This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft File: ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json) Hash identifier: lm1mr7SNZNFfURBRSPNmwoIdEQq/2OkPHy0/X8SaUvU= Subject key identifier: 0C:12:35:27:CD:3D:F3:8B:5C:AD:2D:80:E8:90:30:E4:1A:A9:64:23 Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC Certificate issuer: /CN=868f20309962f7c6e1c3267f083e124d83dd76fc Certificate serial: 019AF50AEDEEFB6C37819F85D51057098D9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 19:02:05 +0000 Manifest this update: Sat 06 Dec 2025 19:02:05 +0000 Manifest next update: Sun 07 Dec 2025 19:02:05 +0000 Files and hashes: 1: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: RZcgPCpot3qY+nKob0nUZDvMpWvGk/I3eH9/sNXURBc=) 2: rfewBBlrs58wJgdGtzFYKvwGFI8.roa (hash: 12fD5K/uMK4YG5nY9pYsgAuOVyylAM893HbTm9LpUXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:ed:ee:fb:6c:37:81:9f:85:d5:10:57:09:8d:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc Validity Not Before: Dec 6 19:02:05 2025 GMT Not After : Dec 7 19:02:05 2025 GMT Subject: CN=0c123527cd3df38b5cad2d80e89030e41aa96423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2d:9c:84:8a:d8:15:f7:8f:7e:1f:a1:a3:7f: b4:bf:b2:e4:09:66:6b:9e:e6:ba:f1:59:2c:8f:88: 4d:b6:bb:ce:c0:06:d9:8f:92:d8:43:21:4d:9e:1c: 23:84:4b:59:51:cb:8b:ae:63:05:78:4e:00:15:eb: f2:58:78:3e:dd:1c:ca:33:16:9c:74:a9:d7:f7:dd: 40:0f:73:0f:19:25:8e:2f:8e:13:fd:4e:f1:60:ed: e7:84:5a:c7:54:51:a0:17:f2:09:28:73:c8:21:92: bd:2f:35:63:3b:cf:d9:89:5e:f8:aa:29:85:5f:80: ea:8f:ec:7f:ec:fb:7d:88:2d:75:c8:7a:1b:b9:14: 35:a8:af:61:63:ad:fa:af:87:25:ef:f8:ee:0e:d1: 26:3d:04:b0:33:ab:bc:85:43:5d:4c:e5:6c:53:88: 25:6a:7f:0b:c8:8d:fa:e7:8a:c6:c0:c1:98:e5:8f: de:84:e9:30:6c:e1:3b:95:01:bc:89:34:85:e3:a8: 0a:f8:c4:dc:8c:7e:48:fb:68:d8:f3:16:34:7c:00: 17:80:f4:9f:66:b3:75:1f:3f:c5:90:98:1e:31:56: 4a:d1:3a:67:f3:31:06:1e:be:94:5c:65:33:a4:bf: ba:f9:0c:7c:7d:0f:ab:aa:71:25:7e:c9:08:59:3a: d7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:12:35:27:CD:3D:F3:8B:5C:AD:2D:80:E8:90:30:E4:1A:A9:64:23 X509v3 Authority Key Identifier: keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e1:f8:a3:04:a6:37:03:78:63:be:2b:54:c2:4d:73:6d:7f: 7f:cc:6e:10:30:3d:dc:8c:c5:a2:7d:c1:63:25:de:11:e6:4a: f0:61:2c:f1:24:fc:05:cc:83:2f:b9:d0:da:2b:ab:58:8d:ce: f4:65:cd:a5:24:0d:1c:52:d1:ba:38:d9:24:43:70:d6:35:f9: 0b:33:31:7b:70:df:95:b7:4a:27:2e:d9:77:b4:40:de:c2:21: 15:6c:96:24:3c:7d:4d:6a:80:2d:0f:83:c3:3c:e7:da:73:16: 2b:32:a5:67:76:cc:12:05:4c:ba:85:14:8d:c8:09:a6:1e:c4: 55:70:a3:7c:d4:0b:59:4e:05:eb:c1:2e:d9:cc:63:ad:e1:62: 8d:67:50:eb:67:44:81:be:9f:bc:68:a7:08:36:0c:90:cb:4d: ef:16:80:34:e0:5a:27:9c:e0:9d:48:3a:eb:66:b0:8b:b7:fd: 68:1c:70:34:24:01:d0:a2:42:08:46:e9:10:d7:df:53:b3:47: 5e:da:d8:1c:8b:78:fa:fe:85:2a:3f:3d:08:03:28:bc:fb:46: 32:0d:7e:aa:a6:f2:6a:9a:4b:fe:81:63:a6:45:df:9b:63:68: 68:ae:41:e5:42:92:d6:26:ba:7a:0a:65:ec:cc:76:15:6b:52: 50:97:0b:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cu3u+2w3gZ+F1RBXCY2bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OGYyMDMwOTk2MmY3YzZlMWMzMjY3ZjA4M2UxMjRkODNk ZDc2ZmMwHhcNMjUxMjA2MTkwMjA1WhcNMjUxMjA3MTkwMjA1WjAzMTEwLwYDVQQD EygwYzEyMzUyN2NkM2RmMzhiNWNhZDJkODBlODkwMzBlNDFhYTk2NDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS2chIrYFfePfh+ho3+0v7LkCWZr nua68Vksj4hNtrvOwAbZj5LYQyFNnhwjhEtZUcuLrmMFeE4AFevyWHg+3RzKMxac dKnX991AD3MPGSWOL44T/U7xYO3nhFrHVFGgF/IJKHPIIZK9LzVjO8/ZiV74qimF X4Dqj+x/7Pt9iC11yHobuRQ1qK9hY636r4cl7/juDtEmPQSwM6u8hUNdTOVsU4gl an8LyI3654rGwMGY5Y/ehOkwbOE7lQG8iTSF46gK+MTcjH5I+2jY8xY0fAAXgPSf ZrN1Hz/FkJgeMVZK0Tpn8zEGHr6UXGUzpL+6+Qx8fQ+rqnElfskIWTrXcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwSNSfNPfOLXK0tgOiQMOQaqWQjMB8GA1UdIwQY MBaAFIaPIDCZYvfG4cMmfwg+Ek2D3Xb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xMjZjZWUtZjE2Yy00NWE4LTk3YjIt NjIzMzg0ZjNlMTI1LzEvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8xMjZjZWUtZjE2Yy00NWE4LTk3YjItNjIzMzg0ZjNlMTI1 LzEvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATOH4owSm NwN4Y74rVMJNc21/f8xuEDA93IzFon3BYyXeEeZK8GEs8ST8BcyDL7nQ2iurWI3O 9GXNpSQNHFLRujjZJENw1jX5CzMxe3DflbdKJy7Zd7RA3sIhFWyWJDx9TWqALQ+D wzzn2nMWKzKlZ3bMEgVMuoUUjcgJph7EVXCjfNQLWU4F68Eu2cxjreFijWdQ62dE gb6fvGinCDYMkMtN7xaANOBaJ5zgnUg662awi7f9aBxwNCQB0KJCCEbpENffU7NH XtrYHIt4+v6FKj89CAMovPtGMg1+qqbyappL/oFjpkXfm2NoaK5B5UKS1ia6egpl 7Mx2FWtSUJcLjQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:12:53 2025 by rpki-client