This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft File: HA4hbleR4bAdohvK8zAEGtcqfmw.mft (raw, json) Hash identifier: 5973BMg+ulGcRs2I6CYpUgyGfKQBxEw/TBZCIIw/ZDU= Subject key identifier: B9:7B:A8:5A:92:C4:16:1D:6B:1D:C5:81:06:55:71:33:3B:28:A0:4A Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c Certificate serial: 019B69FB3404F21DC88B1C86DF0105DBE122 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft Manifest number: 17A1 Signing time: Mon 29 Dec 2025 12:00:28 +0000 Manifest this update: Mon 29 Dec 2025 12:00:28 +0000 Manifest next update: Tue 30 Dec 2025 12:00:28 +0000 Files and hashes: 1: HA4hbleR4bAdohvK8zAEGtcqfmw.crl (hash: wQb11hz3G6/nfTbnWkT+dJFRm3THweG2SS5zQPEmsUY=) 2: NLCwkRuxMAVqIE4s2Awhm1yzmmc.roa (hash: 7DV7f34yFMiHA1iSUlpq7Rg0BJ76/rrx0KnPa1dhIeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 12:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:fb:34:04:f2:1d:c8:8b:1c:86:df:01:05:db:e1:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c Validity Not Before: Dec 29 12:00:28 2025 GMT Not After : Dec 30 12:00:28 2025 GMT Subject: CN=b97ba85a92c4161d6b1dc581065571333b28a04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f8:d3:7d:79:f6:86:14:1a:db:4e:56:0e:e0: 38:99:0b:9f:5f:79:e8:30:73:f7:a1:f6:af:7d:37: 1b:e8:10:af:10:2d:07:29:8c:f3:b4:92:90:1d:fb: 22:3e:fd:7c:fe:61:e4:8d:7a:f4:78:84:fa:88:35: 9e:03:27:8d:36:c7:d1:43:03:de:4b:38:96:fc:b3: 71:e5:f3:cf:02:e8:38:b7:5e:ef:b7:68:53:01:09: a0:8f:a5:b0:5b:7b:7a:24:b9:91:73:fd:a0:5a:6b: 9c:fd:16:5b:a9:f7:f9:9e:b9:15:b4:68:f7:4d:97: 65:32:2e:33:ba:19:09:5f:91:8c:ad:d8:f6:00:eb: 0c:b0:bf:8a:b2:c6:24:1d:75:17:f6:c5:8a:44:57: 07:3d:1e:33:fd:67:48:1d:8f:45:72:3e:35:49:5a: bd:4d:23:6b:53:e2:70:e0:54:48:fd:77:1e:02:f6: a3:62:1f:3d:86:67:f8:6e:c9:ad:c1:2a:f5:3d:08: 23:04:52:a8:df:13:3c:28:aa:ef:f3:78:ab:66:fe: 3f:39:19:28:6d:4b:f7:2b:3d:be:e5:c6:cd:c9:76: 69:b9:33:15:85:51:03:cf:19:87:7c:e3:b6:77:4d: ff:69:83:e1:ff:ba:b4:a1:25:41:35:d1:9d:56:2e: 9e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7B:A8:5A:92:C4:16:1D:6B:1D:C5:81:06:55:71:33:3B:28:A0:4A X509v3 Authority Key Identifier: keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:dd:16:22:c8:d1:20:b5:54:7c:cf:78:b2:d1:d6:28:1d:06: df:6e:09:c8:57:b2:8e:23:cc:fe:47:7a:2a:bb:cf:08:5b:b7: fe:86:30:bf:76:c1:b9:4a:aa:94:25:de:a2:db:60:d7:85:2e: 89:26:c7:33:36:97:06:10:e1:b4:0f:49:5d:3f:14:a0:2a:cb: 06:ec:0a:d9:a8:55:e9:00:5a:66:3a:23:11:8d:60:25:74:1c: b3:a8:22:5c:fa:9f:50:66:09:30:33:1a:42:c9:73:85:9c:b9: 3f:63:b9:06:ca:87:16:7c:3c:5d:67:91:dc:84:8a:03:4c:d9: 72:07:61:09:22:77:bf:ef:3e:1f:a8:58:ba:e8:46:12:73:8b: 4a:ce:29:6d:c3:02:23:27:02:00:cf:c7:8e:81:e2:80:e7:e6: f3:99:c2:92:81:d9:54:37:04:0a:b8:ac:b0:d4:22:c3:4b:06: cb:99:55:25:f0:5e:65:09:25:29:8d:12:3f:2c:e6:a6:a4:48: 9d:79:21:ec:2e:14:c6:1e:28:a7:34:e7:3b:b6:87:fa:7c:89: af:6a:bb:cf:bf:0a:1f:72:04:f4:11:75:7a:ac:25:88:2c:b3: fb:f6:d8:b2:95:e1:93:3e:f3:bd:82:4c:03:83:d1:d4:c4:5d: cb:5f:37:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtp+zQE8h3IixyG3wEF2+EiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMGUyMTZlNTc5MWUxYjAxZGEyMWJjYWYzMzAwNDFhZDcy YTdlNmMwHhcNMjUxMjI5MTIwMDI4WhcNMjUxMjMwMTIwMDI4WjAzMTEwLwYDVQQD EyhiOTdiYTg1YTkyYzQxNjFkNmIxZGM1ODEwNjU1NzEzMzNiMjhhMDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPjTfXn2hhQa205WDuA4mQufX3no MHP3ofavfTcb6BCvEC0HKYzztJKQHfsiPv18/mHkjXr0eIT6iDWeAyeNNsfRQwPe SziW/LNx5fPPAug4t17vt2hTAQmgj6WwW3t6JLmRc/2gWmuc/RZbqff5nrkVtGj3 TZdlMi4zuhkJX5GMrdj2AOsMsL+KssYkHXUX9sWKRFcHPR4z/WdIHY9Fcj41SVq9 TSNrU+Jw4FRI/XceAvajYh89hmf4bsmtwSr1PQgjBFKo3xM8KKrv83irZv4/ORko bUv3Kz2+5cbNyXZpuTMVhVEDzxmHfOO2d03/aYPh/7q0oSVBNdGdVi6eyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLl7qFqSxBYdax3FgQZVcTM7KKBKMB8GA1UdIwQY MBaAFBwOIW5XkeGwHaIbyvMwBBrXKn5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEt MmMwZmM2YmUxZTU3LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEtMmMwZmM2YmUxZTU3 LzEvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAod0WIsjR ILVUfM94stHWKB0G324JyFeyjiPM/kd6KrvPCFu3/oYwv3bBuUqqlCXeottg14Uu iSbHMzaXBhDhtA9JXT8UoCrLBuwK2ahV6QBaZjojEY1gJXQcs6giXPqfUGYJMDMa QslzhZy5P2O5BsqHFnw8XWeR3ISKA0zZcgdhCSJ3v+8+H6hYuuhGEnOLSs4pbcMC IycCAM/HjoHigOfm85nCkoHZVDcECrissNQiw0sGy5lVJfBeZQklKY0SPyzmpqRI nXkh7C4Uxh4opzTnO7aH+nyJr2q7z78KH3IE9BF1eqwliCyz+/bYspXhkz7zvYJM A4PR1MRdy183Tw== -----END CERTIFICATE-----Generated at Mon Dec 29 16:20:03 2025 by rpki-client