This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft File: HoDFpwojY4QFTzWEkVCSxBcU7tc.mft (raw, json) Hash identifier: OcQQXGz+l4PrSC6Q38Ssoz15/cjLSiepdbe2Eqscwns= Subject key identifier: 19:1D:38:05:2C:12:27:25:BC:0E:37:DA:5F:9B:05:7C:65:1B:37:E7 Authority key identifier: 1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7 Certificate issuer: /CN=1e80c5a70a236384054f3584915092c41714eed7 Certificate serial: 019B4136CDF88C0916B6BEDFAEE32E677263 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft Manifest number: 0EDF Signing time: Sun 21 Dec 2025 14:01:09 +0000 Manifest this update: Sun 21 Dec 2025 14:01:09 +0000 Manifest next update: Mon 22 Dec 2025 14:01:09 +0000 Files and hashes: 1: 79F6Y208nVPLjoQlLn300eKWKvA.roa (hash: T+0rMKFSROZIU7LeDL6rluVOt/hl3CFB58rSKBnAyIg=) 2: HoDFpwojY4QFTzWEkVCSxBcU7tc.crl (hash: lTehrOR3Jvr/Mc4Qvb+itOwrwU1S/UGCSFLs9ZV4q3U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:cd:f8:8c:09:16:b6:be:df:ae:e3:2e:67:72:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e80c5a70a236384054f3584915092c41714eed7 Validity Not Before: Dec 21 14:01:09 2025 GMT Not After : Dec 22 14:01:09 2025 GMT Subject: CN=191d38052c122725bc0e37da5f9b057c651b37e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9e:25:dc:3b:df:81:df:30:e7:60:37:45:45: 90:26:02:ec:7d:b9:a5:dd:22:85:75:28:ec:fa:00: e9:e6:9c:94:29:82:af:6a:d1:93:3e:e1:f4:ad:39: a5:2f:fb:3a:6d:97:63:6f:30:ec:fd:f5:e6:2f:1b: d7:27:2b:e5:e9:a6:ad:f4:8a:2c:cd:3d:34:82:b8: 10:c2:a4:2b:45:bf:44:09:88:a6:5c:2d:7e:f2:02: 67:de:56:93:51:12:24:82:a4:a7:14:59:d8:46:56: e0:90:2f:b4:c8:03:9f:03:57:08:d8:5f:cf:8f:13: b2:59:c0:4f:8d:6b:1e:b7:66:f7:5a:4e:63:70:50: 27:31:31:80:7e:56:e3:6d:47:3d:66:57:6f:8d:96: 61:ca:34:3d:6f:7d:c5:3e:16:07:90:df:f6:ee:58: ea:8f:00:ec:a0:f8:d3:78:b4:c8:81:0a:18:ea:2d: f1:e3:d2:38:77:b9:f9:66:a8:56:ff:c9:3f:58:d4: 11:89:47:f4:47:62:fb:bd:d0:49:8d:29:b2:f2:da: 6d:60:14:c0:5f:51:35:bc:7e:0d:ca:4b:7d:87:90: b5:c9:d7:ee:50:62:5e:b8:18:d7:e1:50:77:58:cf: e3:de:bb:30:8f:9a:e5:9f:ee:69:ea:2f:f6:05:0c: a1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1D:38:05:2C:12:27:25:BC:0E:37:DA:5F:9B:05:7C:65:1B:37:E7 X509v3 Authority Key Identifier: keyid:1E:80:C5:A7:0A:23:63:84:05:4F:35:84:91:50:92:C4:17:14:EE:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoDFpwojY4QFTzWEkVCSxBcU7tc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/cfcb09-0f50-4f1b-873e-661631bba953/1/HoDFpwojY4QFTzWEkVCSxBcU7tc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:66:bf:15:40:6d:c2:e0:c4:31:83:4d:eb:25:06:94:58:48: 8a:eb:0f:92:7c:ca:a5:c2:65:0f:24:45:24:d0:1c:19:78:40: ef:78:3d:e5:3b:c6:29:83:01:2c:8a:34:6e:8c:66:fc:55:e0: 1b:02:cc:3c:16:ec:29:dc:e3:b4:f6:33:93:c5:94:f3:46:05: 6f:74:f7:86:cb:6a:a5:de:4b:33:1b:a7:e9:0c:b4:36:af:0d: 37:06:f4:9c:61:21:2d:18:3b:a2:6a:fd:9c:3c:e6:ca:6b:d6: 0f:a5:80:3d:ba:81:f5:cc:32:16:9b:37:b6:00:26:97:b0:d5: bc:ea:11:d4:2b:f4:ec:a4:64:68:67:2c:39:8b:de:15:21:42: 70:5b:e7:d6:23:df:e9:4a:33:1f:52:72:26:5f:b7:43:1b:9b: f3:93:f2:02:75:b0:d7:f5:e7:23:ff:e0:c4:87:6a:d4:6d:1d: 1d:b7:89:4a:7d:55:42:2e:43:10:c4:72:c7:f3:67:98:53:d2: 85:77:40:c5:91:ef:72:4a:5e:73:2f:cb:f5:4f:44:a1:3b:83: 38:a2:a8:23:80:44:58:f5:de:5e:0e:e2:39:c7:89:36:3c:a4: 3f:ef:fc:9d:a6:34:89:75:8a:48:9a:ac:d5:28:b4:97:cb:26: 11:a2:83:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNs34jAkWtr7fruMuZ3JjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlODBjNWE3MGEyMzYzODQwNTRmMzU4NDkxNTA5MmM0MTcx NGVlZDcwHhcNMjUxMjIxMTQwMTA5WhcNMjUxMjIyMTQwMTA5WjAzMTEwLwYDVQQD EygxOTFkMzgwNTJjMTIyNzI1YmMwZTM3ZGE1ZjliMDU3YzY1MWIzN2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZ4l3Dvfgd8w52A3RUWQJgLsfbml 3SKFdSjs+gDp5pyUKYKvatGTPuH0rTmlL/s6bZdjbzDs/fXmLxvXJyvl6aat9Ios zT00grgQwqQrRb9ECYimXC1+8gJn3laTURIkgqSnFFnYRlbgkC+0yAOfA1cI2F/P jxOyWcBPjWset2b3Wk5jcFAnMTGAflbjbUc9ZldvjZZhyjQ9b33FPhYHkN/27ljq jwDsoPjTeLTIgQoY6i3x49I4d7n5ZqhW/8k/WNQRiUf0R2L7vdBJjSmy8tptYBTA X1E1vH4Nykt9h5C1ydfuUGJeuBjX4VB3WM/j3rswj5rln+5p6i/2BQyhsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkdOAUsEiclvA432l+bBXxlGzfnMB8GA1UdIwQY MBaAFB6AxacKI2OEBU81hJFQksQXFO7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG9ERnB3b2pZNFFGVHpXRWtWQ1N4QmNVN3RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9jZmNiMDktMGY1MC00ZjFiLTg3M2Ut NjYxNjMxYmJhOTUzLzEvSG9ERnB3b2pZNFFGVHpXRWtWQ1N4QmNVN3RjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9jZmNiMDktMGY1MC00ZjFiLTg3M2UtNjYxNjMxYmJhOTUz LzEvSG9ERnB3b2pZNFFGVHpXRWtWQ1N4QmNVN3RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqWa/FUBt wuDEMYNN6yUGlFhIiusPknzKpcJlDyRFJNAcGXhA73g95TvGKYMBLIo0boxm/FXg GwLMPBbsKdzjtPYzk8WU80YFb3T3hstqpd5LMxun6Qy0Nq8NNwb0nGEhLRg7omr9 nDzmymvWD6WAPbqB9cwyFps3tgAml7DVvOoR1Cv07KRkaGcsOYveFSFCcFvn1iPf 6UozH1JyJl+3Qxub85PyAnWw1/XnI//gxIdq1G0dHbeJSn1VQi5DEMRyx/NnmFPS hXdAxZHvckpecy/L9U9EoTuDOKKoI4BEWPXeXg7iOceJNjykP+/8naY0iXWKSJqs 1Si0l8smEaKDDw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:14:27 2025 by rpki-client