This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft File: HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft (raw, json) Hash identifier: k2V1gCm4lE4nZBz9K/kd2szGL6xHtY8DG/NvCtbs9Fs= Subject key identifier: 61:D3:1B:E6:88:54:4A:C6:C8:97:32:99:B0:F9:A4:1C:90:FB:99:ED Authority key identifier: 1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94 Certificate issuer: /CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94 Certificate serial: 019AF2095509D361D4C0D92EFF8FB1D3EADE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft Manifest number: 0274 Signing time: Sat 06 Dec 2025 05:01:28 +0000 Manifest this update: Sat 06 Dec 2025 05:01:28 +0000 Manifest next update: Sun 07 Dec 2025 05:01:28 +0000 Files and hashes: 1: 7VYSV9Ay8yH8mR2f5xUS2yDfX5k.roa (hash: FYts7NtxQ1ChJXJ4Lx+8grMMCFLF+de/KIR4Pob60LI=) 2: HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl (hash: V/AGGgPV+Zf4TzS4a9CnuzNTI34kTTPhMi4+d0YjeW4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:55:09:d3:61:d4:c0:d9:2e:ff:8f:b1:d3:ea:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94 Validity Not Before: Dec 6 05:01:28 2025 GMT Not After : Dec 7 05:01:28 2025 GMT Subject: CN=61d31be688544ac6c8973299b0f9a41c90fb99ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:44:2d:e9:53:9a:bd:d8:9b:5b:37:a2:72:1d: 8c:c6:e9:71:40:06:27:a2:be:b6:d8:85:0b:59:cb: 09:69:b3:f8:41:8e:5f:0c:1e:be:37:80:ee:4a:2f: 4a:a8:68:5b:23:82:5e:f8:3d:18:83:db:f7:8e:5e: be:33:7e:d8:62:47:00:84:eb:97:0a:e6:cb:44:25: 9c:cf:68:63:70:0d:8a:81:49:b8:52:0d:99:7f:6c: 4f:a0:59:a2:bc:b0:a3:5e:81:ae:9a:b3:39:46:a8: de:53:55:c7:b2:0a:17:b1:28:a0:5e:8d:47:33:bc: 26:25:0b:01:7a:69:2f:73:eb:51:bc:c7:e0:5d:e5: 66:f4:a6:1e:27:30:92:02:69:ef:d0:04:c7:f5:7c: 99:f9:f1:da:b6:b4:78:52:0b:2a:fa:f4:e4:a0:89: 94:77:e3:c2:a2:69:80:e5:f1:7d:03:b7:87:43:fb: 9a:8e:e8:5e:c6:0c:4a:63:61:1d:06:d8:5f:4e:ff: dd:c6:39:bc:dc:48:bf:e7:77:ca:52:0e:22:ec:97: 08:c2:9f:6c:0b:96:2a:f8:eb:34:46:a3:20:64:35: 70:70:ce:e6:d1:2d:a1:ad:3f:a0:bd:58:89:2d:91: f2:a2:5e:a6:33:a0:fb:00:9e:1d:2a:12:fd:cd:d4: 62:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D3:1B:E6:88:54:4A:C6:C8:97:32:99:B0:F9:A4:1C:90:FB:99:ED X509v3 Authority Key Identifier: keyid:1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:87:38:11:e6:0c:3f:fe:1f:ec:19:df:9b:7b:65:a1:8a:27: 5e:f7:b2:2c:de:83:f3:cb:44:07:b1:34:c0:32:36:32:a1:f1: 70:f3:73:ff:61:8e:6f:39:d5:87:28:7c:c7:85:64:08:ba:05: c7:96:7d:42:1e:ce:6e:59:45:89:b5:de:fa:27:91:ce:dc:e6: 6c:cf:d3:71:66:6c:50:1c:e9:18:0d:1c:dc:f7:a0:bb:85:8d: d2:7f:78:88:3b:75:99:49:f1:b4:20:d8:07:2f:99:44:a7:53: b1:c0:3b:c1:b2:52:68:b3:a1:c3:51:be:c1:2e:06:f8:d8:b8: 82:b8:7b:65:15:d6:ed:26:2e:a5:e2:f9:17:40:b5:84:ec:af: e9:70:f9:a9:36:dc:ad:e8:88:f5:d4:57:a5:be:e9:ee:a6:a1: 7b:6b:42:73:41:42:ac:e3:c1:39:61:7a:b4:b5:3f:41:93:18: 46:e3:35:fd:3f:f4:8c:9c:6c:54:87:e1:82:9c:02:5e:55:99: ad:37:cb:7d:46:cf:0e:a4:49:d0:39:93:bc:06:46:9f:f7:6b: ce:56:2b:7f:f3:93:5b:51:b2:9c:6f:c2:2a:65:7e:f6:ee:9c: 9c:f0:32:70:58:b3:aa:d5:1c:2f:b3:bb:47:5c:5a:78:af:88: e4:00:b9:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCVUJ02HUwNku/4+x0+reMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWVkM2Q5MDFhYjBlOWQwZjY4M2UwZTcxYzI5NDNmZDZi ZTZkOTQwHhcNMjUxMjA2MDUwMTI4WhcNMjUxMjA3MDUwMTI4WjAzMTEwLwYDVQQD Eyg2MWQzMWJlNjg4NTQ0YWM2Yzg5NzMyOTliMGY5YTQxYzkwZmI5OWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkQt6VOavdibWzeich2MxulxQAYn or622IULWcsJabP4QY5fDB6+N4DuSi9KqGhbI4Je+D0Yg9v3jl6+M37YYkcAhOuX CubLRCWcz2hjcA2KgUm4Ug2Zf2xPoFmivLCjXoGumrM5RqjeU1XHsgoXsSigXo1H M7wmJQsBemkvc+tRvMfgXeVm9KYeJzCSAmnv0ATH9XyZ+fHatrR4Ugsq+vTkoImU d+PCommA5fF9A7eHQ/uajuhexgxKY2EdBthfTv/dxjm83Ei/53fKUg4i7JcIwp9s C5Yq+Os0RqMgZDVwcM7m0S2hrT+gvViJLZHyol6mM6D7AJ4dKhL9zdRiHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHTG+aIVErGyJcymbD5pByQ+5ntMB8GA1UdIwQY MBaAFBzu09kBqw6dD2g+DnHClD/Wvm2UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83Y2VjNWItNDU1Mi00ZWQyLTk5ZGQt NjAzMjRhNmU0Mjc2LzEvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS83Y2VjNWItNDU1Mi00ZWQyLTk5ZGQtNjAzMjRhNmU0Mjc2 LzEvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoc4EeYM P/4f7Bnfm3tloYonXveyLN6D88tEB7E0wDI2MqHxcPNz/2GObznVhyh8x4VkCLoF x5Z9Qh7ObllFibXe+ieRztzmbM/TcWZsUBzpGA0c3Pegu4WN0n94iDt1mUnxtCDY By+ZRKdTscA7wbJSaLOhw1G+wS4G+Ni4grh7ZRXW7SYupeL5F0C1hOyv6XD5qTbc reiI9dRXpb7p7qahe2tCc0FCrOPBOWF6tLU/QZMYRuM1/T/0jJxsVIfhgpwCXlWZ rTfLfUbPDqRJ0DmTvAZGn/drzlYrf/OTW1GynG/CKmV+9u6cnPAycFizqtUcL7O7 R1xaeK+I5AC59g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:39:00 2025 by rpki-client