This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft File: 1hocPCWQccK8vCf3kf0eIPWAqWo.mft (raw, json) Hash identifier: Fw/EOW5zhawiycY0+/v+Ciq8UOsrvhP2MAU02ruhytg= Subject key identifier: EF:06:9E:79:61:50:2D:D8:2D:7C:44:A7:DB:E3:93:E1:9B:51:61:6B Authority key identifier: D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A Certificate issuer: /CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a Certificate serial: 019AF38A0FB6C9BC9ACBBED373FE2CC14718 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft Manifest number: 0AA4 Signing time: Sat 06 Dec 2025 12:01:42 +0000 Manifest this update: Sat 06 Dec 2025 12:01:42 +0000 Manifest next update: Sun 07 Dec 2025 12:01:42 +0000 Files and hashes: 1: 1hocPCWQccK8vCf3kf0eIPWAqWo.crl (hash: SAgU845Qo92FA+Zqfk5agRhLK9rAjZ9Vao1GLMb9+tg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:8a:0f:b6:c9:bc:9a:cb:be:d3:73:fe:2c:c1:47:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d61a1c3c259071c2bcbc27f791fd1e20f580a96a Validity Not Before: Dec 6 12:01:42 2025 GMT Not After : Dec 7 12:01:42 2025 GMT Subject: CN=ef069e7961502dd82d7c44a7dbe393e19b51616b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:43:30:52:ea:b1:71:93:d9:86:35:8d:18:1a: 77:ab:5c:49:22:48:e2:40:99:aa:4e:8b:f1:59:90: 9a:bc:a7:69:55:6d:a3:36:55:82:e0:ef:a9:02:8d: f1:e1:d8:0e:27:67:d3:2e:8b:35:3b:f9:a7:86:3c: d9:ad:6f:fb:1b:5a:a4:24:87:e6:54:5b:c4:c8:61: 99:6c:f5:ac:8c:c7:62:78:b1:d4:ca:c7:0d:11:b4: c0:cf:21:c2:81:ea:b5:24:c8:ef:23:50:02:c4:59: 0f:04:17:0b:84:b7:41:00:14:47:fe:0b:48:6c:ae: bd:2b:16:d8:35:be:2a:93:9b:39:7b:5e:db:88:d2: bd:b3:4b:55:d0:ec:a8:c6:a2:11:92:d1:de:72:b9: b8:b5:56:6d:1b:51:d9:54:02:a7:c3:d7:33:45:0b: a8:cc:81:24:ec:c7:6d:d6:91:62:99:1c:39:c8:8b: fc:57:51:5f:db:e3:12:ae:e4:20:38:5b:a1:a8:58: 7b:ed:5d:c5:cb:e9:a3:15:5d:d9:89:12:8a:e5:44: 67:14:62:29:74:30:fe:2f:56:cd:b1:7e:71:04:3f: 5b:4f:ee:68:3e:39:ef:a6:89:90:ed:ed:ec:c7:55: cb:c6:53:2d:95:4d:54:9a:64:ff:97:ce:a4:6b:0e: 3d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:06:9E:79:61:50:2D:D8:2D:7C:44:A7:DB:E3:93:E1:9B:51:61:6B X509v3 Authority Key Identifier: keyid:D6:1A:1C:3C:25:90:71:C2:BC:BC:27:F7:91:FD:1E:20:F5:80:A9:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hocPCWQccK8vCf3kf0eIPWAqWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/46cd86-6de1-4c3d-b0f7-8571406697ad/1/1hocPCWQccK8vCf3kf0eIPWAqWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:91:c5:86:9e:da:83:a3:b9:d6:92:0c:50:13:1e:a4:cb:a2: 92:a9:21:ac:4c:af:b2:1f:1e:67:aa:17:e2:71:29:3a:86:af: 89:4c:69:b4:f6:a9:6e:11:23:64:2f:99:bb:38:af:f9:40:e3: 1b:36:ad:12:58:55:d7:1b:d7:47:b9:da:b1:90:84:22:94:87: 6a:53:4b:80:e9:47:b8:f5:a8:e2:03:67:90:e6:c2:1e:23:db: 38:9f:f8:7e:95:dd:67:28:0e:14:0d:62:62:9b:c9:f8:88:08: a7:1d:4b:71:9f:a4:10:44:e5:00:3b:8f:fc:c5:90:98:b3:7e: 58:de:24:16:61:97:a4:68:b7:ef:b6:41:15:3d:90:86:9d:11: 07:ee:3c:eb:cb:12:e4:85:f0:85:3f:93:62:9b:2d:16:85:79: 9e:34:24:bb:8c:16:de:10:1a:c9:9a:3d:4b:71:66:f4:90:fc: ad:2e:6d:23:de:79:b5:bf:db:a3:19:66:af:6e:ff:27:32:0c: 62:cc:00:52:f9:0e:f2:25:6d:fb:60:16:48:ed:63:18:fb:23: b1:03:7f:cf:15:82:e6:bd:61:8e:46:39:a8:cc:ab:df:a1:74: 79:40:04:ad:ad:7a:03:96:b8:e9:b3:e2:e4:6e:71:47:b9:e7: 9f:4a:c7:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzig+2ybyay77Tc/4swUcYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MWExYzNjMjU5MDcxYzJiY2JjMjdmNzkxZmQxZTIwZjU4 MGE5NmEwHhcNMjUxMjA2MTIwMTQyWhcNMjUxMjA3MTIwMTQyWjAzMTEwLwYDVQQD EyhlZjA2OWU3OTYxNTAyZGQ4MmQ3YzQ0YTdkYmUzOTNlMTliNTE2MTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0MwUuqxcZPZhjWNGBp3q1xJIkji QJmqTovxWZCavKdpVW2jNlWC4O+pAo3x4dgOJ2fTLos1O/mnhjzZrW/7G1qkJIfm VFvEyGGZbPWsjMdieLHUyscNEbTAzyHCgeq1JMjvI1ACxFkPBBcLhLdBABRH/gtI bK69KxbYNb4qk5s5e17biNK9s0tV0OyoxqIRktHecrm4tVZtG1HZVAKnw9czRQuo zIEk7Mdt1pFimRw5yIv8V1Ff2+MSruQgOFuhqFh77V3Fy+mjFV3ZiRKK5URnFGIp dDD+L1bNsX5xBD9bT+5oPjnvpomQ7e3sx1XLxlMtlU1UmmT/l86kaw499wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8GnnlhUC3YLXxEp9vjk+GbUWFrMB8GA1UdIwQY MBaAFNYaHDwlkHHCvLwn95H9HiD1gKlqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWhvY1BDV1FjY0s4dkNmM2tmMGVJUFdBcVdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80NmNkODYtNmRlMS00YzNkLWIwZjct ODU3MTQwNjY5N2FkLzEvMWhvY1BDV1FjY0s4dkNmM2tmMGVJUFdBcVdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS80NmNkODYtNmRlMS00YzNkLWIwZjctODU3MTQwNjY5N2Fk LzEvMWhvY1BDV1FjY0s4dkNmM2tmMGVJUFdBcVdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5HFhp7a g6O51pIMUBMepMuikqkhrEyvsh8eZ6oX4nEpOoaviUxptPapbhEjZC+Zuziv+UDj GzatElhV1xvXR7nasZCEIpSHalNLgOlHuPWo4gNnkObCHiPbOJ/4fpXdZygOFA1i YpvJ+IgIpx1LcZ+kEETlADuP/MWQmLN+WN4kFmGXpGi377ZBFT2Qhp0RB+4868sS 5IXwhT+TYpstFoV5njQku4wW3hAayZo9S3Fm9JD8rS5tI955tb/boxlmr27/JzIM YswAUvkO8iVt+2AWSO1jGPsjsQN/zxWC5r1hjkY5qMyr36F0eUAEra16A5a46bPi 5G5xR7nnn0rHww== -----END CERTIFICATE-----Generated at Sat Dec 6 20:35:19 2025 by rpki-client