This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json) Hash identifier: fZOkoTvsDXYsDH49+TXCs1CCHRd/RWUXr7zRQOwRVJU= Subject key identifier: FB:26:56:04:28:77:11:D3:C6:19:E4:DC:EC:4D:48:CF:ED:93:B8:0C Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c Certificate serial: 019B39B3A5D9B9D95B60EDB0A8ED1F6FE945 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 03:00:33 +0000 Manifest this update: Sat 20 Dec 2025 03:00:33 +0000 Manifest next update: Sun 21 Dec 2025 03:00:33 +0000 Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: R71eTtf1qw7HihKMJIZjnXxs6pjoTdCsm42f4dD+cEg=) 2: NLCwkRuxMAVqIE4s2Awhm1yzmmc.roa (hash: 7DV7f34yFMiHA1iSUlpq7Rg0BJ76/rrx0KnPa1dhIeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 03:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:a5:d9:b9:d9:5b:60:ed:b0:a8:ed:1f:6f:e9:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c Validity Not Before: Dec 20 03:00:33 2025 GMT Not After : Dec 21 03:00:33 2025 GMT Subject: CN=fb265604287711d3c619e4dcec4d48cfed93b80c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:7b:3d:69:b4:e5:26:96:08:88:e9:59:a0: 15:de:1a:0b:e9:58:e5:eb:af:4a:5c:b3:11:6a:69: 87:5c:81:38:e6:57:2f:3f:3a:50:a3:19:dd:60:41: 49:a1:ce:5a:e1:26:59:04:c2:f2:8a:7c:bb:c0:f1: 6b:80:56:83:37:97:bd:fc:d5:20:0f:d2:23:8d:d4: 74:f5:1b:99:7e:57:7a:69:9c:a8:cb:9c:8e:58:29: b8:8a:57:8e:cd:99:29:26:68:26:d9:d4:dd:fc:ba: 6e:0c:ef:e4:73:5e:b4:c9:fe:3d:35:cc:de:82:f0: 88:44:89:b5:7f:f4:b0:39:76:29:f5:76:c4:59:e1: dc:ea:8f:fb:44:5c:4d:c8:ea:25:84:ea:ae:b7:65: c7:69:20:b1:a0:49:73:b8:7e:84:b6:af:ee:d4:a7: 4e:9e:46:40:3f:69:95:d1:22:37:8d:7f:a0:ee:a2: 3a:ca:49:fa:de:53:df:46:45:6f:65:0a:66:b5:1a: 8f:2a:f4:58:ae:73:6c:51:a9:78:b8:15:0a:46:45: 4d:4e:08:83:db:3a:42:46:51:6b:4e:2c:48:51:bf: f4:e8:bb:90:81:81:fe:35:62:e7:99:4b:9a:18:14: 40:95:34:18:72:02:cb:c3:26:b8:0e:dd:72:e7:b1: 45:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:26:56:04:28:77:11:D3:C6:19:E4:DC:EC:4D:48:CF:ED:93:B8:0C X509v3 Authority Key Identifier: keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:81:fc:66:c8:1e:4a:4c:35:30:80:32:7f:53:db:dc:be:26: cb:a8:83:e8:e7:6a:73:55:f8:58:18:40:0d:85:47:95:51:87: 44:08:c4:3d:9d:dd:c0:1a:04:fd:88:19:bf:43:e4:91:cb:b4: f3:7e:1f:28:45:c5:18:1f:9d:ff:38:14:4a:fc:b4:27:4e:c3: fd:5b:84:36:93:b8:9f:c2:6f:49:7a:ee:fd:8c:2d:ec:0a:70: a6:ee:e3:34:aa:05:37:d8:55:e6:db:44:24:6f:3f:fb:fa:bd: 77:01:45:a2:4e:49:82:c9:cb:95:ed:df:95:99:70:0f:cb:8a: 71:e7:e2:e5:8d:6e:b6:b9:0a:64:2f:cb:c8:c5:4c:fb:6d:5d: ab:a8:aa:f6:65:2e:f8:52:12:4f:17:a6:bd:b2:cc:bb:98:26: fc:4a:12:d7:c2:6e:14:fd:9e:b7:66:4c:e7:f1:ac:ed:20:bc: 60:b1:ff:e5:78:19:44:ff:f7:f2:da:cc:b1:77:2d:57:00:12: 5a:37:33:62:e7:1b:b9:3d:b0:45:27:16:09:ce:24:a3:00:81: 53:1d:fc:ce:79:61:7e:e5:e5:56:fc:90:97:d4:78:c2:40:7f: 6a:56:57:24:14:55:bb:57:09:ef:38:72:82:8b:9e:b5:4e:3e: dd:33:3e:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s6XZudlbYO2wqO0fb+lFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMGUyMTZlNTc5MWUxYjAxZGEyMWJjYWYzMzAwNDFhZDcy YTdlNmMwHhcNMjUxMjIwMDMwMDMzWhcNMjUxMjIxMDMwMDMzWjAzMTEwLwYDVQQD EyhmYjI2NTYwNDI4NzcxMWQzYzYxOWU0ZGNlYzRkNDhjZmVkOTNiODBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj17PWm05SaWCIjpWaAV3hoL6Vjl 669KXLMRammHXIE45lcvPzpQoxndYEFJoc5a4SZZBMLyiny7wPFrgFaDN5e9/NUg D9IjjdR09RuZfld6aZyoy5yOWCm4ileOzZkpJmgm2dTd/LpuDO/kc160yf49Ncze gvCIRIm1f/SwOXYp9XbEWeHc6o/7RFxNyOolhOqut2XHaSCxoElzuH6Etq/u1KdO nkZAP2mV0SI3jX+g7qI6ykn63lPfRkVvZQpmtRqPKvRYrnNsUal4uBUKRkVNTgiD 2zpCRlFrTixIUb/06LuQgYH+NWLnmUuaGBRAlTQYcgLLwya4Dt1y57FFkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsmVgQodxHTxhnk3OxNSM/tk7gMMB8GA1UdIwQY MBaAFBwOIW5XkeGwHaIbyvMwBBrXKn5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEt MmMwZmM2YmUxZTU3LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEtMmMwZmM2YmUxZTU3 LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmoH8Zsge Skw1MIAyf1Pb3L4my6iD6Odqc1X4WBhADYVHlVGHRAjEPZ3dwBoE/YgZv0Pkkcu0 834fKEXFGB+d/zgUSvy0J07D/VuENpO4n8JvSXru/Ywt7Apwpu7jNKoFN9hV5ttE JG8/+/q9dwFFok5JgsnLle3flZlwD8uKcefi5Y1utrkKZC/LyMVM+21dq6iq9mUu +FISTxemvbLMu5gm/EoS18JuFP2et2ZM5/Gs7SC8YLH/5XgZRP/38trMsXctVwAS WjczYucbuT2wRScWCc4kowCBUx38znlhfuXlVvyQl9R4wkB/alZXJBRVu1cJ7zhy gouetU4+3TM+jQ== -----END CERTIFICATE-----Generated at Sat Dec 20 12:38:41 2025 by rpki-client