This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: zSIL0TDYZxRtL+ys8Vuju+/dBapyezAJHmJT2XK2/Kk= Subject key identifier: 27:58:02:9F:57:B1:1A:01:C5:D7:60:D3:04:54:9E:C1:81:4B:09:34 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019B3DC7C68B3EC02B3124F070CB68176D09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1815 Signing time: Sat 20 Dec 2025 22:01:01 +0000 Manifest this update: Sat 20 Dec 2025 22:01:01 +0000 Manifest next update: Sun 21 Dec 2025 22:01:01 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: PqjBdpDlM9/OvSv3BoS2bK08wAF5oTN7CwiX63VYtTw=) 2: 0httGqgqnBD-cyBZkV5zP0LpIO4.roa (hash: e5sFUpuEkPspxdtpRMty2JvPNTXvUGFt57BwVt8wTQk=) 3: 20w83vHPyYnLSWr2qqWCmD2gZNY.roa (hash: ClK+X58yEmA5ygXK0mo1ANs6qUTT/V8TWnwZD7Tusy4=) 4: 2GL47T9SRBBwBaNeZexIUa30gBc.roa (hash: ABN0fho3ez1AZohMO8vLStXF6A5NSbFkU1JXiXGcusg=) 5: 2s4ghGsMJ4UjziczDpj7_nBo6GE.roa (hash: jn5a6RlzlWn5orrS4JyYzumT++ei7+4zrAsQWhkhOUE=) 6: BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa (hash: N6DdRHz14Xr18smaWB+L/0EFbg9FmP8IrnnkdfkP5sA=) 7: BjUAlonCB1CjmbTY52apZdHRGFk.roa (hash: vBVzlWqlUuZ7F5qeBjljk7LIKAFRXIaJSFWC4T698rw=) 8: DRLbJL7meHAnOmMNiiVi2VhOOMc.roa (hash: Lp9UgdizeLrJK6Zry0u6HD2WAPxw4E+r1wzuyfdMmtU=) 9: EXfTHtw-3BJt59JkT36dPstORFo.roa (hash: MhW4Yoiges2mvr+KewFgpAREQV0Mu5obgGNxi9eeOQc=) 10: EYaBNaigUJPNidpEJHqvbrENGdU.roa (hash: U/V1xaDA1aKazkypKTjkyan+k6X/djAAeOa2M3QSQJM=) 11: FRvZFyOxFoddRwR8NWy2iDyogY8.roa (hash: bzSWZTj+o0faBM1dsh+8mBoLaK0jcFLNse7M1DVkpUs=) 12: G8jjrx8EZbysXI_Z13e_0NqYZdU.roa (hash: GPSkTNwl/L8vVjia7LOR9ahqlqqIZvGFNcWIGIi/vHw=) 13: Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa (hash: Dfa7w0wU+Mwe8FRxusOe5J5w207sEqOGP3MEUAezXaw=) 14: Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa (hash: mR/skrtMXmYrNl0WIwSjaGFdp8tWtvYO7SMbQmVqf6A=) 15: MguR744HGmOoEMdrlIzPUQQNYfs.roa (hash: Ve4h+6FdNbKYu9bYvRE5Dbmxn7BK8VvZ01cl79qxeJc=) 16: PcsvqoFss2sjt8KP5dE_s9b5R94.roa (hash: 2VnZlh9WN/gvQzrunwflGg0cw7Ym2P+YsV38lpVH0Gs=) 17: RySOnwd5yNUvkpOdlWzbq8gD58I.roa (hash: pMm1Q5jN9tu+9MZBtGXjdw1riel86JfdVWVMRs8pgEY=) 18: UNh6P6o5iukKyngJ923OKln6euE.roa (hash: N5ex54TauXC69hfaRmQEjxuyvZMfnOJEFnqZWvxkb8A=) 19: XXSSAkKxHIvFb1XDuVgAK48p7oI.roa (hash: p4mx1wVBI5jfCHEyW7RDH/AavCZwfWlBpFNbLCutJY0=) 20: XqDDBjzRqksOqaLkNJqWqkX_q5g.roa (hash: 1giyN8jwNm42lrK4gv4g6LsRanOMpVhR/vHcE0ewcvw=) 21: Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa (hash: XJDCD20D/hEgr09ZL/gnt/32UJp0okrjk8WR5CoxVyQ=) 22: _Ja5VSGfVwaP_RssqzUEn4YMRnM.roa (hash: IopLtmpqrddq1TLUa3ph8Vkd8Gg6tUuEa1Mf8B120SY=) 23: fW0mZX2qVdA0eoUEboZhAE59bUE.roa (hash: stVjqf6xlyz/MOhoo6Rt330zmsp7vd4IC5S2fUEJ5WM=) 24: kqDz7smZzEggwnOtTZ91wrlBE4c.roa (hash: OteTjZY0hrzoBDeoZG9laIbeOhFIt32mklvyy1YBT38=) 25: m9Q0QpkVO1rZKT8wIA-lB6ceYcg.roa (hash: yW9VuP+7IZqfB9uY1adWMtzwRUiSlhz/2UYbCN1BQSU=) 26: ncQVbTITs5Wtl1BsQ2mAS7-nTVQ.roa (hash: W2j7t9wKtLT6mYkhMfEldPwCF8H6KOgtTtUoXF6gg84=) 27: oqSgizr5ODUUGjBb8_Wzxokx-xk.roa (hash: Kl53NJDKPjecKCh1ZqXsoFCQIzYfPyjvOORgLlse+gY=) 28: qjzeeh1Gho5kkoGd8eWSm2fDElg.roa (hash: legd59DpUzqYKdG/H8UB7NHrWv3d+4ykb5elvNlaqw4=) 29: qlt-CjR0Oi0L3lo2PS7A4jbvIUg.roa (hash: iydTkBpS1P6s3+CKe74qws4olK3ajXbhwYqoUw/uhBk=) 30: tdzsaKxsamCWBVwoUkqT8RggY6A.roa (hash: Fv0PNntXjBHiuO1Z367HBdmxJtFfh7CR44dwT354/lw=) 31: wMbP2rODQDC-jcOXAyW7ktyAwFs.roa (hash: 9dxgb9cFX2rvzK0yUiEPPHMObwlTuLCycMbvyIulqKU=) 32: yNK_se_8Y1MH-IyQZOfpZj_aArA.roa (hash: Y/8odYpFkGDQCB6ybQitBRTCfwLFaWn7M7svPHhRrhA=) 33: ytCMvXgi7-5EalYEygb1M-dSbo4.roa (hash: 0MrqqAAtZWVj8wfoNtj5hcwvBU3HxDQG25M1h24iiN8=) 34: z4dbT2rdI1MPHPzn2a4SSpvkt3E.roa (hash: pftbqIKgzEeVO9sl0LAVO5XHYPxIgJ6YwaN9JqNCTzk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:c6:8b:3e:c0:2b:31:24:f0:70:cb:68:17:6d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Dec 20 22:01:01 2025 GMT Not After : Dec 21 22:01:01 2025 GMT Subject: CN=2758029f57b11a01c5d760d304549ec1814b0934 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d6:fb:b7:68:80:0f:9b:17:71:11:29:a8:89: f1:04:0c:b5:16:25:e8:42:1a:f5:66:e6:84:9b:6e: d5:6e:65:46:7d:ff:40:28:cd:df:f9:f3:95:ff:aa: 8c:95:eb:f8:b3:15:3b:c4:ed:39:dd:2b:cf:2c:bf: 2e:f3:6e:3e:3b:1e:50:85:32:03:d8:08:9c:35:6c: 1b:97:2f:8c:ba:42:f1:24:42:b3:15:f1:4a:35:ee: b5:30:bd:d5:aa:20:c2:6d:84:ae:34:63:85:9c:aa: 83:88:e7:77:c6:06:7a:c6:21:24:6a:12:1f:52:ed: 19:b4:cb:6d:07:76:52:e1:ab:09:27:38:4f:16:6a: e4:0a:53:77:3b:d2:30:c0:26:58:b6:66:57:65:dd: c1:31:be:68:75:a6:9b:9d:95:a8:7b:4f:93:e0:75: b5:0a:0c:b9:be:04:7c:95:2c:3a:b4:27:0e:b2:8f: c3:60:17:62:af:3d:ba:5f:8a:b4:8d:1e:01:b2:c3: 8d:40:aa:8d:42:ec:5c:35:84:a3:21:9e:2e:e0:63: 24:00:1a:d0:e0:e1:ce:fd:6b:48:5c:76:13:61:7a: b1:8c:ff:71:be:7f:d7:4a:49:50:c4:3c:b7:5a:1a: fb:b2:59:79:2b:d8:a8:bf:ee:ff:aa:ba:ae:8a:6d: 2d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:58:02:9F:57:B1:1A:01:C5:D7:60:D3:04:54:9E:C1:81:4B:09:34 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:c5:9f:6d:9e:0a:75:40:80:ed:9c:6a:1a:47:34:25:ca:93: 54:12:50:62:c6:66:02:42:e8:dc:30:7c:54:00:0f:bd:26:30: 39:4b:83:3b:43:ed:a7:05:79:0e:a6:40:c8:f8:10:72:eb:5e: e9:35:33:c0:9f:70:b1:5a:e9:c8:b9:56:70:cc:13:8e:6c:7d: d4:66:f8:3d:eb:ea:3a:b2:54:c2:1a:42:73:c5:66:0b:60:4f: 6d:5c:08:02:14:4b:91:55:9c:c4:b6:cb:3c:4d:eb:49:fb:9a: e4:6d:e8:b9:34:8e:2c:15:a2:cb:8a:ef:57:d5:56:2f:16:c8: 5d:b1:1c:bb:25:ee:eb:12:b0:8a:28:dd:61:a2:64:ca:d2:03: 3b:ec:e5:db:5e:76:d3:e8:e3:8c:eb:39:8d:b6:8b:93:9a:db: 5f:86:84:9c:48:b0:54:1e:35:40:cd:9b:8e:2a:32:6e:a4:aa: ee:18:28:80:7f:f8:d3:03:79:bd:69:ad:19:61:20:bf:26:64: c5:c8:df:64:b7:1e:40:6a:fd:26:10:04:78:34:88:21:b3:dd: 26:6e:7c:5e:c3:f8:e8:38:ea:e3:5a:11:10:73:75:cd:d3:6b: 42:3c:96:13:14:7f:fc:b9:5e:09:94:15:f3:2e:2d:7e:f2:1a: 9e:01:db:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x8aLPsArMSTwcMtoF20JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjUxMjIwMjIwMTAxWhcNMjUxMjIxMjIwMTAxWjAzMTEwLwYDVQQD EygyNzU4MDI5ZjU3YjExYTAxYzVkNzYwZDMwNDU0OWVjMTgxNGIwOTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Nb7t2iAD5sXcREpqInxBAy1FiXo Qhr1ZuaEm27VbmVGff9AKM3f+fOV/6qMlev4sxU7xO053SvPLL8u824+Ox5QhTID 2AicNWwbly+MukLxJEKzFfFKNe61ML3VqiDCbYSuNGOFnKqDiOd3xgZ6xiEkahIf Uu0ZtMttB3ZS4asJJzhPFmrkClN3O9IwwCZYtmZXZd3BMb5odaabnZWoe0+T4HW1 Cgy5vgR8lSw6tCcOso/DYBdirz26X4q0jR4BssONQKqNQuxcNYSjIZ4u4GMkABrQ 4OHO/WtIXHYTYXqxjP9xvn/XSklQxDy3Whr7sll5K9iov+7/qrquim0tKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdYAp9XsRoBxddg0wRUnsGBSwk0MB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu8WfbZ4K dUCA7ZxqGkc0JcqTVBJQYsZmAkLo3DB8VAAPvSYwOUuDO0PtpwV5DqZAyPgQcute 6TUzwJ9wsVrpyLlWcMwTjmx91Gb4PevqOrJUwhpCc8VmC2BPbVwIAhRLkVWcxLbL PE3rSfua5G3ouTSOLBWiy4rvV9VWLxbIXbEcuyXu6xKwiijdYaJkytIDO+zl2152 0+jjjOs5jbaLk5rbX4aEnEiwVB41QM2bjioybqSq7hgogH/40wN5vWmtGWEgvyZk xcjfZLceQGr9JhAEeDSIIbPdJm58XsP46Djq41oREHN1zdNrQjyWExR//LleCZQV 8y4tfvIangHbCQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:52:51 2025 by rpki-client