This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json) Hash identifier: u2Z+ssEXn2hnBHGQS+lXHlCy2PhfFbjTgMQ3lAluUz4= Subject key identifier: F3:65:1E:35:50:3A:1B:73:F5:07:B9:B3:09:FC:AF:B4:26:2D:85:CC Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2 Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2 Certificate serial: 019AEF756A22109460A987BC667FA1A886AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft Manifest number: 17A7 Signing time: Fri 05 Dec 2025 17:00:40 +0000 Manifest this update: Fri 05 Dec 2025 17:00:40 +0000 Manifest next update: Sat 06 Dec 2025 17:00:40 +0000 Files and hashes: 1: 7K1si_9dd4NW2kOEEYd3jcTL2DE.roa (hash: 5y47FaoSaQN1HkqgBFsqDMSr1pkbokL6IdEnmswLvS8=) 2: ACkdatyfBTlz2-Ftw3WTqFFEYCo.roa (hash: zlHgLofdnOlgNzvUj9QwOsmHRmvCf52LGKTYhHmhgOI=) 3: EIORgb6-IHgXWxtT6KuDlNCxlAQ.roa (hash: nSJHxzXuaJt/ONt6/nK/gQgHP3691FnhKi2iZnbCx0s=) 4: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: zp4AZ6Ds5ZICxrpcHo1F50pomfXl1xD5CcgwK7uuglg=) 5: RKWcmyLUW_UNC9soF_0W82gJ_IM.roa (hash: fIRqyjPnfCuVn8VliMyXWnb6TeKWTGyoRNtSpwTvMzE=) 6: Uno7WysVy_PMdwYBFRh5BtACAQk.roa (hash: RFeqiMGc0M9KNidZ/TI83dGJPPCzjGOUtkDY3LKbx2k=) 7: nh5NhSKUCOZvA0PX-MutnlzNzr0.roa (hash: rMUx4sRjj5BLU/vJgZBKJqyHigJv6wDRFQlbGQCNv4w=) 8: yNY6bH1FZiObLlueEIjNydTMDc8.roa (hash: qo1xJTM/d0zWM2HJpgLbgXutgDhhFbPDIicjt7s6xR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ef:75:6a:22:10:94:60:a9:87:bc:66:7f:a1:a8:86:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2 Validity Not Before: Dec 5 17:00:40 2025 GMT Not After : Dec 6 17:00:40 2025 GMT Subject: CN=f3651e35503a1b73f507b9b309fcafb4262d85cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:69:72:2c:46:95:8e:36:90:a4:e1:3d:3b:d8: 8b:91:00:89:98:0f:4b:88:7c:a5:58:d2:2b:f5:46: 4f:89:ff:83:72:0e:6f:60:7f:29:72:7b:55:29:13: e4:82:04:fb:33:89:21:b3:a1:fb:f8:f0:e9:f9:76: 04:8f:b8:1c:54:ef:e3:b2:17:ea:44:91:2c:69:05: ad:18:d1:71:1e:fd:a8:fd:1a:cc:2c:f9:84:82:69: f5:ff:b2:a0:44:1d:2b:14:4d:f3:b8:ff:8f:3a:10: 6d:97:42:73:aa:da:9f:bb:f4:0a:4c:14:d7:b2:a0: 5a:2d:39:7e:2f:66:dc:1d:0d:cf:b3:31:7b:db:6f: 02:91:08:38:87:5c:12:3b:7d:86:1f:ce:13:f6:51: fe:a8:2e:fe:22:03:22:38:14:cd:e7:93:b2:02:b4: e3:c8:a9:fe:22:e0:ce:2c:c8:36:60:31:b5:4f:1f: d9:63:c0:f5:bd:ac:ce:cd:82:53:ca:23:71:65:93: a9:f6:e0:28:68:fe:55:9f:0a:67:9f:37:e3:bc:18: 0c:81:d7:88:d2:b9:5b:c4:71:4d:77:ab:38:cf:34: 59:8c:4d:9c:d0:36:79:f9:38:69:f2:c0:be:7b:d4: 4d:79:f4:d4:76:9c:e5:30:ae:ab:77:69:b2:d5:8e: 27:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:65:1E:35:50:3A:1B:73:F5:07:B9:B3:09:FC:AF:B4:26:2D:85:CC X509v3 Authority Key Identifier: keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:81:0c:40:55:76:32:1f:1c:10:1c:06:e4:0b:ad:29:2f:94: df:c2:e2:c1:d4:73:f9:af:f7:e6:11:b8:e6:35:fa:f5:97:92: 14:01:a7:28:02:8e:ce:f4:e2:b6:e5:4f:c4:09:9f:6b:70:05: 00:15:a2:64:54:1d:51:02:52:0d:7f:a0:fc:6b:f2:99:33:7d: 6e:c3:e0:a5:42:f9:14:2b:fb:f8:49:17:2a:1a:a3:68:cb:4f: f8:c8:6f:bb:98:8d:16:61:94:30:3c:fb:58:9b:ef:7f:e2:3d: a6:88:34:89:1d:b6:44:92:75:16:db:07:0f:90:fd:f6:44:9e: 71:9f:89:03:51:00:15:8a:ea:2e:dd:7a:3a:7e:16:9d:c2:3c: 66:24:d9:1d:fd:76:bf:51:c5:b5:7e:6e:f0:fe:fb:e0:27:7b: 1d:2e:ac:d8:c0:31:98:4a:76:0b:42:19:9f:bc:95:a2:72:e8: 26:c9:58:07:40:31:47:36:e7:59:b8:a4:fc:b5:2e:9d:d9:a2: cb:63:89:08:24:d4:7d:0d:f4:3a:45:33:96:ec:56:c3:c1:9c: 0e:08:aa:60:05:8f:75:b3:9c:3c:19:9b:cc:a6:ff:41:9f:da: a4:aa:36:c2:27:69:fb:fc:97:50:2c:dd:6b:85:28:8b:b8:18: 42:f4:f8:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrvdWoiEJRgqYe8Zn+hqIarMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOGQyMDVjNzk4ZWQ3OGYzYzQ0Y2EwYzhmMjg1MmU4YmVj OGVhYTIwHhcNMjUxMjA1MTcwMDQwWhcNMjUxMjA2MTcwMDQwWjAzMTEwLwYDVQQD EyhmMzY1MWUzNTUwM2ExYjczZjUwN2I5YjMwOWZjYWZiNDI2MmQ4NWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2lyLEaVjjaQpOE9O9iLkQCJmA9L iHylWNIr9UZPif+Dcg5vYH8pcntVKRPkggT7M4khs6H7+PDp+XYEj7gcVO/jshfq RJEsaQWtGNFxHv2o/RrMLPmEgmn1/7KgRB0rFE3zuP+POhBtl0Jzqtqfu/QKTBTX sqBaLTl+L2bcHQ3PszF7228CkQg4h1wSO32GH84T9lH+qC7+IgMiOBTN55OyArTj yKn+IuDOLMg2YDG1Tx/ZY8D1vazOzYJTyiNxZZOp9uAoaP5VnwpnnzfjvBgMgdeI 0rlbxHFNd6s4zzRZjE2c0DZ5+Thp8sC+e9RNefTUdpzlMK6rd2my1Y4n+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNlHjVQOhtz9Qe5swn8r7QmLYXMMB8GA1UdIwQY MBaAFB6NIFx5jtePPETKDI8oUui+yOqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTkt ZWUxYmQzNDRmMDE1LzEvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTktZWUxYmQzNDRmMDE1 LzEvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYEMQFV2 Mh8cEBwG5AutKS+U38LiwdRz+a/35hG45jX69ZeSFAGnKAKOzvTituVPxAmfa3AF ABWiZFQdUQJSDX+g/GvymTN9bsPgpUL5FCv7+EkXKhqjaMtP+Mhvu5iNFmGUMDz7 WJvvf+I9pog0iR22RJJ1FtsHD5D99kSecZ+JA1EAFYrqLt16On4WncI8ZiTZHf12 v1HFtX5u8P774Cd7HS6s2MAxmEp2C0IZn7yVonLoJslYB0AxRzbnWbik/LUundmi y2OJCCTUfQ30OkUzluxWw8GcDgiqYAWPdbOcPBmbzKb/QZ/apKo2widp+/yXUCzd a4Uoi7gYQvT43w== -----END CERTIFICATE-----Generated at Fri Dec 5 23:05:41 2025 by rpki-client