This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: orygvr+GDOLHa7gTW75qrFTWKnTjA2ZmeSkScuQ9TuM= Subject key identifier: 85:51:FC:7F:E6:8F:08:21:B6:84:D4:36:BC:0F:FA:24:F0:74:E6:75 Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 019B390F2BF6013F627727B13A8BF4CBB363 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 1253 Signing time: Sat 20 Dec 2025 00:00:54 +0000 Manifest this update: Sat 20 Dec 2025 00:00:54 +0000 Manifest next update: Sun 21 Dec 2025 00:00:54 +0000 Files and hashes: 1: 102Rcb8KW1Pgg5SOwqYp5kasBLk.roa (hash: y7m1QcMceHxmu8M/v2wfuOKJTXQndwbvVHTDN4L1lSE=) 2: 1mc01k4JB9mO_uUxoDo8i1hWS0E.roa (hash: 8wTCoFuyYANLWW2D/EVqLWg408oEqbUMAtp374e3yJQ=) 3: 88P_skAGBFp7OKZHRnG0KVJmPoI.roa (hash: tGiqK/XqC0JOJiX2Em9KLLavk6JfLtdyVgtUQOZcMls=) 4: Gm_cS8iJj-tFJXP1V0-jwGNEWbI.roa (hash: Mek1+m4iEtpLgT/StSNohRI7JnRBASyUnmLHmN4630g=) 5: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: 1NQ329IlWFJuS7zdifEqKF1F6NFarmahc4f24nAJLj8=) 6: M5xSNSg74xAiPhHirIDMnYyKKDI.roa (hash: kFY18cM1/c9JgLsf0tF1GX9g3u8AHSeqmtNVMWpdTXM=) 7: Npd-hacRQ57Kduiqr1RWMbXhGmA.roa (hash: WabQYFdWc7dGq5W0nQkAEwuDtxytEQkZlmuQjmPaRbg=) 8: bge-I_W1NXO4wXcUD8wO2q8GORE.roa (hash: QczRVPNbfyo75luxG1p381iR6nIvpAPPLqlT8W5S9ag=) 9: kKXRYJxwMMXbPNKSde4f-CErN8I.roa (hash: vsnRE4FK7Q7v85LDHKqSHekGSg54JFxZp3g76izUfTw=) 10: kaRHNamZXPJCw_g8nY9b4j30k2Y.roa (hash: 4Wp2FhFr3sOAxEWUnXlXchKEwJ5dKGkuJJKV3L/ukrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:2b:f6:01:3f:62:77:27:b1:3a:8b:f4:cb:b3:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Dec 20 00:00:54 2025 GMT Not After : Dec 21 00:00:54 2025 GMT Subject: CN=8551fc7fe68f0821b684d436bc0ffa24f074e675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ec:60:12:09:47:00:28:10:e6:8f:7c:12:bc: 7a:92:ca:df:96:76:6b:0e:bd:4a:12:85:8a:c4:4e: d9:dc:8e:2a:a0:e2:f1:56:4d:e7:f5:28:ad:66:d2: 58:06:60:58:92:d6:ef:13:4a:cb:20:2c:92:88:b9: 4d:af:ad:50:aa:18:59:9a:b3:e5:d7:b4:75:56:25: e2:58:b2:d6:8a:5b:d3:c5:13:b8:21:2f:18:a5:c0: 1d:28:55:f7:2d:07:fd:10:8a:3b:e2:51:7f:a5:eb: 64:80:1c:33:01:59:92:56:24:1a:91:7a:b1:d1:77: bb:18:fb:7a:0b:07:64:e4:6c:54:ac:8c:17:5b:f6: 46:7f:fa:58:55:13:30:7a:d7:1d:e8:9b:9c:24:9f: c2:49:13:cf:d5:d5:bb:ee:1a:fa:2a:9a:52:36:e2: 42:64:03:bc:ac:b3:a2:97:2f:3a:b4:23:3a:9f:38: 65:f5:f6:aa:5d:f2:bd:d7:50:ee:a3:a0:63:30:dc: e1:68:62:68:41:09:e8:a1:70:5e:43:88:da:8a:e4: d6:e8:38:db:da:21:36:04:42:86:46:ca:42:23:64: e3:79:a5:8a:36:cc:8f:b5:f3:d5:1b:31:94:bc:93: 61:bb:e5:b6:a1:c9:c7:58:17:58:d7:29:ec:53:2f: 0d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:51:FC:7F:E6:8F:08:21:B6:84:D4:36:BC:0F:FA:24:F0:74:E6:75 X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f9:75:5b:38:a8:13:bc:78:7a:6c:27:1a:c7:6e:84:e9:81: e7:d8:86:dd:39:35:02:52:91:ec:44:97:df:f5:11:6b:c2:e8: 74:55:6e:71:05:51:31:b7:23:e0:63:09:dc:c1:80:93:14:3c: a0:58:88:0c:63:c8:f4:d3:03:bb:f0:ab:55:1d:6f:01:41:d8: 1c:8f:62:31:73:61:20:e9:6f:c4:61:76:a3:99:1f:91:80:59: 2a:52:eb:c0:a7:bc:fe:1c:28:3f:3b:d2:3b:d2:e6:f0:d2:5a: f3:c3:69:6e:9e:f2:37:25:d1:32:dd:6f:11:c1:dd:fc:d3:de: a2:67:77:d2:c3:89:88:6f:d4:c0:ca:58:32:43:5d:be:f2:5e: ee:37:86:1e:04:ab:7f:a4:f7:cc:47:56:1c:ca:eb:24:15:f1: ff:9e:a4:2b:7a:ce:5f:45:90:ff:68:6b:d9:7d:78:8a:9e:ad: 0f:bb:4e:63:f4:a2:ee:f3:c6:78:f7:16:0c:25:e0:b7:7b:6f: 48:59:eb:bf:fb:c0:5b:be:ae:fe:58:28:24:5e:0a:ba:cc:2c: 53:28:3d:ef:4d:33:c9:8c:66:62:51:f5:26:3b:1b:49:c1:48: e2:6d:e3:97:ec:e2:af:3c:34:b6:70:3a:86:7b:6c:c5:5e:8c: ab:48:4c:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Dyv2AT9idyexOov0y7NjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjUxMjIwMDAwMDU0WhcNMjUxMjIxMDAwMDU0WjAzMTEwLwYDVQQD Eyg4NTUxZmM3ZmU2OGYwODIxYjY4NGQ0MzZiYzBmZmEyNGYwNzRlNjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+xgEglHACgQ5o98Erx6ksrflnZr Dr1KEoWKxE7Z3I4qoOLxVk3n9SitZtJYBmBYktbvE0rLICySiLlNr61QqhhZmrPl 17R1ViXiWLLWilvTxRO4IS8YpcAdKFX3LQf9EIo74lF/petkgBwzAVmSViQakXqx 0Xe7GPt6Cwdk5GxUrIwXW/ZGf/pYVRMwetcd6JucJJ/CSRPP1dW77hr6KppSNuJC ZAO8rLOily86tCM6nzhl9faqXfK911Duo6BjMNzhaGJoQQnooXBeQ4jaiuTW6Djb 2iE2BEKGRspCI2TjeaWKNsyPtfPVGzGUvJNhu+W2ocnHWBdY1ynsUy8NLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVR/H/mjwghtoTUNrwP+iTwdOZ1MB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPl1Wzio E7x4emwnGsduhOmB59iG3Tk1AlKR7ESX3/URa8LodFVucQVRMbcj4GMJ3MGAkxQ8 oFiIDGPI9NMDu/CrVR1vAUHYHI9iMXNhIOlvxGF2o5kfkYBZKlLrwKe8/hwoPzvS O9Lm8NJa88Npbp7yNyXRMt1vEcHd/NPeomd30sOJiG/UwMpYMkNdvvJe7jeGHgSr f6T3zEdWHMrrJBXx/56kK3rOX0WQ/2hr2X14ip6tD7tOY/Si7vPGePcWDCXgt3tv SFnrv/vAW76u/lgoJF4KuswsUyg9700zyYxmYlH1JjsbScFI4m3jl+zirzw0tnA6 hntsxV6Mq0hM4w== -----END CERTIFICATE-----Generated at Sat Dec 20 02:02:41 2025 by rpki-client