This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: i8tH3DanKYdcayALitvF6s7Y0O/45ankA+HsHlkKONg= Subject key identifier: A7:CC:6F:42:F4:02:AB:AE:AC:72:C4:CD:45:5F:9C:06:08:4C:BC:F7 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019B05C6D822F1E13917BA6C4AB80F9DF372 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 17F8 Signing time: Wed 10 Dec 2025 01:01:16 +0000 Manifest this update: Wed 10 Dec 2025 01:01:16 +0000 Manifest next update: Thu 11 Dec 2025 01:01:16 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: jYMgitKFypf2t5b/CsUcia7q4Sj+jPbWkGFUWJHHnQE=) 2: 0httGqgqnBD-cyBZkV5zP0LpIO4.roa (hash: e5sFUpuEkPspxdtpRMty2JvPNTXvUGFt57BwVt8wTQk=) 3: 20w83vHPyYnLSWr2qqWCmD2gZNY.roa (hash: ClK+X58yEmA5ygXK0mo1ANs6qUTT/V8TWnwZD7Tusy4=) 4: 2GL47T9SRBBwBaNeZexIUa30gBc.roa (hash: ABN0fho3ez1AZohMO8vLStXF6A5NSbFkU1JXiXGcusg=) 5: 2s4ghGsMJ4UjziczDpj7_nBo6GE.roa (hash: jn5a6RlzlWn5orrS4JyYzumT++ei7+4zrAsQWhkhOUE=) 6: BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa (hash: N6DdRHz14Xr18smaWB+L/0EFbg9FmP8IrnnkdfkP5sA=) 7: BjUAlonCB1CjmbTY52apZdHRGFk.roa (hash: vBVzlWqlUuZ7F5qeBjljk7LIKAFRXIaJSFWC4T698rw=) 8: DRLbJL7meHAnOmMNiiVi2VhOOMc.roa (hash: Lp9UgdizeLrJK6Zry0u6HD2WAPxw4E+r1wzuyfdMmtU=) 9: EXfTHtw-3BJt59JkT36dPstORFo.roa (hash: MhW4Yoiges2mvr+KewFgpAREQV0Mu5obgGNxi9eeOQc=) 10: EYaBNaigUJPNidpEJHqvbrENGdU.roa (hash: U/V1xaDA1aKazkypKTjkyan+k6X/djAAeOa2M3QSQJM=) 11: FRvZFyOxFoddRwR8NWy2iDyogY8.roa (hash: bzSWZTj+o0faBM1dsh+8mBoLaK0jcFLNse7M1DVkpUs=) 12: G8jjrx8EZbysXI_Z13e_0NqYZdU.roa (hash: GPSkTNwl/L8vVjia7LOR9ahqlqqIZvGFNcWIGIi/vHw=) 13: Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa (hash: Dfa7w0wU+Mwe8FRxusOe5J5w207sEqOGP3MEUAezXaw=) 14: Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa (hash: mR/skrtMXmYrNl0WIwSjaGFdp8tWtvYO7SMbQmVqf6A=) 15: MguR744HGmOoEMdrlIzPUQQNYfs.roa (hash: Ve4h+6FdNbKYu9bYvRE5Dbmxn7BK8VvZ01cl79qxeJc=) 16: PcsvqoFss2sjt8KP5dE_s9b5R94.roa (hash: 2VnZlh9WN/gvQzrunwflGg0cw7Ym2P+YsV38lpVH0Gs=) 17: RySOnwd5yNUvkpOdlWzbq8gD58I.roa (hash: pMm1Q5jN9tu+9MZBtGXjdw1riel86JfdVWVMRs8pgEY=) 18: UNh6P6o5iukKyngJ923OKln6euE.roa (hash: N5ex54TauXC69hfaRmQEjxuyvZMfnOJEFnqZWvxkb8A=) 19: XXSSAkKxHIvFb1XDuVgAK48p7oI.roa (hash: p4mx1wVBI5jfCHEyW7RDH/AavCZwfWlBpFNbLCutJY0=) 20: XqDDBjzRqksOqaLkNJqWqkX_q5g.roa (hash: 1giyN8jwNm42lrK4gv4g6LsRanOMpVhR/vHcE0ewcvw=) 21: Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa (hash: XJDCD20D/hEgr09ZL/gnt/32UJp0okrjk8WR5CoxVyQ=) 22: _Ja5VSGfVwaP_RssqzUEn4YMRnM.roa (hash: IopLtmpqrddq1TLUa3ph8Vkd8Gg6tUuEa1Mf8B120SY=) 23: fW0mZX2qVdA0eoUEboZhAE59bUE.roa (hash: stVjqf6xlyz/MOhoo6Rt330zmsp7vd4IC5S2fUEJ5WM=) 24: kqDz7smZzEggwnOtTZ91wrlBE4c.roa (hash: OteTjZY0hrzoBDeoZG9laIbeOhFIt32mklvyy1YBT38=) 25: m9Q0QpkVO1rZKT8wIA-lB6ceYcg.roa (hash: yW9VuP+7IZqfB9uY1adWMtzwRUiSlhz/2UYbCN1BQSU=) 26: ncQVbTITs5Wtl1BsQ2mAS7-nTVQ.roa (hash: W2j7t9wKtLT6mYkhMfEldPwCF8H6KOgtTtUoXF6gg84=) 27: oqSgizr5ODUUGjBb8_Wzxokx-xk.roa (hash: Kl53NJDKPjecKCh1ZqXsoFCQIzYfPyjvOORgLlse+gY=) 28: qjzeeh1Gho5kkoGd8eWSm2fDElg.roa (hash: legd59DpUzqYKdG/H8UB7NHrWv3d+4ykb5elvNlaqw4=) 29: qlt-CjR0Oi0L3lo2PS7A4jbvIUg.roa (hash: iydTkBpS1P6s3+CKe74qws4olK3ajXbhwYqoUw/uhBk=) 30: tdzsaKxsamCWBVwoUkqT8RggY6A.roa (hash: Fv0PNntXjBHiuO1Z367HBdmxJtFfh7CR44dwT354/lw=) 31: wMbP2rODQDC-jcOXAyW7ktyAwFs.roa (hash: 9dxgb9cFX2rvzK0yUiEPPHMObwlTuLCycMbvyIulqKU=) 32: yNK_se_8Y1MH-IyQZOfpZj_aArA.roa (hash: Y/8odYpFkGDQCB6ybQitBRTCfwLFaWn7M7svPHhRrhA=) 33: ytCMvXgi7-5EalYEygb1M-dSbo4.roa (hash: 0MrqqAAtZWVj8wfoNtj5hcwvBU3HxDQG25M1h24iiN8=) 34: z4dbT2rdI1MPHPzn2a4SSpvkt3E.roa (hash: pftbqIKgzEeVO9sl0LAVO5XHYPxIgJ6YwaN9JqNCTzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:05:c6:d8:22:f1:e1:39:17:ba:6c:4a:b8:0f:9d:f3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Dec 10 01:01:16 2025 GMT Not After : Dec 11 01:01:16 2025 GMT Subject: CN=a7cc6f42f402abaeac72c4cd455f9c06084cbcf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:89:c3:9d:06:cd:8c:94:04:da:6f:ae:d6:26: bc:ab:5b:24:13:6d:d5:b9:8f:2d:da:b0:2f:f6:bd: c5:ed:f2:64:3d:a3:48:7a:2a:18:18:4e:41:67:0a: 58:73:e4:4f:6b:ee:39:d7:89:aa:5d:91:a9:3d:73: ab:05:59:2a:68:8d:4c:6b:36:56:21:db:e2:62:d4: e2:a7:b5:7f:d0:19:6b:2d:47:b4:92:24:d2:2e:c0: 67:56:50:19:b9:f8:69:e9:80:1b:d7:de:4b:d3:3f: 3f:c2:ea:8d:7b:10:42:a5:e7:0a:0a:10:b9:fc:fe: cb:d1:9c:d7:12:eb:99:a9:c3:c6:70:ab:c7:71:a4: 70:f9:7e:1d:23:70:66:a7:51:36:98:6e:3d:82:91: e0:3f:1f:eb:90:6d:19:85:37:ae:02:e9:f6:cf:ac: 10:03:a9:cf:4d:86:a9:37:67:72:0d:5e:b9:ac:e7: e4:7b:be:15:a4:d6:9e:da:b0:b1:2c:fc:81:32:53: 4c:f6:26:30:33:28:37:20:80:1b:5b:32:46:f2:3c: f7:3e:52:0f:81:19:93:87:53:cd:b1:d6:fa:a0:e1: d7:b8:9c:b4:1b:cb:f6:64:3f:0f:2a:c2:66:7c:1d: 77:99:94:d6:f3:20:40:c2:f3:e6:bd:09:6d:f1:d2: 1b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:CC:6F:42:F4:02:AB:AE:AC:72:C4:CD:45:5F:9C:06:08:4C:BC:F7 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:5e:00:be:de:b0:8a:7e:86:88:df:0d:b8:84:3a:d1:c7:10: 7c:bc:ee:3c:19:fe:40:25:b8:5c:a4:48:fa:b3:49:fe:19:97: 19:c3:fd:a8:20:11:60:64:05:11:4f:f3:ea:5b:d2:31:69:c8: 54:68:89:2c:60:c7:53:57:98:fa:1f:57:cf:c6:e6:b0:4d:01: 6e:98:67:d5:87:1f:fd:b4:3a:ee:77:82:33:ee:3b:72:a2:6f: 7c:ec:04:ed:83:93:6a:d3:44:d3:1a:a8:dd:05:85:dc:37:23: 11:ec:2b:79:28:9e:e5:93:08:3a:57:1b:36:d6:f5:17:2d:bb: 9f:fe:ce:f4:c1:eb:be:bf:a1:70:0b:6f:39:db:ff:16:4d:b7: 4a:35:57:38:9e:4a:8a:67:06:83:12:87:03:63:df:fc:a2:cb: cf:0f:31:7d:d9:e4:0b:ec:d1:2c:a3:5c:32:ec:64:dd:31:a6: 2e:03:bc:67:5d:9d:bd:92:8f:6a:fa:48:45:5d:c3:f3:14:54: b5:1a:95:cd:5b:90:79:ee:5f:03:8f:49:8a:cc:f9:a1:98:77: 4f:64:75:ce:4a:7f:ad:ad:05:c9:89:84:8c:d3:1b:13:3d:ef: fd:9f:76:0e:b1:40:9e:f4:5d:2c:1a:c2:1a:05:69:11:b5:a7: 5b:af:79:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsFxtgi8eE5F7psSrgPnfNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjUxMjEwMDEwMTE2WhcNMjUxMjExMDEwMTE2WjAzMTEwLwYDVQQD EyhhN2NjNmY0MmY0MDJhYmFlYWM3MmM0Y2Q0NTVmOWMwNjA4NGNiY2Y3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYnDnQbNjJQE2m+u1ia8q1skE23V uY8t2rAv9r3F7fJkPaNIeioYGE5BZwpYc+RPa+4514mqXZGpPXOrBVkqaI1MazZW IdviYtTip7V/0BlrLUe0kiTSLsBnVlAZufhp6YAb195L0z8/wuqNexBCpecKChC5 /P7L0ZzXEuuZqcPGcKvHcaRw+X4dI3Bmp1E2mG49gpHgPx/rkG0ZhTeuAun2z6wQ A6nPTYapN2dyDV65rOfke74VpNae2rCxLPyBMlNM9iYwMyg3IIAbWzJG8jz3PlIP gRmTh1PNsdb6oOHXuJy0G8v2ZD8PKsJmfB13mZTW8yBAwvPmvQlt8dIb8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfMb0L0AquurHLEzUVfnAYITLz3MB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkV4Avt6w in6GiN8NuIQ60ccQfLzuPBn+QCW4XKRI+rNJ/hmXGcP9qCARYGQFEU/z6lvSMWnI VGiJLGDHU1eY+h9Xz8bmsE0Bbphn1Ycf/bQ67neCM+47cqJvfOwE7YOTatNE0xqo 3QWF3DcjEewreSie5ZMIOlcbNtb1Fy27n/7O9MHrvr+hcAtvOdv/Fk23SjVXOJ5K imcGgxKHA2Pf/KLLzw8xfdnkC+zRLKNcMuxk3TGmLgO8Z12dvZKPavpIRV3D8xRU tRqVzVuQee5fA49Jisz5oZh3T2R1zkp/ra0FyYmEjNMbEz3v/Z92DrFAnvRdLBrC GgVpEbWnW695Yg== -----END CERTIFICATE-----Generated at Wed Dec 10 10:10:14 2025 by rpki-client