This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft File: Hox3M21m97AjjmwYTGT6TyTQnwE.mft (raw, json) Hash identifier: HMghNuTM39M0nb2pkgk1O/60TUb0zXu+Uh/a5VtVo/c= Subject key identifier: 1A:9C:0F:18:65:CF:B2:BF:CE:F0:AA:EB:EB:9D:27:67:DC:76:6B:52 Authority key identifier: 1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01 Certificate issuer: /CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01 Certificate serial: 019B4BF2B82FCDCCABBBAFF7C02EDA44E895 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft Manifest number: 1725 Signing time: Tue 23 Dec 2025 16:02:36 +0000 Manifest this update: Tue 23 Dec 2025 16:02:36 +0000 Manifest next update: Wed 24 Dec 2025 16:02:36 +0000 Files and hashes: 1: F9OoqFi0y_GmOqfd2KThNGIcQRY.roa (hash: lknpUMMVcnd7NcsdFUBWrkK4Xx0BYlNeNsb3yAIL3yk=) 2: Hox3M21m97AjjmwYTGT6TyTQnwE.crl (hash: M5c9x5JgbW8Ou8Ae6FzAbq7OrBJLPoxXpYz8ZeYtWEU=) 3: xiqfg-sD-JA_U5POqcioMLPnSTo.roa (hash: JD/nDI8VlQSh0memjTUGDYmELCHkrFvR/ey5KgQYfKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:f2:b8:2f:cd:cc:ab:bb:af:f7:c0:2e:da:44:e8:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e8c77336d66f7b0238e6c184c64fa4f24d09f01 Validity Not Before: Dec 23 16:02:36 2025 GMT Not After : Dec 24 16:02:36 2025 GMT Subject: CN=1a9c0f1865cfb2bfcef0aaebeb9d2767dc766b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:04:78:46:bf:0e:e2:2a:7c:bb:f3:12:e2:44: 22:d6:46:87:12:69:23:84:36:8a:b6:80:81:9b:22: 3e:95:01:f7:65:1a:7d:6f:9c:ae:ed:b2:b0:6c:dc: f3:e7:99:40:7d:69:cb:9f:61:78:f8:11:3a:e6:d6: 92:91:e4:31:b9:a7:24:4e:13:ab:eb:5f:f2:78:04: b7:6d:6c:cb:77:62:c8:61:83:1c:c8:0d:ea:8c:32: e0:b6:de:13:b4:06:d1:ff:e1:b2:36:14:0f:09:11: cd:7d:8f:58:59:4f:05:f3:a9:53:35:ae:e9:17:59: 41:63:f9:13:70:fc:a6:30:87:30:cc:a9:bf:0a:e7: 0f:8d:68:14:7e:49:c9:8c:2c:a5:28:a4:50:d1:17: 66:92:5f:0f:87:f3:42:b2:72:b7:df:cd:5f:87:12: cf:18:9b:a2:d4:93:87:8e:83:f1:59:11:63:a6:4f: 8b:a6:4c:65:42:ab:cb:da:46:f0:14:2d:60:ca:3d: 06:79:a8:46:d8:52:27:c3:95:33:39:12:31:48:00: 3a:e9:4d:1a:3f:83:b5:7b:da:21:d2:94:e0:70:ee: 01:9d:0a:f6:a5:56:74:4b:83:3a:58:ac:e9:33:51: 24:44:b9:fe:ce:f9:08:26:4a:62:9d:00:6e:26:7a: c9:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:9C:0F:18:65:CF:B2:BF:CE:F0:AA:EB:EB:9D:27:67:DC:76:6B:52 X509v3 Authority Key Identifier: keyid:1E:8C:77:33:6D:66:F7:B0:23:8E:6C:18:4C:64:FA:4F:24:D0:9F:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hox3M21m97AjjmwYTGT6TyTQnwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7da79d-60f4-47a8-813a-99957df4997e/1/Hox3M21m97AjjmwYTGT6TyTQnwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:0b:9a:56:ea:3e:50:a4:ed:30:8f:90:51:f9:7c:cc:06:de: 95:4f:15:53:64:85:63:f5:35:54:c1:4c:cb:ba:2c:a1:07:93: 1f:3a:93:c8:8f:7a:60:42:15:b1:27:f2:1f:f0:19:3e:59:26: 03:03:76:28:8e:29:0e:db:00:c7:dc:d5:f8:13:68:28:d9:f5: 2e:c3:cd:8b:27:cb:51:41:a4:ee:4d:de:a2:5f:7c:c4:43:7b: f5:bf:01:c1:6e:13:65:4d:a0:4a:df:4b:0a:8f:63:00:d3:00: 05:fa:29:f7:2a:a6:47:d2:9c:8f:9a:45:4d:72:c7:5d:8f:b8: 47:6c:6a:9b:16:91:1e:8e:ee:b9:ca:82:2b:18:b0:6f:99:12: aa:78:30:58:8c:c5:84:b9:b3:4b:9c:15:d1:90:cf:d1:0b:11: 01:0f:5a:80:47:a1:24:c6:20:d8:df:ef:47:bd:69:98:a6:2c: 62:24:81:5f:7d:9d:9b:1c:9e:11:16:fc:8c:3a:de:53:0f:ce: ef:18:26:49:c2:0b:72:bf:ff:f9:94:2d:33:74:9a:93:2f:42: e0:56:ec:1e:f6:f1:a2:d9:e1:1e:81:64:1d:f4:46:7c:85:07: 78:a9:aa:62:af:87:3e:13:4e:95:cf:6b:b4:6d:23:dd:d6:77: 81:c5:46:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtL8rgvzcyru6/3wC7aROiVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlOGM3NzMzNmQ2NmY3YjAyMzhlNmMxODRjNjRmYTRmMjRk MDlmMDEwHhcNMjUxMjIzMTYwMjM2WhcNMjUxMjI0MTYwMjM2WjAzMTEwLwYDVQQD EygxYTljMGYxODY1Y2ZiMmJmY2VmMGFhZWJlYjlkMjc2N2RjNzY2YjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygR4Rr8O4ip8u/MS4kQi1kaHEmkj hDaKtoCBmyI+lQH3ZRp9b5yu7bKwbNzz55lAfWnLn2F4+BE65taSkeQxuackThOr 61/yeAS3bWzLd2LIYYMcyA3qjDLgtt4TtAbR/+GyNhQPCRHNfY9YWU8F86lTNa7p F1lBY/kTcPymMIcwzKm/CucPjWgUfknJjCylKKRQ0Rdmkl8Ph/NCsnK3381fhxLP GJui1JOHjoPxWRFjpk+LpkxlQqvL2kbwFC1gyj0GeahG2FInw5UzORIxSAA66U0a P4O1e9oh0pTgcO4BnQr2pVZ0S4M6WKzpM1EkRLn+zvkIJkpinQBuJnrJjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqcDxhlz7K/zvCq6+udJ2fcdmtSMB8GA1UdIwQY MBaAFB6MdzNtZvewI45sGExk+k8k0J8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2Et OTk5NTdkZjQ5OTdlLzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC83ZGE3OWQtNjBmNC00N2E4LTgxM2EtOTk5NTdkZjQ5OTdl LzEvSG94M00yMW05N0Fqam13WVRHVDZUeVRRbndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAuaVuo+ UKTtMI+QUfl8zAbelU8VU2SFY/U1VMFMy7osoQeTHzqTyI96YEIVsSfyH/AZPlkm AwN2KI4pDtsAx9zV+BNoKNn1LsPNiyfLUUGk7k3eol98xEN79b8BwW4TZU2gSt9L Co9jANMABfop9yqmR9Kcj5pFTXLHXY+4R2xqmxaRHo7uucqCKxiwb5kSqngwWIzF hLmzS5wV0ZDP0QsRAQ9agEehJMYg2N/vR71pmKYsYiSBX32dmxyeERb8jDreUw/O 7xgmScILcr//+ZQtM3Saky9C4FbsHvbxotnhHoFkHfRGfIUHeKmqYq+HPhNOlc9r tG0j3dZ3gcVGTg== -----END CERTIFICATE-----Generated at Tue Dec 23 18:53:07 2025 by rpki-client