This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft File: HoGZCoqMzX6KT0i7do810mmbeLI.mft (raw, json) Hash identifier: PWfRqCNUHhCkmQr5azLHXT2aMCbafi2tuaFrTkP9g+s= Subject key identifier: 69:AF:8C:3B:A4:43:4D:BF:66:F0:97:09:4E:A3:65:66:43:4D:61:96 Authority key identifier: 1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2 Certificate issuer: /CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2 Certificate serial: 019AF19B54A11ABEB14632CEDB887F624B3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft Manifest number: 0DF3 Signing time: Sat 06 Dec 2025 03:01:19 +0000 Manifest this update: Sat 06 Dec 2025 03:01:19 +0000 Manifest next update: Sun 07 Dec 2025 03:01:19 +0000 Files and hashes: 1: 3_7ZjcR7qXcUgzrUv_gjLsdFhdA.roa (hash: NJmABczjuAOTLl0h6DBnrPjIGOR8/qxj1OB7hIhj4j0=) 2: HoGZCoqMzX6KT0i7do810mmbeLI.crl (hash: 7RobUh1K4fNM1bs/y2BSyM+6npUaru6wAi4UCn0W+wc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:54:a1:1a:be:b1:46:32:ce:db:88:7f:62:4b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e81990a8a8ccd7e8a4f48bb768f35d2699b78b2 Validity Not Before: Dec 6 03:01:19 2025 GMT Not After : Dec 7 03:01:19 2025 GMT Subject: CN=69af8c3ba4434dbf66f097094ea36566434d6196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4f:b4:98:8f:80:6b:cd:81:a3:a3:8e:06:bb: 55:38:14:a4:93:16:57:dd:0a:af:54:e3:58:67:65: 96:80:f3:a3:8a:99:30:c0:c2:ed:6e:c4:ac:b6:34: 82:07:41:d9:b2:d6:20:8b:14:f4:21:17:7d:b0:b0: c1:c5:03:ef:c4:ac:5f:ae:62:ed:08:71:18:56:6c: 56:47:2b:99:da:cd:ec:90:4a:3a:2d:47:e0:a8:c8: 61:b4:6f:56:29:ff:d6:d5:69:38:71:23:89:c6:5d: f9:29:15:fd:10:63:b6:ab:f5:94:e6:a7:c5:9a:ba: 78:11:6c:fd:c3:f5:9d:43:9d:cf:b7:71:9e:a4:b4: 0d:a6:fc:5d:ee:20:94:e9:9d:d1:b6:87:34:ff:aa: 21:35:5e:11:f4:95:0d:f8:4a:98:b4:ab:db:79:25: 26:fa:4e:f2:c5:8e:bc:3e:71:03:a3:e9:a0:7f:cf: c8:af:d4:e4:64:2c:93:76:2d:fe:e9:ed:1a:51:c7: e5:50:4e:70:9a:c4:43:03:30:30:89:23:60:91:72: ce:04:54:07:13:0f:ee:d9:fc:75:3b:c3:0e:ef:f9: df:1a:6b:84:72:f0:02:e7:54:a9:9a:fe:7c:7f:55: c3:1f:78:44:1e:22:51:26:54:58:e9:2f:a3:45:66: 2a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:AF:8C:3B:A4:43:4D:BF:66:F0:97:09:4E:A3:65:66:43:4D:61:96 X509v3 Authority Key Identifier: keyid:1E:81:99:0A:8A:8C:CD:7E:8A:4F:48:BB:76:8F:35:D2:69:9B:78:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoGZCoqMzX6KT0i7do810mmbeLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/288bcc-3603-4fc0-810a-6f15a6ead3cc/1/HoGZCoqMzX6KT0i7do810mmbeLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:3f:a2:ef:0a:a6:bd:c3:78:16:ae:00:cc:a8:27:85:a5:bd: 6f:d0:f2:4a:d7:3b:7c:92:c4:bf:08:46:76:41:5d:cc:ca:04: 09:65:cd:3b:46:88:f4:9e:5e:ec:10:25:5c:b7:e0:b6:10:ea: f8:de:0b:0b:80:2a:f0:8a:71:b6:70:3e:f7:f3:07:01:78:a9: a4:ed:0d:a9:14:32:8c:31:d4:50:1d:31:36:55:08:49:80:c8: bb:0c:e7:9a:52:2f:d9:ed:89:3f:3c:aa:ad:1b:9c:cd:99:1d: e8:0f:9c:9f:e3:ca:80:83:3f:0a:e9:b8:ab:07:20:16:b9:09: 4c:2b:53:07:be:20:57:08:3b:b0:0a:3a:e1:03:f2:cd:90:2d: 6d:91:a3:1b:29:25:f8:e6:69:2c:a6:0e:d0:e7:e1:9a:c2:66: f1:66:c7:ad:26:02:02:63:13:1b:d7:f8:46:91:99:2d:c8:aa: 4a:b3:11:4e:41:fc:f9:00:88:7e:b5:01:cf:d8:e2:99:9c:58: 29:e0:9d:10:8a:56:7f:17:00:60:af:cc:b7:a0:5a:de:b4:fe: ea:5e:31:63:d4:90:34:46:00:c3:a8:0b:cf:d7:a5:02:2a:15: 1f:a4:21:2b:b6:a0:7c:76:39:10:c9:a1:43:e9:cf:00:e2:08: 17:aa:da:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm1ShGr6xRjLO24h/Yks6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlODE5OTBhOGE4Y2NkN2U4YTRmNDhiYjc2OGYzNWQyNjk5 Yjc4YjIwHhcNMjUxMjA2MDMwMTE5WhcNMjUxMjA3MDMwMTE5WjAzMTEwLwYDVQQD Eyg2OWFmOGMzYmE0NDM0ZGJmNjZmMDk3MDk0ZWEzNjU2NjQzNGQ2MTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2U+0mI+Aa82Bo6OOBrtVOBSkkxZX 3QqvVONYZ2WWgPOjipkwwMLtbsSstjSCB0HZstYgixT0IRd9sLDBxQPvxKxfrmLt CHEYVmxWRyuZ2s3skEo6LUfgqMhhtG9WKf/W1Wk4cSOJxl35KRX9EGO2q/WU5qfF mrp4EWz9w/WdQ53Pt3GepLQNpvxd7iCU6Z3Rtoc0/6ohNV4R9JUN+EqYtKvbeSUm +k7yxY68PnEDo+mgf8/Ir9TkZCyTdi3+6e0aUcflUE5wmsRDAzAwiSNgkXLOBFQH Ew/u2fx1O8MO7/nfGmuEcvAC51Spmv58f1XDH3hEHiJRJlRY6S+jRWYqQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmvjDukQ02/ZvCXCU6jZWZDTWGWMB8GA1UdIwQY MBaAFB6BmQqKjM1+ik9Iu3aPNdJpm3iyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG9HWkNvcU16WDZLVDBpN2RvODEwbW1iZUxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8yODhiY2MtMzYwMy00ZmMwLTgxMGEt NmYxNWE2ZWFkM2NjLzEvSG9HWkNvcU16WDZLVDBpN2RvODEwbW1iZUxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8yODhiY2MtMzYwMy00ZmMwLTgxMGEtNmYxNWE2ZWFkM2Nj LzEvSG9HWkNvcU16WDZLVDBpN2RvODEwbW1iZUxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAET+i7wqm vcN4Fq4AzKgnhaW9b9DyStc7fJLEvwhGdkFdzMoECWXNO0aI9J5e7BAlXLfgthDq +N4LC4Aq8IpxtnA+9/MHAXippO0NqRQyjDHUUB0xNlUISYDIuwznmlIv2e2JPzyq rRuczZkd6A+cn+PKgIM/Cum4qwcgFrkJTCtTB74gVwg7sAo64QPyzZAtbZGjGykl +OZpLKYO0OfhmsJm8WbHrSYCAmMTG9f4RpGZLciqSrMRTkH8+QCIfrUBz9jimZxY KeCdEIpWfxcAYK/Mt6Ba3rT+6l4xY9SQNEYAw6gLz9elAioVH6QhK7agfHY5EMmh Q+nPAOIIF6raOA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:59 2025 by rpki-client