This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft File: ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json) Hash identifier: IXcJ2dDmD26DquOdgxMz3X+22PXYSy6fj/6SCrCfSyw= Subject key identifier: 31:5D:B9:0B:44:C4:E2:94:BD:9E:4F:43:8D:0E:02:E9:C6:62:B7:ED Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC Certificate issuer: /CN=868f20309962f7c6e1c3267f083e124d83dd76fc Certificate serial: 019AF31B6449778416B73577DE4DE1B61A8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 10:00:49 +0000 Manifest this update: Sat 06 Dec 2025 10:00:49 +0000 Manifest next update: Sun 07 Dec 2025 10:00:49 +0000 Files and hashes: 1: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: +yELf42njB2INMf2CrbcpSLlseQTYwd7wGxfuD4ZXjY=) 2: rfewBBlrs58wJgdGtzFYKvwGFI8.roa (hash: 12fD5K/uMK4YG5nY9pYsgAuOVyylAM893HbTm9LpUXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:64:49:77:84:16:b7:35:77:de:4d:e1:b6:1a:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc Validity Not Before: Dec 6 10:00:49 2025 GMT Not After : Dec 7 10:00:49 2025 GMT Subject: CN=315db90b44c4e294bd9e4f438d0e02e9c662b7ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:05:61:23:37:ec:34:97:e1:e2:c8:72:b5:25: 6a:61:c9:0f:b0:73:ad:c7:4f:8a:e6:25:e1:5d:8f: 14:eb:5f:b1:3f:86:4e:44:ad:9a:11:73:cb:de:99: 1a:bd:36:3a:e3:b7:6f:b6:00:7a:d6:76:d3:27:08: 5d:c5:78:9b:85:34:6e:a2:b1:be:5c:e1:ea:8a:26: 01:dc:58:e3:53:dc:dd:88:c1:04:35:05:38:85:58: 3f:b7:6d:c4:ba:9d:d2:dc:69:2a:b8:bb:b5:4d:c7: 71:3d:24:4e:a6:74:e1:16:2c:ef:9c:50:ff:c3:cd: 18:2d:ad:0f:b3:7f:0c:2b:d9:92:f6:27:76:2b:7f: 61:a0:2d:fc:3e:4f:23:68:66:b4:15:dc:d7:f5:56: a0:d8:79:2c:23:8e:0f:95:15:7a:0b:d2:dc:c5:0a: b2:d2:e2:60:ac:d8:55:01:f2:63:0f:3a:f6:11:02: b6:ed:4f:e4:3d:2d:b1:99:1e:ea:6f:25:48:f1:e6: 86:15:ff:87:08:69:bc:2d:f6:80:7b:ef:af:e7:a4: 7d:38:17:ff:f0:5b:09:f6:69:c5:b5:6c:52:bd:98: b2:35:51:ed:b6:43:7a:5d:89:61:fe:d4:17:b5:b9: 66:a8:12:d5:a4:d3:97:3f:f2:43:d0:76:5d:7b:43: 93:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5D:B9:0B:44:C4:E2:94:BD:9E:4F:43:8D:0E:02:E9:C6:62:B7:ED X509v3 Authority Key Identifier: keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:44:e7:03:dc:85:40:10:25:1d:19:70:f8:7f:80:3c:f9:38: 8d:73:f9:c6:6c:d4:36:8e:41:e9:1a:72:37:75:61:a2:30:65: fe:83:59:c5:03:63:6a:1d:09:11:dc:12:33:6f:92:9c:dc:a5: 59:af:17:26:12:26:b4:9c:c9:4c:95:6c:c2:4f:38:b6:1a:a2: f1:20:98:c1:85:fa:ed:b3:a7:0a:29:da:db:3c:f4:ce:74:c5: 29:a4:e4:09:d3:ae:f2:1c:96:01:1d:92:ee:37:eb:27:d0:f3: bf:2c:05:f9:fd:80:ce:e6:37:4f:3b:a4:5a:34:cd:2b:b5:16: 4c:f6:1c:87:69:38:15:b6:bd:d4:56:d3:c0:7b:4f:a2:d8:9e: 4e:1c:6e:96:b2:18:2e:57:c0:df:75:61:0e:12:40:3f:f5:9d: 33:27:f3:7b:a5:75:57:aa:19:54:79:1f:11:70:d2:3b:14:74: 80:09:44:83:d3:0c:51:31:fc:e8:53:55:fb:52:cd:e5:a7:68: 8b:b8:45:2c:e7:3a:5d:1e:8f:b7:f0:cc:4a:61:27:77:a3:52: e6:92:63:5a:76:47:ee:73:8d:c8:65:ba:16:95:3d:40:a5:70: 43:32:ac:07:a2:96:a0:64:b8:a9:65:1b:a4:b5:27:2d:13:20: df:70:26:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG2RJd4QWtzV33k3hthqMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2OGYyMDMwOTk2MmY3YzZlMWMzMjY3ZjA4M2UxMjRkODNk ZDc2ZmMwHhcNMjUxMjA2MTAwMDQ5WhcNMjUxMjA3MTAwMDQ5WjAzMTEwLwYDVQQD EygzMTVkYjkwYjQ0YzRlMjk0YmQ5ZTRmNDM4ZDBlMDJlOWM2NjJiN2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswVhIzfsNJfh4shytSVqYckPsHOt x0+K5iXhXY8U61+xP4ZORK2aEXPL3pkavTY647dvtgB61nbTJwhdxXibhTRuorG+ XOHqiiYB3FjjU9zdiMEENQU4hVg/t23Eup3S3GkquLu1TcdxPSROpnThFizvnFD/ w80YLa0Ps38MK9mS9id2K39hoC38Pk8jaGa0FdzX9Vag2HksI44PlRV6C9LcxQqy 0uJgrNhVAfJjDzr2EQK27U/kPS2xmR7qbyVI8eaGFf+HCGm8LfaAe++v56R9OBf/ 8FsJ9mnFtWxSvZiyNVHttkN6XYlh/tQXtblmqBLVpNOXP/JD0HZde0OTVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDFduQtExOKUvZ5PQ40OAunGYrftMB8GA1UdIwQY MBaAFIaPIDCZYvfG4cMmfwg+Ek2D3Xb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xMjZjZWUtZjE2Yy00NWE4LTk3YjIt NjIzMzg0ZjNlMTI1LzEvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8xMjZjZWUtZjE2Yy00NWE4LTk3YjItNjIzMzg0ZjNlMTI1 LzEvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcUTnA9yF QBAlHRlw+H+APPk4jXP5xmzUNo5B6RpyN3VhojBl/oNZxQNjah0JEdwSM2+SnNyl Wa8XJhImtJzJTJVswk84thqi8SCYwYX67bOnCina2zz0znTFKaTkCdOu8hyWAR2S 7jfrJ9DzvywF+f2AzuY3TzukWjTNK7UWTPYch2k4Fba91FbTwHtPotieThxulrIY LlfA33VhDhJAP/WdMyfze6V1V6oZVHkfEXDSOxR0gAlEg9MMUTH86FNV+1LN5ado i7hFLOc6XR6Pt/DMSmEnd6NS5pJjWnZH7nONyGW6FpU9QKVwQzKsB6KWoGS4qWUb pLUnLRMg33AmiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:47:27 2025 by rpki-client