This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft File: HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft (raw, json) Hash identifier: Fhak3WITyueLv8tATRZ2lu4GxZBS90zvg4p5myp8RhI= Subject key identifier: 3B:A6:4C:E9:E6:53:B7:03:70:98:A9:81:44:84:9F:6A:46:97:CF:76 Authority key identifier: 1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C Certificate issuer: /CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c Certificate serial: 019AF23FD14A1144E1A35CB3BC73BE0B43CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft Manifest number: 03DB Signing time: Sat 06 Dec 2025 06:00:59 +0000 Manifest this update: Sat 06 Dec 2025 06:00:59 +0000 Manifest next update: Sun 07 Dec 2025 06:00:59 +0000 Files and hashes: 1: HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl (hash: 0gCr3SIDMjUh/vctOWtaNDON4s4mJKeP3iR+UmDZx8A=) 2: bf-KUAB6aLpkHJGbHNwPz-TdsjU.roa (hash: HN5lyJEQT7Bh/OQNiW1klOAzdGY3jUKHNz1khIQidQk=) 3: zg1Lpd5dXDDrXWEs29Dqtm1PLWo.roa (hash: c0hWZybUPDWWpEetuD+QWOEePUUQ5c0jYzDlZOTBQ5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d1:4a:11:44:e1:a3:5c:b3:bc:73:be:0b:43:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ce65c57686ce5e51b367fc996b49bcc59896b9c Validity Not Before: Dec 6 06:00:59 2025 GMT Not After : Dec 7 06:00:59 2025 GMT Subject: CN=3ba64ce9e653b7037098a98144849f6a4697cf76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:64:f1:c4:61:a3:70:b0:ef:84:f5:41:c5:ec: ea:44:88:a2:cd:a6:61:22:a8:13:ca:38:a0:b8:f1: f9:96:67:76:fa:bd:d9:be:4e:7f:3a:3e:20:a0:8e: 36:ae:2a:ca:48:94:dc:7e:8b:23:51:ba:c7:45:01: a4:30:36:ba:d4:52:fa:51:00:e5:ea:be:ba:26:2c: a7:a8:48:51:8d:b9:6a:69:3c:aa:49:f9:ef:c7:7f: 50:9c:8e:fe:25:e9:00:f5:6b:2b:2e:5c:ce:f3:23: 44:65:01:6a:b4:e4:97:b5:3a:03:2f:45:74:e0:6f: 24:b5:87:ec:f6:95:f5:05:c2:c3:19:6c:61:61:b6: 1d:a6:8e:40:95:a5:f9:34:ca:d8:ca:93:da:aa:bd: 4b:40:bd:ce:53:58:d6:47:52:39:38:fe:d5:c1:bd: 69:3d:03:48:9b:d4:33:58:96:8b:68:5e:cd:96:eb: f9:00:01:8e:ce:37:ce:85:e8:e8:90:d3:b6:c0:1f: de:14:e2:7a:50:2a:2b:6a:c5:92:af:3c:3b:7c:92: 4c:db:57:0f:cf:0c:12:8c:65:95:5e:e5:5d:bd:34: 0d:4e:27:d3:4c:92:61:2e:52:9b:e4:a4:3f:c7:d2: 25:33:c6:9f:ee:5d:cc:aa:a9:fc:3f:25:ba:0b:63: 6a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A6:4C:E9:E6:53:B7:03:70:98:A9:81:44:84:9F:6A:46:97:CF:76 X509v3 Authority Key Identifier: keyid:1C:E6:5C:57:68:6C:E5:E5:1B:36:7F:C9:96:B4:9B:CC:59:89:6B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOZcV2hs5eUbNn_JlrSbzFmJa5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af8f36-e358-4b76-8822-128b5c3d053a/1/HOZcV2hs5eUbNn_JlrSbzFmJa5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:c4:d8:4d:bf:f9:33:52:e7:70:99:9f:28:ec:e7:64:3a:dc: 59:3f:0e:80:d6:e8:6e:cc:9e:3b:1b:fc:80:1f:d2:40:48:22: 5b:06:9e:a5:a5:07:8b:4b:33:24:c3:5a:3e:eb:21:b1:6a:98: 8a:0b:cc:2c:77:c3:8c:6a:17:fe:37:60:70:73:d8:64:d7:9b: 29:b4:cc:80:cb:22:0a:96:1f:2e:e4:b9:f4:14:d8:8d:b4:1f: b1:e4:5d:17:fa:85:3f:04:db:0f:73:93:7a:05:1c:3e:00:d3: f5:b4:fa:a3:67:ce:cb:f2:b9:74:36:c8:29:d1:0d:5e:e2:68: e5:75:a1:fa:4c:e4:d7:45:c1:93:e0:f4:f2:44:82:f8:4f:e0: 9f:8e:ce:8d:cb:85:b8:5a:f8:38:ae:57:c0:ee:c8:07:e0:d1: 8f:89:41:2e:5c:0f:fe:25:53:51:30:79:1c:f4:18:0d:f2:b1: 79:da:9d:d2:13:46:e5:92:5c:9f:9a:12:27:ce:39:da:80:0b: 9b:1f:4e:5e:70:f7:f8:0a:95:ed:c4:df:84:96:c6:5c:3c:a9: d3:e8:d7:50:a0:49:5a:42:d5:e4:65:69:87:74:0a:83:63:0f: b5:e6:bc:1e:7b:4e:29:97:30:91:02:ac:d5:d2:4b:e1:4c:7a: ae:37:56:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9FKEUTho1yzvHO+C0PLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZTY1YzU3Njg2Y2U1ZTUxYjM2N2ZjOTk2YjQ5YmNjNTk4 OTZiOWMwHhcNMjUxMjA2MDYwMDU5WhcNMjUxMjA3MDYwMDU5WjAzMTEwLwYDVQQD EygzYmE2NGNlOWU2NTNiNzAzNzA5OGE5ODE0NDg0OWY2YTQ2OTdjZjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWTxxGGjcLDvhPVBxezqRIiizaZh IqgTyjiguPH5lmd2+r3Zvk5/Oj4goI42rirKSJTcfosjUbrHRQGkMDa61FL6UQDl 6r66JiynqEhRjblqaTyqSfnvx39QnI7+JekA9WsrLlzO8yNEZQFqtOSXtToDL0V0 4G8ktYfs9pX1BcLDGWxhYbYdpo5AlaX5NMrYypPaqr1LQL3OU1jWR1I5OP7Vwb1p PQNIm9QzWJaLaF7Nluv5AAGOzjfOhejokNO2wB/eFOJ6UCorasWSrzw7fJJM21cP zwwSjGWVXuVdvTQNTifTTJJhLlKb5KQ/x9IlM8af7l3Mqqn8PyW6C2Nq+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDumTOnmU7cDcJipgUSEn2pGl892MB8GA1UdIwQY MBaAFBzmXFdobOXlGzZ/yZa0m8xZiWucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE9aY1YyaHM1ZVViTm5fSmxyU2J6Rm1KYTV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9hZjhmMzYtZTM1OC00Yjc2LTg4MjIt MTI4YjVjM2QwNTNhLzEvSE9aY1YyaHM1ZVViTm5fSmxyU2J6Rm1KYTV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9hZjhmMzYtZTM1OC00Yjc2LTg4MjItMTI4YjVjM2QwNTNh LzEvSE9aY1YyaHM1ZVViTm5fSmxyU2J6Rm1KYTV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg8TYTb/5 M1LncJmfKOznZDrcWT8OgNbobsyeOxv8gB/SQEgiWwaepaUHi0szJMNaPushsWqY igvMLHfDjGoX/jdgcHPYZNebKbTMgMsiCpYfLuS59BTYjbQfseRdF/qFPwTbD3OT egUcPgDT9bT6o2fOy/K5dDbIKdENXuJo5XWh+kzk10XBk+D08kSC+E/gn47OjcuF uFr4OK5XwO7IB+DRj4lBLlwP/iVTUTB5HPQYDfKxedqd0hNG5ZJcn5oSJ8452oAL mx9OXnD3+AqV7cTfhJbGXDyp0+jXUKBJWkLV5GVph3QKg2MPtea8HntOKZcwkQKs 1dJL4Ux6rjdWEA== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:37 2025 by rpki-client