This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft File: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft (raw, json) Hash identifier: se6X1n9fwNlzr56I8nRPhNhygtoW6riBOm52b5txqs4= Subject key identifier: 41:B2:17:F2:8F:BE:BD:DA:7D:9E:D4:83:52:25:DA:48:CA:88:15:77 Authority key identifier: 86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4 Certificate issuer: /CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4 Certificate serial: 019AF31D1A8192708EE5A893846E1AE169CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft Manifest number: 0827 Signing time: Sat 06 Dec 2025 10:02:42 +0000 Manifest this update: Sat 06 Dec 2025 10:02:42 +0000 Manifest next update: Sun 07 Dec 2025 10:02:42 +0000 Files and hashes: 1: 6rszyN8yZZcIFadBDy7iWBsKHqI.roa (hash: dWt4x4jxo9KCoGxn2Sm9VBzQBMC43sDUxeYLn9feg7U=) 2: hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl (hash: t7NCVtRLF6YCrd0V3tKBRjEPb1t0lURqJbM7PSBbzdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:1a:81:92:70:8e:e5:a8:93:84:6e:1a:e1:69:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8685e05d80592c6cf11320eb5029cac04a4d9bb4 Validity Not Before: Dec 6 10:02:42 2025 GMT Not After : Dec 7 10:02:42 2025 GMT Subject: CN=41b217f28fbebdda7d9ed4835225da48ca881577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:46:01:06:54:c5:ad:ae:dd:ee:be:87:86:e1: bc:8c:fa:60:23:b6:82:f4:95:1a:f5:47:05:d6:53: 4b:37:a0:2c:4a:7d:ba:80:f7:29:13:0a:c8:8b:c0: d5:88:9f:e8:1c:b8:dc:5e:b9:21:56:b5:6d:42:8b: b9:92:13:86:3a:81:7e:07:27:a3:4b:ed:1b:ba:de: 41:b7:eb:35:a2:78:57:d7:3c:af:e0:e8:83:b0:9b: e3:e4:d4:01:9a:b0:62:29:0d:bd:2b:f0:26:45:0b: ee:09:11:9c:81:4b:27:5b:83:5a:25:6c:84:c6:a7: c3:7a:c9:64:08:f2:7f:d3:ec:d4:88:d8:5b:8c:48: e5:fd:9c:ac:74:df:a6:bd:c9:13:31:e0:92:c4:4d: 44:0d:ca:0c:f0:c2:46:24:c8:3d:49:5c:83:7e:b8: f2:66:3c:f5:46:ab:cd:4c:e4:61:fd:82:7b:94:16: e9:3d:7a:60:62:e4:6e:35:f2:08:84:c0:3e:ce:13: 91:ed:1d:f4:37:f8:77:04:9b:ef:82:e6:80:dd:ad: c8:24:13:c6:18:30:59:ed:f2:65:21:e9:7a:fd:0f: c8:fe:b1:90:45:38:50:e8:05:b5:df:85:ab:dc:b8: c2:b7:13:3d:47:c6:9c:55:53:90:2f:93:6f:53:0d: 65:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B2:17:F2:8F:BE:BD:DA:7D:9E:D4:83:52:25:DA:48:CA:88:15:77 X509v3 Authority Key Identifier: keyid:86:85:E0:5D:80:59:2C:6C:F1:13:20:EB:50:29:CA:C0:4A:4D:9B:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b544d5-fefa-4240-bf40-68ef24cf5ef9/1/hoXgXYBZLGzxEyDrUCnKwEpNm7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5d:aa:e4:a6:bc:60:6b:9a:94:58:5c:96:cb:a6:21:ec:73: 8a:27:27:44:97:7c:1a:10:41:af:f2:60:3a:0e:91:df:93:1d: cf:d2:7c:d3:91:e3:1e:f8:39:24:5f:55:e2:df:3c:84:2c:d0: db:a7:04:d8:d9:06:c0:34:3a:64:36:30:b0:3c:16:79:f2:fb: 0f:1c:76:c4:7f:76:c0:22:be:0d:cd:20:a6:c7:f1:c2:b4:36: b6:00:0a:ba:43:64:7c:69:32:69:5a:9c:85:45:2b:d7:a8:1c: 9a:47:e0:af:16:1d:63:17:79:04:6a:7a:2a:84:5e:99:bb:84: 19:06:b3:ca:1b:53:b0:f7:22:e8:b0:a3:64:78:2e:dc:cc:56: ab:bb:c4:ff:d4:d0:f2:83:18:1d:2f:9d:83:80:a5:3d:54:8f: 23:fb:b6:73:60:ea:1f:83:31:a1:7d:21:84:77:b4:96:67:de: 7f:eb:b6:b1:4b:13:29:af:46:7e:33:97:77:b6:78:31:cb:86: e8:20:48:fd:4d:5d:66:c4:23:47:d9:95:0e:2a:5d:ba:9d:d2: 92:f4:b8:29:80:b4:05:09:ad:79:a8:46:18:34:a6:2a:03:41: 40:fd:90:19:1c:a4:ae:dd:3d:a4:74:a2:9b:7b:8c:d8:9c:03: 16:7f:48:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHRqBknCO5aiThG4a4WnOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ODVlMDVkODA1OTJjNmNmMTEzMjBlYjUwMjljYWMwNGE0 ZDliYjQwHhcNMjUxMjA2MTAwMjQyWhcNMjUxMjA3MTAwMjQyWjAzMTEwLwYDVQQD Eyg0MWIyMTdmMjhmYmViZGRhN2Q5ZWQ0ODM1MjI1ZGE0OGNhODgxNTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEYBBlTFra7d7r6HhuG8jPpgI7aC 9JUa9UcF1lNLN6AsSn26gPcpEwrIi8DViJ/oHLjcXrkhVrVtQou5khOGOoF+Byej S+0but5Bt+s1onhX1zyv4OiDsJvj5NQBmrBiKQ29K/AmRQvuCRGcgUsnW4NaJWyE xqfDeslkCPJ/0+zUiNhbjEjl/ZysdN+mvckTMeCSxE1EDcoM8MJGJMg9SVyDfrjy Zjz1RqvNTORh/YJ7lBbpPXpgYuRuNfIIhMA+zhOR7R30N/h3BJvvguaA3a3IJBPG GDBZ7fJlIel6/Q/I/rGQRThQ6AW134Wr3LjCtxM9R8acVVOQL5NvUw1lUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGyF/KPvr3afZ7Ug1Il2kjKiBV3MB8GA1UdIwQY MBaAFIaF4F2AWSxs8RMg61ApysBKTZu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG9YZ1hZQlpMR3p4RXlEclVDbkt3RXBObTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNTQ0ZDUtZmVmYS00MjQwLWJmNDAt NjhlZjI0Y2Y1ZWY5LzEvaG9YZ1hZQlpMR3p4RXlEclVDbkt3RXBObTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9iNTQ0ZDUtZmVmYS00MjQwLWJmNDAtNjhlZjI0Y2Y1ZWY5 LzEvaG9YZ1hZQlpMR3p4RXlEclVDbkt3RXBObTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOl2q5Ka8 YGualFhclsumIexziicnRJd8GhBBr/JgOg6R35Mdz9J805HjHvg5JF9V4t88hCzQ 26cE2NkGwDQ6ZDYwsDwWefL7Dxx2xH92wCK+Dc0gpsfxwrQ2tgAKukNkfGkyaVqc hUUr16gcmkfgrxYdYxd5BGp6KoRembuEGQazyhtTsPci6LCjZHgu3MxWq7vE/9TQ 8oMYHS+dg4ClPVSPI/u2c2DqH4MxoX0hhHe0lmfef+u2sUsTKa9GfjOXd7Z4McuG 6CBI/U1dZsQjR9mVDipdup3SkvS4KYC0BQmteahGGDSmKgNBQP2QGRykrt09pHSi m3uM2JwDFn9ITg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:31:01 2025 by rpki-client