This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft File: hoJWrjTlRSbFslqsK51fX6h9Bh4.mft (raw, json) Hash identifier: /ZeLr4z5uYvfdMUPACXQjxVul9HjLHd1an+zqwhlZXE= Subject key identifier: 43:43:49:72:7F:90:5B:0E:EE:A8:3E:BD:04:D5:56:F7:5D:1D:9C:D7 Authority key identifier: 86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E Certificate issuer: /CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e Certificate serial: 019AF653364A183B62891C0A6F2C6D30A6C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft Manifest number: 0E1A Signing time: Sun 07 Dec 2025 01:00:39 +0000 Manifest this update: Sun 07 Dec 2025 01:00:39 +0000 Manifest next update: Mon 08 Dec 2025 01:00:39 +0000 Files and hashes: 1: ggyXYBYJYDyjENMrTDEoM9cmQuY.roa (hash: nvujf7S88P1Vb2Lev6oUVClTcezEWcGUqDcy1w7ylUY=) 2: hoJWrjTlRSbFslqsK51fX6h9Bh4.crl (hash: X7RXok+hSVNWRH+zUOqHTtETj9H7IGcQ6AYSo8h5zj4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:36:4a:18:3b:62:89:1c:0a:6f:2c:6d:30:a6:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=868256ae34e54526c5b25aac2b9d5f5fa87d061e Validity Not Before: Dec 7 01:00:39 2025 GMT Not After : Dec 8 01:00:39 2025 GMT Subject: CN=434349727f905b0eeea83ebd04d556f75d1d9cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c3:98:1b:d7:f7:a3:87:12:6d:f2:b4:fb:77: 81:4a:8d:e8:c6:ec:75:b7:d3:c1:ba:a6:c2:0c:cd: 2a:11:8c:3a:61:b7:3c:d0:b9:92:a5:29:4a:4c:aa: 92:52:a7:0e:56:06:09:c1:ef:cc:4d:ad:9d:57:90: c3:53:41:e7:c3:30:19:61:a3:8f:a7:dd:17:ab:00: 81:1d:7c:ce:70:5a:b2:73:50:d3:8b:14:c6:f6:85: a0:c9:cb:32:4c:c7:03:01:05:99:b2:39:16:b1:1b: 0f:6e:b3:2f:d5:9a:c7:71:42:92:c4:30:e2:cf:1e: 5e:c1:c0:62:4d:1a:36:4e:c9:0c:7c:bc:2c:33:2f: 02:6d:0e:47:08:ff:ee:e0:74:8a:20:09:61:cc:80: a0:11:b9:24:38:8e:11:9b:69:c0:65:3f:b2:09:ec: b8:ed:c1:23:67:6f:54:cf:67:82:14:bb:0e:c0:90: 1d:83:4b:22:f3:e2:e7:b8:dc:72:6e:cb:4b:b3:20: 41:a7:89:d8:63:68:f3:16:0a:77:5b:13:c7:f4:9a: fd:f2:02:31:0b:8c:d7:e8:25:f0:3a:e4:58:d7:b6: 0c:3d:5f:f9:7b:1d:5a:73:58:4f:b6:02:3a:09:63: c8:ba:6b:61:2b:7a:75:15:cb:de:1a:b8:70:4e:ae: a6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:43:49:72:7F:90:5B:0E:EE:A8:3E:BD:04:D5:56:F7:5D:1D:9C:D7 X509v3 Authority Key Identifier: keyid:86:82:56:AE:34:E5:45:26:C5:B2:5A:AC:2B:9D:5F:5F:A8:7D:06:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoJWrjTlRSbFslqsK51fX6h9Bh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7b296a-fd03-4afa-bcd2-cbf60700eb92/1/hoJWrjTlRSbFslqsK51fX6h9Bh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d5:43:bf:71:d0:c9:a8:1e:5d:f2:1c:28:3b:66:86:92:3a: 1b:22:4a:06:78:52:02:84:8a:9b:8d:d8:a4:65:fa:4f:e2:77: 86:57:7e:d0:de:01:6f:9b:35:e4:d6:11:bb:ac:81:72:8c:1f: 89:58:0d:68:32:f4:d2:54:4d:3f:f7:ca:e6:1d:9d:0f:a5:2c: 29:1a:14:fb:47:bc:ed:a2:81:fe:11:e3:db:45:dd:92:b4:be: 49:64:21:e2:83:bc:76:66:de:69:31:f0:d6:4c:9a:a5:1a:aa: 43:4a:bd:8b:ed:03:a0:cc:f1:51:5a:02:bb:d5:b0:22:a5:7b: e1:03:c7:32:d5:a5:48:6b:ba:12:ae:c1:11:86:cc:a4:48:52: 37:b4:1f:8b:57:88:90:c5:aa:86:b6:c3:6a:c4:d7:73:b6:3a: 79:c1:f0:c9:e8:09:15:33:08:13:7a:09:ab:50:e0:3f:e3:7e: 1f:63:c4:d8:6f:53:f1:c8:67:1c:50:d5:85:a6:c5:98:ce:54: 06:f4:5d:d5:29:86:a3:1c:06:12:3c:7e:e7:40:19:02:91:fd: 28:f4:d2:c8:2d:eb:c4:de:a3:93:b1:73:20:86:c0:01:7a:5d: 9b:c5:b8:80:f9:9b:8e:c6:49:1e:21:a5:9e:35:af:7a:28:6f: 21:e5:30:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2UzZKGDtiiRwKbyxtMKbFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ODI1NmFlMzRlNTQ1MjZjNWIyNWFhYzJiOWQ1ZjVmYTg3 ZDA2MWUwHhcNMjUxMjA3MDEwMDM5WhcNMjUxMjA4MDEwMDM5WjAzMTEwLwYDVQQD Eyg0MzQzNDk3MjdmOTA1YjBlZWVhODNlYmQwNGQ1NTZmNzVkMWQ5Y2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycOYG9f3o4cSbfK0+3eBSo3oxux1 t9PBuqbCDM0qEYw6Ybc80LmSpSlKTKqSUqcOVgYJwe/MTa2dV5DDU0HnwzAZYaOP p90XqwCBHXzOcFqyc1DTixTG9oWgycsyTMcDAQWZsjkWsRsPbrMv1ZrHcUKSxDDi zx5ewcBiTRo2TskMfLwsMy8CbQ5HCP/u4HSKIAlhzICgEbkkOI4Rm2nAZT+yCey4 7cEjZ29Uz2eCFLsOwJAdg0si8+LnuNxybstLsyBBp4nYY2jzFgp3WxPH9Jr98gIx C4zX6CXwOuRY17YMPV/5ex1ac1hPtgI6CWPIumthK3p1FcveGrhwTq6mHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENDSXJ/kFsO7qg+vQTVVvddHZzXMB8GA1UdIwQY MBaAFIaCVq405UUmxbJarCudX1+ofQYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG9KV3JqVGxSU2JGc2xxc0s1MWZYNmg5Qmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83YjI5NmEtZmQwMy00YWZhLWJjZDIt Y2JmNjA3MDBlYjkyLzEvaG9KV3JqVGxSU2JGc2xxc0s1MWZYNmg5Qmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83YjI5NmEtZmQwMy00YWZhLWJjZDItY2JmNjA3MDBlYjky LzEvaG9KV3JqVGxSU2JGc2xxc0s1MWZYNmg5Qmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtVDv3HQ yageXfIcKDtmhpI6GyJKBnhSAoSKm43YpGX6T+J3hld+0N4Bb5s15NYRu6yBcowf iVgNaDL00lRNP/fK5h2dD6UsKRoU+0e87aKB/hHj20XdkrS+SWQh4oO8dmbeaTHw 1kyapRqqQ0q9i+0DoMzxUVoCu9WwIqV74QPHMtWlSGu6Eq7BEYbMpEhSN7Qfi1eI kMWqhrbDasTXc7Y6ecHwyegJFTMIE3oJq1DgP+N+H2PE2G9T8chnHFDVhabFmM5U BvRd1SmGoxwGEjx+50AZApH9KPTSyC3rxN6jk7FzIIbAAXpdm8W4gPmbjsZJHiGl njWveihvIeUwJg== -----END CERTIFICATE-----Generated at Sun Dec 7 02:40:23 2025 by rpki-client