This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft File: Ha5HTXlZfbddH01JkBtSVYu_avQ.mft (raw, json) Hash identifier: PrZfEjCMIVGWAdQlZ94riUHaCrR9kvhGrYYx3quT0To= Subject key identifier: 65:A6:F1:D1:53:AF:14:FB:BC:AA:36:39:75:FF:FB:9F:7D:FA:99:05 Authority key identifier: 1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4 Certificate issuer: /CN=1dae474d79597db75d1f4d49901b52558bbf6af4 Certificate serial: 019B3E6D539B7A47F2DFAC4181B1F2E81823 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft Manifest number: 0FA6 Signing time: Sun 21 Dec 2025 01:01:50 +0000 Manifest this update: Sun 21 Dec 2025 01:01:50 +0000 Manifest next update: Mon 22 Dec 2025 01:01:50 +0000 Files and hashes: 1: Ha5HTXlZfbddH01JkBtSVYu_avQ.crl (hash: l+Brd1pJVB5DlkdAl7A4xgray/p8Q0c35OJC8EAbxmI=) 2: Y0n-ydU5YtM5FIbXPN4wCVJngdE.roa (hash: ApF50P5ImmFTCYDqSebFhsxBAqXoF1l91y3xHeQhovw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:53:9b:7a:47:f2:df:ac:41:81:b1:f2:e8:18:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dae474d79597db75d1f4d49901b52558bbf6af4 Validity Not Before: Dec 21 01:01:50 2025 GMT Not After : Dec 22 01:01:50 2025 GMT Subject: CN=65a6f1d153af14fbbcaa363975fffb9f7dfa9905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ca:41:2a:a2:6f:58:d8:a5:6b:22:12:83:d9: e7:07:83:d5:63:8e:5d:f2:c4:65:c5:73:5a:4d:f6: 07:54:e1:e2:1b:87:96:a7:ea:cc:1e:36:ea:84:30: 84:c7:9f:ec:38:2a:8a:08:33:34:4a:33:45:5f:93: 33:c1:7b:cf:e0:bb:c3:1c:aa:ac:2b:50:33:8c:09: 43:3b:bb:0c:a1:df:fd:d0:2b:74:5f:d1:6c:61:d4: 64:2d:64:be:b8:4c:df:57:1c:69:dc:56:ed:e3:c5: 61:f4:56:b3:b5:28:de:f6:06:69:3c:25:0e:7b:74: f0:8f:de:6d:35:d6:48:0a:bf:52:f6:5d:6b:12:c6: 38:3c:e4:ab:93:30:ca:02:2a:5b:10:4b:f7:1e:02: c3:1c:f3:8c:d3:d7:e5:5c:46:90:e4:c3:40:b6:8c: 49:c9:5a:93:e6:5c:93:51:6c:e7:89:95:53:f6:82: 16:8a:67:48:f1:96:ab:13:a1:57:79:8b:8b:49:fb: 46:1c:a9:d5:bd:5c:0e:b5:6b:54:c3:45:ab:ce:82: 6f:77:e8:7a:b3:b6:e8:ec:08:05:eb:73:aa:db:a1: 50:fe:41:1d:57:7b:26:e7:de:ec:89:c0:6e:38:de: a6:b3:9b:50:26:1b:5c:60:12:58:ec:33:f2:88:df: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:A6:F1:D1:53:AF:14:FB:BC:AA:36:39:75:FF:FB:9F:7D:FA:99:05 X509v3 Authority Key Identifier: keyid:1D:AE:47:4D:79:59:7D:B7:5D:1F:4D:49:90:1B:52:55:8B:BF:6A:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha5HTXlZfbddH01JkBtSVYu_avQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/996cee-0acb-4eb8-a77a-27f90b8d85e6/1/Ha5HTXlZfbddH01JkBtSVYu_avQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ab:37:dc:21:17:8b:f3:db:ac:b1:bb:58:96:ea:bb:ad:98: 1c:2d:d6:d7:c0:06:8f:d2:e4:b6:b3:a4:90:50:be:ee:c7:99: ed:8c:6d:13:d9:c9:c0:aa:1c:9c:10:ee:2c:c1:14:58:07:9f: b8:ca:6d:b4:2c:6a:e9:f5:1f:2b:fe:45:1e:df:82:29:d9:f3: f0:99:e0:f9:5d:3e:c1:d6:d0:c7:4d:f4:58:81:cc:27:28:94: 9d:7c:b5:74:6e:a5:1e:46:60:b8:72:a0:47:77:09:69:88:76: f0:4a:24:6a:75:7e:39:22:98:ea:28:6c:c9:b2:6e:44:ba:00: d3:50:fe:20:56:5d:85:e1:e8:87:fe:8f:a9:f7:c5:6e:9e:90: 9d:25:d5:a4:52:ab:36:1d:3e:cd:bf:83:37:0e:40:83:3b:5e: b8:28:0a:51:3d:03:d2:fa:a8:aa:00:ee:15:f2:8d:7b:f7:82: ee:83:29:9b:eb:fe:3f:b1:c2:59:45:27:5c:df:a5:d4:a0:99: b4:b2:d6:5b:4e:60:bc:26:8a:46:af:21:34:ec:b5:e0:30:f6: fe:e7:5b:8a:9d:22:3c:d0:23:b8:16:4d:ef:f3:1f:f3:8e:86: a0:94:50:e5:fc:16:20:99:a3:a0:f1:f4:d4:0c:d1:36:43:67: e3:2d:0b:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bVObekfy36xBgbHy6BgjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkYWU0NzRkNzk1OTdkYjc1ZDFmNGQ0OTkwMWI1MjU1OGJi ZjZhZjQwHhcNMjUxMjIxMDEwMTUwWhcNMjUxMjIyMDEwMTUwWjAzMTEwLwYDVQQD Eyg2NWE2ZjFkMTUzYWYxNGZiYmNhYTM2Mzk3NWZmZmI5ZjdkZmE5OTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8pBKqJvWNilayISg9nnB4PVY45d 8sRlxXNaTfYHVOHiG4eWp+rMHjbqhDCEx5/sOCqKCDM0SjNFX5MzwXvP4LvDHKqs K1AzjAlDO7sMod/90Ct0X9FsYdRkLWS+uEzfVxxp3Fbt48Vh9FaztSje9gZpPCUO e3Twj95tNdZICr9S9l1rEsY4POSrkzDKAipbEEv3HgLDHPOM09flXEaQ5MNAtoxJ yVqT5lyTUWzniZVT9oIWimdI8ZarE6FXeYuLSftGHKnVvVwOtWtUw0WrzoJvd+h6 s7bo7AgF63Oq26FQ/kEdV3sm597sicBuON6ms5tQJhtcYBJY7DPyiN+fewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWm8dFTrxT7vKo2OXX/+599+pkFMB8GA1UdIwQY MBaAFB2uR015WX23XR9NSZAbUlWLv2r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2Et MjdmOTBiOGQ4NWU2LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS85OTZjZWUtMGFjYi00ZWI4LWE3N2EtMjdmOTBiOGQ4NWU2 LzEvSGE1SFRYbFpmYmRkSDAxSmtCdFNWWXVfYXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqs33CEX i/PbrLG7WJbqu62YHC3W18AGj9LktrOkkFC+7seZ7YxtE9nJwKocnBDuLMEUWAef uMpttCxq6fUfK/5FHt+CKdnz8Jng+V0+wdbQx030WIHMJyiUnXy1dG6lHkZguHKg R3cJaYh28EokanV+OSKY6ihsybJuRLoA01D+IFZdheHoh/6PqffFbp6QnSXVpFKr Nh0+zb+DNw5AgzteuCgKUT0D0vqoqgDuFfKNe/eC7oMpm+v+P7HCWUUnXN+l1KCZ tLLWW05gvCaKRq8hNOy14DD2/udbip0iPNAjuBZN7/Mf846GoJRQ5fwWIJmjoPH0 1AzRNkNn4y0Lwg== -----END CERTIFICATE-----Generated at Sun Dec 21 09:43:51 2025 by rpki-client