This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
File: Ho0gXHmO1488RMoMjyhS6L7I6qI.mft (raw, json)
Hash identifier: DNjDra7UR4ilwrh6pXdoTTKzz0HhqaDxCOGgzxlMGqU=
Subject key identifier: 17:CF:6E:6F:C8:69:AA:95:7E:76:65:53:A4:F1:11:E4:4F:D0:44:3F
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Certificate issuer: /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial: 019AF3520DB36170CD07203923FC2AB43CC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
Manifest number: 17A9
Signing time: Sat 06 Dec 2025 11:00:32 +0000
Manifest this update: Sat 06 Dec 2025 11:00:32 +0000
Manifest next update: Sun 07 Dec 2025 11:00:32 +0000
Files and hashes: 1: 7K1si_9dd4NW2kOEEYd3jcTL2DE.roa (hash: 5y47FaoSaQN1HkqgBFsqDMSr1pkbokL6IdEnmswLvS8=)
2: ACkdatyfBTlz2-Ftw3WTqFFEYCo.roa (hash: zlHgLofdnOlgNzvUj9QwOsmHRmvCf52LGKTYhHmhgOI=)
3: EIORgb6-IHgXWxtT6KuDlNCxlAQ.roa (hash: nSJHxzXuaJt/ONt6/nK/gQgHP3691FnhKi2iZnbCx0s=)
4: Ho0gXHmO1488RMoMjyhS6L7I6qI.crl (hash: /Hbu1vgQmofdpPpKac6VEMGLDZhvjBcjeCS/Ysch5uA=)
5: RKWcmyLUW_UNC9soF_0W82gJ_IM.roa (hash: fIRqyjPnfCuVn8VliMyXWnb6TeKWTGyoRNtSpwTvMzE=)
6: Uno7WysVy_PMdwYBFRh5BtACAQk.roa (hash: RFeqiMGc0M9KNidZ/TI83dGJPPCzjGOUtkDY3LKbx2k=)
7: nh5NhSKUCOZvA0PX-MutnlzNzr0.roa (hash: rMUx4sRjj5BLU/vJgZBKJqyHigJv6wDRFQlbGQCNv4w=)
8: yNY6bH1FZiObLlueEIjNydTMDc8.roa (hash: qo1xJTM/d0zWM2HJpgLbgXutgDhhFbPDIicjt7s6xR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f3:52:0d:b3:61:70:cd:07:20:39:23:fc:2a:b4:3c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Validity
Not Before: Dec 6 11:00:32 2025 GMT
Not After : Dec 7 11:00:32 2025 GMT
Subject: CN=17cf6e6fc869aa957e766553a4f111e44fd0443f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:86:05:67:6f:cf:dd:1c:71:71:f5:61:c3:92:
7d:41:8a:44:da:95:5e:74:28:3c:77:fb:5d:03:4d:
22:d2:cf:b1:f6:e9:df:d4:b8:c1:5c:65:01:de:f6:
21:88:3e:c4:63:58:60:04:5a:ce:b2:44:26:62:3e:
59:12:7f:ee:dc:d1:6d:d8:ce:f4:5c:26:e5:b7:22:
aa:be:26:2f:e5:56:39:ae:4d:46:96:91:1d:9c:e1:
24:77:5e:52:79:a1:26:1c:19:68:ca:7f:bf:dc:e8:
59:c6:02:44:71:1d:fd:88:89:20:b1:fb:e4:99:87:
45:e4:93:d4:94:99:57:f1:72:81:43:cf:21:fd:5a:
20:05:7b:a7:3f:ee:86:95:cc:ef:23:0c:b9:8d:b1:
ed:d0:30:b8:e7:a4:22:ab:db:ef:bc:1b:de:d2:f0:
35:bd:ce:e0:a9:12:b2:b3:a3:c7:52:c5:87:a3:29:
f0:d2:3b:70:4f:c6:bc:9f:13:fe:10:1c:1d:2c:d3:
ce:a0:53:5f:a8:a7:79:b9:e3:e3:48:c2:53:3a:44:
ac:dd:bb:da:b6:31:2b:7f:4c:be:ab:b3:eb:cc:f1:
13:4b:dc:66:46:c2:c3:3a:f6:3a:00:f6:a1:b6:37:
ff:2f:11:05:9a:61:3d:67:7c:5b:b2:87:92:36:f4:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CF:6E:6F:C8:69:AA:95:7E:76:65:53:A4:F1:11:E4:4F:D0:44:3F
X509v3 Authority Key Identifier:
keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2e:3b:e9:72:bb:ec:b1:ad:8c:b5:65:76:d2:68:f7:af:61:
3c:a7:bf:2f:35:ac:e0:38:05:56:4f:a0:f3:72:ea:27:be:7f:
c6:82:7b:1c:3c:a2:88:0c:11:9f:fd:9b:33:60:1a:a6:15:fb:
9e:b8:a7:28:11:13:41:cf:7e:ad:6a:69:1a:0f:af:0a:e1:5e:
fc:2d:12:fc:3a:a9:15:46:10:ee:fe:c8:dd:f2:89:40:f5:58:
03:97:ae:94:e5:c9:5c:10:12:26:62:99:66:6b:15:11:5e:73:
ed:78:45:bf:77:57:21:32:04:5b:6a:cb:6d:f7:14:ea:b7:1b:
36:44:c5:59:c9:8b:e5:b0:db:2d:78:62:35:26:02:dd:50:8b:
3c:13:00:92:1f:5d:6e:36:df:cb:64:94:16:12:c8:d6:33:59:
4a:e0:bd:48:27:31:c0:5f:72:6a:30:f5:6b:6a:c4:37:c5:c6:
25:ed:94:70:8e:f3:0d:e3:15:a1:d1:00:65:a9:34:2b:ea:b6:
c6:ea:96:a2:ac:b5:06:91:9f:f9:9e:af:17:88:0a:9c:fc:2e:
96:85:4e:b8:56:bd:2b:40:b4:bb:eb:5c:7e:01:40:35:8e:fe:
84:d7:09:85:e9:3f:ff:32:4d:1a:04:dd:0c:d1:d5:5d:bb:1c:
ae:03:5f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 21:00:41 2025 by rpki-client