This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft File: HoYS4w6WzLqJ514Et7uhwreXxcM.mft (raw, json) Hash identifier: guYtO+K6svRxv+YtLoaLAUpOxvFuv36vEZGy31/KTuY= Subject key identifier: B9:61:3A:F7:54:9F:A6:EA:1E:EF:AC:8E:38:B6:C5:2C:92:4B:48:E4 Authority key identifier: 1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3 Certificate issuer: /CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3 Certificate serial: 019AF0BF7376C4668264021F8EA3D262AD67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft Manifest number: 02AE Signing time: Fri 05 Dec 2025 23:01:09 +0000 Manifest this update: Fri 05 Dec 2025 23:01:09 +0000 Manifest next update: Sat 06 Dec 2025 23:01:09 +0000 Files and hashes: 1: 3liyadxkeB4PeF6Cj_CpA_Z7U3U.roa (hash: BkpSf3XaltWEFzfRC33a/AQ/WD3A00IBXqDokzMsdrM=) 2: HoYS4w6WzLqJ514Et7uhwreXxcM.crl (hash: 1jjWrxfdqBK28jTHDKlRRoslvqrpV2t4wyEJZYc0yaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:73:76:c4:66:82:64:02:1f:8e:a3:d2:62:ad:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3 Validity Not Before: Dec 5 23:01:09 2025 GMT Not After : Dec 6 23:01:09 2025 GMT Subject: CN=b9613af7549fa6ea1eefac8e38b6c52c924b48e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:18:48:b1:ba:cd:52:61:52:05:52:ee:c9:ff: 28:1c:ed:b8:ca:d3:71:5e:1c:ad:05:c2:6d:b9:69: b3:4e:d3:da:c3:18:64:f1:49:1c:f4:6c:20:fd:72: 6d:f4:8f:5b:40:71:48:31:3a:32:47:dc:a4:c6:77: 6d:10:1e:d7:fa:8c:64:3b:19:61:cf:2d:68:8c:ce: 7d:17:76:71:10:2d:f2:ad:8f:15:8c:a0:db:99:9c: 70:7a:43:17:ca:c9:cd:51:43:a1:c2:b1:56:fc:1b: b4:d9:f9:7b:43:16:97:03:2c:41:7a:2d:e6:ea:2f: 59:e5:fb:13:b2:95:4f:a7:4a:a9:a7:2e:5b:d9:05: 36:7a:90:9a:c0:a6:ef:e7:47:7e:d1:6e:76:ff:d1: 70:f7:fe:9e:cf:95:27:79:67:fc:22:e3:3f:61:35: 2e:b5:a1:fe:39:dc:77:c2:21:ec:a9:53:c5:81:a3: e1:29:71:c5:46:ec:da:a7:1b:62:df:42:74:39:dc: c1:4f:8e:3d:49:66:82:16:a6:c8:31:51:38:31:d4: f5:84:94:a9:fd:97:4b:a0:00:3a:a9:89:f3:1c:73: 01:cd:bc:d2:3f:68:2f:fe:fa:44:3e:e1:24:96:bb: 09:61:03:61:7f:c8:10:93:64:58:46:93:81:77:a6: 50:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:61:3A:F7:54:9F:A6:EA:1E:EF:AC:8E:38:B6:C5:2C:92:4B:48:E4 X509v3 Authority Key Identifier: keyid:1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a7:7b:c4:c0:ac:32:e9:da:90:33:fe:fb:87:6d:40:10:8d: e9:dd:f0:4b:08:53:2e:01:4e:90:d5:64:59:2b:0f:5c:50:09: 6d:00:de:e4:79:11:88:13:4d:3b:ff:bc:da:51:7c:82:9d:22: 00:e7:35:c1:72:fb:0d:b1:0c:67:a1:8d:47:88:6b:9a:cd:da: bc:70:2f:32:21:05:29:da:3a:09:99:59:35:eb:df:88:dc:e2: bb:d3:8b:f0:08:f4:b6:3d:6f:87:c6:ba:0b:1b:a6:f9:79:8f: a4:4f:97:d9:89:f7:cf:03:4c:09:bd:3b:56:1f:b2:e7:87:0a: 57:6b:e1:d4:17:a8:34:bf:41:c9:ab:26:03:68:74:c2:32:e3: fa:22:8e:45:4d:bb:17:74:60:59:87:0f:e4:df:de:9a:f7:2a: e4:70:10:81:5d:7c:32:3c:24:9f:8a:01:12:7d:4a:20:3c:dc: 6c:80:30:84:76:45:33:18:a9:ce:a7:e1:92:d8:26:7d:6d:a1: 27:6c:1c:d6:cf:5b:47:c8:72:40:d8:bd:31:d0:1e:75:63:2b: 09:9b:4f:cc:44:19:14:05:46:a1:47:d5:65:6e:b7:d7:f6:56: ee:c9:0a:e0:f6:01:30:e2:0a:6c:f3:e5:48:9b:45:c2:f1:99: 3b:d8:69:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv3N2xGaCZAIfjqPSYq1nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlODYxMmUzMGU5NmNjYmE4OWU3NWUwNGI3YmJhMWMyYjc5 N2M1YzMwHhcNMjUxMjA1MjMwMTA5WhcNMjUxMjA2MjMwMTA5WjAzMTEwLwYDVQQD EyhiOTYxM2FmNzU0OWZhNmVhMWVlZmFjOGUzOGI2YzUyYzkyNGI0OGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxhIsbrNUmFSBVLuyf8oHO24ytNx XhytBcJtuWmzTtPawxhk8Ukc9Gwg/XJt9I9bQHFIMToyR9ykxndtEB7X+oxkOxlh zy1ojM59F3ZxEC3yrY8VjKDbmZxwekMXysnNUUOhwrFW/Bu02fl7QxaXAyxBei3m 6i9Z5fsTspVPp0qppy5b2QU2epCawKbv50d+0W52/9Fw9/6ez5UneWf8IuM/YTUu taH+Odx3wiHsqVPFgaPhKXHFRuzapxti30J0OdzBT449SWaCFqbIMVE4MdT1hJSp /ZdLoAA6qYnzHHMBzbzSP2gv/vpEPuEklrsJYQNhf8gQk2RYRpOBd6ZQvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlhOvdUn6bqHu+sjji2xSySS0jkMB8GA1UdIwQY MBaAFB6GEuMOlsy6iedeBLe7ocK3l8XDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83MzBiZDQtZGIzMy00NTUyLWJhZDUt YjZkYzJiN2JmMzBhLzEvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC83MzBiZDQtZGIzMy00NTUyLWJhZDUtYjZkYzJiN2JmMzBh LzEvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ6d7xMCs MunakDP++4dtQBCN6d3wSwhTLgFOkNVkWSsPXFAJbQDe5HkRiBNNO/+82lF8gp0i AOc1wXL7DbEMZ6GNR4hrms3avHAvMiEFKdo6CZlZNevfiNziu9OL8Aj0tj1vh8a6 Cxum+XmPpE+X2Yn3zwNMCb07Vh+y54cKV2vh1BeoNL9ByasmA2h0wjLj+iKORU27 F3RgWYcP5N/emvcq5HAQgV18Mjwkn4oBEn1KIDzcbIAwhHZFMxipzqfhktgmfW2h J2wc1s9bR8hyQNi9MdAedWMrCZtPzEQZFAVGoUfVZW631/ZW7skK4PYBMOIKbPPl SJtFwvGZO9hp0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:05:22 2025 by rpki-client