This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft File: hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft (raw, json) Hash identifier: ZnWcbOhm+66Cz4biQptvsHM8O59weqSuq9c0X9QYyBo= Subject key identifier: 20:AE:CD:B0:BE:75:D3:CB:EC:8F:FA:F0:C3:68:B6:D3:38:2D:DC:7A Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28 Certificate issuer: /CN=86842274b3788b80b2fed916db3880fe08c37528 Certificate serial: 019B25F6120A8D64D1A5D99E0235660B9B30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft Manifest number: 177B Signing time: Tue 16 Dec 2025 07:00:41 +0000 Manifest this update: Tue 16 Dec 2025 07:00:41 +0000 Manifest next update: Wed 17 Dec 2025 07:00:41 +0000 Files and hashes: 1: 9YAK0xIjvZ0jkU9GYhz1bySm8ao.roa (hash: YSdN3my3ymjfDNRBd0aA0z7OnehzvCW8RCNSPlN8quQ=) 2: hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl (hash: Dfwe3BYc6GkJcFPqb2JocwY8UKCTvUlJq/CXyG7r/i0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 07:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:12:0a:8d:64:d1:a5:d9:9e:02:35:66:0b:9b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528 Validity Not Before: Dec 16 07:00:41 2025 GMT Not After : Dec 17 07:00:41 2025 GMT Subject: CN=20aecdb0be75d3cbec8ffaf0c368b6d3382ddc7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:50:39:05:7f:f5:5b:7b:60:5d:51:d8:18:82: 71:46:d6:a5:3a:94:fe:9b:64:4f:3c:b4:a3:bc:71: 27:38:16:e9:6a:48:34:e5:6f:ee:aa:31:06:44:50: 29:78:1a:b2:69:3a:2d:ad:fe:5f:8d:38:38:1c:15: 13:c2:59:62:d3:70:6c:22:e7:e9:b0:c1:5b:2e:a0: 9a:4c:0a:39:ad:38:66:fb:bc:2d:cd:5e:97:a1:ea: 86:68:eb:65:dd:b2:bb:53:f4:03:e3:33:62:8b:78: ce:ff:dc:e8:19:c8:81:c1:3b:23:85:9c:8f:17:ae: a8:f7:4d:2e:f9:8f:9a:97:aa:27:ad:87:f2:11:a5: 2d:df:ba:1e:11:c0:a2:15:38:44:f0:e6:ad:24:7c: a2:85:61:26:4a:50:29:ac:1a:0f:5b:47:6b:56:95: 49:d0:7f:68:c8:6f:30:33:6a:3d:c2:ec:bd:90:cb: f1:e5:b5:7f:57:23:f1:50:b9:a5:31:d2:4f:54:a4: ef:64:65:95:8c:eb:85:bf:01:a8:d2:4e:61:fa:2d: 12:75:6e:72:67:d2:f2:c2:bc:b3:1a:81:9b:63:62: 5c:a7:11:40:3f:ca:67:dc:c8:03:ba:09:1e:11:98: e5:25:6d:7d:70:8f:ec:a2:06:32:95:e0:3e:77:b2: 35:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:AE:CD:B0:BE:75:D3:CB:EC:8F:FA:F0:C3:68:B6:D3:38:2D:DC:7A X509v3 Authority Key Identifier: keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:31:de:19:36:ac:14:51:39:31:19:5d:66:68:e5:2a:de:74: 28:ee:12:19:ed:41:4d:29:72:8f:64:9b:1f:67:44:93:0d:bc: e5:6d:a5:8b:26:2d:98:6a:fd:96:4c:c3:cb:94:41:c3:59:7d: 5c:7f:ad:f7:27:84:8b:80:18:80:d6:40:6b:ef:fd:72:2d:d2: 19:75:39:87:a4:85:a2:52:54:39:71:42:84:a1:c7:44:35:4e: a4:af:64:d9:7c:0c:e5:46:ed:ff:36:75:6a:00:9b:65:82:df: 5b:f3:31:44:a8:42:16:86:cf:5b:dd:63:a6:a0:6c:bd:3c:b1: 43:a7:5c:c8:d8:e2:75:d6:34:92:db:d0:3f:f5:d4:d2:45:71: 8f:6d:fe:16:f8:74:71:e8:68:d3:06:7f:85:39:d3:8e:78:17: 7b:b7:51:d4:2e:30:66:40:dc:5e:9b:dd:cc:1f:47:3d:52:a2: e9:9a:c5:37:a0:5a:9f:cd:f8:db:7b:8c:c4:7d:56:77:86:ac: 73:95:b2:ce:42:39:59:b4:d5:cb:e0:bf:46:1e:64:23:50:cd: 40:02:c8:61:d2:d0:00:4d:24:c6:c7:29:c0:ed:f4:fc:b6:ff: 46:2d:1d:c0:8a:28:2b:7a:02:ff:b9:a4:28:d5:5d:60:6d:1d: c3:cd:4f:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9hIKjWTRpdmeAjVmC5swMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ODQyMjc0YjM3ODhiODBiMmZlZDkxNmRiMzg4MGZlMDhj Mzc1MjgwHhcNMjUxMjE2MDcwMDQxWhcNMjUxMjE3MDcwMDQxWjAzMTEwLwYDVQQD EygyMGFlY2RiMGJlNzVkM2NiZWM4ZmZhZjBjMzY4YjZkMzM4MmRkYzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1A5BX/1W3tgXVHYGIJxRtalOpT+ m2RPPLSjvHEnOBbpakg05W/uqjEGRFApeBqyaTotrf5fjTg4HBUTwlli03BsIufp sMFbLqCaTAo5rThm+7wtzV6XoeqGaOtl3bK7U/QD4zNii3jO/9zoGciBwTsjhZyP F66o900u+Y+al6onrYfyEaUt37oeEcCiFThE8OatJHyihWEmSlAprBoPW0drVpVJ 0H9oyG8wM2o9wuy9kMvx5bV/VyPxULmlMdJPVKTvZGWVjOuFvwGo0k5h+i0SdW5y Z9LywryzGoGbY2JcpxFAP8pn3MgDugkeEZjlJW19cI/sogYyleA+d7I1fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCuzbC+ddPL7I/68MNottM4Ldx6MB8GA1UdIwQY MBaAFIaEInSzeIuAsv7ZFts4gP4Iw3UoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG9RaWRMTjRpNEN5X3RrVzJ6aUFfZ2pEZFNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hZWJjZWYtNjI5Ni00YTMyLTg2M2Ut YWEzMTUyMGQzYTZiLzEvaG9RaWRMTjRpNEN5X3RrVzJ6aUFfZ2pEZFNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9hZWJjZWYtNjI5Ni00YTMyLTg2M2UtYWEzMTUyMGQzYTZi LzEvaG9RaWRMTjRpNEN5X3RrVzJ6aUFfZ2pEZFNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtDHeGTas FFE5MRldZmjlKt50KO4SGe1BTSlyj2SbH2dEkw285W2liyYtmGr9lkzDy5RBw1l9 XH+t9yeEi4AYgNZAa+/9ci3SGXU5h6SFolJUOXFChKHHRDVOpK9k2XwM5Ubt/zZ1 agCbZYLfW/MxRKhCFobPW91jpqBsvTyxQ6dcyNjiddY0ktvQP/XU0kVxj23+Fvh0 ceho0wZ/hTnTjngXe7dR1C4wZkDcXpvdzB9HPVKi6ZrFN6Ban83423uMxH1Wd4as c5WyzkI5WbTVy+C/Rh5kI1DNQALIYdLQAE0kxscpwO30/Lb/Ri0dwIooK3oC/7mk KNVdYG0dw81PZQ== -----END CERTIFICATE-----Generated at Tue Dec 16 14:02:52 2025 by rpki-client