This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft File: HoYS4w6WzLqJ514Et7uhwreXxcM.mft (raw, json) Hash identifier: G2ktiyViHKYudOsLlZitkYfXv/D5J1hsou2C16qPo+s= Subject key identifier: 01:73:5F:5D:8C:B4:A9:C0:47:37:FB:D1:0C:FD:D5:ED:FF:F7:F1:DA Authority key identifier: 1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3 Certificate issuer: /CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3 Certificate serial: 019B59082CE0B9632E58EF4BD7B5EB5BDBCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft Manifest number: 02E4 Signing time: Fri 26 Dec 2025 05:01:06 +0000 Manifest this update: Fri 26 Dec 2025 05:01:06 +0000 Manifest next update: Sat 27 Dec 2025 05:01:06 +0000 Files and hashes: 1: 3liyadxkeB4PeF6Cj_CpA_Z7U3U.roa (hash: BkpSf3XaltWEFzfRC33a/AQ/WD3A00IBXqDokzMsdrM=) 2: HoYS4w6WzLqJ514Et7uhwreXxcM.crl (hash: imTkKI4a8vj7LbrstYfeZ45/LuggWVyKrUjlmBo0Qm8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 05:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:08:2c:e0:b9:63:2e:58:ef:4b:d7:b5:eb:5b:db:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3 Validity Not Before: Dec 26 05:01:06 2025 GMT Not After : Dec 27 05:01:06 2025 GMT Subject: CN=01735f5d8cb4a9c04737fbd10cfdd5edfff7f1da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5b:47:b1:f9:0f:e4:85:f1:7d:43:ea:12:11: f1:ed:59:e1:06:bb:fb:cf:64:e4:16:44:a9:0b:f5: 15:e6:73:85:ea:d7:a9:7c:9b:01:1a:89:4b:88:51: 70:ba:3a:3c:3a:14:59:15:8e:36:e9:d9:d5:45:6b: 0b:82:63:56:17:cf:af:96:99:51:12:c1:c5:25:cd: a2:c2:3b:a0:97:56:01:db:20:bf:d9:b1:0a:96:f9: f7:8b:50:d8:50:a1:74:c2:69:7b:28:f5:f5:33:9e: af:99:93:91:ea:f0:f7:5b:d7:d9:1a:4f:62:5e:ec: 7a:db:38:86:e6:51:34:f2:cb:20:dd:27:25:34:f6: 08:fa:75:31:1f:dc:f0:e7:25:9c:37:7d:19:76:88: 94:90:11:17:14:e3:34:3d:c1:df:e5:66:29:eb:bf: 56:c0:1f:fb:04:0f:a5:47:0e:e4:4c:92:42:54:99: 1b:2e:75:3a:24:8b:ad:95:27:17:bf:c2:6d:1b:ad: ca:2c:b9:a0:56:cb:cf:d0:96:cb:3d:0f:d5:76:d5: 4e:af:3c:0e:b1:c8:0f:2a:92:e6:a4:ba:83:83:cf: a9:fb:7f:01:e9:62:4e:24:e0:24:84:0e:a2:42:ba: db:83:88:e0:fe:31:d9:32:26:c9:03:ae:31:3a:d9: e5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:73:5F:5D:8C:B4:A9:C0:47:37:FB:D1:0C:FD:D5:ED:FF:F7:F1:DA X509v3 Authority Key Identifier: keyid:1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:d5:ab:7d:11:2a:4c:0d:3b:d8:63:85:74:62:a8:30:d7:f7: 31:0e:7a:be:0b:53:68:dc:13:2f:83:dc:79:ec:6b:e8:fd:1f: ee:68:64:a5:fe:8b:c5:52:0b:bf:e6:5e:7e:eb:f6:eb:61:ea: 38:33:34:ef:3e:e2:5f:60:06:d0:5c:64:d5:e9:68:92:bf:95: 75:5b:7b:a7:a5:92:80:a1:b2:ba:ae:dc:da:5e:e2:f0:6b:9e: 8c:09:c4:88:b2:74:de:ae:52:27:6c:7c:0c:93:35:eb:d3:49: 30:8b:aa:be:28:1a:77:c8:a8:99:8a:66:3d:86:cf:57:69:16: d6:28:f2:39:11:3a:52:59:9b:6f:a0:0e:ab:da:a8:e0:39:18: 9e:67:aa:48:3d:c7:f6:6b:fd:8e:93:cf:fb:92:7b:67:ca:e0: f1:55:79:60:6e:39:84:b8:ec:60:32:f2:16:9f:8c:56:bb:ca: 40:e9:3d:90:52:18:f1:e6:b3:10:37:32:ce:5e:fb:f8:76:d8: be:23:86:d4:ff:2f:f6:78:b7:b8:cd:ed:2a:39:3b:52:84:05: 4c:ce:af:6f:8a:a0:02:d2:79:46:c5:d9:81:6a:e6:c4:f4:b3: c5:ce:3f:44:00:14:39:64:29:76:60:fd:54:cc:76:0c:42:92: 3d:b1:cf:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZCCzguWMuWO9L17XrW9vKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlODYxMmUzMGU5NmNjYmE4OWU3NWUwNGI3YmJhMWMyYjc5 N2M1YzMwHhcNMjUxMjI2MDUwMTA2WhcNMjUxMjI3MDUwMTA2WjAzMTEwLwYDVQQD EygwMTczNWY1ZDhjYjRhOWMwNDczN2ZiZDEwY2ZkZDVlZGZmZjdmMWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31tHsfkP5IXxfUPqEhHx7VnhBrv7 z2TkFkSpC/UV5nOF6tepfJsBGolLiFFwujo8OhRZFY426dnVRWsLgmNWF8+vlplR EsHFJc2iwjugl1YB2yC/2bEKlvn3i1DYUKF0wml7KPX1M56vmZOR6vD3W9fZGk9i Xux62ziG5lE08ssg3SclNPYI+nUxH9zw5yWcN30ZdoiUkBEXFOM0PcHf5WYp679W wB/7BA+lRw7kTJJCVJkbLnU6JIutlScXv8JtG63KLLmgVsvP0JbLPQ/VdtVOrzwO scgPKpLmpLqDg8+p+38B6WJOJOAkhA6iQrrbg4jg/jHZMibJA64xOtnlkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFzX12MtKnARzf70Qz91e3/9/HaMB8GA1UdIwQY MBaAFB6GEuMOlsy6iedeBLe7ocK3l8XDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83MzBiZDQtZGIzMy00NTUyLWJhZDUt YjZkYzJiN2JmMzBhLzEvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC83MzBiZDQtZGIzMy00NTUyLWJhZDUtYjZkYzJiN2JmMzBh LzEvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw9WrfREq TA072GOFdGKoMNf3MQ56vgtTaNwTL4Pceexr6P0f7mhkpf6LxVILv+Zefuv262Hq ODM07z7iX2AG0Fxk1elokr+VdVt7p6WSgKGyuq7c2l7i8GuejAnEiLJ03q5SJ2x8 DJM169NJMIuqvigad8iomYpmPYbPV2kW1ijyORE6Ulmbb6AOq9qo4DkYnmeqSD3H 9mv9jpPP+5J7Z8rg8VV5YG45hLjsYDLyFp+MVrvKQOk9kFIY8eazEDcyzl77+HbY viOG1P8v9ni3uM3tKjk7UoQFTM6vb4qgAtJ5RsXZgWrmxPSzxc4/RAAUOWQpdmD9 VMx2DEKSPbHPLg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:24 2025 by rpki-client