This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
File: 0H11c6rK6CHIfW02Qxz-SygBq0E.mft (raw, json)
Hash identifier: n4Wn8YarDODuBe0bfuwSkpRmTiYcUftF/mdhb/jzdTQ=
Subject key identifier: 15:B6:68:C1:4F:75:D7:EB:0F:27:D8:2A:27:F3:42:2B:96:7A:33:FC
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial: 019B0DB73E1F56D4FDDE78D8097B1FF4E991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
Manifest number: 14C0
Signing time: Thu 11 Dec 2025 14:01:11 +0000
Manifest this update: Thu 11 Dec 2025 14:01:11 +0000
Manifest next update: Fri 12 Dec 2025 14:01:11 +0000
Files and hashes: 1: 0DF0N6re6QyjGkcELrZ2PayQLRE.roa (hash: +fZxWB3IhMVYTIeiKHbk18oRReT+PUmn1zDi+OPG/lg=)
2: 0H11c6rK6CHIfW02Qxz-SygBq0E.crl (hash: 5goxMgY+ulfZ7f/09uVo3d2WaUlR1SW6xZPmGBmtxY0=)
3: 3CbIb4TEaRdsUuSnzyfjsAcJ8C0.roa (hash: FMM+Gvcvh1vM/fuebG47q1lgLXjSvweT88zfbPoCGg0=)
4: 9MuueRmthntuKlKTwnVM9LicLuc.roa (hash: Qhwg9BIR9qrwafAgYX5pDSZ8fHBJKbNXSHBKS3TOnUU=)
5: DIgxiDivQ3J12DTsz16bG9BGpKM.roa (hash: ipoR7K+Qag5vPNI/tEX1tA3BB9jHVP98Tf9P91MGtOo=)
6: DmJAcHNL5tv0DXlXvpBQPSj5sQo.roa (hash: qPorS5oIpI2apfp+WoMqcxuGrwSF4BiUmmhlYMQw5nA=)
7: GzD59DhVZl4_JB2c2p4bRwKVQNQ.roa (hash: 1OX4fQvpvyMmGHi3iHoSqU11msJNSVwpVls7uukVpCA=)
8: IjdCoPnpProHieFWFH4g3HsCPwQ.roa (hash: +qa0/bhFwN16S6m5JsKHh8Vu/jzfjw/IRYtVBQ1/3r8=)
9: KVofMQ5Iytj3taZ4zNX-3NiQ9A0.roa (hash: SkunsiqfbTLPDmA+1dTSXrSg8HMaos1bWjK4FJzMt/g=)
10: KvI_WlSyaYCbk3_UABhTDePguQI.roa (hash: rPhhKIHPKKRCk53KHCmBvd4JNG8dyNFleXKMwbsZEzU=)
11: LWzTa12ceS3uKfqTTkpFAx1rmBY.roa (hash: oZTmu9Ix2td6L1C/5xioSK5eHWyXVBQsY0hPLgTw194=)
12: QLIx02DBkJ8BTa1KHeMGeh-YdMk.roa (hash: as3RaXvY0zPD+Du6iZO6HneereP8PKXWFDoTrnCHtlI=)
13: _nPdD9NUXNyi6od6mzg3CTRXnXE.roa (hash: 5bWlSHwxWuQbZxvEnoPTlMwKBtuBAjLxH0RjCokO3O4=)
14: bnb74LoHijb6ReFXDA8dOSN40TY.roa (hash: pwFJIAxYs5XXfIXS9iTFUvVpEjtoEP1h/fTl5ckAITo=)
15: dRXssJ13yx35ENXgGitRyldcyQ0.roa (hash: GNYSRDBbtFSH98fHHAWFkKkpqHnJB5tc2K3fGmfA9Xk=)
16: flhmne3OCJjm1qjNcOG0Z5Lii9s.roa (hash: lQBWv0VaHVIzNxJpgK2TdUDo5audQQ5kwE3Uz5fgISE=)
17: lPhFxRT8GyHXdHQ9vuVVLBajUJ4.roa (hash: WLQY2DGtBY5JdQqEp0/I2cNJpPQIJM0e6a534AHtEdU=)
18: liShckzg-y_pGqAmNFUsqPtV5XQ.roa (hash: CRdqFfzJj5q7aSo/eK5J7uVd+II8YpWMcc93sOlwTJc=)
19: owZB8ZzNInvz4qCAZczHr5i6TGQ.roa (hash: OFzte6Bxug1J1ywVmmkhfG0SiDFNDSFv051ZgTkzliw=)
20: p5Mg10zCIfRA7UUdSdLMSBXFn7Y.roa (hash: BUS0bw1TX/ZhcEDLxDt7zaEn0n8CiilgUb2ODoWryJc=)
21: pwGmEYbuZcQZsOR6KNT3jM32lkY.roa (hash: 5UfKqqEXju1N6ARaCHouu2g7PjryinRZ9Cc7bxq100I=)
22: t0oYcll8PI4dP_5gDrpVqJ6D9bo.roa (hash: ZFjxOlyDciCJjlrX2W0RSeB3N5wBNwxTEiHBjcHtR6s=)
23: w3B_b_hTCziVeuO8PCcq3YSHu2s.roa (hash: EH81W2RkfUjm0/Q5QNi5AYaveemQwHLB03yQgBEX+AM=)
24: wbzeMwPRyxIqE7rdL232Kbv3lo0.roa (hash: 0MwHWZD4yNGfOW35B+nQ/M0uW3knCev0pCMd/qtwBR0=)
25: wcgFMyvWhqJvffO8wVrnzqPEWeA.roa (hash: 9GrvaL4luNKVJdLGRZ5R+2Y+tPlz5Om1wQcUI9dS5Ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Dec 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:0d:b7:3e:1f:56:d4:fd:de:78:d8:09:7b:1f:f4:e9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Validity
Not Before: Dec 11 14:01:11 2025 GMT
Not After : Dec 12 14:01:11 2025 GMT
Subject: CN=15b668c14f75d7eb0f27d82a27f3422b967a33fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b1:e0:f0:87:6b:cd:a4:3c:8b:4e:84:56:ec:
99:01:6e:50:2b:27:a2:3f:3a:ed:b6:55:ce:69:f4:
6a:23:6a:c5:a8:1e:13:f2:d0:b6:a0:8d:70:80:26:
a0:1b:f1:d8:d7:ce:49:3d:f4:21:ed:13:2c:2a:88:
a1:63:4c:42:5a:e4:e5:08:5b:ed:7c:41:0f:37:14:
fc:8d:96:6e:87:8f:76:9f:a9:6b:98:49:40:02:ab:
36:44:04:a1:84:4f:28:ac:3a:3f:d6:fd:04:db:3f:
3c:1f:dc:b4:20:11:a5:d2:6e:df:aa:85:f7:00:91:
0a:b5:f7:08:aa:0b:02:89:58:d2:29:02:d6:49:7a:
a4:f6:1b:3d:0d:04:9c:23:f4:91:36:e6:6d:01:27:
33:21:fb:4c:0b:e7:03:b7:8e:28:eb:76:be:5d:36:
f0:8d:44:e6:6e:81:fb:b6:54:a5:94:59:39:71:33:
7d:26:a3:a0:50:04:6c:61:7d:2a:0f:7c:f5:8f:c4:
bc:72:9d:73:24:10:fb:15:d3:d8:54:83:7c:47:3d:
87:70:ae:00:2d:7d:64:08:b7:2d:c4:c1:ef:2d:ad:
52:82:84:6d:f0:5d:56:0d:ca:44:e1:0b:9a:9d:84:
49:b2:dd:83:87:06:1b:4a:4f:43:bb:9b:02:27:1b:
9c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B6:68:C1:4F:75:D7:EB:0F:27:D8:2A:27:F3:42:2B:96:7A:33:FC
X509v3 Authority Key Identifier:
keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:cf:0a:a7:42:3d:cf:a5:4c:7a:b2:81:e9:71:81:22:6c:09:
77:72:b1:d8:2b:23:58:5a:9b:8c:52:62:ec:95:99:03:84:f2:
c5:61:a0:6b:f7:6e:d1:0f:f6:36:80:b9:47:16:81:97:af:aa:
6a:30:b9:4e:81:29:60:09:34:b3:7c:8d:96:3f:09:4d:80:40:
13:e4:1a:34:54:9f:20:b5:1c:e7:38:7a:fb:50:ce:e0:f1:12:
a2:8b:fb:b8:43:98:cc:cd:0f:7b:2d:f9:29:4d:31:ff:bb:30:
02:88:16:15:f6:a1:40:d1:47:e2:a3:f6:68:d4:ab:dc:4d:f0:
99:a6:de:c3:e1:54:a1:f3:f6:6e:48:0c:ae:e2:77:e1:48:0c:
f2:45:a5:2b:51:05:21:36:cd:e0:af:0b:05:cc:14:99:3c:9a:
74:8e:32:1e:5c:f6:92:e0:42:67:8c:1e:35:a8:94:e6:ca:90:
f5:b6:f1:53:22:04:4c:85:c1:ef:fa:30:43:23:b0:e2:77:62:
bc:d4:e1:05:cb:6a:81:b6:ed:65:93:67:44:4a:de:f3:fa:19:
61:de:2a:8c:8c:ef:8e:2b:f7:aa:8b:61:ee:1e:80:d4:5f:ed:
93:bf:5d:9d:00:bf:d2:8b:22:52:74:52:a9:2c:ed:09:09:79:
6b:fd:42:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZsNtz4fVtT93njYCXsf9OmRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw
MWFiNDEwHhcNMjUxMjExMTQwMTExWhcNMjUxMjEyMTQwMTExWjAzMTEwLwYDVQQD
EygxNWI2NjhjMTRmNzVkN2ViMGYyN2Q4MmEyN2YzNDIyYjk2N2EzM2ZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobHg8IdrzaQ8i06EVuyZAW5QKyei
PzrttlXOafRqI2rFqB4T8tC2oI1wgCagG/HY185JPfQh7RMsKoihY0xCWuTlCFvt
fEEPNxT8jZZuh492n6lrmElAAqs2RAShhE8orDo/1v0E2z88H9y0IBGl0m7fqoX3
AJEKtfcIqgsCiVjSKQLWSXqk9hs9DQScI/SRNuZtASczIftMC+cDt44o63a+XTbw
jUTmboH7tlSllFk5cTN9JqOgUARsYX0qD3z1j8S8cp1zJBD7FdPYVIN8Rz2HcK4A
LX1kCLctxMHvLa1SgoRt8F1WDcpE4QuanYRJst2DhwYbSk9Du5sCJxuceQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBW2aMFPddfrDyfYKifzQiuWejP8MB8GA1UdIwQY
MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt
Y2Y5ZGM1YmFhYTc5LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5
LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuc8Kp0I9
z6VMerKB6XGBImwJd3Kx2CsjWFqbjFJi7JWZA4TyxWGga/du0Q/2NoC5RxaBl6+q
ajC5ToEpYAk0s3yNlj8JTYBAE+QaNFSfILUc5zh6+1DO4PESoov7uEOYzM0Pey35
KU0x/7swAogWFfahQNFH4qP2aNSr3E3wmabew+FUofP2bkgMruJ34UgM8kWlK1EF
ITbN4K8LBcwUmTyadI4yHlz2kuBCZ4weNaiU5sqQ9bbxUyIETIXB7/owQyOw4ndi
vNThBctqgbbtZZNnREre8/oZYd4qjIzvjiv3qoth7h6A1F/tk79dnQC/0osiUnRS
qSztCQl5a/1CBw==
-----END CERTIFICATE-----
Generated at Thu Dec 11 22:00:14 2025 by rpki-client