa:0c: bb:e2:63:de:df:c3:10:cb:62:36:21:6a:41:40:81:37:4b:a0: 94:0f:00:02:05:24:3e:67:cb:b7:28:aa:42:67:13:d7:48:d0: 24:da:3f:e1:03:d9:d9:30:18:b3:e5:89:79:0d:8f:70:aa:81: 8e:4b:ab:4f:06:2a:f5:84:a8:63:46:8e:d6:5d:58:12:47:ee: bc:8c:da:67:e4:a4:d0:12:f6:2f:4b:af:28:59:e2:cc:10:bf: f8:be:3c:5b:e1:fb:db:7c:9a:60:6b:a9:f4:36:e3:96:0c:d3: 8e:5e:eb:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Ir45hII7Wg/CT1oyiNbBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWIzNjVlY2MzNTA0NThhZGEyYjA5NDllZTY3ZWY5ZDhj NmY0ZGMwHhcNMjUxMjIwMTkwMDQ1WhcNMjUxMjIxMTkwMDQ1WjAzMTEwLwYDVQQD EygxZDk0ZDZjYTBiZWE2NWQ1NjgwNGM3YTlhZmYxMGVjMmFkNGMyYTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGb6Zi8/+6De50UXXXqAr+u2zOX6 Gid1vbiSjrkLZE9V1VgHN/aGxnqiv95LW65TimJlvAoU44Ex83mEPFpNK27dJpAV JPBP19R70kQiK7d9w43VvPygm0iWZP25NNr9ipO38zomfSg7qo+B2JDKWIKVKLE5 mTs0tc3hUo+0zwRKO3TN796U5Z5eNxh4J3sczWEXtEItnPL94Z4g3EBs0FOy7+9z OHHKd+JwVZKvnJvnvNZPc4QQffKHsjfyqp0IkzeA+6r8MT2zSeOAzUEJkL3pUfSQ e29rpYm5pIYgOtm0+VHRliseps82KU3vMGIt/22Q/qza/phHV6z3P83jZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2U1soL6mXVaATHqa/xDsKtTCoFMB8GA1UdIwQY MBaAFB2rNl7MNQRYraKwlJ7mfvnYxvTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGFzMlhzdzFCRml0b3JDVW51Wi0tZGpHOU53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mYThmNzgtNzZlNS00OGE5LWFiYjAt NjBhZTc2NjQ2ZGQ0LzEvSGFzMlhzdzFCRml0b3JDVW51Wi0tZGpHOU53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mYThmNzgtNzZlNS00OGE5LWFiYjAtNjBhZTc2NjQ2ZGQ0 LzEvSGFzMlhzdzFCRml0b3JDVW51Wi0tZGpHOU53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyiMmoRYx 82SBWRBg4mUvCtyG0a3spsi7aj3OjdCMwOd+cDnOCWn5t19h/9xzCbZ3gzcZckRX pFS1OTIZHvwQgF46t4yJ4nK85APEoaVcE2zXkry0wM57P38yp8zgHIzUo07UHAS5 RpCNk8hUak/RzBSQOcS4iRqHBvdOm328YHN1/ZXiOaKdFijIBz38afoMu+Jj3t/D EMtiNiFqQUCBN0uglA8AAgUkPmfLtyiqQmcT10jQJNo/4QPZ2TAYs+WJeQ2PcKqB jkurTwYq9YSoY0aO1l1YEkfuvIzaZ+Sk0BL2L0uvKFnizBC/+L48W+H723yaYGup 9DbjlgzTjl7rIQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:51:59 2025 by rpki-client