This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft File: HO6RKWyUmS0VGiMiQObPOhdtIDk.mft (raw, json) Hash identifier: rEWfT764A564VIgq09k/jKXsVLRg1XvViMZJKuAaqeU= Subject key identifier: 9B:A2:75:72:72:B4:B5:B6:A1:05:67:DD:C0:D4:9A:06:59:5B:64:19 Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 019B619D6AC300B2DD40B8B3C2E384011649 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft Manifest number: 1268 Signing time: Sat 27 Dec 2025 21:01:04 +0000 Manifest this update: Sat 27 Dec 2025 21:01:04 +0000 Manifest next update: Sun 28 Dec 2025 21:01:04 +0000 Files and hashes: 1: 102Rcb8KW1Pgg5SOwqYp5kasBLk.roa (hash: y7m1QcMceHxmu8M/v2wfuOKJTXQndwbvVHTDN4L1lSE=) 2: 1mc01k4JB9mO_uUxoDo8i1hWS0E.roa (hash: 8wTCoFuyYANLWW2D/EVqLWg408oEqbUMAtp374e3yJQ=) 3: 88P_skAGBFp7OKZHRnG0KVJmPoI.roa (hash: tGiqK/XqC0JOJiX2Em9KLLavk6JfLtdyVgtUQOZcMls=) 4: Gm_cS8iJj-tFJXP1V0-jwGNEWbI.roa (hash: Mek1+m4iEtpLgT/StSNohRI7JnRBASyUnmLHmN4630g=) 5: HO6RKWyUmS0VGiMiQObPOhdtIDk.crl (hash: UmUXPl/CF1VQL8Ae9ZMOwSc9YAgcWoNS0/7VHi6kkqo=) 6: M5xSNSg74xAiPhHirIDMnYyKKDI.roa (hash: kFY18cM1/c9JgLsf0tF1GX9g3u8AHSeqmtNVMWpdTXM=) 7: Npd-hacRQ57Kduiqr1RWMbXhGmA.roa (hash: WabQYFdWc7dGq5W0nQkAEwuDtxytEQkZlmuQjmPaRbg=) 8: bge-I_W1NXO4wXcUD8wO2q8GORE.roa (hash: QczRVPNbfyo75luxG1p381iR6nIvpAPPLqlT8W5S9ag=) 9: kKXRYJxwMMXbPNKSde4f-CErN8I.roa (hash: vsnRE4FK7Q7v85LDHKqSHekGSg54JFxZp3g76izUfTw=) 10: kaRHNamZXPJCw_g8nY9b4j30k2Y.roa (hash: 4Wp2FhFr3sOAxEWUnXlXchKEwJ5dKGkuJJKV3L/ukrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 21:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:9d:6a:c3:00:b2:dd:40:b8:b3:c2:e3:84:01:16:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Dec 27 21:01:04 2025 GMT Not After : Dec 28 21:01:04 2025 GMT Subject: CN=9ba2757272b4b5b6a10567ddc0d49a06595b6419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d6:85:58:49:6c:fc:4a:05:d8:18:35:32:8b: 9b:fa:d0:12:c6:c3:57:61:0d:51:bb:6a:ca:df:e4: 3b:bd:05:cb:45:fb:8b:b9:7a:93:cd:db:30:74:05: 45:a6:dc:c0:5f:c1:28:e9:a2:b0:e6:9b:1a:7f:37: 0e:42:6b:7a:b8:ce:ab:3b:14:78:93:11:ef:1a:98: 9e:26:93:52:12:ff:b5:08:65:1f:99:c2:39:c2:3a: 56:2e:7f:60:a4:04:74:ac:ae:ec:52:66:be:26:25: c6:bf:0a:d0:03:33:c3:98:69:41:9b:8a:e5:20:ab: 2d:40:da:9a:a9:c4:5e:f9:34:d4:7f:8a:7f:8c:2b: f1:6f:38:bb:10:80:00:d6:11:cb:7c:5e:b8:a5:e2: d4:b8:99:79:bc:24:ef:f3:22:36:c7:d6:71:23:58: f5:3e:f3:d1:c1:b4:4f:ce:11:99:62:e4:d5:be:bb: 93:5c:7e:35:10:d8:89:58:f6:53:34:9e:d0:20:5a: 96:09:fc:fc:b7:d7:f9:d5:52:0c:57:31:f2:59:c9: 74:81:90:64:6e:06:ae:0f:71:fc:79:0c:8e:9d:54: a6:c1:2b:c4:7c:df:e2:e0:dc:4e:6b:46:ec:da:2e: bd:fd:af:7f:f3:36:1c:fc:c1:e1:92:44:d1:08:90: 0f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A2:75:72:72:B4:B5:B6:A1:05:67:DD:C0:D4:9A:06:59:5B:64:19 X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ec:4a:99:36:71:9e:65:6a:a5:ed:a7:0b:8a:f7:87:e6:27: e2:fd:ee:87:cb:59:48:e3:71:a1:85:a8:cd:94:c6:ee:1d:9b: c0:ad:1a:c8:ff:a8:79:76:47:e3:95:9b:84:2f:12:3a:1f:0c: 72:37:05:e4:71:a7:8b:5f:fa:5f:e4:22:7d:b6:81:a4:f1:20: 9b:a3:91:6f:08:58:20:97:59:82:70:93:a1:30:72:44:68:2a: a6:e4:44:2e:c9:e8:5f:82:70:3f:21:bb:b8:67:33:17:20:b7: 1a:e2:04:32:a3:5a:dd:56:5a:92:f1:75:4a:74:e2:80:ed:b1: 07:e3:20:ce:9b:b9:31:1e:be:7e:5b:8a:0f:b5:29:36:71:2d: 12:38:1d:c0:b8:41:12:23:1d:8b:6a:13:ad:2c:13:3f:34:ff: c2:1d:ba:3d:63:81:9b:86:d7:fa:da:c7:ee:6d:fb:b6:d3:42: 4e:74:47:cb:e9:c0:1b:f4:28:2e:88:c7:d6:16:b3:70:ee:cf: be:0b:8b:31:f8:a1:f5:19:1e:4c:54:46:8b:9f:84:46:c5:6c: 30:6f:10:7f:67:65:a5:15:b0:f2:2a:cc:d9:a2:85:73:c7:d6: d2:12:0e:0a:2f:de:65:ef:8b:59:c8:8f:9f:93:25:a2:7a:df: e1:28:a0:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthnWrDALLdQLizwuOEARZJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjUxMjI3MjEwMTA0WhcNMjUxMjI4MjEwMTA0WjAzMTEwLwYDVQQD Eyg5YmEyNzU3MjcyYjRiNWI2YTEwNTY3ZGRjMGQ0OWEwNjU5NWI2NDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9aFWEls/EoF2Bg1Moub+tASxsNX YQ1Ru2rK3+Q7vQXLRfuLuXqTzdswdAVFptzAX8Eo6aKw5psafzcOQmt6uM6rOxR4 kxHvGpieJpNSEv+1CGUfmcI5wjpWLn9gpAR0rK7sUma+JiXGvwrQAzPDmGlBm4rl IKstQNqaqcRe+TTUf4p/jCvxbzi7EIAA1hHLfF64peLUuJl5vCTv8yI2x9ZxI1j1 PvPRwbRPzhGZYuTVvruTXH41ENiJWPZTNJ7QIFqWCfz8t9f51VIMVzHyWcl0gZBk bgauD3H8eQyOnVSmwSvEfN/i4NxOa0bs2i69/a9/8zYc/MHhkkTRCJAPZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuidXJytLW2oQVn3cDUmgZZW2QZMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouxKmTZx nmVqpe2nC4r3h+Yn4v3uh8tZSONxoYWozZTG7h2bwK0ayP+oeXZH45WbhC8SOh8M cjcF5HGni1/6X+QifbaBpPEgm6ORbwhYIJdZgnCToTByRGgqpuRELsnoX4JwPyG7 uGczFyC3GuIEMqNa3VZakvF1SnTigO2xB+Mgzpu5MR6+fluKD7UpNnEtEjgdwLhB EiMdi2oTrSwTPzT/wh26PWOBm4bX+trH7m37ttNCTnRHy+nAG/QoLojH1hazcO7P vguLMfih9RkeTFRGi5+ERsVsMG8Qf2dlpRWw8irM2aKFc8fW0hIOCi/eZe+LWciP n5Mlonrf4SigzA== -----END CERTIFICATE-----Generated at Sun Dec 28 06:38:17 2025 by rpki-client