This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: v/2/qz7mQeZF+9QvwPySPcZmWQrg+74zoJA+ym5X4kI= Subject key identifier: 77:A6:DF:7A:83:54:4C:11:A9:02:E1:44:69:9E:1D:1B:DD:54:CB:1F Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 019B3EDA5326ED4C28A15A0F5637573605D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 1256 Signing time: Sun 21 Dec 2025 03:00:54 +0000 Manifest this update: Sun 21 Dec 2025 03:00:54 +0000 Manifest next update: Mon 22 Dec 2025 03:00:54 +0000 Files and hashes: 1: 102Rcb8KW1Pgg5SOwqYp5kasBLk.roa (hash: y7m1QcMceHxmu8M/v2wfuOKJTXQndwbvVHTDN4L1lSE=) 2: 1mc01k4JB9mO_uUxoDo8i1hWS0E.roa (hash: 8wTCoFuyYANLWW2D/EVqLWg408oEqbUMAtp374e3yJQ=) 3: 88P_skAGBFp7OKZHRnG0KVJmPoI.roa (hash: tGiqK/XqC0JOJiX2Em9KLLavk6JfLtdyVgtUQOZcMls=) 4: Gm_cS8iJj-tFJXP1V0-jwGNEWbI.roa (hash: Mek1+m4iEtpLgT/StSNohRI7JnRBASyUnmLHmN4630g=) 5: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: 5y5sCUjfRI3dFJ7nqRNmaqF+bG2XfGoI8sZhFYgH374=) 6: M5xSNSg74xAiPhHirIDMnYyKKDI.roa (hash: kFY18cM1/c9JgLsf0tF1GX9g3u8AHSeqmtNVMWpdTXM=) 7: Npd-hacRQ57Kduiqr1RWMbXhGmA.roa (hash: WabQYFdWc7dGq5W0nQkAEwuDtxytEQkZlmuQjmPaRbg=) 8: bge-I_W1NXO4wXcUD8wO2q8GORE.roa (hash: QczRVPNbfyo75luxG1p381iR6nIvpAPPLqlT8W5S9ag=) 9: kKXRYJxwMMXbPNKSde4f-CErN8I.roa (hash: vsnRE4FK7Q7v85LDHKqSHekGSg54JFxZp3g76izUfTw=) 10: kaRHNamZXPJCw_g8nY9b4j30k2Y.roa (hash: 4Wp2FhFr3sOAxEWUnXlXchKEwJ5dKGkuJJKV3L/ukrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:53:26:ed:4c:28:a1:5a:0f:56:37:57:36:05:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Dec 21 03:00:54 2025 GMT Not After : Dec 22 03:00:54 2025 GMT Subject: CN=77a6df7a83544c11a902e144699e1d1bdd54cb1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:56:cd:78:44:1f:73:a8:37:21:83:e3:28:55: e9:e1:54:26:7d:a9:e5:27:b6:37:8c:24:4b:83:53: b4:9b:fb:95:99:f1:1c:c4:46:b2:b3:c8:76:49:3f: e4:36:d5:1e:7e:34:35:69:25:0d:61:be:df:ac:dd: d8:82:7e:43:48:61:7e:93:aa:90:09:10:6b:b9:e4: df:3f:67:c3:60:1c:e1:b2:e3:e3:7c:5f:82:40:6b: 42:de:03:6b:3e:45:7a:e4:e2:d7:47:90:be:05:74: 8c:37:09:85:9e:a4:f4:39:2c:3c:c9:ee:1f:80:06: 94:b8:57:72:21:7e:eb:e7:b6:9a:ae:e9:e3:0c:0b: b3:cb:38:90:41:87:0a:56:f4:57:a3:24:2f:26:90: 33:b8:cf:ed:0e:75:97:f9:ed:40:eb:bc:6f:5c:bb: a4:2c:aa:11:66:b7:f9:30:cc:8c:dc:ab:14:d4:38: fe:90:18:9b:2a:b1:dd:88:6a:63:77:33:3d:ae:38: 97:f3:f4:a2:17:c0:69:72:f4:18:d1:e2:7d:05:a8: 9c:23:26:ad:78:f1:32:63:9b:fe:80:78:7b:f3:fa: e4:1f:07:24:76:1c:94:92:6e:da:38:de:4a:3d:86: c4:a3:62:da:fd:01:9f:79:58:a5:28:16:e6:7a:a4: 94:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A6:DF:7A:83:54:4C:11:A9:02:E1:44:69:9E:1D:1B:DD:54:CB:1F X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:73:81:5d:10:ac:2b:a6:5b:2e:20:77:25:43:b2:99:9d:00: ea:47:8e:ba:ff:9f:31:c5:c0:9d:22:2e:90:cd:d4:e0:0c:fa: ad:63:5e:f6:34:b8:0f:c1:60:53:c1:2f:32:d5:dd:bd:12:2f: 0f:33:fe:3f:2c:de:df:4d:81:77:3f:3e:03:84:b1:e8:b6:b9: 1a:91:64:47:3b:ba:b6:93:8d:ec:8c:40:ba:31:6c:6c:5d:46: 6c:35:e3:0b:35:8b:1a:cd:ab:d6:e6:1b:78:43:45:76:7e:a1: 80:2a:d6:bd:23:ec:06:db:52:be:fa:4c:ff:45:75:19:44:6d: eb:b8:1d:9d:54:69:d3:19:0d:ad:30:b3:a9:0b:4a:30:b5:89: 19:5a:71:15:03:4f:14:ba:f5:d5:bb:cb:11:db:38:6d:30:91: a3:31:70:aa:04:33:05:ff:58:54:be:9c:94:2e:19:65:c4:63: d6:36:6d:ef:22:a5:0c:2d:82:25:72:55:13:56:a2:47:8f:f0: 89:ea:f6:0d:92:90:9b:39:97:7b:b7:72:d9:ce:3c:06:95:b1: b4:41:50:7e:fc:d7:af:f5:eb:19:20:13:06:59:93:7f:48:8a: 9d:e3:ae:55:03:03:6a:98:c1:2a:a2:05:56:b7:b6:d6:e5:49: 40:20:34:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2lMm7UwooVoPVjdXNgXRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjUxMjIxMDMwMDU0WhcNMjUxMjIyMDMwMDU0WjAzMTEwLwYDVQQD Eyg3N2E2ZGY3YTgzNTQ0YzExYTkwMmUxNDQ2OTllMWQxYmRkNTRjYjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1bNeEQfc6g3IYPjKFXp4VQmfanl J7Y3jCRLg1O0m/uVmfEcxEays8h2ST/kNtUefjQ1aSUNYb7frN3Ygn5DSGF+k6qQ CRBrueTfP2fDYBzhsuPjfF+CQGtC3gNrPkV65OLXR5C+BXSMNwmFnqT0OSw8ye4f gAaUuFdyIX7r57aarunjDAuzyziQQYcKVvRXoyQvJpAzuM/tDnWX+e1A67xvXLuk LKoRZrf5MMyM3KsU1Dj+kBibKrHdiGpjdzM9rjiX8/SiF8BpcvQY0eJ9BaicIyat ePEyY5v+gHh78/rkHwckdhyUkm7aON5KPYbEo2La/QGfeVilKBbmeqSURQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHem33qDVEwRqQLhRGmeHRvdVMsfMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXOBXRCs K6ZbLiB3JUOymZ0A6keOuv+fMcXAnSIukM3U4Az6rWNe9jS4D8FgU8EvMtXdvRIv DzP+Pyze302Bdz8+A4Sx6La5GpFkRzu6tpON7IxAujFsbF1GbDXjCzWLGs2r1uYb eENFdn6hgCrWvSPsBttSvvpM/0V1GURt67gdnVRp0xkNrTCzqQtKMLWJGVpxFQNP FLr11bvLEds4bTCRozFwqgQzBf9YVL6clC4ZZcRj1jZt7yKlDC2CJXJVE1aiR4/w ier2DZKQmzmXe7dy2c48BpWxtEFQfvzXr/XrGSATBlmTf0iKneOuVQMDapjBKqIF Vre21uVJQCA0Rw== -----END CERTIFICATE-----Generated at Sun Dec 21 09:48:40 2025 by rpki-client