This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft File: hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json) Hash identifier: qSD6/vtZAVbQe6QXacq1LjGi13Jv4CwPMoa+P3SJQgk= Subject key identifier: F8:A9:F6:57:53:C5:82:7A:89:2E:E0:32:48:32:F6:F9:63:A3:4F:D9 Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54 Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054 Certificate serial: 019B5A1A69F4CEEC3B00805B1F67DD861AEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 10:00:39 +0000 Manifest this update: Fri 26 Dec 2025 10:00:39 +0000 Manifest next update: Sat 27 Dec 2025 10:00:39 +0000 Files and hashes: 1: ZqMG8mpe5nSXKW1FrNNGNQPtlac.roa (hash: KO75sPS4/XP/JBEid5X4pt0EZyoaOZvo180Eq+iiPnQ=) 2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: WZPBBARidb+vblHqI4X3ZitM1B70u91JV2JrpQXTVLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:69:f4:ce:ec:3b:00:80:5b:1f:67:dd:86:1a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054 Validity Not Before: Dec 26 10:00:39 2025 GMT Not After : Dec 27 10:00:39 2025 GMT Subject: CN=f8a9f65753c5827a892ee0324832f6f963a34fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:42:04:92:bd:18:21:1e:4b:60:f2:94:4b:63: ed:22:9a:f0:99:9c:94:f0:86:59:a5:af:84:04:0f: b3:82:40:21:81:f4:a0:d5:66:c3:15:6f:c9:86:bd: a2:ca:e3:be:84:a8:7c:40:b5:f9:16:9e:a6:50:90: 99:fe:c2:ec:22:c1:b0:07:d9:06:8c:75:82:39:fa: f0:ff:2a:19:b8:fd:92:aa:dd:d3:06:a7:9b:6c:b3: 09:8e:a3:0b:bc:d3:88:c0:47:52:6b:92:6e:22:c4: 4d:40:29:e9:86:d9:a4:1b:df:21:ba:99:ba:3d:f6: 58:cb:5b:de:3c:83:1d:79:83:8c:f2:03:68:c6:e2: c3:56:67:40:e2:02:00:a8:14:fa:45:b2:86:f6:e5: 2f:80:e9:10:2d:b3:7a:56:61:49:bc:07:f3:bf:9d: 9a:49:e0:db:43:31:0c:de:5e:a2:f7:e8:3b:2e:7d: 63:aa:93:12:91:80:af:c1:60:20:8e:49:c9:53:e5: 2d:f3:97:4c:8d:81:ee:a5:93:10:22:d2:85:05:29: 4c:bb:82:d7:f4:c3:d4:7c:61:a7:d8:91:ac:e9:a4: 68:3d:ea:de:0b:b2:ed:a3:db:13:ef:b0:89:3e:ec: e8:4e:55:8e:3b:c7:d0:f5:5c:9c:f9:60:92:b8:3b: ec:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A9:F6:57:53:C5:82:7A:89:2E:E0:32:48:32:F6:F9:63:A3:4F:D9 X509v3 Authority Key Identifier: keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:5c:70:8e:53:c4:ae:09:a4:f6:90:91:3a:88:86:a1:03:3a: a0:ea:77:91:d8:f6:32:44:88:e2:55:3e:d2:88:1f:97:6d:53: 71:2f:d6:79:71:50:0e:92:3f:8a:95:d2:82:04:46:93:93:97: ec:c2:77:b7:1a:ae:eb:fb:f6:32:1c:b1:03:48:91:0a:8f:0c: f8:d6:27:3c:30:fe:2f:69:71:b1:63:3b:4c:63:1c:a0:8f:c4: f5:11:5f:ae:86:97:15:3f:b0:32:45:63:55:58:21:ff:07:3a: 51:13:5f:a5:a5:e0:03:91:1e:85:88:2b:03:d0:b1:0b:e5:bd: d4:91:69:d8:3b:35:cf:5a:d4:19:fd:6a:7e:c3:35:1b:1a:aa: a1:1f:ce:ed:4d:5f:71:c0:ef:11:33:64:3a:65:4f:67:70:e3: c7:1c:0d:12:b1:8c:f8:a4:c6:5b:7c:cf:3f:41:7e:6e:2f:36: 8a:42:0f:03:50:19:fc:8d:b2:64:7a:35:eb:ae:ec:d2:08:c8: fe:74:02:97:df:3e:d7:97:06:88:09:48:ce:c4:66:5c:32:41: d7:11:d9:c2:c8:92:c2:dc:36:d5:fe:19:bb:70:40:c6:5d:cf: 5f:76:45:91:70:bd:8e:39:c4:8f:ee:1a:89:a4:02:1e:84:c8: 64:d8:92:08 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGmn0zuw7AIBbH2fdhhrrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ODZhZThlNDkzNzRiYWM4NGNhYTNkZTBkMjYwNzBiNmIx OTAwNTQwHhcNMjUxMjI2MTAwMDM5WhcNMjUxMjI3MTAwMDM5WjAzMTEwLwYDVQQD EyhmOGE5ZjY1NzUzYzU4MjdhODkyZWUwMzI0ODMyZjZmOTYzYTM0ZmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UIEkr0YIR5LYPKUS2PtIprwmZyU 8IZZpa+EBA+zgkAhgfSg1WbDFW/Jhr2iyuO+hKh8QLX5Fp6mUJCZ/sLsIsGwB9kG jHWCOfrw/yoZuP2Sqt3TBqebbLMJjqMLvNOIwEdSa5JuIsRNQCnphtmkG98hupm6 PfZYy1vePIMdeYOM8gNoxuLDVmdA4gIAqBT6RbKG9uUvgOkQLbN6VmFJvAfzv52a SeDbQzEM3l6i9+g7Ln1jqpMSkYCvwWAgjknJU+Ut85dMjYHupZMQItKFBSlMu4LX 9MPUfGGn2JGs6aRoPereC7Lto9sT77CJPuzoTlWOO8fQ9Vyc+WCSuDvshQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPip9ldTxYJ6iS7gMkgy9vljo0/ZMB8GA1UdIwQY MBaAFIaGro5JN0ushMqj3g0mBwtrGQBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jMTk2MmEtYzY3OC00ZTQ2LWEwNzYt YTc0ZjUwZTAwZGQ1LzEvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9jMTk2MmEtYzY3OC00ZTQ2LWEwNzYtYTc0ZjUwZTAwZGQ1 LzEvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVxwjlPE rgmk9pCROoiGoQM6oOp3kdj2MkSI4lU+0ogfl21TcS/WeXFQDpI/ipXSggRGk5OX 7MJ3txqu6/v2MhyxA0iRCo8M+NYnPDD+L2lxsWM7TGMcoI/E9RFfroaXFT+wMkVj VVgh/wc6URNfpaXgA5EehYgrA9CxC+W91JFp2Ds1z1rUGf1qfsM1GxqqoR/O7U1f ccDvETNkOmVPZ3DjxxwNErGM+KTGW3zPP0F+bi82ikIPA1AZ/I2yZHo1667s0gjI /nQCl98+15cGiAlIzsRmXDJB1xHZwsiSwtw21f4Zu3BAxl3PX3ZFkXC9jjnEj+4a iaQCHoTIZNiSCA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:15:59 2025 by rpki-client