This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft File: 7HOKOB5g9aj-BYf8axo8gTyOPKg.mft (raw, json) Hash identifier: lklg6bD/zZxmvf/FGYKQ51744W9ITLNjAFUkLiJxEeA= Subject key identifier: C4:16:8E:1D:E8:42:A0:14:7A:C2:41:11:D5:B4:42:3C:74:42:75:2B Authority key identifier: EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8 Certificate issuer: /CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8 Certificate serial: 019AF5AEF6EE782965535B2AB99D4D35373E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft Manifest number: 09D5 Signing time: Sat 06 Dec 2025 22:01:15 +0000 Manifest this update: Sat 06 Dec 2025 22:01:15 +0000 Manifest next update: Sun 07 Dec 2025 22:01:15 +0000 Files and hashes: 1: 7HOKOB5g9aj-BYf8axo8gTyOPKg.crl (hash: KoaWNlkmRcmg4Sz/OVkvT592lUomS+Aj5ClFosUqJWU=) 2: 9QnDkxV0-5vbum3ReIObVEkcGRE.roa (hash: zosi65Q+fpy1DBt4qsf0U/lkljOCwQHreS1fZR3vXn0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:f6:ee:78:29:65:53:5b:2a:b9:9d:4d:35:37:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec738a381e60f5a8fe0587fc6b1a3c813c8e3ca8 Validity Not Before: Dec 6 22:01:15 2025 GMT Not After : Dec 7 22:01:15 2025 GMT Subject: CN=c4168e1de842a0147ac24111d5b4423c7442752b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:29:2d:80:37:64:9c:3f:11:09:09:6b:bf:22: b9:8d:3b:9a:2d:12:ce:33:4c:9c:74:2e:6f:b5:83: a7:27:f0:b9:8c:4a:8b:d9:71:b0:d9:5e:ca:a7:18: 2f:ca:4a:cb:3e:3c:cf:32:62:8b:50:57:59:e6:f2: e3:3e:8c:c6:48:85:f2:5f:d0:4f:99:19:02:2c:26: 4c:8f:08:90:4e:a4:52:c4:a4:5c:4b:c4:97:f5:d1: cb:62:36:a1:d8:e0:ff:94:b4:e7:84:65:d8:c7:a8: 46:a3:22:80:cf:57:f1:2e:5f:81:7c:2a:68:94:11: a4:1a:89:d5:5f:a6:08:e2:9a:0c:9a:00:05:9e:85: 7c:e2:1f:47:32:50:96:84:fb:d3:3d:14:01:4a:29: 73:1c:71:4b:9e:42:c5:b1:fb:fb:cc:8e:be:26:15: 8d:18:4c:6c:73:0f:2b:b0:34:00:e7:5e:f8:b3:23: ed:dd:81:57:de:c7:51:db:d3:f9:24:6a:43:ec:6d: 15:98:f5:97:53:09:5f:3b:c3:b6:f2:70:d7:81:12: 78:f6:0e:bc:1d:c8:e2:32:ff:8b:c1:72:3d:05:98: f5:00:36:5d:59:c4:0c:e9:84:13:45:36:3c:71:fd: 51:35:53:a3:35:13:bb:6a:11:83:5c:c4:eb:9a:7d: e5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:16:8E:1D:E8:42:A0:14:7A:C2:41:11:D5:B4:42:3C:74:42:75:2B X509v3 Authority Key Identifier: keyid:EC:73:8A:38:1E:60:F5:A8:FE:05:87:FC:6B:1A:3C:81:3C:8E:3C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HOKOB5g9aj-BYf8axo8gTyOPKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/0c1ce0-4533-4e43-be9c-53cf26b0a724/1/7HOKOB5g9aj-BYf8axo8gTyOPKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:44:13:8e:d9:60:d4:a0:19:0a:53:09:6c:62:55:61:6e:97: 2a:b0:a7:2d:14:cf:37:d8:49:22:e6:55:8c:b1:a7:ce:ec:72: f8:ea:78:5c:76:a9:31:a0:5c:d9:3e:fc:2c:4b:a5:54:f3:7b: f0:29:d2:cf:d7:14:06:7d:1d:4c:a6:5d:67:78:8e:16:b2:3d: a0:d2:25:bf:70:e4:b0:19:d0:ff:75:56:6b:d1:df:ad:b3:34: 5c:c6:6f:84:93:c6:4a:d8:80:20:76:63:6b:a4:b7:70:fa:11: f2:b1:1a:40:95:4d:88:57:a0:50:88:a8:ba:dd:80:66:32:e1: 69:27:94:93:8f:17:de:97:63:e9:0c:91:4e:d2:23:49:3b:e8: 7b:c6:f7:1b:ed:ad:33:f7:12:2f:70:fc:a7:ab:b6:fd:50:55: 22:d0:f2:ba:b4:f5:8b:61:45:7c:10:e4:61:57:01:b7:95:05: f7:0f:86:e3:da:ea:27:e5:b9:ed:85:58:65:39:72:a7:62:6a: 39:a9:3e:83:55:60:c9:51:43:11:d4:0a:c3:bf:db:b8:65:15: 5e:40:1e:0f:25:c6:84:e2:f6:50:ac:f0:55:d2:ed:45:37:b0: 38:13:9b:bc:de:f0:8e:59:35:89:77:b6:e5:f0:0d:99:17:9f: 6d:d2:8a:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rvbueCllU1squZ1NNTc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNzM4YTM4MWU2MGY1YThmZTA1ODdmYzZiMWEzYzgxM2M4 ZTNjYTgwHhcNMjUxMjA2MjIwMTE1WhcNMjUxMjA3MjIwMTE1WjAzMTEwLwYDVQQD EyhjNDE2OGUxZGU4NDJhMDE0N2FjMjQxMTFkNWI0NDIzYzc0NDI3NTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCktgDdknD8RCQlrvyK5jTuaLRLO M0ycdC5vtYOnJ/C5jEqL2XGw2V7KpxgvykrLPjzPMmKLUFdZ5vLjPozGSIXyX9BP mRkCLCZMjwiQTqRSxKRcS8SX9dHLYjah2OD/lLTnhGXYx6hGoyKAz1fxLl+BfCpo lBGkGonVX6YI4poMmgAFnoV84h9HMlCWhPvTPRQBSilzHHFLnkLFsfv7zI6+JhWN GExscw8rsDQA5174syPt3YFX3sdR29P5JGpD7G0VmPWXUwlfO8O28nDXgRJ49g68 HcjiMv+LwXI9BZj1ADZdWcQM6YQTRTY8cf1RNVOjNRO7ahGDXMTrmn3l8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQWjh3oQqAUesJBEdW0Qjx0QnUrMB8GA1UdIwQY MBaAFOxzijgeYPWo/gWH/GsaPIE8jjyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8wYzFjZTAtNDUzMy00ZTQzLWJlOWMt NTNjZjI2YjBhNzI0LzEvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi8wYzFjZTAtNDUzMy00ZTQzLWJlOWMtNTNjZjI2YjBhNzI0 LzEvN0hPS09CNWc5YWotQllmOGF4bzhnVHlPUEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUQTjtlg 1KAZClMJbGJVYW6XKrCnLRTPN9hJIuZVjLGnzuxy+Op4XHapMaBc2T78LEulVPN7 8CnSz9cUBn0dTKZdZ3iOFrI9oNIlv3DksBnQ/3VWa9HfrbM0XMZvhJPGStiAIHZj a6S3cPoR8rEaQJVNiFegUIiout2AZjLhaSeUk48X3pdj6QyRTtIjSTvoe8b3G+2t M/cSL3D8p6u2/VBVItDyurT1i2FFfBDkYVcBt5UF9w+G49rqJ+W57YVYZTlyp2Jq Oak+g1VgyVFDEdQKw7/buGUVXkAeDyXGhOL2UKzwVdLtRTewOBObvN7wjlk1iXe2 5fANmRefbdKKDQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:42:10 2025 by rpki-client