This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json)
Hash identifier: orygvr+GDOLHa7gTW75qrFTWKnTjA2ZmeSkScuQ9TuM=
Subject key identifier: 85:51:FC:7F:E6:8F:08:21:B6:84:D4:36:BC:0F:FA:24:F0:74:E6:75
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial: 019B390F2BF6013F627727B13A8BF4CBB363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
Manifest number: 1253
Signing time: Sat 20 Dec 2025 00:00:54 +0000
Manifest this update: Sat 20 Dec 2025 00:00:54 +0000
Manifest next update: Sun 21 Dec 2025 00:00:54 +0000
Files and hashes: 1: 102Rcb8KW1Pgg5SOwqYp5kasBLk.roa (hash: y7m1QcMceHxmu8M/v2wfuOKJTXQndwbvVHTDN4L1lSE=)
2: 1mc01k4JB9mO_uUxoDo8i1hWS0E.roa (hash: 8wTCoFuyYANLWW2D/EVqLWg408oEqbUMAtp374e3yJQ=)
3: 88P_skAGBFp7OKZHRnG0KVJmPoI.roa (hash: tGiqK/XqC0JOJiX2Em9KLLavk6JfLtdyVgtUQOZcMls=)
4: Gm_cS8iJj-tFJXP1V0-jwGNEWbI.roa (hash: Mek1+m4iEtpLgT/StSNohRI7JnRBASyUnmLHmN4630g=)
5: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: 1NQ329IlWFJuS7zdifEqKF1F6NFarmahc4f24nAJLj8=)
6: M5xSNSg74xAiPhHirIDMnYyKKDI.roa (hash: kFY18cM1/c9JgLsf0tF1GX9g3u8AHSeqmtNVMWpdTXM=)
7: Npd-hacRQ57Kduiqr1RWMbXhGmA.roa (hash: WabQYFdWc7dGq5W0nQkAEwuDtxytEQkZlmuQjmPaRbg=)
8: bge-I_W1NXO4wXcUD8wO2q8GORE.roa (hash: QczRVPNbfyo75luxG1p381iR6nIvpAPPLqlT8W5S9ag=)
9: kKXRYJxwMMXbPNKSde4f-CErN8I.roa (hash: vsnRE4FK7Q7v85LDHKqSHekGSg54JFxZp3g76izUfTw=)
10: kaRHNamZXPJCw_g8nY9b4j30k2Y.roa (hash: 4Wp2FhFr3sOAxEWUnXlXchKEwJ5dKGkuJJKV3L/ukrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Dec 2025 16:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:39:0f:2b:f6:01:3f:62:77:27:b1:3a:8b:f4:cb:b3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
Validity
Not Before: Dec 20 00:00:54 2025 GMT
Not After : Dec 21 00:00:54 2025 GMT
Subject: CN=8551fc7fe68f0821b684d436bc0ffa24f074e675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ec:60:12:09:47:00:28:10:e6:8f:7c:12:bc:
7a:92:ca:df:96:76:6b:0e:bd:4a:12:85:8a:c4:4e:
d9:dc:8e:2a:a0:e2:f1:56:4d:e7:f5:28:ad:66:d2:
58:06:60:58:92:d6:ef:13:4a:cb:20:2c:92:88:b9:
4d:af:ad:50:aa:18:59:9a:b3:e5:d7:b4:75:56:25:
e2:58:b2:d6:8a:5b:d3:c5:13:b8:21:2f:18:a5:c0:
1d:28:55:f7:2d:07:fd:10:8a:3b:e2:51:7f:a5:eb:
64:80:1c:33:01:59:92:56:24:1a:91:7a:b1:d1:77:
bb:18:fb:7a:0b:07:64:e4:6c:54:ac:8c:17:5b:f6:
46:7f:fa:58:55:13:30:7a:d7:1d:e8:9b:9c:24:9f:
c2:49:13:cf:d5:d5:bb:ee:1a:fa:2a:9a:52:36:e2:
42:64:03:bc:ac:b3:a2:97:2f:3a:b4:23:3a:9f:38:
65:f5:f6:aa:5d:f2:bd:d7:50:ee:a3:a0:63:30:dc:
e1:68:62:68:41:09:e8:a1:70:5e:43:88:da:8a:e4:
d6:e8:38:db:da:21:36:04:42:86:46:ca:42:23:64:
e3:79:a5:8a:36:cc:8f:b5:f3:d5:1b:31:94:bc:93:
61:bb:e5:b6:a1:c9:c7:58:17:58:d7:29:ec:53:2f:
0d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:51:FC:7F:E6:8F:08:21:B6:84:D4:36:BC:0F:FA:24:F0:74:E6:75
X509v3 Authority Key Identifier:
keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f9:75:5b:38:a8:13:bc:78:7a:6c:27:1a:c7:6e:84:e9:81:
e7:d8:86:dd:39:35:02:52:91:ec:44:97:df:f5:11:6b:c2:e8:
74:55:6e:71:05:51:31:b7:23:e0:63:09:dc:c1:80:93:14:3c:
a0:58:88:0c:63:c8:f4:d3:03:bb:f0:ab:55:1d:6f:01:41:d8:
1c:8f:62:31:73:61:20:e9:6f:c4:61:76:a3:99:1f:91:80:59:
2a:52:eb:c0:a7:bc:fe:1c:28:3f:3b:d2:3b:d2:e6:f0:d2:5a:
f3:c3:69:6e:9e:f2:37:25:d1:32:dd:6f:11:c1:dd:fc:d3:de:
a2:67:77:d2:c3:89:88:6f:d4:c0:ca:58:32:43:5d:be:f2:5e:
ee:37:86:1e:04:ab:7f:a4:f7:cc:47:56:1c:ca:eb:24:15:f1:
ff:9e:a4:2b:7a:ce:5f:45:90:ff:68:6b:d9:7d:78:8a:9e:ad:
0f:bb:4e:63:f4:a2:ee:f3:c6:78:f7:16:0c:25:e0:b7:7b:6f:
48:59:eb:bf:fb:c0:5b:be:ae:fe:58:28:24:5e:0a:ba:cc:2c:
53:28:3d:ef:4d:33:c9:8c:66:62:51:f5:26:3b:1b:49:c1:48:
e2:6d:e3:97:ec:e2:af:3c:34:b6:70:3a:86:7b:6c:c5:5e:8c:
ab:48:4c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 20 01:27:32 2025 by rpki-client