This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft File: HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft (raw, json) Hash identifier: ljaYMkDQNtZ+JLQAeR6LKcU1RHZMeNaQHIVdyWTIb3w= Subject key identifier: 26:EF:A9:A2:D7:F1:C7:DF:F3:1F:72:CC:AD:7D:2B:B3:AE:3B:8A:35 Authority key identifier: 1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5 Certificate issuer: /CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5 Certificate serial: 019B43C987B00B8088B52D708B8542520192 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft Manifest number: 0F1E Signing time: Mon 22 Dec 2025 02:00:39 +0000 Manifest this update: Mon 22 Dec 2025 02:00:39 +0000 Manifest next update: Tue 23 Dec 2025 02:00:39 +0000 Files and hashes: 1: HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl (hash: A/ACq2dpy0Uc5CL/CCqW8fXGvgESjwyyPw3DQGXSO9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 02:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:c9:87:b0:0b:80:88:b5:2d:70:8b:85:42:52:01:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cecefd9eadb2d5284d713b94b56d3abbc10e9e5 Validity Not Before: Dec 22 02:00:39 2025 GMT Not After : Dec 23 02:00:39 2025 GMT Subject: CN=26efa9a2d7f1c7dff31f72ccad7d2bb3ae3b8a35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:be:16:c5:29:f2:22:31:34:38:26:57:3e:3c: 3d:9b:f5:3f:cc:3f:fb:5c:b3:64:9c:15:c7:de:8b: b9:c9:05:73:b8:d3:df:46:69:19:56:6c:00:45:0c: 29:08:70:c7:2d:ea:68:ae:24:16:5b:00:ab:ab:b6: 0b:3d:17:56:4e:6b:44:e1:26:cb:33:bd:80:8f:02: 4e:72:78:c6:f1:38:03:58:e3:db:47:91:e0:bf:d9: bc:5d:e0:e4:12:78:5f:22:07:60:e1:2a:e2:e8:4f: 54:4d:d0:38:73:11:30:f1:0c:65:1b:d1:bd:01:fe: f3:e1:fc:2c:43:7f:c6:4b:28:cb:bd:72:38:82:8d: e0:75:1a:27:69:53:67:13:97:bd:52:77:82:4d:92: 5d:1a:48:5d:34:bf:5c:c2:64:0c:85:34:76:4d:11: ff:b2:f0:2c:5c:13:9e:55:b6:ba:1c:38:33:89:92: 52:76:15:54:1c:e5:44:19:de:49:e4:cb:2b:fb:a3: df:12:86:33:b0:ad:ae:95:e3:b9:75:57:cd:4b:32: bb:9b:03:31:12:e9:3d:38:47:4b:7f:4b:65:d9:e9: 76:90:be:00:6f:93:90:5f:1e:3a:60:25:b8:e1:30: a6:93:8b:f6:88:bf:e1:46:5e:2c:24:8d:3c:a1:dc: 23:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:EF:A9:A2:D7:F1:C7:DF:F3:1F:72:CC:AD:7D:2B:B3:AE:3B:8A:35 X509v3 Authority Key Identifier: keyid:1C:EC:EF:D9:EA:DB:2D:52:84:D7:13:B9:4B:56:D3:AB:BC:10:E9:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HOzv2erbLVKE1xO5S1bTq7wQ6eU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/1eeba8-7399-4bca-9341-ce882a5054c6/1/HOzv2erbLVKE1xO5S1bTq7wQ6eU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:02:74:c0:cd:e7:e0:b1:ba:0b:90:6d:d7:ed:87:bc:56:38: 1a:93:d7:05:ad:6a:4e:cd:3f:44:a5:cf:37:6f:87:f1:96:de: 4b:cc:05:72:2a:1a:62:85:32:07:11:bf:44:21:06:a9:0d:b3: 0c:04:40:b0:1b:25:8d:6e:28:eb:70:82:c0:c0:ec:fa:72:96: 7b:07:37:20:a7:ff:86:12:d2:62:db:c0:80:96:a9:93:69:39: 07:da:3b:e5:53:b1:bd:31:cc:92:15:b7:77:96:4f:c4:b6:67: 7c:b6:25:20:a4:91:2a:1a:dc:91:3b:ee:b6:a0:7d:dc:0e:7a: ca:f5:b9:ed:bd:a8:a0:aa:87:1a:7d:6d:ba:4a:42:41:60:ea: 28:42:db:6a:c4:8f:5f:dc:64:93:41:40:22:88:71:02:fa:e1: 36:5a:0c:7d:79:1b:a9:f5:b0:7a:47:a1:da:3b:b5:e9:81:86: 74:38:a0:07:31:a6:72:e0:ba:cc:33:26:f4:0a:8e:a5:87:b1: f8:82:f2:5a:50:50:bd:d9:12:0d:e5:80:39:6b:d8:24:54:7f: 9c:a6:59:fc:57:84:f0:ca:4e:47:eb:13:2e:17:6b:c4:1d:1f: 38:8f:f5:0f:63:a6:ab:e7:c8:53:5f:54:0b:53:27:fb:9b:9a: e9:2c:fb:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDyYewC4CItS1wi4VCUgGSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWNlZmQ5ZWFkYjJkNTI4NGQ3MTNiOTRiNTZkM2FiYmMx MGU5ZTUwHhcNMjUxMjIyMDIwMDM5WhcNMjUxMjIzMDIwMDM5WjAzMTEwLwYDVQQD EygyNmVmYTlhMmQ3ZjFjN2RmZjMxZjcyY2NhZDdkMmJiM2FlM2I4YTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsL4WxSnyIjE0OCZXPjw9m/U/zD/7 XLNknBXH3ou5yQVzuNPfRmkZVmwARQwpCHDHLeporiQWWwCrq7YLPRdWTmtE4SbL M72AjwJOcnjG8TgDWOPbR5Hgv9m8XeDkEnhfIgdg4Sri6E9UTdA4cxEw8QxlG9G9 Af7z4fwsQ3/GSyjLvXI4go3gdRonaVNnE5e9UneCTZJdGkhdNL9cwmQMhTR2TRH/ svAsXBOeVba6HDgziZJSdhVUHOVEGd5J5Msr+6PfEoYzsK2uleO5dVfNSzK7mwMx Euk9OEdLf0tl2el2kL4Ab5OQXx46YCW44TCmk4v2iL/hRl4sJI08odwjCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCbvqaLX8cff8x9yzK19K7OuO4o1MB8GA1UdIwQY MBaAFBzs79nq2y1ShNcTuUtW06u8EOnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE96djJlcmJMVktFMXhPNVMxYlRxN3dRNmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8xZWViYTgtNzM5OS00YmNhLTkzNDEt Y2U4ODJhNTA1NGM2LzEvSE96djJlcmJMVktFMXhPNVMxYlRxN3dRNmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8xZWViYTgtNzM5OS00YmNhLTkzNDEtY2U4ODJhNTA1NGM2 LzEvSE96djJlcmJMVktFMXhPNVMxYlRxN3dRNmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOAJ0wM3n 4LG6C5Bt1+2HvFY4GpPXBa1qTs0/RKXPN2+H8ZbeS8wFcioaYoUyBxG/RCEGqQ2z DARAsBsljW4o63CCwMDs+nKWewc3IKf/hhLSYtvAgJapk2k5B9o75VOxvTHMkhW3 d5ZPxLZnfLYlIKSRKhrckTvutqB93A56yvW57b2ooKqHGn1tukpCQWDqKELbasSP X9xkk0FAIohxAvrhNloMfXkbqfWwekeh2ju16YGGdDigBzGmcuC6zDMm9AqOpYex +ILyWlBQvdkSDeWAOWvYJFR/nKZZ/FeE8MpOR+sTLhdrxB0fOI/1D2Omq+fIU19U C1Mn+5ua6Sz76w== -----END CERTIFICATE-----Generated at Mon Dec 22 09:44:44 2025 by rpki-client