This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft File: HoDFpwojY4QFTzWEkVCSxBcU7tc.mft (raw, json) Hash identifier: 5L1JaqmjnGg3uTXPyIOjpS4DEgVe0xaRqUDAMwImsQo= Subject key identifier: 69:55:FD:61:60:19:D6:89:63:80:42:95:30:B5:49:D4:CC:D2:32:0A Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7 Certificate issuer: /CN=1e80c5a70a236384054f3584915092c41714eed7 Certificate serial: 019AF2092600AE17A2938ED767D901F8BDA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft Manifest number: 0EB6 Signing time: Sat 06 Dec 2025 05:01:17 +0000 Manifest this update: Sat 06 Dec 2025 05:01:17 +0000 Manifest next update: Sun 07 Dec 2025 05:01:17 +0000 Files and hashes: 1: 79F6Y208nVPLjoQlLn300eKWKvA.roa (hash: T+0rMKFSROZIU7LeDL6rluVOt/hl3CFB58rSKBnAyIg=) 2: HoDFpwojY4QFTzWEkVCSxBcU7tc.crl (hash: kYpYkB6MzYC6lBXujekiJ3AEW3aTrhid2kB5TZW0/Cc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:26:00:ae:17:a2:93:8e:d7:67:d9:01:f8:bd:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7 Validity Not Before: Dec 6 05:01:17 2025 GMT Not After : Dec 7 05:01:17 2025 GMT Subject: CN=6955fd616019d6896380429530b549d4ccd2320a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b6:9a:aa:79:75:f6:5f:6e:73:1c:59:69:65: 9f:c2:b3:67:93:56:25:63:86:7b:91:a5:89:95:c4: 68:cc:e4:0b:86:8d:8e:45:c0:0f:36:c4:29:e8:5c: 82:25:57:54:77:3c:5a:19:59:57:da:9d:5e:ea:10: df:75:84:cb:0f:27:2c:8c:ec:07:59:89:5d:7c:11: 4a:c9:c5:1e:ea:cd:a2:ad:b2:e8:74:ed:bb:2f:0c: 8d:62:40:9f:e4:88:d4:87:6e:fc:c9:bc:5e:11:19: 5b:bb:3c:b8:c9:fa:66:19:16:ca:37:38:1b:7c:00: 4b:45:38:6e:d0:0c:4f:0e:f1:01:8b:fe:22:f6:a7: 0e:4d:46:34:1c:d9:09:b2:3a:d5:50:80:99:a1:50: 29:31:fc:c4:b4:81:83:fc:88:fb:e1:06:2e:10:99: c4:72:73:2a:c5:a8:36:fe:a5:1e:37:38:7e:a0:74: 8f:45:60:91:f1:f4:ff:9b:50:78:a6:cb:69:b0:b2: 5d:c7:49:45:6f:13:fe:57:b1:f8:d5:9e:28:d8:89: 58:42:ef:cd:16:2a:89:f0:17:3f:6f:4c:52:ff:03: 4c:88:31:03:74:f4:39:92:2f:d6:86:bc:6f:b4:eb: 78:e9:b9:ef:03:45:ef:f3:75:31:1f:50:4e:6a:67: ef:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:55:FD:61:60:19:D6:89:63:80:42:95:30:B5:49:D4:CC:D2:32:0A X509v3 Authority Key Identifier: keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:31:c0:d1:ba:b3:e4:ea:c1:6a:6b:b9:61:40:c6:8e:eb:56: b2:d9:10:c2:f3:53:2d:85:ee:9d:e3:ec:94:17:99:c5:ca:6d: 40:29:82:cb:74:9f:03:d4:fa:ef:81:18:94:c0:01:aa:f3:7a: c4:fa:b1:8a:db:12:23:14:ea:29:58:0b:55:2b:21:aa:d0:4f: cc:62:fc:a3:14:2a:d9:6d:17:fb:cb:5e:a0:04:05:b1:40:c8: 1b:d0:8e:37:c1:db:a2:ae:65:98:b0:fe:6f:9e:89:1b:13:72: a3:72:1a:5b:a4:2e:76:fb:0b:71:36:99:00:89:25:f4:ea:7d: 1c:44:69:39:79:f8:e3:3f:fa:09:f6:f9:f2:56:9a:19:b7:49: b1:ee:65:c4:50:28:f1:71:ca:50:7b:c7:00:29:24:71:66:3f: db:e6:5d:71:ed:48:72:53:e3:75:6a:97:64:8d:83:20:39:e9: 9c:93:f5:95:c0:24:da:3f:60:b8:17:bc:8f:84:2b:9b:c3:b5: 7c:da:84:d1:8c:ca:36:11:2e:7c:64:7e:35:bb:bd:98:bb:37: 8e:45:b1:74:9e:8c:4e:7c:73:e1:19:cf:f4:85:4f:72:ac:6e: 6e:16:2f:0e:c7:58:00:58:e5:ea:e1:1d:b5:66:24:15:e2:c4: b8:be:14:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSYArheik47XZ9kB+L2lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlODBjNWE3MGEyMzYzODQwNTRmMzU4NDkxNTA5MmM0MTcx NGVlZDcwHhcNMjUxMjA2MDUwMTE3WhcNMjUxMjA3MDUwMTE3WjAzMTEwLwYDVQQD Eyg2OTU1ZmQ2MTYwMTlkNjg5NjM4MDQyOTUzMGI1NDlkNGNjZDIzMjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27aaqnl19l9ucxxZaWWfwrNnk1Yl Y4Z7kaWJlcRozOQLho2ORcAPNsQp6FyCJVdUdzxaGVlX2p1e6hDfdYTLDycsjOwH WYldfBFKycUe6s2irbLodO27LwyNYkCf5IjUh278ybxeERlbuzy4yfpmGRbKNzgb fABLRThu0AxPDvEBi/4i9qcOTUY0HNkJsjrVUICZoVApMfzEtIGD/Ij74QYuEJnE cnMqxag2/qUeNzh+oHSPRWCR8fT/m1B4pstpsLJdx0lFbxP+V7H41Z4o2IlYQu/N FiqJ8Bc/b0xS/wNMiDEDdPQ5ki/WhrxvtOt46bnvA0Xv83UxH1BOamfveQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlV/WFgGdaJY4BClTC1SdTM0jIKMB8GA1UdIwQY MBaAFB6AxacKI2OEBU81hJFQksQXFO7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG9ERnB3b2pZNFFGVHpXRWtWQ1N4QmNVN3RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9jZmNiMDktMGY1MC00ZjFiLTg3M2Ut NjYxNjMxYmJhOTUzLzEvSG9ERnB3b2pZNFFGVHpXRWtWQ1N4QmNVN3RjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9jZmNiMDktMGY1MC00ZjFiLTg3M2UtNjYxNjMxYmJhOTUz LzEvSG9ERnB3b2pZNFFGVHpXRWtWQ1N4QmNVN3RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTHA0bqz 5OrBamu5YUDGjutWstkQwvNTLYXunePslBeZxcptQCmCy3SfA9T674EYlMABqvN6 xPqxitsSIxTqKVgLVSshqtBPzGL8oxQq2W0X+8teoAQFsUDIG9CON8Hboq5lmLD+ b56JGxNyo3IaW6QudvsLcTaZAIkl9Op9HERpOXn44z/6Cfb58laaGbdJse5lxFAo 8XHKUHvHACkkcWY/2+Zdce1IclPjdWqXZI2DIDnpnJP1lcAk2j9guBe8j4Qrm8O1 fNqE0YzKNhEufGR+Nbu9mLs3jkWxdJ6MTnxz4RnP9IVPcqxubhYvDsdYAFjl6uEd tWYkFeLEuL4Uog== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:49 2025 by rpki-client