This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft File: haqtxWj2ySj9dk1CHULHHPV5GVQ.mft (raw, json) Hash identifier: RzrmuL1oAgxGnzLDx1UkDEupnvu2ErGuL4GY9dIRqJE= Subject key identifier: 6D:6B:2A:1A:12:83:89:CA:27:26:B8:F3:FF:F9:7E:11:C7:A2:2E:99 Authority key identifier: 85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54 Certificate issuer: /CN=85aaadc568f6c928fd764d421d42c71cf5791954 Certificate serial: 019B3A589889E0CABE6DE45A796B7D4E2AEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft Manifest number: 169C Signing time: Sat 20 Dec 2025 06:00:43 +0000 Manifest this update: Sat 20 Dec 2025 06:00:43 +0000 Manifest next update: Sun 21 Dec 2025 06:00:43 +0000 Files and hashes: 1: BdEPl2Neefl4GoaE_iupoW4vob4.roa (hash: iJi1nUHFyZuED4JVs82b7kN1M64TmmDeD6kSjvIrHS0=) 2: haqtxWj2ySj9dk1CHULHHPV5GVQ.crl (hash: N2LtC0A88qYd1knELHXIIoiw35pLDB/Xp/QZCOSm8lQ=) 3: n6MPRl4HeV2oslQVZjQ3r5EuRXY.roa (hash: J3QEJ4pfKQHu+ZNIZ1/n5cXEVM04vV1h4Czaen0IJhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:58:98:89:e0:ca:be:6d:e4:5a:79:6b:7d:4e:2a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85aaadc568f6c928fd764d421d42c71cf5791954 Validity Not Before: Dec 20 06:00:43 2025 GMT Not After : Dec 21 06:00:43 2025 GMT Subject: CN=6d6b2a1a128389ca2726b8f3fff97e11c7a22e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d3:b2:cc:d3:5a:22:53:24:0b:34:3b:37:54: 20:8b:0b:2f:4d:8f:56:dc:24:7c:54:b3:eb:a1:21: 20:f5:3f:51:5a:88:72:11:86:cb:77:fa:eb:4e:aa: 81:0f:e9:2b:a6:d3:5e:2a:24:1e:dd:0c:c0:30:5c: 77:ba:22:a3:b4:9b:be:ff:02:97:51:dc:e3:94:4b: 36:d1:6a:50:64:48:ab:93:c4:4d:e1:91:0b:9b:57: cf:ea:dc:ac:09:53:78:ca:79:f7:15:00:71:f2:2b: 1d:0f:67:a3:fc:84:05:5f:4e:3a:f9:54:82:f8:e3: 92:05:08:19:cf:99:13:56:20:a4:b5:99:a7:3c:12: d9:12:0d:99:af:51:5d:1f:9b:2a:e9:32:2b:53:a5: e1:9e:86:03:6d:56:80:ec:b5:d6:ca:bf:8c:20:ee: d7:2b:7a:f1:1f:91:6c:f7:92:56:85:2d:13:59:7e: f8:b7:f1:c9:ab:eb:43:74:1f:7f:68:3e:32:fa:94: 0a:c2:e4:87:94:4e:1d:0d:bf:fe:f0:bf:16:97:4b: 8a:da:d2:8f:e4:f8:fa:11:a7:ec:f9:37:9e:89:1c: 52:fe:8e:21:e0:47:41:69:0d:07:9b:e3:95:f2:99: e1:0f:a5:d2:77:c3:24:dc:e9:5b:d1:a6:c9:d4:b1: 2a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6B:2A:1A:12:83:89:CA:27:26:B8:F3:FF:F9:7E:11:C7:A2:2E:99 X509v3 Authority Key Identifier: keyid:85:AA:AD:C5:68:F6:C9:28:FD:76:4D:42:1D:42:C7:1C:F5:79:19:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/haqtxWj2ySj9dk1CHULHHPV5GVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/0ebdd4-2617-4d31-a8c3-45ea38da2218/1/haqtxWj2ySj9dk1CHULHHPV5GVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:24:5b:75:17:01:4c:0e:93:db:99:1f:2c:39:67:ca:94:f5: 3f:56:cc:ae:26:91:65:53:c6:31:66:4b:b0:fd:19:5c:3d:f3: e0:32:41:e7:c6:06:d4:32:69:44:f3:41:06:b6:06:c8:ae:d1: c8:88:90:2d:a0:fc:a7:0c:b0:42:87:16:6c:1e:ec:30:dc:d7: 71:77:c5:9b:0d:ba:5e:20:42:84:fc:38:cc:b0:5f:a5:ca:75: 64:3c:fd:19:aa:fe:33:4f:1f:a2:f3:6d:97:3b:b3:01:67:9d: 1d:5d:54:f6:1e:7a:ba:2a:12:01:c4:1a:62:e0:42:66:5a:83: 7d:21:be:ef:43:f8:33:82:5c:e4:0f:e2:64:35:33:32:6d:96: 94:39:df:f9:7e:ed:33:4f:84:1f:39:73:b2:62:89:a1:85:10: 8d:b9:2c:58:27:ec:46:b6:53:b2:58:8b:ff:ca:f6:5e:6b:29: bb:e3:5d:71:43:7a:7b:9b:66:c4:a5:32:b7:2a:5a:03:4e:b1: 5f:44:99:c7:ed:0c:f1:cc:2f:92:20:8c:98:7b:7a:8d:0b:67: 1b:59:d0:f9:1d:30:d0:c5:73:24:60:cd:ea:92:82:ae:05:a4: 55:32:f7:ad:b7:0b:51:27:3f:61:28:3f:c8:4d:e6:78:43:27: 0b:8f:8b:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6WJiJ4Mq+beRaeWt9TirvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1YWFhZGM1NjhmNmM5MjhmZDc2NGQ0MjFkNDJjNzFjZjU3 OTE5NTQwHhcNMjUxMjIwMDYwMDQzWhcNMjUxMjIxMDYwMDQzWjAzMTEwLwYDVQQD Eyg2ZDZiMmExYTEyODM4OWNhMjcyNmI4ZjNmZmY5N2UxMWM3YTIyZTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNOyzNNaIlMkCzQ7N1QgiwsvTY9W 3CR8VLProSEg9T9RWohyEYbLd/rrTqqBD+krptNeKiQe3QzAMFx3uiKjtJu+/wKX UdzjlEs20WpQZEirk8RN4ZELm1fP6tysCVN4ynn3FQBx8isdD2ej/IQFX046+VSC +OOSBQgZz5kTViCktZmnPBLZEg2Zr1FdH5sq6TIrU6XhnoYDbVaA7LXWyr+MIO7X K3rxH5Fs95JWhS0TWX74t/HJq+tDdB9/aD4y+pQKwuSHlE4dDb/+8L8Wl0uK2tKP 5Pj6Eafs+TeeiRxS/o4h4EdBaQ0Hm+OV8pnhD6XSd8Mk3Olb0abJ1LEqBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1rKhoSg4nKJya48//5fhHHoi6ZMB8GA1UdIwQY MBaAFIWqrcVo9sko/XZNQh1Cxxz1eRlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMt NDVlYTM4ZGEyMjE4LzEvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS8wZWJkZDQtMjYxNy00ZDMxLWE4YzMtNDVlYTM4ZGEyMjE4 LzEvaGFxdHhXajJ5U2o5ZGsxQ0hVTEhIUFY1R1ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiRbdRcB TA6T25kfLDlnypT1P1bMriaRZVPGMWZLsP0ZXD3z4DJB58YG1DJpRPNBBrYGyK7R yIiQLaD8pwywQocWbB7sMNzXcXfFmw26XiBChPw4zLBfpcp1ZDz9Gar+M08fovNt lzuzAWedHV1U9h56uioSAcQaYuBCZlqDfSG+70P4M4Jc5A/iZDUzMm2WlDnf+X7t M0+EHzlzsmKJoYUQjbksWCfsRrZTsliL/8r2Xmspu+NdcUN6e5tmxKUytypaA06x X0SZx+0M8cwvkiCMmHt6jQtnG1nQ+R0w0MVzJGDN6pKCrgWkVTL3rbcLUSc/YSg/ yE3meEMnC4+LTQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:06:25 2025 by rpki-client