This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft File: hoG9ppEHn3qyNfednA73Ur_AN4E.mft (raw, json) Hash identifier: GT8BfamSgwfi0k0GpeP0czuvqIE+wp1unfS+kD41xM8= Subject key identifier: C2:D8:6A:54:10:6D:40:65:3B:A1:65:43:65:D5:69:FD:E7:85:01:9E Authority key identifier: 86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81 Certificate issuer: /CN=8681bda691079f7ab235f79d9c0ef752bfc03781 Certificate serial: 019B2D795FBDDAB61FC221E013DFF6E30249 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft Manifest number: 0E63 Signing time: Wed 17 Dec 2025 18:01:27 +0000 Manifest this update: Wed 17 Dec 2025 18:01:27 +0000 Manifest next update: Thu 18 Dec 2025 18:01:27 +0000 Files and hashes: 1: hoG9ppEHn3qyNfednA73Ur_AN4E.crl (hash: 3ua76PIRJi++Lz4wKnK7n2TSfbOjwowFmcsf609GDCc=) 2: uhWjc5L6HF8CL85GmROwozUvuSg.roa (hash: K9tb23uEh+etbgOiAW3T/MkxyInQIRAfCLsSJRvGHxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:79:5f:bd:da:b6:1f:c2:21:e0:13:df:f6:e3:02:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8681bda691079f7ab235f79d9c0ef752bfc03781 Validity Not Before: Dec 17 18:01:27 2025 GMT Not After : Dec 18 18:01:27 2025 GMT Subject: CN=c2d86a54106d40653ba1654365d569fde785019e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:52:ce:6a:93:47:64:d4:d3:25:82:77:49:83: 58:85:b9:ea:a1:b7:cb:de:de:9d:e5:31:d7:7f:1f: da:f2:5d:71:fe:70:02:64:ea:ed:c8:62:0c:53:76: f4:13:9a:7e:d4:ac:ce:6b:f8:ff:f5:6d:e8:79:8a: a9:e4:72:54:88:57:3d:eb:5b:c8:2e:62:a8:46:06: 62:ae:2e:72:21:04:a5:b9:3e:d5:c5:d5:50:a1:ac: 80:0f:8f:b6:ea:b1:b7:4b:11:82:5f:a2:f2:71:74: 22:6f:14:8f:2b:96:a6:61:80:39:b4:6e:18:51:50: bc:5d:e9:35:04:6e:e7:9e:37:aa:6f:09:cc:cc:83: c4:97:65:fe:c8:84:31:06:d1:f5:4e:01:4c:8c:4c: fc:67:e5:74:14:1a:10:58:db:d4:d6:f7:c7:eb:8e: 0e:ef:fa:d5:07:c2:14:c5:bf:77:96:56:c9:81:c8: d1:c7:d6:e6:b3:ff:7f:a4:6b:b9:82:cf:10:20:e7: 42:0e:ee:8e:e3:f9:1f:0a:84:e6:e9:80:d4:13:7d: 5d:f9:c8:f5:b6:ab:b4:35:c4:4b:11:3f:a2:20:51: 92:cd:4c:c9:29:4f:06:e1:09:ff:6b:d3:3a:95:74: 24:5b:59:c2:9a:5e:77:9d:32:95:7c:42:4f:e6:66: a5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D8:6A:54:10:6D:40:65:3B:A1:65:43:65:D5:69:FD:E7:85:01:9E X509v3 Authority Key Identifier: keyid:86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:cd:f4:b3:b0:37:0d:b0:a9:06:6b:d0:69:cd:8e:30:eb:97: bd:9f:05:80:eb:b1:c2:a6:a6:ab:c1:84:07:9b:7a:93:f9:a4: 21:a5:ca:e1:34:f7:2e:4f:71:29:5b:27:aa:1c:1d:15:d7:19: 1e:ec:38:2b:6c:08:fb:0e:01:0b:49:6d:fc:ba:86:1e:75:33: ff:fa:b5:ca:55:d5:fc:14:92:2e:fd:46:02:d8:12:a0:71:7a: 5d:cd:b7:7a:39:69:22:4a:1c:df:80:6e:e0:04:66:37:c7:b2: b6:80:54:2a:56:d5:71:aa:2c:fd:2a:4b:21:72:c5:bc:74:60: ce:9b:af:e5:78:fb:1f:ac:be:5d:40:08:20:30:7b:bf:b3:4e: 06:1d:90:1d:92:cf:f7:46:9d:30:f3:4a:e5:b3:b1:fc:8b:83: 4e:00:2c:33:27:65:d4:de:70:78:0a:72:9c:12:e8:73:f3:c2: ba:3c:0e:5c:19:47:c9:82:4c:79:7b:82:7d:3c:f4:04:0b:4e: 84:f5:ef:b6:c5:a0:72:30:bf:60:f2:1f:db:b1:7c:b4:d4:cf: 3d:05:36:17:8f:97:ef:c7:7a:f0:6e:a5:29:b5:8a:ab:fa:13: e3:27:9b:7d:ee:99:3d:28:41:a3:20:96:93:24:e0:fb:7d:ea: ca:d9:3c:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteV+92rYfwiHgE9/24wJJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ODFiZGE2OTEwNzlmN2FiMjM1Zjc5ZDljMGVmNzUyYmZj MDM3ODEwHhcNMjUxMjE3MTgwMTI3WhcNMjUxMjE4MTgwMTI3WjAzMTEwLwYDVQQD EyhjMmQ4NmE1NDEwNmQ0MDY1M2JhMTY1NDM2NWQ1NjlmZGU3ODUwMTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lLOapNHZNTTJYJ3SYNYhbnqobfL 3t6d5THXfx/a8l1x/nACZOrtyGIMU3b0E5p+1KzOa/j/9W3oeYqp5HJUiFc961vI LmKoRgZiri5yIQSluT7VxdVQoayAD4+26rG3SxGCX6LycXQibxSPK5amYYA5tG4Y UVC8Xek1BG7nnjeqbwnMzIPEl2X+yIQxBtH1TgFMjEz8Z+V0FBoQWNvU1vfH644O 7/rVB8IUxb93llbJgcjRx9bms/9/pGu5gs8QIOdCDu6O4/kfCoTm6YDUE31d+cj1 tqu0NcRLET+iIFGSzUzJKU8G4Qn/a9M6lXQkW1nCml53nTKVfEJP5malyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLYalQQbUBlO6FlQ2XVaf3nhQGeMB8GA1UdIwQY MBaAFIaBvaaRB596sjX3nZwO91K/wDeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG9HOXBwRUhuM3F5TmZlZG5BNzNVcl9BTjRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wMGYwZjQtY2ZmMS00OTMyLTkwMDkt ZjQyODUwZjgwY2E0LzEvaG9HOXBwRUhuM3F5TmZlZG5BNzNVcl9BTjRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wMGYwZjQtY2ZmMS00OTMyLTkwMDktZjQyODUwZjgwY2E0 LzEvaG9HOXBwRUhuM3F5TmZlZG5BNzNVcl9BTjRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFM30s7A3 DbCpBmvQac2OMOuXvZ8FgOuxwqamq8GEB5t6k/mkIaXK4TT3Lk9xKVsnqhwdFdcZ Huw4K2wI+w4BC0lt/LqGHnUz//q1ylXV/BSSLv1GAtgSoHF6Xc23ejlpIkoc34Bu 4ARmN8eytoBUKlbVcaos/SpLIXLFvHRgzpuv5Xj7H6y+XUAIIDB7v7NOBh2QHZLP 90adMPNK5bOx/IuDTgAsMydl1N5weApynBLoc/PCujwOXBlHyYJMeXuCfTz0BAtO hPXvtsWgcjC/YPIf27F8tNTPPQU2F4+X78d68G6lKbWKq/oT4yebfe6ZPShBoyCW kyTg+33qytk8Rw== -----END CERTIFICATE-----Generated at Wed Dec 17 21:04:36 2025 by rpki-client