This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft File: Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json) Hash identifier: vL/iMjvZHPq+iTx3p1ls8GOPVgTJQKWj7zzdJrwj53g= Subject key identifier: 95:B0:BA:E9:0B:F1:DD:9A:08:C3:D0:BF:42:72:DC:05:7F:ED:10:DE Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D Certificate issuer: /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d Certificate serial: 019AF19BA60F4B3AA6F5F1A0C987CB295E4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft Manifest number: 0CA6 Signing time: Sat 06 Dec 2025 03:01:40 +0000 Manifest this update: Sat 06 Dec 2025 03:01:40 +0000 Manifest next update: Sun 07 Dec 2025 03:01:40 +0000 Files and hashes: 1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: j2VSKE20KhF9rviyr6qboL+NGROwHsnBme4Hq+jOhc0=) 2: dDZBFwtap4thW-74sW-jVlXGuR4.roa (hash: FLfuvFWVGolNmszXbBbS9jb1QikiZPyQXAU3cIWAlJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:a6:0f:4b:3a:a6:f5:f1:a0:c9:87:cb:29:5e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d Validity Not Before: Dec 6 03:01:40 2025 GMT Not After : Dec 7 03:01:40 2025 GMT Subject: CN=95b0bae90bf1dd9a08c3d0bf4272dc057fed10de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:ed:2f:ef:ce:75:b3:36:3b:2e:1b:4a:5c: a5:65:99:2e:6f:fc:70:c0:da:4c:8b:3a:e0:b0:1e: 54:23:07:31:5e:4c:b4:9a:6e:58:45:4e:73:96:57: 82:d9:d4:e5:ce:9b:a2:5a:05:4b:cb:08:52:bd:5c: 5c:a8:da:00:a4:94:90:d3:a4:52:9e:2e:97:af:56: 28:b4:b5:2a:35:e1:5d:4c:22:d9:37:9e:96:97:d7: 48:ef:3e:e7:07:34:1a:a7:b5:c8:d7:97:83:0a:20: dc:bd:10:0d:61:91:78:f8:2a:2e:37:0b:16:a9:b2: 2c:7b:98:c9:81:85:32:37:78:ea:12:4c:95:3f:ff: c1:6d:6d:c6:8e:7a:84:c4:99:22:3f:5c:63:eb:2d: ea:c2:a2:76:94:54:7b:7a:40:f9:8b:29:77:f9:44: 0c:79:38:ff:9f:28:ec:59:52:7f:d7:7c:17:59:ac: 4d:1b:67:03:60:b2:50:bb:d4:ff:df:d7:5b:17:05: 42:1c:1b:5d:d4:e0:19:50:36:d2:dc:b8:bd:67:0c: 36:ad:1f:ed:a0:10:01:aa:31:2b:ef:48:ba:0c:72: 0f:b0:c3:82:66:bb:a3:2c:a7:28:9c:87:64:24:9e: b5:f5:b2:59:73:d6:e4:1d:a4:37:c2:84:04:02:c4: d3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B0:BA:E9:0B:F1:DD:9A:08:C3:D0:BF:42:72:DC:05:7F:ED:10:DE X509v3 Authority Key Identifier: keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:b9:43:d8:65:75:08:71:fd:51:d6:dd:51:5a:50:0a:42:70: a1:97:4d:53:60:71:5f:5e:06:1b:71:04:8e:c2:15:94:3d:a8: 65:d9:3c:3b:0f:41:f2:52:5a:86:cc:b0:16:73:e2:be:36:d6: 15:d5:5a:3b:8f:0d:22:42:4d:40:d5:e5:30:4e:26:fb:13:bf: 22:48:86:5b:19:20:6d:80:08:8e:46:d2:02:db:7c:a9:05:8c: 56:8e:e4:9d:d7:79:6c:b7:b7:13:ad:d1:0c:98:78:2e:c5:e6: 08:b5:48:93:f4:99:07:2d:30:53:e1:83:a0:5b:9f:fd:ed:0d: 19:ba:22:07:fd:2b:ab:cf:07:be:bf:22:68:f7:42:61:cf:b0: dc:fe:bb:ee:58:cd:af:28:8b:d4:ed:74:8d:d1:1a:40:2b:54: 51:95:a5:0f:29:b4:f5:0e:27:ae:fb:a8:bb:26:2a:85:e3:86: 8b:ee:60:d0:0e:0d:53:69:bd:36:f9:c5:90:dc:91:2c:13:35: fa:fb:70:67:a0:ed:c6:4f:23:47:8b:87:c4:48:93:0a:f2:98: 9a:b9:96:da:84:66:84:a4:8a:3a:62:11:ff:62:3c:90:1e:ce: 2f:4a:bb:45:03:5a:03:24:95:45:e8:ba:e1:cc:38:64:ef:7a: 5b:c9:c7:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm6YPSzqm9fGgyYfLKV5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOGY2YTQ2ZGRmN2Y5M2NhMjkzNWViZTYxODI0NmFlNmRk MzFiMGQwHhcNMjUxMjA2MDMwMTQwWhcNMjUxMjA3MDMwMTQwWjAzMTEwLwYDVQQD Eyg5NWIwYmFlOTBiZjFkZDlhMDhjM2QwYmY0MjcyZGMwNTdmZWQxMGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpLtL+/OdbM2Oy4bSlylZZkub/xw wNpMizrgsB5UIwcxXky0mm5YRU5zlleC2dTlzpuiWgVLywhSvVxcqNoApJSQ06RS ni6Xr1YotLUqNeFdTCLZN56Wl9dI7z7nBzQap7XI15eDCiDcvRANYZF4+CouNwsW qbIse5jJgYUyN3jqEkyVP//BbW3GjnqExJkiP1xj6y3qwqJ2lFR7ekD5iyl3+UQM eTj/nyjsWVJ/13wXWaxNG2cDYLJQu9T/39dbFwVCHBtd1OAZUDbS3Li9Zww2rR/t oBABqjEr70i6DHIPsMOCZrujLKconIdkJJ619bJZc9bkHaQ3woQEAsTTzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWwuukL8d2aCMPQv0Jy3AV/7RDeMB8GA1UdIwQY MBaAFB6Pakbd9/k8opNevmGCRq5t0xsNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84YTkzYjYtMmU3ZS00ODdjLWIwZjMt MjhkMTVlYjczNDFkLzEvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC84YTkzYjYtMmU3ZS00ODdjLWIwZjMtMjhkMTVlYjczNDFk LzEvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsblD2GV1 CHH9UdbdUVpQCkJwoZdNU2BxX14GG3EEjsIVlD2oZdk8Ow9B8lJahsywFnPivjbW FdVaO48NIkJNQNXlME4m+xO/IkiGWxkgbYAIjkbSAtt8qQWMVo7kndd5bLe3E63R DJh4LsXmCLVIk/SZBy0wU+GDoFuf/e0NGboiB/0rq88Hvr8iaPdCYc+w3P677ljN ryiL1O10jdEaQCtUUZWlDym09Q4nrvuouyYqheOGi+5g0A4NU2m9NvnFkNyRLBM1 +vtwZ6Dtxk8jR4uHxEiTCvKYmrmW2oRmhKSKOmIR/2I8kB7OL0q7RQNaAySVRei6 4cw4ZO96W8nHDg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:10 2025 by rpki-client