This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft File: hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft (raw, json) Hash identifier: xt0mT8XLoH/4i0O30KNxISJYTOE9n7g31U/lepoFV14= Subject key identifier: 37:BC:D5:E5:64:86:95:58:61:0E:64:9E:5A:24:56:FB:E8:87:CD:BC Authority key identifier: 86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28 Certificate issuer: /CN=86842274b3788b80b2fed916db3880fe08c37528 Certificate serial: 019AF1D22A1A21DA4AF1B0C485F852693024 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:01:13 +0000 Manifest this update: Sat 06 Dec 2025 04:01:13 +0000 Manifest next update: Sun 07 Dec 2025 04:01:13 +0000 Files and hashes: 1: 9YAK0xIjvZ0jkU9GYhz1bySm8ao.roa (hash: YSdN3my3ymjfDNRBd0aA0z7OnehzvCW8RCNSPlN8quQ=) 2: hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl (hash: 7IGdT9U8htbTMJtyv/ndyzKCHHiZc4C8OxJBPvS/SXQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2a:1a:21:da:4a:f1:b0:c4:85:f8:52:69:30:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86842274b3788b80b2fed916db3880fe08c37528 Validity Not Before: Dec 6 04:01:13 2025 GMT Not After : Dec 7 04:01:13 2025 GMT Subject: CN=37bcd5e564869558610e649e5a2456fbe887cdbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b2:3e:40:4e:b9:15:02:e9:e7:40:80:92:7e: 16:69:91:fd:bd:c3:75:5a:1d:34:9e:ee:e3:cf:62: 75:77:76:73:d6:c7:c6:e7:8a:c6:e5:4a:2c:7d:a9: 74:e2:f1:30:ca:6f:4f:89:89:ae:3f:8b:e4:8f:80: 8d:bf:e4:94:ff:3e:c7:ad:2c:39:2f:e8:91:37:ed: d2:d3:8d:a4:de:b9:a5:df:e0:3a:d0:89:83:92:69: fe:ce:fc:ea:3a:c2:c7:0c:95:d0:ef:0f:77:93:6b: 23:16:54:ad:bc:2e:cb:d0:da:4a:f9:a0:d9:be:6b: 5c:60:0d:82:f2:ea:23:da:5e:e5:94:70:e9:c5:dc: 52:bd:b1:a1:67:0c:0b:46:2c:1c:c6:d3:ac:bf:ab: d6:7e:dd:dd:d7:05:01:0c:9c:c0:57:59:62:29:f0: 65:4b:e7:d3:24:bc:fe:8b:3d:d1:2f:6c:20:a9:c3: ed:40:c8:28:e9:b5:5b:fb:b4:0f:02:93:04:02:b5: d8:a2:60:7d:60:2b:fe:75:a5:9c:a4:8a:ec:8c:0b: d6:4c:f7:9e:64:a7:42:f3:4a:50:fb:14:dd:1a:89: 8c:06:32:ca:22:09:47:01:26:d4:23:e1:86:fe:5e: a3:48:74:51:10:30:91:e7:84:da:6a:97:27:3a:c4: 51:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:BC:D5:E5:64:86:95:58:61:0E:64:9E:5A:24:56:FB:E8:87:CD:BC X509v3 Authority Key Identifier: keyid:86:84:22:74:B3:78:8B:80:B2:FE:D9:16:DB:38:80:FE:08:C3:75:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoQidLN4i4Cy_tkW2ziA_gjDdSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/aebcef-6296-4a32-863e-aa31520d3a6b/1/hoQidLN4i4Cy_tkW2ziA_gjDdSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:2f:16:c3:e3:7f:81:56:18:76:54:e9:bc:8e:e2:a5:01:8f: 9b:37:57:ef:46:04:2d:4b:82:b5:50:c9:1b:f8:af:0b:d7:2b: cc:90:aa:b7:59:61:8b:f6:c7:bf:b0:6d:c8:71:59:a1:02:93: fa:76:bc:41:c0:83:48:78:a3:56:ca:42:2b:6a:6d:61:54:6a: cb:21:09:0c:da:03:b6:b2:27:6f:2c:21:03:53:65:c2:c8:29: bc:1d:cb:15:46:e6:51:35:69:f5:0d:0b:c4:e9:95:1d:8c:70: a0:6a:0a:4d:0c:bc:88:fa:25:01:57:c5:e5:3e:c8:de:5f:bd: 7a:e8:fc:5d:20:9d:cd:15:5f:22:59:66:a5:87:6a:23:b2:94: 36:a7:91:1d:aa:d1:45:00:d9:5f:df:36:38:ba:b7:28:39:35: ba:7f:de:fe:39:51:dd:d9:00:5f:ff:9d:94:ef:65:6c:9e:2b: 7c:f4:d1:ea:a0:79:66:d2:b7:77:e7:e9:8f:77:aa:4e:74:5c: e3:e2:c5:c5:28:65:3e:3e:77:92:c5:c6:1d:f2:b7:04:27:20: c1:ff:db:26:f0:ad:fc:71:3c:9e:c3:4a:77:68:bb:64:3b:b5: 1d:bf:30:ec:86:55:41:d2:23:d9:be:a0:59:c2:e2:c2:8e:99: 84:24:b3:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ioaIdpK8bDEhfhSaTAkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ODQyMjc0YjM3ODhiODBiMmZlZDkxNmRiMzg4MGZlMDhj Mzc1MjgwHhcNMjUxMjA2MDQwMTEzWhcNMjUxMjA3MDQwMTEzWjAzMTEwLwYDVQQD EygzN2JjZDVlNTY0ODY5NTU4NjEwZTY0OWU1YTI0NTZmYmU4ODdjZGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrI+QE65FQLp50CAkn4WaZH9vcN1 Wh00nu7jz2J1d3Zz1sfG54rG5Uosfal04vEwym9PiYmuP4vkj4CNv+SU/z7HrSw5 L+iRN+3S042k3rml3+A60ImDkmn+zvzqOsLHDJXQ7w93k2sjFlStvC7L0NpK+aDZ vmtcYA2C8uoj2l7llHDpxdxSvbGhZwwLRiwcxtOsv6vWft3d1wUBDJzAV1liKfBl S+fTJLz+iz3RL2wgqcPtQMgo6bVb+7QPApMEArXYomB9YCv+daWcpIrsjAvWTPee ZKdC80pQ+xTdGomMBjLKIglHASbUI+GG/l6jSHRREDCR54TaapcnOsRRpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDe81eVkhpVYYQ5knlokVvvoh828MB8GA1UdIwQY MBaAFIaEInSzeIuAsv7ZFts4gP4Iw3UoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG9RaWRMTjRpNEN5X3RrVzJ6aUFfZ2pEZFNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hZWJjZWYtNjI5Ni00YTMyLTg2M2Ut YWEzMTUyMGQzYTZiLzEvaG9RaWRMTjRpNEN5X3RrVzJ6aUFfZ2pEZFNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9hZWJjZWYtNjI5Ni00YTMyLTg2M2UtYWEzMTUyMGQzYTZi LzEvaG9RaWRMTjRpNEN5X3RrVzJ6aUFfZ2pEZFNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqi8Ww+N/ gVYYdlTpvI7ipQGPmzdX70YELUuCtVDJG/ivC9crzJCqt1lhi/bHv7BtyHFZoQKT +na8QcCDSHijVspCK2ptYVRqyyEJDNoDtrInbywhA1NlwsgpvB3LFUbmUTVp9Q0L xOmVHYxwoGoKTQy8iPolAVfF5T7I3l+9euj8XSCdzRVfIllmpYdqI7KUNqeRHarR RQDZX982OLq3KDk1un/e/jlR3dkAX/+dlO9lbJ4rfPTR6qB5ZtK3d+fpj3eqTnRc 4+LFxShlPj53ksXGHfK3BCcgwf/bJvCt/HE8nsNKd2i7ZDu1Hb8w7IZVQdIj2b6g WcLiwo6ZhCSzGA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:00 2025 by rpki-client