This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft File: HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft (raw, json) Hash identifier: 2fAxapElrw/Ec5CL8u1IvKUJfw3gihP3mSoMrnZHbpU= Subject key identifier: 18:23:DF:BB:89:C1:72:AF:BF:7C:47:E3:4D:0A:0E:76:35:03:AA:9F Authority key identifier: 1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94 Certificate issuer: /CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94 Certificate serial: 019B3D59E15AEDC0478E711B00D78C2E8CF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft Manifest number: 029B Signing time: Sat 20 Dec 2025 20:00:59 +0000 Manifest this update: Sat 20 Dec 2025 20:00:59 +0000 Manifest next update: Sun 21 Dec 2025 20:00:59 +0000 Files and hashes: 1: 7VYSV9Ay8yH8mR2f5xUS2yDfX5k.roa (hash: FYts7NtxQ1ChJXJ4Lx+8grMMCFLF+de/KIR4Pob60LI=) 2: HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl (hash: z9OUhgFXVEbC5LAQ6q5UlDxUgvDJCgTG5k0Tuk0UuUw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:e1:5a:ed:c0:47:8e:71:1b:00:d7:8c:2e:8c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94 Validity Not Before: Dec 20 20:00:59 2025 GMT Not After : Dec 21 20:00:59 2025 GMT Subject: CN=1823dfbb89c172afbf7c47e34d0a0e763503aa9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:be:14:0b:5b:3a:b4:bb:94:3d:7f:d1:e6:01: ba:03:04:fa:b6:56:16:25:d3:95:cb:27:1c:46:c5: de:9e:b4:11:85:fb:1c:03:fc:e2:79:45:5f:6c:ac: fa:ce:cb:ab:28:35:a9:c1:b4:b7:fe:66:df:59:c9: a2:52:46:e1:4b:19:4f:e2:61:a4:3c:0b:6c:83:92: 32:ed:00:c0:33:11:43:9c:2b:17:e4:bd:94:ca:ac: 2d:21:ef:13:55:ba:b8:09:22:20:ae:a5:3b:6d:ce: 3a:08:fa:56:e3:32:0e:98:22:44:1d:8e:6a:61:95: 86:25:bb:db:86:d0:41:23:59:f8:fe:b1:b7:3b:78: 02:0b:38:e6:72:24:aa:38:aa:b9:2e:bd:42:9d:bf: 38:86:96:9e:32:34:96:62:9a:b5:1d:d9:0b:38:11: 93:bd:5b:bd:92:ec:a2:48:66:19:7f:20:72:ed:01: e8:8a:96:f9:d7:50:58:65:0b:2f:87:75:bf:48:75: ac:e6:9e:c7:05:59:02:9a:5d:58:ff:53:c2:79:74: af:24:78:f8:0b:8f:bc:b4:2e:ce:82:93:d8:da:5c: df:5f:08:ec:9b:1f:c8:3c:b1:e1:f4:0d:de:e3:37: 8b:81:98:83:70:1b:93:e7:7e:c8:b4:7a:48:84:d4: 54:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:23:DF:BB:89:C1:72:AF:BF:7C:47:E3:4D:0A:0E:76:35:03:AA:9F X509v3 Authority Key Identifier: keyid:1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:8d:54:64:9e:3c:c2:27:e2:82:70:3e:e2:b5:90:ac:e0:4e: 94:36:dd:52:9f:6b:50:86:3a:16:d1:28:9f:d6:3a:d9:ef:98: 86:98:a1:5b:c5:e2:8b:e3:0d:46:55:a5:f2:48:1e:58:b7:54: 8b:5f:94:bf:50:63:50:a2:65:a6:a3:32:f7:c2:98:7e:bf:6a: 68:c0:f8:da:17:02:68:66:b8:b6:dd:57:53:ec:f9:99:a5:d1: 96:e5:fe:4d:4f:81:6f:a7:94:89:ce:d9:37:db:11:c3:ea:5e: 8a:fd:ac:61:96:91:34:52:59:7f:a7:12:c7:0c:23:2c:dd:d1: af:52:07:f9:1c:7c:2f:21:53:ae:8d:a5:29:0d:ec:5f:0e:20: 3c:f6:6f:2b:c6:a8:36:32:fe:db:83:b4:9f:b6:d1:8f:f8:59: 3b:49:3e:ea:b4:30:fe:f1:b7:13:d0:8d:5d:13:ff:7b:87:59: e4:18:bf:4e:e4:85:2f:fa:ac:53:64:cb:89:9b:ec:5f:6c:35: e6:e3:e8:0e:95:d6:ed:f8:03:43:25:85:a3:ac:e5:1e:67:29: 14:29:58:f6:a3:9a:c8:6c:e4:48:c4:19:0d:07:c0:06:09:e0: 1e:bd:08:1c:a4:de:39:8f:ea:47:00:df:a3:bd:41:84:ce:12: e9:9e:d9:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WeFa7cBHjnEbANeMLoz5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWVkM2Q5MDFhYjBlOWQwZjY4M2UwZTcxYzI5NDNmZDZi ZTZkOTQwHhcNMjUxMjIwMjAwMDU5WhcNMjUxMjIxMjAwMDU5WjAzMTEwLwYDVQQD EygxODIzZGZiYjg5YzE3MmFmYmY3YzQ3ZTM0ZDBhMGU3NjM1MDNhYTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5L4UC1s6tLuUPX/R5gG6AwT6tlYW JdOVyyccRsXenrQRhfscA/zieUVfbKz6zsurKDWpwbS3/mbfWcmiUkbhSxlP4mGk PAtsg5Iy7QDAMxFDnCsX5L2UyqwtIe8TVbq4CSIgrqU7bc46CPpW4zIOmCJEHY5q YZWGJbvbhtBBI1n4/rG3O3gCCzjmciSqOKq5Lr1Cnb84hpaeMjSWYpq1HdkLOBGT vVu9kuyiSGYZfyBy7QHoipb511BYZQsvh3W/SHWs5p7HBVkCml1Y/1PCeXSvJHj4 C4+8tC7OgpPY2lzfXwjsmx/IPLHh9A3e4zeLgZiDcBuT537ItHpIhNRUqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgj37uJwXKvv3xH400KDnY1A6qfMB8GA1UdIwQY MBaAFBzu09kBqw6dD2g+DnHClD/Wvm2UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83Y2VjNWItNDU1Mi00ZWQyLTk5ZGQt NjAzMjRhNmU0Mjc2LzEvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS83Y2VjNWItNDU1Mi00ZWQyLTk5ZGQtNjAzMjRhNmU0Mjc2 LzEvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIY1UZJ48 wifignA+4rWQrOBOlDbdUp9rUIY6FtEon9Y62e+YhpihW8Xii+MNRlWl8kgeWLdU i1+Uv1BjUKJlpqMy98KYfr9qaMD42hcCaGa4tt1XU+z5maXRluX+TU+Bb6eUic7Z N9sRw+peiv2sYZaRNFJZf6cSxwwjLN3Rr1IH+Rx8LyFTro2lKQ3sXw4gPPZvK8ao NjL+24O0n7bRj/hZO0k+6rQw/vG3E9CNXRP/e4dZ5Bi/TuSFL/qsU2TLiZvsX2w1 5uPoDpXW7fgDQyWFo6zlHmcpFClY9qOayGzkSMQZDQfABgngHr0IHKTeOY/qRwDf o71BhM4S6Z7ZEw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:20:53 2025 by rpki-client