This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft File: 0H11c6rK6CHIfW02Qxz-SygBq0E.mft (raw, json) Hash identifier: CNKxGWJGTUda3mKD6whGk6UmhdUNlZIEyxB3iXynDb8= Subject key identifier: 88:57:24:3E:99:FD:57:2C:8C:1B:57:75:08:2F:69:51:46:05:27:2C Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 Certificate issuer: /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Certificate serial: 019B3DFEDA21907421994187F044A0BD7F5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft Manifest number: 14D9 Signing time: Sat 20 Dec 2025 23:01:10 +0000 Manifest this update: Sat 20 Dec 2025 23:01:10 +0000 Manifest next update: Sun 21 Dec 2025 23:01:10 +0000 Files and hashes: 1: 0DF0N6re6QyjGkcELrZ2PayQLRE.roa (hash: +fZxWB3IhMVYTIeiKHbk18oRReT+PUmn1zDi+OPG/lg=) 2: 0H11c6rK6CHIfW02Qxz-SygBq0E.crl (hash: yr2zslv4U8NH1ZQtHjPi7FdH1e/4hlGameOE/fQy3VI=) 3: 3CbIb4TEaRdsUuSnzyfjsAcJ8C0.roa (hash: FMM+Gvcvh1vM/fuebG47q1lgLXjSvweT88zfbPoCGg0=) 4: 9MuueRmthntuKlKTwnVM9LicLuc.roa (hash: Qhwg9BIR9qrwafAgYX5pDSZ8fHBJKbNXSHBKS3TOnUU=) 5: DIgxiDivQ3J12DTsz16bG9BGpKM.roa (hash: ipoR7K+Qag5vPNI/tEX1tA3BB9jHVP98Tf9P91MGtOo=) 6: DmJAcHNL5tv0DXlXvpBQPSj5sQo.roa (hash: qPorS5oIpI2apfp+WoMqcxuGrwSF4BiUmmhlYMQw5nA=) 7: GzD59DhVZl4_JB2c2p4bRwKVQNQ.roa (hash: 1OX4fQvpvyMmGHi3iHoSqU11msJNSVwpVls7uukVpCA=) 8: IjdCoPnpProHieFWFH4g3HsCPwQ.roa (hash: +qa0/bhFwN16S6m5JsKHh8Vu/jzfjw/IRYtVBQ1/3r8=) 9: KVofMQ5Iytj3taZ4zNX-3NiQ9A0.roa (hash: SkunsiqfbTLPDmA+1dTSXrSg8HMaos1bWjK4FJzMt/g=) 10: KvI_WlSyaYCbk3_UABhTDePguQI.roa (hash: rPhhKIHPKKRCk53KHCmBvd4JNG8dyNFleXKMwbsZEzU=) 11: LWzTa12ceS3uKfqTTkpFAx1rmBY.roa (hash: oZTmu9Ix2td6L1C/5xioSK5eHWyXVBQsY0hPLgTw194=) 12: QLIx02DBkJ8BTa1KHeMGeh-YdMk.roa (hash: as3RaXvY0zPD+Du6iZO6HneereP8PKXWFDoTrnCHtlI=) 13: _nPdD9NUXNyi6od6mzg3CTRXnXE.roa (hash: 5bWlSHwxWuQbZxvEnoPTlMwKBtuBAjLxH0RjCokO3O4=) 14: bnb74LoHijb6ReFXDA8dOSN40TY.roa (hash: pwFJIAxYs5XXfIXS9iTFUvVpEjtoEP1h/fTl5ckAITo=) 15: dRXssJ13yx35ENXgGitRyldcyQ0.roa (hash: GNYSRDBbtFSH98fHHAWFkKkpqHnJB5tc2K3fGmfA9Xk=) 16: flhmne3OCJjm1qjNcOG0Z5Lii9s.roa (hash: lQBWv0VaHVIzNxJpgK2TdUDo5audQQ5kwE3Uz5fgISE=) 17: lPhFxRT8GyHXdHQ9vuVVLBajUJ4.roa (hash: WLQY2DGtBY5JdQqEp0/I2cNJpPQIJM0e6a534AHtEdU=) 18: liShckzg-y_pGqAmNFUsqPtV5XQ.roa (hash: CRdqFfzJj5q7aSo/eK5J7uVd+II8YpWMcc93sOlwTJc=) 19: owZB8ZzNInvz4qCAZczHr5i6TGQ.roa (hash: OFzte6Bxug1J1ywVmmkhfG0SiDFNDSFv051ZgTkzliw=) 20: p5Mg10zCIfRA7UUdSdLMSBXFn7Y.roa (hash: BUS0bw1TX/ZhcEDLxDt7zaEn0n8CiilgUb2ODoWryJc=) 21: pwGmEYbuZcQZsOR6KNT3jM32lkY.roa (hash: 5UfKqqEXju1N6ARaCHouu2g7PjryinRZ9Cc7bxq100I=) 22: t0oYcll8PI4dP_5gDrpVqJ6D9bo.roa (hash: ZFjxOlyDciCJjlrX2W0RSeB3N5wBNwxTEiHBjcHtR6s=) 23: w3B_b_hTCziVeuO8PCcq3YSHu2s.roa (hash: EH81W2RkfUjm0/Q5QNi5AYaveemQwHLB03yQgBEX+AM=) 24: wbzeMwPRyxIqE7rdL232Kbv3lo0.roa (hash: 0MwHWZD4yNGfOW35B+nQ/M0uW3knCev0pCMd/qtwBR0=) 25: wcgFMyvWhqJvffO8wVrnzqPEWeA.roa (hash: 9GrvaL4luNKVJdLGRZ5R+2Y+tPlz5Om1wQcUI9dS5Ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:da:21:90:74:21:99:41:87:f0:44:a0:bd:7f:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41 Validity Not Before: Dec 20 23:01:10 2025 GMT Not After : Dec 21 23:01:10 2025 GMT Subject: CN=8857243e99fd572c8c1b5775082f69514605272c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0d:15:63:41:69:61:56:43:92:a4:ad:4b:60: f6:a1:d9:ee:25:74:20:80:c8:0b:54:24:1b:d6:da: 89:6d:d4:c2:67:1a:a5:95:ee:31:01:bd:08:b8:4b: 57:b6:69:3e:e6:d0:e6:3b:8d:3f:cf:1e:39:d2:6f: 5d:93:9b:13:4d:d4:a2:4d:50:f1:ec:04:a9:58:26: 54:6c:97:27:4d:da:69:09:02:74:fb:9b:56:3f:b3: b4:2f:d7:57:5e:6f:c5:a4:d9:67:40:23:58:61:eb: ba:39:86:d9:3c:03:83:28:a8:f7:96:4e:3b:c8:b8: 2f:5c:9c:a7:64:0c:86:6d:5e:64:a8:ae:b6:1d:d8: ae:5b:49:e2:7e:69:74:2f:d0:7e:11:22:0c:09:e9: 70:ca:cd:2b:6a:e5:04:f7:bc:4d:5c:ff:ab:2e:31: da:6a:5e:42:88:95:8d:f3:18:46:12:98:20:dc:1a: 58:84:8d:ff:42:7c:80:5f:ad:9c:93:6f:35:3d:f6: f7:9e:90:cb:8a:61:19:d6:a8:93:76:5c:0e:e3:63: 62:65:e5:ab:3b:30:11:af:d7:1f:a6:55:87:fb:da: 38:ad:8a:3f:30:1f:a3:0c:67:c8:f7:e6:6a:92:3c: 92:af:06:9a:79:44:1e:0d:b8:6f:d2:b3:35:16:58: d8:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:57:24:3E:99:FD:57:2C:8C:1B:57:75:08:2F:69:51:46:05:27:2C X509v3 Authority Key Identifier: keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:a8:27:7a:ad:a1:38:8c:70:1d:49:b2:8d:a3:14:db:f9:39: e8:f7:2c:0e:d0:3c:dd:e2:3b:4e:b5:12:52:c7:c7:dd:bc:54: 0a:8d:6b:57:8c:44:19:f2:7b:79:a9:e8:f1:e9:51:6d:ec:c4: 76:72:c4:06:27:2e:7f:f5:92:61:14:13:69:e9:13:d2:d3:2f: 89:1e:64:23:ad:15:dd:14:bb:8c:ea:58:e7:69:17:7a:09:ad: b1:c6:d8:bb:aa:0c:3b:c5:58:c1:21:9b:ab:be:56:de:bb:72: a8:92:f3:51:75:47:50:2c:83:09:0b:66:c0:70:9c:6e:ac:d3: 34:1f:39:d9:2e:fe:23:ac:f0:2b:0c:f6:86:9e:7c:2b:f8:49: aa:6a:57:e3:0f:1e:dc:41:b1:9f:2a:4e:08:bc:2c:08:a4:80: 59:dc:4d:48:98:60:ef:be:8c:8b:ff:24:d2:b6:55:3f:fb:5a: 42:6e:84:18:73:48:38:16:3c:ea:e7:7c:dc:9f:86:93:01:96: f1:16:a7:d6:ea:b7:c7:a6:c3:e1:4d:85:8f:9b:8a:6b:94:f3: c7:fd:e8:7d:c3:01:e1:67:fd:d7:d9:0b:02:64:4a:69:8d:ef: ec:0b:6f:81:22:f5:56:61:ea:ba:77:1c:00:34:3d:1a:30:bd: d5:b2:4d:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/tohkHQhmUGH8ESgvX9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwN2Q3NTczYWFjYWU4MjFjODdkNmQzNjQzMWNmZTRiMjgw MWFiNDEwHhcNMjUxMjIwMjMwMTEwWhcNMjUxMjIxMjMwMTEwWjAzMTEwLwYDVQQD Eyg4ODU3MjQzZTk5ZmQ1NzJjOGMxYjU3NzUwODJmNjk1MTQ2MDUyNzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw0VY0FpYVZDkqStS2D2odnuJXQg gMgLVCQb1tqJbdTCZxqlle4xAb0IuEtXtmk+5tDmO40/zx450m9dk5sTTdSiTVDx 7ASpWCZUbJcnTdppCQJ0+5tWP7O0L9dXXm/FpNlnQCNYYeu6OYbZPAODKKj3lk47 yLgvXJynZAyGbV5kqK62HdiuW0nifml0L9B+ESIMCelwys0rauUE97xNXP+rLjHa al5CiJWN8xhGEpgg3BpYhI3/QnyAX62ck281Pfb3npDLimEZ1qiTdlwO42NiZeWr OzARr9cfplWH+9o4rYo/MB+jDGfI9+ZqkjySrwaaeUQeDbhv0rM1FljYAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIhXJD6Z/VcsjBtXdQgvaVFGBScsMB8GA1UdIwQY MBaAFNB9dXOqyughyH1tNkMc/ksoAatBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjIt Y2Y5ZGM1YmFhYTc5LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi81NzI1Y2MtYWQ3MC00NmY4LWJiNjItY2Y5ZGM1YmFhYTc5 LzEvMEgxMWM2cks2Q0hJZlcwMlF4ei1TeWdCcTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFqgneq2h OIxwHUmyjaMU2/k56PcsDtA83eI7TrUSUsfH3bxUCo1rV4xEGfJ7eano8elRbezE dnLEBicuf/WSYRQTaekT0tMviR5kI60V3RS7jOpY52kXegmtscbYu6oMO8VYwSGb q75W3rtyqJLzUXVHUCyDCQtmwHCcbqzTNB852S7+I6zwKwz2hp58K/hJqmpX4w8e 3EGxnypOCLwsCKSAWdxNSJhg776Mi/8k0rZVP/taQm6EGHNIOBY86ud83J+GkwGW 8Ran1uq3x6bD4U2Fj5uKa5Tzx/3ofcMB4Wf919kLAmRKaY3v7AtvgSL1VmHquncc ADQ9GjC91bJNdA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:59:28 2025 by rpki-client