This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json) Hash identifier: 1uTXatX98zFjSUxGXGIWoHFVwHEyo3az5Vgmd1OyOe0= Subject key identifier: EE:1D:62:FF:6D:DF:1D:9E:5E:33:F0:F4:8B:8F:73:A9:35:32:81:03 Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01 Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01 Certificate serial: 019B38A2A79176F0D0F0FC654DEFCEF2253E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft Manifest number: 171B Signing time: Fri 19 Dec 2025 22:02:22 +0000 Manifest this update: Fri 19 Dec 2025 22:02:22 +0000 Manifest next update: Sat 20 Dec 2025 22:02:22 +0000 Files and hashes: 1: F9OoqFi0y_GmOqfd2KThNGIcQRY.roa (hash: lknpUMMVcnd7NcsdFUBWrkK4Xx0BYlNeNsb3yAIL3yk=) 2: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: h1BS/2VgIiwQLpowEs97fLqg+0KYOlNGz+Pb4iY7NPY=) 3: xiqfg-sD-JA_U5POqcioMLPnSTo.roa (hash: JD/nDI8VlQSh0memjTUGDYmELCHkrFvR/ey5KgQYfKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 22:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:a2:a7:91:76:f0:d0:f0:fc:65:4d:ef:ce:f2:25:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01 Validity Not Before: Dec 19 22:02:22 2025 GMT Not After : Dec 20 22:02:22 2025 GMT Subject: CN=ee1d62ff6ddf1d9e5e33f0f48b8f73a935328103 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:7b:9c:27:fc:dd:3a:39:e8:1d:6b:4a:1f:aa: d9:6d:b1:1f:3d:f5:c3:c5:55:d4:5f:a7:c5:a6:d1: 44:a4:de:e8:e7:e5:4c:aa:e0:58:88:53:4d:94:52: 01:1c:34:8e:6c:bf:fd:f1:c5:90:0a:75:63:ac:bb: 89:41:e8:08:ca:25:b3:4b:9c:8f:3c:aa:bf:33:62: 64:56:20:03:d3:17:b6:0a:55:49:05:5a:ab:39:5b: 83:84:89:dc:94:7d:bb:d9:c2:f5:53:00:be:a4:86: fa:64:25:e0:b0:ce:bf:71:91:73:7b:2e:90:70:94: 79:90:d4:3a:a6:2e:8a:1f:28:df:ef:2f:58:3e:84: 83:c7:5e:ad:35:a0:54:6c:a5:8a:65:bd:96:b0:73: 16:8e:3f:00:72:da:0b:ec:40:14:49:53:d9:63:65: 93:6d:29:c2:91:ba:17:9f:4c:4e:0b:d2:ea:ad:9d: ec:76:21:86:9b:58:19:36:2d:72:7c:84:eb:96:b1: 00:6c:35:1d:1e:c9:8d:42:f4:09:89:7a:8e:2d:f9: f5:b1:05:08:60:f9:cc:2e:8e:c6:15:00:25:f1:6d: b6:18:03:ce:88:cd:37:16:e5:cc:a2:f2:63:59:27: 1e:cd:36:6b:b9:a9:1b:2a:c7:a8:e5:ae:c9:f3:e6: 64:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1D:62:FF:6D:DF:1D:9E:5E:33:F0:F4:8B:8F:73:A9:35:32:81:03 X509v3 Authority Key Identifier: keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:61:9e:14:94:27:c9:5f:51:49:15:1c:81:eb:0d:f8:6f:d7: 0d:df:9a:53:72:42:16:aa:fa:09:2f:a0:e2:f8:2c:fc:03:ae: f4:9b:0c:fc:37:81:41:04:5a:eb:93:1a:21:ea:03:16:03:fd: 5c:46:f5:54:3f:f6:2c:3f:b2:4f:4a:3c:bc:fc:7f:2a:0f:9c: 5c:40:05:09:ab:80:ae:51:fc:10:0d:f0:7e:11:5f:75:39:87: dd:48:fb:b7:87:b1:9b:ed:bb:c8:49:d1:e0:5b:73:47:7d:b4: 9c:31:96:f6:03:9b:06:35:7e:e0:a5:34:7c:c4:15:81:8d:c3: 82:69:1e:6a:5d:c8:be:5e:3a:17:7f:83:07:4b:32:22:4b:43: 1a:a0:c4:e1:be:57:e6:51:1b:ff:f4:2c:01:f5:f2:c7:8d:73: f2:c4:29:aa:40:47:c9:a0:0d:e4:13:23:fe:69:36:2f:0c:7e: 71:98:54:f5:bc:23:3a:46:2b:9d:9a:04:13:65:96:47:84:6e: 77:2a:fd:55:8a:46:f4:9e:9a:81:b2:42:36:a6:3e:3a:5e:f4: 92:23:da:34:65:dc:ab:41:66:34:c1:88:12:d0:6a:11:4a:7f: fa:9b:f6:c4:19:f9:7f:ef:b3:31:fe:5a:9d:f4:10:fb:6d:c9: 88:db:73:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4oqeRdvDQ8PxlTe/O8iU+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOGM3NzMzNmQ2NmY3YjAyMzhlNmMxODRjNjRmYTRmMjRk MDlmMDEwHhcNMjUxMjE5MjIwMjIyWhcNMjUxMjIwMjIwMjIyWjAzMTEwLwYDVQQD EyhlZTFkNjJmZjZkZGYxZDllNWUzM2YwZjQ4YjhmNzNhOTM1MzI4MTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HucJ/zdOjnoHWtKH6rZbbEfPfXD xVXUX6fFptFEpN7o5+VMquBYiFNNlFIBHDSObL/98cWQCnVjrLuJQegIyiWzS5yP PKq/M2JkViAD0xe2ClVJBVqrOVuDhInclH272cL1UwC+pIb6ZCXgsM6/cZFzey6Q cJR5kNQ6pi6KHyjf7y9YPoSDx16tNaBUbKWKZb2WsHMWjj8ActoL7EAUSVPZY2WT bSnCkboXn0xOC9LqrZ3sdiGGm1gZNi1yfITrlrEAbDUdHsmNQvQJiXqOLfn1sQUI YPnMLo7GFQAl8W22GAPOiM03FuXMovJjWScezTZruakbKseo5a7J8+ZkbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO4dYv9t3x2eXjPw9IuPc6k1MoEDMB8GA1UdIwQY MBaAFB6MdzNtZvewI45sGExk+k8k0J8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2Et OTk5NTdkZjQ5OTdlLzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2EtOTk5NTdkZjQ5OTdl LzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmGeFJQn yV9RSRUcgesN+G/XDd+aU3JCFqr6CS+g4vgs/AOu9JsM/DeBQQRa65MaIeoDFgP9 XEb1VD/2LD+yT0o8vPx/Kg+cXEAFCauArlH8EA3wfhFfdTmH3Uj7t4exm+27yEnR 4FtzR320nDGW9gObBjV+4KU0fMQVgY3Dgmkeal3Ivl46F3+DB0syIktDGqDE4b5X 5lEb//QsAfXyx41z8sQpqkBHyaAN5BMj/mk2Lwx+cZhU9bwjOkYrnZoEE2WWR4Ru dyr9VYpG9J6agbJCNqY+Ol70kiPaNGXcq0FmNMGIEtBqEUp/+pv2xBn5f++zMf5a nfQQ+23JiNtzdA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:17:48 2025 by rpki-client