This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft File: HAkzrn59aIUNoxv6gb_KuLGFuMo.mft (raw, json) Hash identifier: mcMaf+RSHnT+8o2TpHyJOzgOB2KjI1gjGT0yj5+yaD4= Subject key identifier: F3:B4:EF:60:8A:82:38:9D:BF:64:C7:DF:B4:CE:80:81:98:98:8E:D8 Authority key identifier: 1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA Certificate issuer: /CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca Certificate serial: 019B6AD71527090FB15B0F4DA7799ABE7051 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft Manifest number: 0E33 Signing time: Mon 29 Dec 2025 16:00:38 +0000 Manifest this update: Mon 29 Dec 2025 16:00:38 +0000 Manifest next update: Tue 30 Dec 2025 16:00:38 +0000 Files and hashes: 1: HAkzrn59aIUNoxv6gb_KuLGFuMo.crl (hash: NVyha6C0dXWWE3/bRU4mm5HusJTLpzbcdUmbDksZ7fI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d7:15:27:09:0f:b1:5b:0f:4d:a7:79:9a:be:70:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c0933ae7e7d68850da31bfa81bfcab8b185b8ca Validity Not Before: Dec 29 16:00:38 2025 GMT Not After : Dec 30 16:00:38 2025 GMT Subject: CN=f3b4ef608a82389dbf64c7dfb4ce808198988ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:d9:2b:15:69:73:f4:9e:b6:ae:90:0d:67: 1b:f7:17:d8:7b:f5:1f:31:5a:22:9d:18:d7:e7:cd: 20:b9:25:4d:4f:65:cf:c2:69:57:a4:ad:a7:b2:32: 25:4b:47:16:ac:81:de:84:e9:76:9e:85:06:21:37: fc:5c:96:13:55:2b:e2:a3:df:95:1f:21:ff:d2:3d: 50:27:ed:d0:9c:f8:53:e9:af:73:4c:2e:b7:95:f5: 45:eb:47:b0:4d:bb:5b:89:ab:d8:00:9e:7e:0f:7e: da:a8:60:a3:30:4c:3d:22:40:78:bf:84:2a:c4:e0: a9:07:d5:9f:3e:82:60:62:b2:1e:a2:88:4d:ee:cf: c3:9f:39:ac:35:3f:17:9c:48:ab:d6:66:66:10:94: fd:77:06:f6:26:38:ba:02:1a:10:e0:68:52:7e:ec: 19:4f:e0:27:92:56:53:4f:ba:0c:09:e6:8e:ec:f1: f7:78:51:d7:70:46:08:50:b2:65:c3:0d:07:a2:02: 45:84:4c:d2:09:4b:20:4d:40:82:00:a8:38:8d:21: 59:08:f5:24:6e:10:8f:9b:3a:27:a8:2b:79:8b:54: 39:c2:21:70:b6:7d:4e:8b:1a:5f:7f:95:9b:c1:c9: 7b:fa:52:39:a8:b0:af:f6:db:a2:55:90:32:89:ec: 7e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B4:EF:60:8A:82:38:9D:BF:64:C7:DF:B4:CE:80:81:98:98:8E:D8 X509v3 Authority Key Identifier: keyid:1C:09:33:AE:7E:7D:68:85:0D:A3:1B:FA:81:BF:CA:B8:B1:85:B8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HAkzrn59aIUNoxv6gb_KuLGFuMo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6a4c1d-3a57-4385-a46a-36d0d359a1e0/1/HAkzrn59aIUNoxv6gb_KuLGFuMo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:f4:55:e6:9f:96:c8:28:74:a0:66:c6:ab:ce:84:d9:56:d0: 15:54:8b:c9:67:08:fc:85:9f:45:d8:88:a0:09:f1:f4:1e:fe: a2:63:b5:cf:53:ca:4b:b5:26:4d:c6:76:63:42:0c:0a:bf:6a: 83:fc:33:c7:c1:42:cf:f6:08:59:d6:31:28:5b:0c:57:ba:4c: dd:99:dc:fc:8a:7a:09:56:47:be:af:fd:ff:81:6b:2b:9c:41: b6:7d:27:08:20:c0:d6:e3:cd:fe:98:38:24:8e:9e:03:41:db: 70:59:d6:4c:bd:19:0f:89:0d:d9:01:e5:39:a2:cc:62:d0:ab: 8c:95:a1:e1:0f:72:11:c8:d2:48:05:2d:ec:33:8f:16:77:5f: 73:91:4c:71:de:50:c0:f7:b2:54:5a:27:e9:ce:ef:41:91:87: 60:1e:9d:b4:bc:e7:5f:02:16:ce:0e:a8:0a:91:95:d3:61:42: 58:1a:3a:4f:5c:06:db:14:ee:9d:1a:b6:e3:49:ac:9a:7f:8c: 96:3c:f4:e6:f0:a4:01:60:1a:e1:eb:9c:3e:d4:e5:f3:e0:04: c0:7b:d2:e8:08:0c:78:ec:6c:0a:87:09:98:bf:b2:85:25:f3: 22:0b:c6:4f:77:9b:3b:a2:dc:75:51:d0:93:07:92:17:a2:ac: 21:a9:13:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq1xUnCQ+xWw9Np3mavnBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjMDkzM2FlN2U3ZDY4ODUwZGEzMWJmYTgxYmZjYWI4YjE4 NWI4Y2EwHhcNMjUxMjI5MTYwMDM4WhcNMjUxMjMwMTYwMDM4WjAzMTEwLwYDVQQD EyhmM2I0ZWY2MDhhODIzODlkYmY2NGM3ZGZiNGNlODA4MTk4OTg4ZWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupvZKxVpc/Setq6QDWcb9xfYe/Uf MVoinRjX580guSVNT2XPwmlXpK2nsjIlS0cWrIHehOl2noUGITf8XJYTVSvio9+V HyH/0j1QJ+3QnPhT6a9zTC63lfVF60ewTbtbiavYAJ5+D37aqGCjMEw9IkB4v4Qq xOCpB9WfPoJgYrIeoohN7s/DnzmsNT8XnEir1mZmEJT9dwb2Jji6AhoQ4GhSfuwZ T+AnklZTT7oMCeaO7PH3eFHXcEYIULJlww0HogJFhEzSCUsgTUCCAKg4jSFZCPUk bhCPmzonqCt5i1Q5wiFwtn1Oixpff5Wbwcl7+lI5qLCv9tuiVZAyiex+6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPO072CKgjidv2TH37TOgIGYmI7YMB8GA1UdIwQY MBaAFBwJM65+fWiFDaMb+oG/yrixhbjKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEFrenJuNTlhSVVOb3h2NmdiX0t1TEdGdU1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82YTRjMWQtM2E1Ny00Mzg1LWE0NmEt MzZkMGQzNTlhMWUwLzEvSEFrenJuNTlhSVVOb3h2NmdiX0t1TEdGdU1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC82YTRjMWQtM2E1Ny00Mzg1LWE0NmEtMzZkMGQzNTlhMWUw LzEvSEFrenJuNTlhSVVOb3h2NmdiX0t1TEdGdU1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB/RV5p+W yCh0oGbGq86E2VbQFVSLyWcI/IWfRdiIoAnx9B7+omO1z1PKS7UmTcZ2Y0IMCr9q g/wzx8FCz/YIWdYxKFsMV7pM3Znc/Ip6CVZHvq/9/4FrK5xBtn0nCCDA1uPN/pg4 JI6eA0HbcFnWTL0ZD4kN2QHlOaLMYtCrjJWh4Q9yEcjSSAUt7DOPFndfc5FMcd5Q wPeyVFon6c7vQZGHYB6dtLznXwIWzg6oCpGV02FCWBo6T1wG2xTunRq240msmn+M ljz05vCkAWAa4eucPtTl8+AEwHvS6AgMeOxsCocJmL+yhSXzIgvGT3ebO6LcdVHQ kweSF6KsIakTVw== -----END CERTIFICATE-----Generated at Mon Dec 29 17:41:53 2025 by rpki-client