This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json) Hash identifier: Bv3ANBhNR66+h+QH+5PVKtFTS1jZb72tnNpYC897foM= Subject key identifier: 87:F8:ED:57:1E:EE:F7:60:B0:FE:B5:63:86:22:23:78:00:99:C4:DA Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2 Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2 Certificate serial: 019B41004C0D749BB5012637D5C8EA6C3CBC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft Manifest number: 17D6 Signing time: Sun 21 Dec 2025 13:01:37 +0000 Manifest this update: Sun 21 Dec 2025 13:01:37 +0000 Manifest next update: Mon 22 Dec 2025 13:01:37 +0000 Files and hashes: 1: 7K1si_9dd4NW2kOEEYd3jcTL2DE.roa (hash: 5y47FaoSaQN1HkqgBFsqDMSr1pkbokL6IdEnmswLvS8=) 2: ACkdatyfBTlz2-Ftw3WTqFFEYCo.roa (hash: zlHgLofdnOlgNzvUj9QwOsmHRmvCf52LGKTYhHmhgOI=) 3: CRbDzci3rUUhQn8ILIbVwOuT9Bg.roa (hash: JeklH3PN209cOzcyHabKNljaVItR0csrlzbJ3Ox0Fok=) 4: EIORgb6-IHgXWxtT6KuDlNCxlAQ.roa (hash: nSJHxzXuaJt/ONt6/nK/gQgHP3691FnhKi2iZnbCx0s=) 5: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: Bc6pmyo6TgK+2QlR08jc3wRyO6Rc7rSFpBiXDmZ3XhE=) 6: Uno7WysVy_PMdwYBFRh5BtACAQk.roa (hash: RFeqiMGc0M9KNidZ/TI83dGJPPCzjGOUtkDY3LKbx2k=) 7: nh5NhSKUCOZvA0PX-MutnlzNzr0.roa (hash: rMUx4sRjj5BLU/vJgZBKJqyHigJv6wDRFQlbGQCNv4w=) 8: yNY6bH1FZiObLlueEIjNydTMDc8.roa (hash: qo1xJTM/d0zWM2HJpgLbgXutgDhhFbPDIicjt7s6xR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:00:4c:0d:74:9b:b5:01:26:37:d5:c8:ea:6c:3c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2 Validity Not Before: Dec 21 13:01:37 2025 GMT Not After : Dec 22 13:01:37 2025 GMT Subject: CN=87f8ed571eeef760b0feb563862223780099c4da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:38:24:be:23:56:38:b4:7b:9b:db:89:dd:53: 21:2b:c1:1f:28:41:cc:97:1f:10:3c:1e:4d:dd:f9: 06:10:06:9d:6f:6d:0d:26:4f:a6:97:5f:6f:81:49: 8a:fb:9d:b8:ff:91:c7:3c:15:46:65:e8:c2:09:97: 4c:ab:f6:fd:00:60:a0:5f:5f:a4:70:47:6c:80:23: 19:58:31:fd:12:36:a4:d2:22:b2:98:f7:ed:c1:92: 8f:69:7f:11:e7:61:d2:66:9f:72:4f:f8:30:98:e5: a3:d8:24:9f:0d:f8:9c:72:c2:3c:49:8f:11:6b:c1: de:47:0a:c6:78:38:c8:75:45:1b:84:a0:86:3f:b4: 9e:ea:71:6d:ac:a4:69:1e:59:38:0e:36:5c:ff:a1: 98:b1:bc:3b:b6:f9:f0:de:37:76:57:5f:3b:46:36: a9:05:23:ba:68:27:8e:f8:90:fe:74:78:1a:25:5e: fe:94:ad:0e:8e:48:79:c1:17:7b:c9:99:0f:d4:4b: dd:ed:7d:06:70:63:f8:cf:da:f0:11:2e:e1:de:ab: 76:14:d4:f1:1b:e3:57:f5:3f:9e:48:11:fe:e5:11: 89:03:1b:dd:5a:5d:05:84:3d:01:cc:4c:02:97:72: 0a:cf:9e:fd:0e:bd:71:95:dc:f5:c7:b2:67:a3:90: 48:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F8:ED:57:1E:EE:F7:60:B0:FE:B5:63:86:22:23:78:00:99:C4:DA X509v3 Authority Key Identifier: keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:dd:fb:6c:62:21:a5:bf:91:79:f7:69:ec:eb:81:ca:62:c1: e2:c0:d5:f6:70:cd:a0:8f:66:ac:96:c2:be:31:48:0c:b2:44: 82:6d:c7:bd:a0:ad:b3:2a:9a:92:4a:0c:f8:80:c1:70:4d:82: 9d:d7:6e:f0:27:6a:ee:1c:48:17:c8:9f:34:7f:e7:22:63:4e: ac:c3:6d:e3:0a:3b:94:b6:97:f0:6f:02:b7:6e:dc:a6:00:f6: 70:8c:1f:6f:c2:e6:2f:7e:8e:75:20:7a:fc:74:ae:12:c0:23: a7:82:5b:ae:2f:f4:4d:bd:11:c5:6f:42:b2:03:d0:3c:16:79: ed:e2:98:4b:8e:f5:b2:f6:45:cd:3f:bc:00:84:a6:ed:0f:5d: de:ba:e9:d9:11:8e:6a:a1:bb:c4:c5:25:1f:92:e3:95:5e:e0: cf:e9:63:39:ca:02:fc:d4:3a:d9:ff:2a:8c:e2:bc:21:82:c3: 6e:20:3c:f2:99:f8:b8:5e:02:e4:8a:ed:e6:c2:be:35:11:40: f0:aa:ff:5a:a5:98:f8:8f:e4:20:31:41:8b:e6:08:5e:b5:5c: dd:e5:e9:77:17:6a:e4:e6:70:dc:12:01:6c:aa:88:d5:77:95: f4:28:c9:1e:38:13:d1:3a:7b:9d:56:2b:9a:d9:75:cc:f2:7b: 06:f0:bc:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBAEwNdJu1ASY31cjqbDy8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOGQyMDVjNzk4ZWQ3OGYzYzQ0Y2EwYzhmMjg1MmU4YmVj OGVhYTIwHhcNMjUxMjIxMTMwMTM3WhcNMjUxMjIyMTMwMTM3WjAzMTEwLwYDVQQD Eyg4N2Y4ZWQ1NzFlZWVmNzYwYjBmZWI1NjM4NjIyMjM3ODAwOTljNGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTgkviNWOLR7m9uJ3VMhK8EfKEHM lx8QPB5N3fkGEAadb20NJk+ml19vgUmK+524/5HHPBVGZejCCZdMq/b9AGCgX1+k cEdsgCMZWDH9Ejak0iKymPftwZKPaX8R52HSZp9yT/gwmOWj2CSfDficcsI8SY8R a8HeRwrGeDjIdUUbhKCGP7Se6nFtrKRpHlk4DjZc/6GYsbw7tvnw3jd2V187Rjap BSO6aCeO+JD+dHgaJV7+lK0Ojkh5wRd7yZkP1Evd7X0GcGP4z9rwES7h3qt2FNTx G+NX9T+eSBH+5RGJAxvdWl0FhD0BzEwCl3IKz579Dr1xldz1x7Jno5BIuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIf47Vce7vdgsP61Y4YiI3gAmcTaMB8GA1UdIwQY MBaAFB6NIFx5jtePPETKDI8oUui+yOqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTkt ZWUxYmQzNDRmMDE1LzEvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yOTg4OTgtNzQ1NC00MDJiLTgxZTktZWUxYmQzNDRmMDE1 LzEvSG8wZ1hIbU8xNDg4Uk1vTWp5aFM2TDdJNnFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAet37bGIh pb+Refdp7OuBymLB4sDV9nDNoI9mrJbCvjFIDLJEgm3HvaCtsyqakkoM+IDBcE2C nddu8Cdq7hxIF8ifNH/nImNOrMNt4wo7lLaX8G8Ct27cpgD2cIwfb8LmL36OdSB6 /HSuEsAjp4Jbri/0Tb0RxW9CsgPQPBZ57eKYS471svZFzT+8AISm7Q9d3rrp2RGO aqG7xMUlH5LjlV7gz+ljOcoC/NQ62f8qjOK8IYLDbiA88pn4uF4C5Irt5sK+NRFA 8Kr/WqWY+I/kIDFBi+YIXrVc3eXpdxdq5OZw3BIBbKqI1XeV9CjJHjgT0Tp7nVYr mtl1zPJ7BvC8iA== -----END CERTIFICATE-----Generated at Sun Dec 21 19:33:57 2025 by rpki-client