This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft File: Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json) Hash identifier: T1Zq4YUPPJTCxbJtwfvz4CWpM4J4ejiQYhLhp/gM4ls= Subject key identifier: 48:28:F2:EB:8B:F1:5F:D6:50:24:72:0F:E5:49:8C:4B:1E:39:AD:4C Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D Certificate issuer: /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d Certificate serial: 019B108185EB7646C784357D6C18FB47E131 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft Manifest number: 0CB6 Signing time: Fri 12 Dec 2025 03:01:22 +0000 Manifest this update: Fri 12 Dec 2025 03:01:22 +0000 Manifest next update: Sat 13 Dec 2025 03:01:22 +0000 Files and hashes: 1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: ORTsS6a7YgBBAZettB1W3lk/nxZcXEdGJfsYerGG5nI=) 2: dDZBFwtap4thW-74sW-jVlXGuR4.roa (hash: FLfuvFWVGolNmszXbBbS9jb1QikiZPyQXAU3cIWAlJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:85:eb:76:46:c7:84:35:7d:6c:18:fb:47:e1:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d Validity Not Before: Dec 12 03:01:22 2025 GMT Not After : Dec 13 03:01:22 2025 GMT Subject: CN=4828f2eb8bf15fd65024720fe5498c4b1e39ad4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:da:6b:33:de:e2:ea:84:dd:62:e9:3a:48:d9: 8a:da:54:55:c5:ea:16:e3:3c:d5:a8:93:ed:ae:57: 76:18:17:5b:52:40:85:59:28:7e:04:f2:ce:49:57: 47:d8:8b:44:c2:a0:51:c8:19:d6:b9:a0:af:ba:aa: aa:b5:65:07:c8:00:f8:4d:89:9d:04:fc:ce:00:62: af:ae:02:d0:a9:76:fa:d5:8b:cc:52:a6:8b:dc:4c: c2:c6:57:f8:80:cf:99:14:5a:35:54:30:63:e6:b8: c4:48:c1:a5:31:a8:e7:f7:66:cc:9a:b4:cb:4f:bd: 54:d1:25:31:6f:a8:eb:c6:d7:c8:ed:47:18:93:8b: b4:ad:f0:b8:5b:bb:3f:55:0d:64:76:6a:79:8c:d6: bc:0b:94:73:35:db:6e:11:37:35:3b:70:ad:75:29: 9c:33:73:e9:b0:1b:51:91:e9:22:06:88:8e:6b:c7: 3a:0b:27:57:de:7f:8d:8e:37:69:ff:8a:87:df:d0: 23:e6:48:08:95:17:53:b0:5f:cd:82:8c:d4:a7:a7: 6f:e4:45:60:8d:1b:e8:f7:f4:8f:57:f7:4a:ac:dd: 18:ea:ee:4c:17:48:42:39:02:a6:03:01:69:92:fa: 36:e9:03:5e:9f:84:58:4d:10:11:26:4d:f1:8f:5b: ba:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:28:F2:EB:8B:F1:5F:D6:50:24:72:0F:E5:49:8C:4B:1E:39:AD:4C X509v3 Authority Key Identifier: keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:9c:0e:51:df:b6:28:8e:69:10:84:ec:4f:f0:01:9d:67:15: cd:da:d9:f5:21:e5:37:fc:90:21:cc:68:e7:67:21:7c:0d:d2: c6:d8:17:10:74:75:8e:42:2a:2f:98:1f:d4:74:03:c4:c4:dc: 0e:60:81:cb:76:28:59:d2:b6:39:53:9a:41:1f:52:37:ec:ff: e6:2c:a4:62:35:e5:21:4a:bc:a2:ac:e8:b6:07:99:09:33:bf: 88:f4:80:b8:1f:40:11:f8:ce:5e:ad:78:6e:aa:b1:14:ae:69: 27:a6:42:5a:81:28:06:c1:a0:63:19:f8:d8:72:8e:7f:11:b1: a1:4d:98:90:cd:6b:3c:04:de:89:5e:9e:bb:7d:06:2d:40:0e: c0:31:2d:dc:09:66:7e:3d:d9:36:df:c3:21:fa:28:12:18:11: fc:05:0a:b4:35:ef:dc:a3:2c:c8:d9:f5:dd:79:fc:91:81:41: c8:ea:48:b9:5f:b9:0b:fc:b5:d3:8d:0b:24:c7:72:fd:b3:9e: c5:dd:48:eb:52:af:16:fe:9e:34:f3:10:18:4b:ae:e6:7f:ca: aa:92:5e:5b:c9:19:77:44:2d:2b:7a:68:e7:c4:3e:1e:da:f5: f6:9f:90:67:18:9b:bc:2d:7a:9c:9b:08:60:c4:d5:97:87:47: 92:b4:14:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgYXrdkbHhDV9bBj7R+ExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOGY2YTQ2ZGRmN2Y5M2NhMjkzNWViZTYxODI0NmFlNmRk MzFiMGQwHhcNMjUxMjEyMDMwMTIyWhcNMjUxMjEzMDMwMTIyWjAzMTEwLwYDVQQD Eyg0ODI4ZjJlYjhiZjE1ZmQ2NTAyNDcyMGZlNTQ5OGM0YjFlMzlhZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tprM97i6oTdYuk6SNmK2lRVxeoW 4zzVqJPtrld2GBdbUkCFWSh+BPLOSVdH2ItEwqBRyBnWuaCvuqqqtWUHyAD4TYmd BPzOAGKvrgLQqXb61YvMUqaL3EzCxlf4gM+ZFFo1VDBj5rjESMGlMajn92bMmrTL T71U0SUxb6jrxtfI7UcYk4u0rfC4W7s/VQ1kdmp5jNa8C5RzNdtuETc1O3CtdSmc M3PpsBtRkekiBoiOa8c6CydX3n+Njjdp/4qH39Aj5kgIlRdTsF/NgozUp6dv5EVg jRvo9/SPV/dKrN0Y6u5MF0hCOQKmAwFpkvo26QNen4RYTRARJk3xj1u6xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgo8uuL8V/WUCRyD+VJjEseOa1MMB8GA1UdIwQY MBaAFB6Pakbd9/k8opNevmGCRq5t0xsNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84YTkzYjYtMmU3ZS00ODdjLWIwZjMt MjhkMTVlYjczNDFkLzEvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC84YTkzYjYtMmU3ZS00ODdjLWIwZjMtMjhkMTVlYjczNDFk LzEvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZwOUd+2 KI5pEITsT/ABnWcVzdrZ9SHlN/yQIcxo52chfA3SxtgXEHR1jkIqL5gf1HQDxMTc DmCBy3YoWdK2OVOaQR9SN+z/5iykYjXlIUq8oqzotgeZCTO/iPSAuB9AEfjOXq14 bqqxFK5pJ6ZCWoEoBsGgYxn42HKOfxGxoU2YkM1rPATeiV6eu30GLUAOwDEt3Alm fj3ZNt/DIfooEhgR/AUKtDXv3KMsyNn13Xn8kYFByOpIuV+5C/y1040LJMdy/bOe xd1I61KvFv6eNPMQGEuu5n/KqpJeW8kZd0QtK3po58Q+Htr19p+QZxibvC16nJsI YMTVl4dHkrQUwQ== -----END CERTIFICATE-----Generated at Fri Dec 12 08:00:23 2025 by rpki-client