This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: 7ofaYf9msNosMQFfkTZxEWham+W53enOl6CtbOabpWI= Subject key identifier: 02:D3:F6:88:1B:36:2A:44:7B:E6:28:D1:BC:C9:D8:D5:08:B2:C7:6F Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019AF27711B9A29CAB34E18B15A36F307E87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 17EE Signing time: Sat 06 Dec 2025 07:01:20 +0000 Manifest this update: Sat 06 Dec 2025 07:01:20 +0000 Manifest next update: Sun 07 Dec 2025 07:01:20 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: MavEzEqYHnG9OA7wrHGSs/QefQ/pioxiSi/LPUMbf9Q=) 2: 0httGqgqnBD-cyBZkV5zP0LpIO4.roa (hash: e5sFUpuEkPspxdtpRMty2JvPNTXvUGFt57BwVt8wTQk=) 3: 20w83vHPyYnLSWr2qqWCmD2gZNY.roa (hash: ClK+X58yEmA5ygXK0mo1ANs6qUTT/V8TWnwZD7Tusy4=) 4: 2GL47T9SRBBwBaNeZexIUa30gBc.roa (hash: ABN0fho3ez1AZohMO8vLStXF6A5NSbFkU1JXiXGcusg=) 5: 2s4ghGsMJ4UjziczDpj7_nBo6GE.roa (hash: jn5a6RlzlWn5orrS4JyYzumT++ei7+4zrAsQWhkhOUE=) 6: BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa (hash: N6DdRHz14Xr18smaWB+L/0EFbg9FmP8IrnnkdfkP5sA=) 7: BjUAlonCB1CjmbTY52apZdHRGFk.roa (hash: vBVzlWqlUuZ7F5qeBjljk7LIKAFRXIaJSFWC4T698rw=) 8: DRLbJL7meHAnOmMNiiVi2VhOOMc.roa (hash: Lp9UgdizeLrJK6Zry0u6HD2WAPxw4E+r1wzuyfdMmtU=) 9: EXfTHtw-3BJt59JkT36dPstORFo.roa (hash: MhW4Yoiges2mvr+KewFgpAREQV0Mu5obgGNxi9eeOQc=) 10: EYaBNaigUJPNidpEJHqvbrENGdU.roa (hash: U/V1xaDA1aKazkypKTjkyan+k6X/djAAeOa2M3QSQJM=) 11: FRvZFyOxFoddRwR8NWy2iDyogY8.roa (hash: bzSWZTj+o0faBM1dsh+8mBoLaK0jcFLNse7M1DVkpUs=) 12: G8jjrx8EZbysXI_Z13e_0NqYZdU.roa (hash: GPSkTNwl/L8vVjia7LOR9ahqlqqIZvGFNcWIGIi/vHw=) 13: Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa (hash: Dfa7w0wU+Mwe8FRxusOe5J5w207sEqOGP3MEUAezXaw=) 14: Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa (hash: mR/skrtMXmYrNl0WIwSjaGFdp8tWtvYO7SMbQmVqf6A=) 15: MguR744HGmOoEMdrlIzPUQQNYfs.roa (hash: Ve4h+6FdNbKYu9bYvRE5Dbmxn7BK8VvZ01cl79qxeJc=) 16: PcsvqoFss2sjt8KP5dE_s9b5R94.roa (hash: 2VnZlh9WN/gvQzrunwflGg0cw7Ym2P+YsV38lpVH0Gs=) 17: RySOnwd5yNUvkpOdlWzbq8gD58I.roa (hash: pMm1Q5jN9tu+9MZBtGXjdw1riel86JfdVWVMRs8pgEY=) 18: UNh6P6o5iukKyngJ923OKln6euE.roa (hash: N5ex54TauXC69hfaRmQEjxuyvZMfnOJEFnqZWvxkb8A=) 19: XXSSAkKxHIvFb1XDuVgAK48p7oI.roa (hash: p4mx1wVBI5jfCHEyW7RDH/AavCZwfWlBpFNbLCutJY0=) 20: XqDDBjzRqksOqaLkNJqWqkX_q5g.roa (hash: 1giyN8jwNm42lrK4gv4g6LsRanOMpVhR/vHcE0ewcvw=) 21: Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa (hash: XJDCD20D/hEgr09ZL/gnt/32UJp0okrjk8WR5CoxVyQ=) 22: _Ja5VSGfVwaP_RssqzUEn4YMRnM.roa (hash: IopLtmpqrddq1TLUa3ph8Vkd8Gg6tUuEa1Mf8B120SY=) 23: fW0mZX2qVdA0eoUEboZhAE59bUE.roa (hash: stVjqf6xlyz/MOhoo6Rt330zmsp7vd4IC5S2fUEJ5WM=) 24: kqDz7smZzEggwnOtTZ91wrlBE4c.roa (hash: OteTjZY0hrzoBDeoZG9laIbeOhFIt32mklvyy1YBT38=) 25: m9Q0QpkVO1rZKT8wIA-lB6ceYcg.roa (hash: yW9VuP+7IZqfB9uY1adWMtzwRUiSlhz/2UYbCN1BQSU=) 26: ncQVbTITs5Wtl1BsQ2mAS7-nTVQ.roa (hash: W2j7t9wKtLT6mYkhMfEldPwCF8H6KOgtTtUoXF6gg84=) 27: oqSgizr5ODUUGjBb8_Wzxokx-xk.roa (hash: Kl53NJDKPjecKCh1ZqXsoFCQIzYfPyjvOORgLlse+gY=) 28: qjzeeh1Gho5kkoGd8eWSm2fDElg.roa (hash: legd59DpUzqYKdG/H8UB7NHrWv3d+4ykb5elvNlaqw4=) 29: qlt-CjR0Oi0L3lo2PS7A4jbvIUg.roa (hash: iydTkBpS1P6s3+CKe74qws4olK3ajXbhwYqoUw/uhBk=) 30: tdzsaKxsamCWBVwoUkqT8RggY6A.roa (hash: Fv0PNntXjBHiuO1Z367HBdmxJtFfh7CR44dwT354/lw=) 31: wMbP2rODQDC-jcOXAyW7ktyAwFs.roa (hash: 9dxgb9cFX2rvzK0yUiEPPHMObwlTuLCycMbvyIulqKU=) 32: yNK_se_8Y1MH-IyQZOfpZj_aArA.roa (hash: Y/8odYpFkGDQCB6ybQitBRTCfwLFaWn7M7svPHhRrhA=) 33: ytCMvXgi7-5EalYEygb1M-dSbo4.roa (hash: 0MrqqAAtZWVj8wfoNtj5hcwvBU3HxDQG25M1h24iiN8=) 34: z4dbT2rdI1MPHPzn2a4SSpvkt3E.roa (hash: pftbqIKgzEeVO9sl0LAVO5XHYPxIgJ6YwaN9JqNCTzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 07:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:11:b9:a2:9c:ab:34:e1:8b:15:a3:6f:30:7e:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Dec 6 07:01:20 2025 GMT Not After : Dec 7 07:01:20 2025 GMT Subject: CN=02d3f6881b362a447be628d1bcc9d8d508b2c76f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e9:00:49:10:c0:48:90:dd:5b:02:d2:69:30: e2:62:ae:b8:63:bc:4e:5d:79:74:37:4b:4b:b8:b0: 12:29:3e:7a:7a:1c:eb:97:85:64:c2:05:a1:d6:78: 3d:72:8c:c7:82:f5:69:af:4a:a2:63:32:c3:e7:86: 7f:5f:bc:02:c8:ed:b6:1c:cc:85:ff:ef:fd:4d:80: 2f:7a:b5:18:a6:b8:96:18:d3:70:f8:d9:7c:27:cc: bf:59:ee:ca:3b:2b:47:f6:c2:a6:d4:5b:69:86:19: 4e:10:7c:9b:c1:c7:30:31:16:fa:a3:14:c6:bb:40: 8a:29:1b:03:e9:1a:74:15:fd:aa:94:f6:f4:d4:6a: 29:05:68:6b:10:ba:69:48:cb:e3:90:c0:10:68:34: 9f:9c:47:c5:00:44:e5:47:21:3f:39:bf:ed:8d:26: 71:ec:a2:84:5a:cc:a0:34:7f:6f:f9:ea:f8:9f:8f: 43:c2:8b:eb:2c:60:7b:45:e3:c6:80:06:d9:6a:fd: fe:e8:ad:9d:5a:d4:b6:5b:e8:07:dc:4c:77:5d:25: e6:7a:d4:8d:e9:2a:c8:00:7e:49:0c:8d:d1:8a:a1: 6e:cb:3c:6b:a2:a9:96:74:5e:bb:b2:1f:b9:45:8c: ea:ca:e1:f8:6a:70:e9:01:2b:3a:71:25:ae:47:6c: 2b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D3:F6:88:1B:36:2A:44:7B:E6:28:D1:BC:C9:D8:D5:08:B2:C7:6F X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:4e:96:b3:8d:f6:8a:eb:c9:bf:09:c9:6b:59:ee:33:68:d8: a4:64:cb:af:30:9f:1a:08:53:94:a3:cb:40:9b:99:9e:93:38: 97:ec:15:25:b1:33:59:ad:c0:53:d3:77:5b:6a:30:43:af:55: 12:6a:d3:e2:1f:6c:f0:40:ff:32:fd:3f:0c:5a:b9:54:1d:66: e0:d8:f1:b3:e6:4a:97:9f:b3:4f:e9:cb:a2:6b:1a:1a:76:36: e8:6e:27:ed:2c:52:e2:eb:b0:a5:ca:d3:da:61:b2:61:75:e0: 18:e8:11:cd:70:2c:8b:4a:c6:90:06:5c:78:84:46:d1:ef:19: ce:e5:db:90:43:19:63:30:94:90:c6:61:db:2f:0d:31:c0:8a: d1:39:23:ba:10:05:c1:f0:6b:d9:cb:75:8e:c5:a9:04:fc:9d: f1:51:c3:cd:d3:de:c4:83:64:da:b1:3d:80:e3:e4:4a:82:8b: d2:bf:b5:89:99:b6:a9:56:2f:2c:47:10:08:b9:50:10:06:66: 4c:66:04:d2:30:ff:13:22:fe:54:48:ce:40:54:7f:69:5b:12: f6:b3:a9:53:47:fb:2f:ad:eb:6b:24:80:20:75:d0:d7:1a:7d: 00:f0:fd:23:ad:b4:2b:a2:41:d8:39:40:b5:95:e6:ec:67:0e: 0f:29:4e:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydxG5opyrNOGLFaNvMH6HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjUxMjA2MDcwMTIwWhcNMjUxMjA3MDcwMTIwWjAzMTEwLwYDVQQD EygwMmQzZjY4ODFiMzYyYTQ0N2JlNjI4ZDFiY2M5ZDhkNTA4YjJjNzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOkASRDASJDdWwLSaTDiYq64Y7xO XXl0N0tLuLASKT56ehzrl4VkwgWh1ng9cozHgvVpr0qiYzLD54Z/X7wCyO22HMyF /+/9TYAverUYpriWGNNw+Nl8J8y/We7KOytH9sKm1FtphhlOEHybwccwMRb6oxTG u0CKKRsD6Rp0Ff2qlPb01GopBWhrELppSMvjkMAQaDSfnEfFAETlRyE/Ob/tjSZx 7KKEWsygNH9v+er4n49DwovrLGB7RePGgAbZav3+6K2dWtS2W+gH3Ex3XSXmetSN 6SrIAH5JDI3RiqFuyzxroqmWdF67sh+5RYzqyuH4anDpASs6cSWuR2wrYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALT9ogbNipEe+Yo0bzJ2NUIssdvMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgE6Ws432 iuvJvwnJa1nuM2jYpGTLrzCfGghTlKPLQJuZnpM4l+wVJbEzWa3AU9N3W2owQ69V EmrT4h9s8ED/Mv0/DFq5VB1m4Njxs+ZKl5+zT+nLomsaGnY26G4n7SxS4uuwpcrT 2mGyYXXgGOgRzXAsi0rGkAZceIRG0e8ZzuXbkEMZYzCUkMZh2y8NMcCK0TkjuhAF wfBr2ct1jsWpBPyd8VHDzdPexINk2rE9gOPkSoKL0r+1iZm2qVYvLEcQCLlQEAZm TGYE0jD/EyL+VEjOQFR/aVsS9rOpU0f7L63raySAIHXQ1xp9APD9I620K6JB2DlA tZXm7GcODylOgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:54:43 2025 by rpki-client