This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft File: hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json) Hash identifier: r+3ogXph4R9Qr6tHK1w8MujfWtGAimpJxEA7YD4fIB4= Subject key identifier: 38:89:F3:40:85:FE:18:BD:9A:D2:B7:34:3E:9D:9E:89:6F:6B:B7:10 Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54 Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054 Certificate serial: 019AF3C072F38B990394CEA2275100942283 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 13:01:07 +0000 Manifest this update: Sat 06 Dec 2025 13:01:07 +0000 Manifest next update: Sun 07 Dec 2025 13:01:07 +0000 Files and hashes: 1: ZqMG8mpe5nSXKW1FrNNGNQPtlac.roa (hash: KO75sPS4/XP/JBEid5X4pt0EZyoaOZvo180Eq+iiPnQ=) 2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: 8TidMfSFrXvweWGZ/wSwjtdjqBdl0CT2arNzC9YM72w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:72:f3:8b:99:03:94:ce:a2:27:51:00:94:22:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054 Validity Not Before: Dec 6 13:01:07 2025 GMT Not After : Dec 7 13:01:07 2025 GMT Subject: CN=3889f34085fe18bd9ad2b7343e9d9e896f6bb710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9c:11:1f:97:6d:74:78:f2:3c:5f:64:97:3f: 68:13:e6:9f:6e:b0:f0:dd:69:aa:3a:cd:a5:7e:55: e2:53:a4:82:a3:02:e9:60:9e:dc:a4:f1:cb:15:fa: 7e:64:16:35:45:d5:71:ed:8d:49:53:c7:15:3b:0a: 55:67:b9:02:64:1e:ba:45:6d:15:57:d7:f1:44:35: 43:01:f9:fa:f2:61:bb:f2:4f:a7:cf:62:42:9c:6c: 01:2b:8b:4b:65:98:3e:32:4d:98:ad:6a:be:3a:b4: 9e:1d:38:76:b0:e9:b5:3b:1d:5f:dd:1a:34:9e:53: ca:22:c1:7a:f0:6c:56:31:cb:98:8b:a3:4c:9c:19: 2c:31:8c:0f:6f:0f:9a:8d:63:b2:ec:42:81:de:87: 23:be:d1:e9:a8:43:87:4e:90:05:8b:ca:4a:9d:da: a1:6c:b9:23:5c:9c:78:89:9d:92:ff:40:0f:36:10: cd:d3:bc:a9:61:a8:40:46:ed:30:a4:cf:5f:32:7a: 35:14:58:ef:15:c3:be:a0:ac:bc:98:f4:7f:7a:55: f4:de:37:9d:7a:2e:50:57:c3:ee:49:89:16:78:3e: 20:79:aa:2b:49:3f:43:b7:7a:df:ce:c9:e1:33:cd: e5:f8:31:a3:c0:9d:19:e9:a1:45:20:cf:61:ec:35: d4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:89:F3:40:85:FE:18:BD:9A:D2:B7:34:3E:9D:9E:89:6F:6B:B7:10 X509v3 Authority Key Identifier: keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d7:f9:6c:64:32:5b:4c:eb:9d:c1:2d:d6:92:68:3c:1e:a7: 3b:da:c3:4e:b1:5b:f6:51:06:97:3a:c8:3f:5c:a3:00:0f:94: 6f:34:56:26:a4:c1:ca:5d:b8:50:03:6a:ef:e6:7f:bb:47:16: 2c:af:e2:64:4b:c0:5e:f8:22:07:ae:1d:f4:1f:b0:8a:70:e4: 6c:53:98:c6:7a:ab:1c:ab:4e:17:39:45:02:c7:51:c0:e7:dd: d2:f8:87:db:23:52:13:41:51:91:7e:05:f9:be:9c:b3:1c:12: b2:f0:08:1d:96:e3:bf:15:c3:5f:0d:8b:e6:fc:b6:80:a7:0a: d2:36:ff:6f:62:dc:ac:67:12:c0:e4:eb:b9:9e:df:fb:8e:81: 91:1c:d9:86:a0:fb:56:ba:4e:21:0c:31:77:55:6e:18:b7:24: 5d:a5:36:4d:9d:3c:4f:08:96:a9:0a:83:8a:c4:9c:5f:3f:4e: 07:bc:91:6a:32:13:67:bd:15:8d:2a:cd:de:01:f3:cd:e7:3f: 82:8f:5e:bd:4d:ac:cc:10:74:79:aa:a9:07:c1:d8:79:7b:38: 04:01:5b:09:0e:cd:88:55:27:ed:7c:60:9f:8f:dc:a4:44:44: af:4f:7c:b4:75:72:7d:fe:5a:c1:ee:ee:d7:3b:8b:d4:1e:99: e0:13:55:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwHLzi5kDlM6iJ1EAlCKDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ODZhZThlNDkzNzRiYWM4NGNhYTNkZTBkMjYwNzBiNmIx OTAwNTQwHhcNMjUxMjA2MTMwMTA3WhcNMjUxMjA3MTMwMTA3WjAzMTEwLwYDVQQD EygzODg5ZjM0MDg1ZmUxOGJkOWFkMmI3MzQzZTlkOWU4OTZmNmJiNzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJwRH5dtdHjyPF9klz9oE+afbrDw 3WmqOs2lflXiU6SCowLpYJ7cpPHLFfp+ZBY1RdVx7Y1JU8cVOwpVZ7kCZB66RW0V V9fxRDVDAfn68mG78k+nz2JCnGwBK4tLZZg+Mk2YrWq+OrSeHTh2sOm1Ox1f3Ro0 nlPKIsF68GxWMcuYi6NMnBksMYwPbw+ajWOy7EKB3ocjvtHpqEOHTpAFi8pKndqh bLkjXJx4iZ2S/0APNhDN07ypYahARu0wpM9fMno1FFjvFcO+oKy8mPR/elX03jed ei5QV8PuSYkWeD4geaorST9Dt3rfzsnhM83l+DGjwJ0Z6aFFIM9h7DXUVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDiJ80CF/hi9mtK3ND6dnolva7cQMB8GA1UdIwQY MBaAFIaGro5JN0ushMqj3g0mBwtrGQBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jMTk2MmEtYzY3OC00ZTQ2LWEwNzYt YTc0ZjUwZTAwZGQ1LzEvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9jMTk2MmEtYzY3OC00ZTQ2LWEwNzYtYTc0ZjUwZTAwZGQ1 LzEvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtf5bGQy W0zrncEt1pJoPB6nO9rDTrFb9lEGlzrIP1yjAA+UbzRWJqTByl24UANq7+Z/u0cW LK/iZEvAXvgiB64d9B+winDkbFOYxnqrHKtOFzlFAsdRwOfd0viH2yNSE0FRkX4F +b6csxwSsvAIHZbjvxXDXw2L5vy2gKcK0jb/b2LcrGcSwOTruZ7f+46BkRzZhqD7 VrpOIQwxd1VuGLckXaU2TZ08TwiWqQqDisScXz9OB7yRajITZ70VjSrN3gHzzec/ go9evU2szBB0eaqpB8HYeXs4BAFbCQ7NiFUn7Xxgn4/cpEREr098tHVyff5awe7u 1zuL1B6Z4BNVvw== -----END CERTIFICATE-----Generated at Sat Dec 6 19:02:00 2025 by rpki-client