This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft File: 0haCh3tsivdeJ2DPhUDnhFLUvsA.mft (raw, json) Hash identifier: Hla/yQjuNIE74gXf/IVahdsD91TtdZoO8FinmQke1CA= Subject key identifier: 99:47:F0:E2:A7:B1:38:21:0A:FF:DF:92:20:09:BF:79:AF:F2:4B:72 Authority key identifier: D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0 Certificate issuer: /CN=d21682877b6c8af75e2760cf8540e78452d4bec0 Certificate serial: 019B4BF2884B79746CF8D2FBD220B883430B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft Manifest number: 0CB2 Signing time: Tue 23 Dec 2025 16:02:24 +0000 Manifest this update: Tue 23 Dec 2025 16:02:24 +0000 Manifest next update: Wed 24 Dec 2025 16:02:24 +0000 Files and hashes: 1: 0haCh3tsivdeJ2DPhUDnhFLUvsA.crl (hash: 3zFgmArHBVkpeNWjw9Piv+d3aW4kXH1KYWs+rbi7yY0=) 2: 7p9fYepg7S5sPZLFet1T6ZdUO0A.roa (hash: 2r3FGqEA9Im8wCkJsvxrPrJGP9I8oT0rHkJZAkKFfAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:88:4b:79:74:6c:f8:d2:fb:d2:20:b8:83:43:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d21682877b6c8af75e2760cf8540e78452d4bec0 Validity Not Before: Dec 23 16:02:24 2025 GMT Not After : Dec 24 16:02:24 2025 GMT Subject: CN=9947f0e2a7b138210affdf922009bf79aff24b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e8:6a:7c:0b:72:0b:05:c3:4f:2a:87:fc:9b: 56:2a:13:d6:a4:bf:ea:95:3e:4a:db:f2:79:46:67: eb:d8:c1:8e:ec:93:ca:24:b9:3c:44:80:76:e6:04: 45:82:0e:1e:6b:d6:f6:30:ba:59:9d:26:9d:b2:18: d3:c4:b0:70:ec:ff:7f:55:e6:12:0b:37:4b:3d:d5: 8a:d2:d2:a4:f0:61:b9:bd:bd:52:a5:a3:86:33:45: dc:5e:80:5c:34:f4:48:50:46:b5:69:8b:a4:22:1a: 84:d7:58:b1:fb:f8:0c:56:7f:0b:61:0c:cb:65:30: 0c:a8:05:b0:46:88:b6:1c:02:a6:3a:b7:be:a6:b6: 2b:49:08:8b:f8:18:0f:96:c6:c3:88:40:5c:19:fe: 3d:a5:45:8f:be:fa:35:9b:43:1d:b0:84:bc:aa:8e: 5d:97:bb:07:10:9c:2c:73:10:3d:61:7f:46:be:a6: b9:51:ed:0c:71:3e:bc:41:4d:c9:96:5f:71:6a:0e: f8:ca:1c:8c:d1:a0:5c:c0:dc:a5:3f:18:89:9c:62: 6c:09:1d:14:df:b5:73:41:c1:0b:17:ec:e2:07:d3: ea:db:1c:6c:c2:39:a9:10:87:d1:0d:bf:40:06:aa: fb:c5:b9:97:ef:a6:01:71:a2:47:6a:48:1c:f3:eb: 1c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:47:F0:E2:A7:B1:38:21:0A:FF:DF:92:20:09:BF:79:AF:F2:4B:72 X509v3 Authority Key Identifier: keyid:D2:16:82:87:7B:6C:8A:F7:5E:27:60:CF:85:40:E7:84:52:D4:BE:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0haCh3tsivdeJ2DPhUDnhFLUvsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9cc5e0-78df-4da6-ab0a-de9712c6e7c7/1/0haCh3tsivdeJ2DPhUDnhFLUvsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:82:56:a1:21:2e:9c:52:f7:00:c7:2e:14:fb:82:77:40:fb: a7:63:0b:94:ff:89:32:a4:8e:6f:2d:d4:c5:24:a2:4c:ae:75: 08:a4:95:5e:8b:a6:13:c9:8e:ee:04:1e:4d:6d:b7:f6:28:bf: 9d:ba:4a:25:fc:75:d0:b2:fe:f7:50:3b:6b:f7:5c:43:0c:05: 26:87:05:08:42:0e:9d:9c:08:22:63:ee:1c:62:38:dd:6d:04: 49:c4:21:7c:a4:9d:32:d7:80:66:92:a0:37:01:d5:47:0c:70: 8f:65:99:5a:04:32:98:0c:49:48:0c:3a:75:65:ae:dd:12:9d: d4:27:cd:2a:de:c0:54:0e:c2:cf:f5:ca:8f:a4:f8:53:21:1e: 86:5a:73:6e:77:e1:f5:af:4f:f4:01:6d:a5:e4:4c:09:ab:cf: 8e:0e:34:55:31:5e:fc:6b:ae:8f:ff:e8:e5:8c:fc:32:93:39: d9:e9:fd:92:e1:33:df:07:5a:9a:11:0a:61:35:54:af:69:d4: 11:e8:7a:e6:3c:e6:c9:99:d4:b7:6d:f3:13:c9:d5:94:a9:e6: 20:f0:ae:1a:6d:42:f5:42:38:07:11:27:5d:3e:a0:ae:1e:4b: f7:e7:86:97:8c:de:7c:d7:1a:71:f2:d0:3a:c7:5e:37:b0:7e: 8e:ba:fe:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8ohLeXRs+NL70iC4g0MLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTY4Mjg3N2I2YzhhZjc1ZTI3NjBjZjg1NDBlNzg0NTJk NGJlYzAwHhcNMjUxMjIzMTYwMjI0WhcNMjUxMjI0MTYwMjI0WjAzMTEwLwYDVQQD Eyg5OTQ3ZjBlMmE3YjEzODIxMGFmZmRmOTIyMDA5YmY3OWFmZjI0YjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuehqfAtyCwXDTyqH/JtWKhPWpL/q lT5K2/J5Rmfr2MGO7JPKJLk8RIB25gRFgg4ea9b2MLpZnSadshjTxLBw7P9/VeYS CzdLPdWK0tKk8GG5vb1SpaOGM0XcXoBcNPRIUEa1aYukIhqE11ix+/gMVn8LYQzL ZTAMqAWwRoi2HAKmOre+prYrSQiL+BgPlsbDiEBcGf49pUWPvvo1m0MdsIS8qo5d l7sHEJwscxA9YX9Gvqa5Ue0McT68QU3Jll9xag74yhyM0aBcwNylPxiJnGJsCR0U 37VzQcELF+ziB9Pq2xxswjmpEIfRDb9ABqr7xbmX76YBcaJHakgc8+scRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlH8OKnsTghCv/fkiAJv3mv8ktyMB8GA1UdIwQY MBaAFNIWgod7bIr3Xidgz4VA54RS1L7AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhhQ2gzdHNpdmRlSjJEUGhVRG5oRkxVdnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85Y2M1ZTAtNzhkZi00ZGE2LWFiMGEt ZGU5NzEyYzZlN2M3LzEvMGhhQ2gzdHNpdmRlSjJEUGhVRG5oRkxVdnNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy85Y2M1ZTAtNzhkZi00ZGE2LWFiMGEtZGU5NzEyYzZlN2M3 LzEvMGhhQ2gzdHNpdmRlSjJEUGhVRG5oRkxVdnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUIJWoSEu nFL3AMcuFPuCd0D7p2MLlP+JMqSOby3UxSSiTK51CKSVXoumE8mO7gQeTW239ii/ nbpKJfx10LL+91A7a/dcQwwFJocFCEIOnZwIImPuHGI43W0EScQhfKSdMteAZpKg NwHVRwxwj2WZWgQymAxJSAw6dWWu3RKd1CfNKt7AVA7Cz/XKj6T4UyEehlpzbnfh 9a9P9AFtpeRMCavPjg40VTFe/Guuj//o5Yz8MpM52en9kuEz3wdamhEKYTVUr2nU Eeh65jzmyZnUt23zE8nVlKnmIPCuGm1C9UI4BxEnXT6grh5L9+eGl4zefNcacfLQ OsdeN7B+jrr+hA== -----END CERTIFICATE-----Generated at Tue Dec 23 17:26:21 2025 by rpki-client