This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft File: Ho9qRt33-Tyik16-YYJGrm3TGw0.mft (raw, json) Hash identifier: cDUgtPEG9B2db9waIKhsUBByFGRFiM/Aymh6cmQLPnE= Subject key identifier: 9F:9F:B9:A4:52:00:37:4D:14:DE:E9:45:F6:80:B9:31:C7:3A:8D:8E Authority key identifier: 1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D Certificate issuer: /CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d Certificate serial: 019B3EDA08F9A7D42DF1DE6534DA5FEE25DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft Manifest number: 0CCE Signing time: Sun 21 Dec 2025 03:00:35 +0000 Manifest this update: Sun 21 Dec 2025 03:00:35 +0000 Manifest next update: Mon 22 Dec 2025 03:00:35 +0000 Files and hashes: 1: Ho9qRt33-Tyik16-YYJGrm3TGw0.crl (hash: iEyYhBa6WI8PHcAoaUXXOn9lPNle/rkA6TSusPgLSxQ=) 2: dDZBFwtap4thW-74sW-jVlXGuR4.roa (hash: FLfuvFWVGolNmszXbBbS9jb1QikiZPyQXAU3cIWAlJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:08:f9:a7:d4:2d:f1:de:65:34:da:5f:ee:25:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e8f6a46ddf7f93ca2935ebe618246ae6dd31b0d Validity Not Before: Dec 21 03:00:35 2025 GMT Not After : Dec 22 03:00:35 2025 GMT Subject: CN=9f9fb9a45200374d14dee945f680b931c73a8d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:93:85:ee:81:c4:70:dd:2e:da:45:f5:da:71: 1b:a0:d7:99:e9:61:3b:2b:e1:2b:6c:ee:af:c0:77: 00:ed:97:cd:0d:a9:29:00:6b:2b:23:24:e1:55:ad: ce:fe:44:ec:57:de:34:27:ff:d4:8c:29:7e:5a:95: f9:91:cd:90:a9:25:56:6b:87:8d:a3:f4:61:96:e0: a4:88:9d:ce:49:54:8c:78:26:fd:fd:b8:70:62:87: a4:dd:99:27:33:aa:4d:cd:13:32:f7:6c:d8:2c:89: 95:1e:8b:8c:be:e3:bf:63:69:7f:ad:27:03:76:a3: ae:88:af:02:3e:51:ec:b5:17:6a:a8:f8:ed:08:4b: a4:e1:95:5a:10:0b:c1:97:02:82:b0:d9:2c:44:aa: 55:2f:1b:d3:e3:a9:87:e9:0c:2f:7b:e7:b1:17:18: 6c:15:fd:61:69:24:de:ce:ab:26:bd:68:43:83:ce: c0:7c:63:fe:44:f6:94:17:1a:02:b1:12:2c:22:e8: 99:7b:2e:5a:9e:47:58:f7:94:0a:cb:f2:51:e1:9e: 1f:3c:07:f5:5e:b2:0b:52:21:ad:00:8b:f7:a7:74: 74:b4:fe:f3:a7:a5:49:4f:16:8d:43:e0:5c:63:b3: d9:c9:d9:4f:95:1a:67:fb:6a:74:3d:4f:e3:f5:ed: 17:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9F:B9:A4:52:00:37:4D:14:DE:E9:45:F6:80:B9:31:C7:3A:8D:8E X509v3 Authority Key Identifier: keyid:1E:8F:6A:46:DD:F7:F9:3C:A2:93:5E:BE:61:82:46:AE:6D:D3:1B:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho9qRt33-Tyik16-YYJGrm3TGw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/8a93b6-2e7e-487c-b0f3-28d15eb7341d/1/Ho9qRt33-Tyik16-YYJGrm3TGw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:92:cb:46:93:f6:cc:c9:8d:e4:de:9a:d9:c4:cf:89:fe:eb: 64:5e:f1:9a:9f:b8:89:99:8e:fc:d7:52:f1:55:c3:e2:74:31: 8d:12:f5:f7:67:1c:6d:b0:eb:b9:6c:d4:16:67:fb:16:2e:c3: c9:b7:7d:e6:3e:17:ab:0f:12:db:22:3f:7d:5e:47:d5:19:39: b5:2f:fa:f1:94:03:44:cd:21:34:a2:59:ff:62:30:06:06:9f: c2:87:8d:80:8e:e7:fb:a1:98:db:73:ec:f5:e5:19:db:5b:0c: ac:26:28:a4:1e:f4:ff:ca:76:a5:64:dd:e9:c8:a7:f2:36:4d: 67:ae:98:9e:ef:3a:8a:97:d1:89:76:96:8d:05:f9:62:00:fa: 98:ea:0b:20:1d:24:ea:f8:70:4d:eb:2e:0a:3d:0d:45:70:47: ff:5c:5e:00:22:d3:c8:4c:a5:57:0d:86:3e:8c:99:6c:26:3c: 1f:33:75:6f:44:52:ef:c9:f7:b4:d7:53:e8:6d:19:b2:e0:71: 75:c6:4c:f0:20:21:94:d7:c5:a3:5b:70:3d:1a:fa:48:85:93: 79:7a:a8:11:e1:d5:d6:04:8e:7b:88:2d:7d:ce:8e:bc:5f:37: 99:61:42:9f:55:a0:99:59:1f:4c:76:77:62:7b:db:42:e5:45: 36:38:2a:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2gj5p9Qt8d5lNNpf7iXbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOGY2YTQ2ZGRmN2Y5M2NhMjkzNWViZTYxODI0NmFlNmRk MzFiMGQwHhcNMjUxMjIxMDMwMDM1WhcNMjUxMjIyMDMwMDM1WjAzMTEwLwYDVQQD Eyg5ZjlmYjlhNDUyMDAzNzRkMTRkZWU5NDVmNjgwYjkzMWM3M2E4ZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZOF7oHEcN0u2kX12nEboNeZ6WE7 K+ErbO6vwHcA7ZfNDakpAGsrIyThVa3O/kTsV940J//UjCl+WpX5kc2QqSVWa4eN o/RhluCkiJ3OSVSMeCb9/bhwYoek3ZknM6pNzRMy92zYLImVHouMvuO/Y2l/rScD dqOuiK8CPlHstRdqqPjtCEuk4ZVaEAvBlwKCsNksRKpVLxvT46mH6Qwve+exFxhs Ff1haSTezqsmvWhDg87AfGP+RPaUFxoCsRIsIuiZey5ankdY95QKy/JR4Z4fPAf1 XrILUiGtAIv3p3R0tP7zp6VJTxaNQ+BcY7PZydlPlRpn+2p0PU/j9e0XIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+fuaRSADdNFN7pRfaAuTHHOo2OMB8GA1UdIwQY MBaAFB6Pakbd9/k8opNevmGCRq5t0xsNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC84YTkzYjYtMmU3ZS00ODdjLWIwZjMt MjhkMTVlYjczNDFkLzEvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC84YTkzYjYtMmU3ZS00ODdjLWIwZjMtMjhkMTVlYjczNDFk LzEvSG85cVJ0MzMtVHlpazE2LVlZSkdybTNUR3cwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqZLLRpP2 zMmN5N6a2cTPif7rZF7xmp+4iZmO/NdS8VXD4nQxjRL192ccbbDruWzUFmf7Fi7D ybd95j4Xqw8S2yI/fV5H1Rk5tS/68ZQDRM0hNKJZ/2IwBgafwoeNgI7n+6GY23Ps 9eUZ21sMrCYopB70/8p2pWTd6cin8jZNZ66Ynu86ipfRiXaWjQX5YgD6mOoLIB0k 6vhwTesuCj0NRXBH/1xeACLTyEylVw2GPoyZbCY8HzN1b0RS78n3tNdT6G0ZsuBx dcZM8CAhlNfFo1twPRr6SIWTeXqoEeHV1gSOe4gtfc6OvF83mWFCn1WgmVkfTHZ3 YnvbQuVFNjgqDA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:18:19 2025 by rpki-client