This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft File: HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft (raw, json) Hash identifier: hyvRCPPQs1L1pU0vTPT9NlOnLYspVEsrN1n/kSERb2w= Subject key identifier: 01:41:5F:E8:E5:2D:32:89:65:2B:42:F2:84:B1:D3:0C:DB:F0:06:A4 Authority key identifier: 1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94 Certificate issuer: /CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94 Certificate serial: 019B620B361F087FB433306B9E203DB538FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft Manifest number: 02AE Signing time: Sat 27 Dec 2025 23:01:00 +0000 Manifest this update: Sat 27 Dec 2025 23:01:00 +0000 Manifest next update: Sun 28 Dec 2025 23:01:00 +0000 Files and hashes: 1: 7VYSV9Ay8yH8mR2f5xUS2yDfX5k.roa (hash: FYts7NtxQ1ChJXJ4Lx+8grMMCFLF+de/KIR4Pob60LI=) 2: HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl (hash: vOU1785Md4EZmnfAmL+UQqQ8bQnxWRZGAxTbkiS8tDc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0b:36:1f:08:7f:b4:33:30:6b:9e:20:3d:b5:38:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ceed3d901ab0e9d0f683e0e71c2943fd6be6d94 Validity Not Before: Dec 27 23:01:00 2025 GMT Not After : Dec 28 23:01:00 2025 GMT Subject: CN=01415fe8e52d3289652b42f284b1d30cdbf006a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:83:69:6f:9c:f3:f7:0a:cf:a3:89:b9:ad:32: f2:37:bd:14:91:29:ab:ee:88:fe:61:64:03:73:28: 56:7e:94:d3:db:9e:e2:bd:e1:4f:00:a3:4d:bf:25: d3:a4:44:1e:b1:36:fa:4b:50:e1:70:da:57:f7:33: bc:fd:16:57:7e:55:3d:74:58:a0:1b:63:d5:fb:c1: 7b:85:e5:b2:34:a9:f8:88:ee:a8:9b:75:ac:53:6a: b4:c9:24:df:bf:58:f8:97:81:e0:58:58:2a:28:94: fc:25:fb:c6:04:05:07:76:cc:ab:be:16:33:50:04: 67:0f:e6:3b:01:f2:49:97:8f:fd:e8:cd:68:de:68: c9:d8:b0:bc:a9:95:d0:5e:b4:e8:c7:d7:35:51:12: 85:bd:5e:81:c6:99:b6:c1:04:a0:2d:9a:c8:41:bd: d6:ef:64:ad:8c:af:79:ca:6e:6c:f4:77:d8:aa:f8: 7d:2d:a7:e6:72:f5:18:4d:e8:71:3d:d9:53:18:87: 62:bf:22:63:54:b6:c5:a4:0d:ab:e2:77:56:0c:72: 09:25:81:93:48:c9:19:97:2c:13:4c:59:4b:82:12: c9:9a:99:c0:d8:d1:71:af:a3:34:62:38:fe:4f:25: e7:c3:86:4c:4e:1b:e0:ea:46:a4:3e:58:38:21:59: 2b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:41:5F:E8:E5:2D:32:89:65:2B:42:F2:84:B1:D3:0C:DB:F0:06:A4 X509v3 Authority Key Identifier: keyid:1C:EE:D3:D9:01:AB:0E:9D:0F:68:3E:0E:71:C2:94:3F:D6:BE:6D:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO7T2QGrDp0PaD4OccKUP9a-bZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/7cec5b-4552-4ed2-99dd-60324a6e4276/1/HO7T2QGrDp0PaD4OccKUP9a-bZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:7c:a2:be:6f:d1:69:48:09:33:5f:17:8a:46:b7:5e:db:28: 4c:0d:11:55:b1:7b:33:2a:ef:8e:df:cc:8a:cf:c1:ed:a4:f6: cb:5e:fd:04:d0:05:89:cf:bd:09:d8:d2:0a:df:2a:d4:4e:ad: e0:50:60:38:89:15:e7:2e:1b:9a:09:3f:14:9b:b6:ed:7f:de: 30:70:a7:25:b1:33:47:2f:0f:50:de:c3:44:fc:1e:0a:76:98: 49:58:85:e3:03:55:75:bd:19:6c:ee:66:ef:11:65:85:1e:81: 80:56:6d:cf:43:13:0c:71:9f:ce:d0:5c:c8:6e:c5:ab:3c:36: 7b:99:19:db:99:60:7a:b8:12:68:25:cc:fc:55:57:52:50:92: b5:15:a8:c8:55:22:90:51:26:16:6a:27:30:02:48:65:5d:15: 4b:57:ed:52:df:70:95:35:45:5e:76:7b:d0:fc:b7:98:f0:91: f1:e6:b3:06:98:71:75:2e:d3:ce:c9:4b:25:e1:d3:45:a3:be: 67:11:88:31:10:3c:20:34:c3:4d:12:19:55:12:4c:39:94:ec: e9:e6:a5:cf:e9:b0:e2:00:ff:ca:05:0c:48:4f:ea:73:29:6a: 54:f8:02:17:10:98:f2:ac:a6:28:77:df:4b:38:bd:73:f1:05: 47:cf:bc:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiCzYfCH+0MzBrniA9tTj8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWVkM2Q5MDFhYjBlOWQwZjY4M2UwZTcxYzI5NDNmZDZi ZTZkOTQwHhcNMjUxMjI3MjMwMTAwWhcNMjUxMjI4MjMwMTAwWjAzMTEwLwYDVQQD EygwMTQxNWZlOGU1MmQzMjg5NjUyYjQyZjI4NGIxZDMwY2RiZjAwNmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmINpb5zz9wrPo4m5rTLyN70UkSmr 7oj+YWQDcyhWfpTT257iveFPAKNNvyXTpEQesTb6S1DhcNpX9zO8/RZXflU9dFig G2PV+8F7heWyNKn4iO6om3WsU2q0ySTfv1j4l4HgWFgqKJT8JfvGBAUHdsyrvhYz UARnD+Y7AfJJl4/96M1o3mjJ2LC8qZXQXrTox9c1URKFvV6Bxpm2wQSgLZrIQb3W 72StjK95ym5s9HfYqvh9LafmcvUYTehxPdlTGIdivyJjVLbFpA2r4ndWDHIJJYGT SMkZlywTTFlLghLJmpnA2NFxr6M0Yjj+TyXnw4ZMThvg6kakPlg4IVkr2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFBX+jlLTKJZStC8oSx0wzb8AakMB8GA1UdIwQY MBaAFBzu09kBqw6dD2g+DnHClD/Wvm2UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS83Y2VjNWItNDU1Mi00ZWQyLTk5ZGQt NjAzMjRhNmU0Mjc2LzEvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS83Y2VjNWItNDU1Mi00ZWQyLTk5ZGQtNjAzMjRhNmU0Mjc2 LzEvSE83VDJRR3JEcDBQYUQ0T2NjS1VQOWEtYlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsHyivm/R aUgJM18Xika3XtsoTA0RVbF7Myrvjt/Mis/B7aT2y179BNAFic+9CdjSCt8q1E6t 4FBgOIkV5y4bmgk/FJu27X/eMHCnJbEzRy8PUN7DRPweCnaYSViF4wNVdb0ZbO5m 7xFlhR6BgFZtz0MTDHGfztBcyG7Fqzw2e5kZ25lgergSaCXM/FVXUlCStRWoyFUi kFEmFmonMAJIZV0VS1ftUt9wlTVFXnZ70Py3mPCR8eazBphxdS7TzslLJeHTRaO+ ZxGIMRA8IDTDTRIZVRJMOZTs6ealz+mw4gD/ygUMSE/qcylqVPgCFxCY8qymKHff Szi9c/EFR8+8ew== -----END CERTIFICATE-----Generated at Sun Dec 28 03:17:18 2025 by rpki-client