This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json) Hash identifier: /moGONwOPdEv1NLCD6G9O6mXOfndeUa4Q3hejDX/bIg= Subject key identifier: 04:1B:F8:B6:6C:13:AC:E7:65:A7:D1:FE:AA:AA:9E:C8:46:24:D6:BE Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01 Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01 Certificate serial: 019B4627563CB270D65344F33A78F0462912 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft Manifest number: 1722 Signing time: Mon 22 Dec 2025 13:02:21 +0000 Manifest this update: Mon 22 Dec 2025 13:02:21 +0000 Manifest next update: Tue 23 Dec 2025 13:02:21 +0000 Files and hashes: 1: F9OoqFi0y_GmOqfd2KThNGIcQRY.roa (hash: lknpUMMVcnd7NcsdFUBWrkK4Xx0BYlNeNsb3yAIL3yk=) 2: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: JpGFAmNuFH1wO/FRhdov3hLzjBezZf0P8RBkjLpMUnc=) 3: xiqfg-sD-JA_U5POqcioMLPnSTo.roa (hash: JD/nDI8VlQSh0memjTUGDYmELCHkrFvR/ey5KgQYfKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:56:3c:b2:70:d6:53:44:f3:3a:78:f0:46:29:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01 Validity Not Before: Dec 22 13:02:21 2025 GMT Not After : Dec 23 13:02:21 2025 GMT Subject: CN=041bf8b66c13ace765a7d1feaaaa9ec84624d6be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:dd:fc:97:6d:23:1c:c8:54:c7:3b:ae:17:62: 1f:ad:8e:df:db:1e:d0:75:68:81:48:b3:b5:84:7d: 83:a1:13:c0:53:9c:c4:fd:f3:4c:17:c9:e3:3a:f9: 8c:11:c7:8c:34:92:63:74:b5:dd:f3:8c:fa:90:e9: a7:24:fd:ad:fd:a5:d2:6b:2d:97:07:f9:2f:53:39: 38:16:99:a6:51:a3:b5:c0:1c:67:79:91:58:aa:44: 8a:44:f7:25:df:24:49:ba:84:47:d9:a0:a7:00:79: d9:86:e4:6e:a5:5d:db:3d:89:2f:39:a6:ed:33:59: 97:39:9f:5f:d6:f9:76:d3:58:11:8d:9a:0c:f0:23: 10:36:18:55:24:40:c6:89:8f:3d:14:d6:8d:f9:dc: 42:44:7d:5a:97:32:24:33:6a:c0:9e:bd:46:ca:15: 98:f3:7a:b9:f5:19:60:26:7b:03:49:58:1f:26:fe: 76:e3:b9:2b:db:89:f7:8e:38:73:86:0b:98:a7:d5: e3:0b:72:ab:56:f9:21:1f:c3:bd:4f:6c:c7:f5:d1: ee:41:56:1a:99:38:98:c5:47:28:c8:50:36:f9:20: f2:9c:a4:30:e1:72:35:4a:9b:82:ac:d9:51:56:1d: ea:2a:72:91:bf:6b:30:35:ec:94:1e:a7:43:7f:ff: 2d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1B:F8:B6:6C:13:AC:E7:65:A7:D1:FE:AA:AA:9E:C8:46:24:D6:BE X509v3 Authority Key Identifier: keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:09:a0:5e:bf:7f:94:2b:9a:97:03:31:f4:d9:04:2e:30:01: b6:9b:8c:12:fd:b6:f1:96:9b:da:30:27:34:cb:b0:4d:5b:2b: 51:58:c6:74:87:2e:34:2b:7c:28:54:7b:eb:b0:2d:cf:49:a1: a7:23:2f:cf:17:f0:4a:a9:21:f0:a6:5e:3f:c0:f4:36:01:3c: bf:d2:96:ed:a6:a0:d9:ae:5f:af:60:11:b9:09:99:44:2b:a0: 11:1f:05:eb:8b:72:f5:2b:20:4b:c3:b7:dd:4c:ad:ff:3c:a3: 14:2a:09:aa:57:e8:d1:b2:0d:e8:0f:5e:31:3f:cd:02:5d:97: 9c:dc:88:6b:ff:c1:53:37:fa:63:c5:d6:cc:4f:2c:a5:4e:39: b1:03:42:8c:98:33:d7:88:11:14:80:a7:43:65:36:73:d9:50: e5:a2:cc:a2:da:db:2a:a2:b9:c6:45:90:01:8c:52:a4:e9:6c: 08:ca:b0:5d:7d:87:83:25:6c:e2:bf:18:70:0a:9b:8b:3e:06: 0d:46:85:83:3b:5d:7f:a2:6e:88:0f:ff:2d:51:5a:cb:d9:59: d5:41:ba:38:3c:e9:5b:34:f7:53:41:fd:fc:87:94:98:b4:0d: 3a:63:fe:bb:ed:19:ab:e7:2e:01:c7:07:33:90:1d:a0:ac:cf: 20:c2:39:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJ1Y8snDWU0TzOnjwRikSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOGM3NzMzNmQ2NmY3YjAyMzhlNmMxODRjNjRmYTRmMjRk MDlmMDEwHhcNMjUxMjIyMTMwMjIxWhcNMjUxMjIzMTMwMjIxWjAzMTEwLwYDVQQD EygwNDFiZjhiNjZjMTNhY2U3NjVhN2QxZmVhYWFhOWVjODQ2MjRkNmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8N38l20jHMhUxzuuF2IfrY7f2x7Q dWiBSLO1hH2DoRPAU5zE/fNMF8njOvmMEceMNJJjdLXd84z6kOmnJP2t/aXSay2X B/kvUzk4FpmmUaO1wBxneZFYqkSKRPcl3yRJuoRH2aCnAHnZhuRupV3bPYkvOabt M1mXOZ9f1vl201gRjZoM8CMQNhhVJEDGiY89FNaN+dxCRH1alzIkM2rAnr1GyhWY 83q59RlgJnsDSVgfJv5247kr24n3jjhzhguYp9XjC3KrVvkhH8O9T2zH9dHuQVYa mTiYxUcoyFA2+SDynKQw4XI1SpuCrNlRVh3qKnKRv2swNeyUHqdDf/8tPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQb+LZsE6znZafR/qqqnshGJNa+MB8GA1UdIwQY MBaAFB6MdzNtZvewI45sGExk+k8k0J8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2Et OTk5NTdkZjQ5OTdlLzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2EtOTk5NTdkZjQ5OTdl LzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgmgXr9/ lCualwMx9NkELjABtpuMEv228Zab2jAnNMuwTVsrUVjGdIcuNCt8KFR767Atz0mh pyMvzxfwSqkh8KZeP8D0NgE8v9KW7aag2a5fr2ARuQmZRCugER8F64ty9SsgS8O3 3Uyt/zyjFCoJqlfo0bIN6A9eMT/NAl2XnNyIa//BUzf6Y8XWzE8spU45sQNCjJgz 14gRFICnQ2U2c9lQ5aLMotrbKqK5xkWQAYxSpOlsCMqwXX2HgyVs4r8YcAqbiz4G DUaFgztdf6JuiA//LVFay9lZ1UG6ODzpWzT3U0H9/IeUmLQNOmP+u+0Zq+cuAccH M5AdoKzPIMI5mQ== -----END CERTIFICATE-----Generated at Mon Dec 22 20:24:22 2025 by rpki-client