This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft File: ihal-sZaxenF67_tcVGMrgwTEcU.mft (raw, json) Hash identifier: Tx5Sogwb7/AbEWWVpZgNmz8LSBj2cbGi0xkG0pDM88M= Subject key identifier: C3:AB:97:01:35:B9:1B:E4:61:98:5F:2F:F7:F4:5A:D1:47:2B:80:77 Authority key identifier: 8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5 Certificate issuer: /CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5 Certificate serial: 019B38D835E2EF0D06921410B9303368E158 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft Manifest number: 1493 Signing time: Fri 19 Dec 2025 23:00:52 +0000 Manifest this update: Fri 19 Dec 2025 23:00:52 +0000 Manifest next update: Sat 20 Dec 2025 23:00:52 +0000 Files and hashes: 1: ObLj8Es3CGwudgx4z3Eal1DaMsg.roa (hash: OBOYU0pVuU2YZL5sdRS5axOYzVZesgjz4ueFKZ8ujls=) 2: ihal-sZaxenF67_tcVGMrgwTEcU.crl (hash: wK12RrAqEYjC/EYxOEFn0lNtj3eiKkTu/7+57SpFoms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:35:e2:ef:0d:06:92:14:10:b9:30:33:68:e1:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a16a5fac65ac5e9c5ebbfed71518cae0c1311c5 Validity Not Before: Dec 19 23:00:52 2025 GMT Not After : Dec 20 23:00:52 2025 GMT Subject: CN=c3ab970135b91be461985f2ff7f45ad1472b8077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:79:5c:6d:7b:f0:c9:2a:35:b4:d9:63:ca:87: 5c:6e:23:42:6f:03:25:08:5c:04:4a:de:0f:04:ef: 21:2f:57:7a:27:8d:26:25:bd:60:3c:2f:bb:90:6b: 2d:59:f8:3e:75:a1:9a:fe:4b:e0:e2:fc:8e:fa:a6: d7:0f:5c:c4:47:ca:a4:38:cb:4a:3c:30:1b:94:fb: d0:06:1f:50:80:af:d5:da:7b:db:41:74:01:f3:06: ad:06:af:7c:ea:cd:af:4e:b3:1f:54:ac:db:89:46: d8:3a:df:fa:6d:52:08:40:e7:bb:9d:c3:5a:7d:c2: 6b:de:49:0a:ed:9e:9c:4d:27:8c:cd:6a:85:4b:99: 40:fd:d7:13:f2:5d:83:5f:84:1f:82:41:0f:40:e1: 8c:43:5e:ac:aa:cf:98:d8:08:9c:87:93:96:ea:46: 8d:75:d8:d9:5d:a9:47:af:af:7b:ba:e1:8e:af:1a: 28:35:1d:eb:8d:3b:b9:72:3c:89:aa:61:4d:72:60: 71:d3:b8:44:df:c9:ce:3a:8c:47:62:4e:8f:b6:e7: 2e:06:e6:30:ee:c5:7e:06:98:07:d1:fd:30:d3:5c: 87:1c:f4:7b:45:b0:10:b0:ee:e4:a7:ea:68:5c:7b: da:7a:21:36:2c:4b:2c:4a:57:aa:88:f2:d3:c5:a1: b8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AB:97:01:35:B9:1B:E4:61:98:5F:2F:F7:F4:5A:D1:47:2B:80:77 X509v3 Authority Key Identifier: keyid:8A:16:A5:FA:C6:5A:C5:E9:C5:EB:BF:ED:71:51:8C:AE:0C:13:11:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihal-sZaxenF67_tcVGMrgwTEcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c10b5d-c8fc-4c68-b01e-4cc01b6f8847/1/ihal-sZaxenF67_tcVGMrgwTEcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:53:88:72:3b:8f:68:d0:3b:0f:39:c3:f7:75:cd:ad:68:41: 05:50:fb:d8:fe:16:78:cc:a8:c0:cc:a7:39:e1:6d:ae:e5:2c: 97:f8:d6:1b:1d:fe:58:76:ea:b9:bb:c3:c2:83:c8:e3:14:49: 36:03:e4:7e:cb:a4:5a:a5:3b:00:59:95:79:7a:64:22:29:7d: 66:fd:25:da:16:a3:90:26:7b:9d:76:85:04:f9:82:38:0e:ab: a8:09:12:44:92:bb:ee:30:8b:6f:6d:f0:dd:ef:e8:1d:c6:98: 41:23:c7:d4:34:b2:e8:b0:43:bd:41:d2:e0:d6:86:e7:c4:01: 69:5f:9b:7d:c6:1a:1c:64:c9:e1:54:67:88:f7:ff:b3:98:3d: 6a:f1:56:8c:b1:31:5e:48:2d:fd:b5:1e:3e:01:4a:76:99:af: fc:b9:3b:22:ba:1c:62:91:fb:ae:ae:85:c2:9a:8f:b4:c0:ec: db:45:b3:79:eb:5a:f6:6a:26:5c:80:39:23:70:2d:7a:a7:c7: 5a:5e:c6:e7:41:9c:48:01:10:b9:90:c6:08:6b:bb:4c:cc:f7: 28:8c:32:b2:a8:c0:03:ae:5a:f7:e5:d9:81:0d:f4:a7:22:2f: 47:be:64:9f:62:f4:bc:4e:bc:e7:8f:22:59:e8:b7:88:30:8a: e0:44:b8:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42DXi7w0GkhQQuTAzaOFYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhMTZhNWZhYzY1YWM1ZTljNWViYmZlZDcxNTE4Y2FlMGMx MzExYzUwHhcNMjUxMjE5MjMwMDUyWhcNMjUxMjIwMjMwMDUyWjAzMTEwLwYDVQQD EyhjM2FiOTcwMTM1YjkxYmU0NjE5ODVmMmZmN2Y0NWFkMTQ3MmI4MDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XlcbXvwySo1tNljyodcbiNCbwMl CFwESt4PBO8hL1d6J40mJb1gPC+7kGstWfg+daGa/kvg4vyO+qbXD1zER8qkOMtK PDAblPvQBh9QgK/V2nvbQXQB8watBq986s2vTrMfVKzbiUbYOt/6bVIIQOe7ncNa fcJr3kkK7Z6cTSeMzWqFS5lA/dcT8l2DX4QfgkEPQOGMQ16sqs+Y2Aich5OW6kaN ddjZXalHr697uuGOrxooNR3rjTu5cjyJqmFNcmBx07hE38nOOoxHYk6PtucuBuYw 7sV+BpgH0f0w01yHHPR7RbAQsO7kp+poXHvaeiE2LEssSleqiPLTxaG4TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOrlwE1uRvkYZhfL/f0WtFHK4B3MB8GA1UdIwQY MBaAFIoWpfrGWsXpxeu/7XFRjK4MExHFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUt NGNjMDFiNmY4ODQ3LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jMTBiNWQtYzhmYy00YzY4LWIwMWUtNGNjMDFiNmY4ODQ3 LzEvaWhhbC1zWmF4ZW5GNjdfdGNWR01yZ3dURWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1OIcjuP aNA7DznD93XNrWhBBVD72P4WeMyowMynOeFtruUsl/jWGx3+WHbqubvDwoPI4xRJ NgPkfsukWqU7AFmVeXpkIil9Zv0l2hajkCZ7nXaFBPmCOA6rqAkSRJK77jCLb23w 3e/oHcaYQSPH1DSy6LBDvUHS4NaG58QBaV+bfcYaHGTJ4VRniPf/s5g9avFWjLEx Xkgt/bUePgFKdpmv/Lk7IrocYpH7rq6FwpqPtMDs20Wzeeta9momXIA5I3AteqfH Wl7G50GcSAEQuZDGCGu7TMz3KIwysqjAA65a9+XZgQ30pyIvR75kn2L0vE68548i Wei3iDCK4ES4rA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:30:59 2025 by rpki-client