This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft File: hoG9ppEHn3qyNfednA73Ur_AN4E.mft (raw, json) Hash identifier: JkkWKktowAgMtkhtgsrvEX6/EDsFt46iBk1sfFV2NPk= Subject key identifier: F5:E7:61:8B:E7:47:B9:B0:95:F0:28:67:61:89:CE:36:35:AF:AC:2B Authority key identifier: 86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81 Certificate issuer: /CN=8681bda691079f7ab235f79d9c0ef752bfc03781 Certificate serial: 019B3CEBFFE8D74925704FEA2968C8D554BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft Manifest number: 0E6B Signing time: Sat 20 Dec 2025 18:00:57 +0000 Manifest this update: Sat 20 Dec 2025 18:00:57 +0000 Manifest next update: Sun 21 Dec 2025 18:00:57 +0000 Files and hashes: 1: hoG9ppEHn3qyNfednA73Ur_AN4E.crl (hash: PhMCdRCCKfr+HSLfBINg/gC764aYezKBzsXlzxTO65A=) 2: uhWjc5L6HF8CL85GmROwozUvuSg.roa (hash: K9tb23uEh+etbgOiAW3T/MkxyInQIRAfCLsSJRvGHxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:ff:e8:d7:49:25:70:4f:ea:29:68:c8:d5:54:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8681bda691079f7ab235f79d9c0ef752bfc03781 Validity Not Before: Dec 20 18:00:57 2025 GMT Not After : Dec 21 18:00:57 2025 GMT Subject: CN=f5e7618be747b9b095f028676189ce3635afac2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3c:0e:be:59:50:0e:56:55:73:01:8c:19:41: e7:37:bb:8f:ab:9a:c0:a7:8d:70:7f:48:70:56:db: e3:e2:73:5c:a7:e6:2c:d9:c0:a1:d0:7a:43:03:f4: 33:81:23:48:72:12:79:5d:1b:db:2b:56:b1:5c:a7: a9:10:09:ac:63:1f:c6:35:20:14:75:6f:e8:b7:c2: 33:fd:06:d8:0f:df:22:9f:a3:52:09:bf:65:fe:31: 8d:d2:78:bf:d9:98:12:ce:91:b0:5c:db:0d:ca:1d: 1b:c1:9c:5a:b8:c5:27:70:1c:cb:db:4d:5a:d5:d5: 69:78:95:59:21:a3:5c:5d:75:dc:06:61:74:a1:e7: a6:f7:3e:c5:3c:24:16:bc:52:7a:13:2f:df:ce:5f: f9:09:90:11:69:21:a2:e9:52:63:e3:31:84:43:17: aa:b9:39:2c:13:88:f1:42:49:99:b4:ae:06:ab:23: d7:d2:3e:2e:1a:0c:7a:66:ee:c9:0c:2b:6b:c1:62: cd:a1:27:31:17:58:71:3d:9f:79:da:98:99:bd:c2: a6:39:cf:22:ce:55:69:e1:f7:ff:e4:f0:08:ab:fa: 17:35:31:a7:d6:4e:48:d0:a7:81:8f:1b:99:07:1d: 72:18:0e:bb:88:96:2e:0e:59:96:56:8b:7a:dd:ac: 73:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E7:61:8B:E7:47:B9:B0:95:F0:28:67:61:89:CE:36:35:AF:AC:2B X509v3 Authority Key Identifier: keyid:86:81:BD:A6:91:07:9F:7A:B2:35:F7:9D:9C:0E:F7:52:BF:C0:37:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoG9ppEHn3qyNfednA73Ur_AN4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/00f0f4-cff1-4932-9009-f42850f80ca4/1/hoG9ppEHn3qyNfednA73Ur_AN4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:a0:31:06:85:03:7c:f5:76:7e:63:1d:9b:87:b2:13:ce:49: 34:af:06:08:5d:6f:43:e8:2a:34:2c:1f:e7:db:72:93:88:04: 20:15:34:d4:0e:57:3d:51:eb:4c:a1:1e:fd:70:77:cc:71:4f: 6e:2b:33:9c:87:4d:d7:b0:32:32:31:fb:83:8f:0c:98:14:00: 1f:a5:dd:52:b6:05:0b:d5:1c:6c:7b:94:f8:b0:cf:79:e8:1f: 9d:66:ac:c4:07:2b:44:a7:f5:f3:38:b4:bc:8b:ca:9e:c4:2a: 7c:f5:96:e4:0d:86:0f:64:c1:41:4f:31:2c:c4:84:61:35:33: 87:b1:7d:d5:c6:55:bf:d1:93:9b:92:0b:3d:59:2f:32:ca:3f: f8:3f:3f:4a:54:ad:ee:ac:ef:32:65:2f:4d:e6:d1:ea:56:04: 0b:3a:d6:0a:b0:c6:ee:30:f5:6b:c3:69:8b:35:ea:2d:07:4c: 0d:b4:81:6e:a7:df:f9:29:0e:15:c3:ef:09:c3:84:4e:35:c2: 87:2f:07:be:c6:bf:4c:30:81:c4:a2:e5:69:94:e6:3d:a9:cd: 95:dd:ff:d8:f4:e5:31:67:4e:93:d0:ff:c1:c1:f8:76:2b:55: 49:b6:91:fe:14:fb:8c:5d:9d:a6:36:57:9a:f0:08:04:ce:ed: 08:0e:d2:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86//o10klcE/qKWjI1VS6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ODFiZGE2OTEwNzlmN2FiMjM1Zjc5ZDljMGVmNzUyYmZj MDM3ODEwHhcNMjUxMjIwMTgwMDU3WhcNMjUxMjIxMTgwMDU3WjAzMTEwLwYDVQQD EyhmNWU3NjE4YmU3NDdiOWIwOTVmMDI4Njc2MTg5Y2UzNjM1YWZhYzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TwOvllQDlZVcwGMGUHnN7uPq5rA p41wf0hwVtvj4nNcp+Ys2cCh0HpDA/QzgSNIchJ5XRvbK1axXKepEAmsYx/GNSAU dW/ot8Iz/QbYD98in6NSCb9l/jGN0ni/2ZgSzpGwXNsNyh0bwZxauMUncBzL201a 1dVpeJVZIaNcXXXcBmF0oeem9z7FPCQWvFJ6Ey/fzl/5CZARaSGi6VJj4zGEQxeq uTksE4jxQkmZtK4GqyPX0j4uGgx6Zu7JDCtrwWLNoScxF1hxPZ952piZvcKmOc8i zlVp4ff/5PAIq/oXNTGn1k5I0KeBjxuZBx1yGA67iJYuDlmWVot63axzQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXnYYvnR7mwlfAoZ2GJzjY1r6wrMB8GA1UdIwQY MBaAFIaBvaaRB596sjX3nZwO91K/wDeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG9HOXBwRUhuM3F5TmZlZG5BNzNVcl9BTjRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wMGYwZjQtY2ZmMS00OTMyLTkwMDkt ZjQyODUwZjgwY2E0LzEvaG9HOXBwRUhuM3F5TmZlZG5BNzNVcl9BTjRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wMGYwZjQtY2ZmMS00OTMyLTkwMDktZjQyODUwZjgwY2E0 LzEvaG9HOXBwRUhuM3F5TmZlZG5BNzNVcl9BTjRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqAxBoUD fPV2fmMdm4eyE85JNK8GCF1vQ+gqNCwf59tyk4gEIBU01A5XPVHrTKEe/XB3zHFP bisznIdN17AyMjH7g48MmBQAH6XdUrYFC9UcbHuU+LDPeegfnWasxAcrRKf18zi0 vIvKnsQqfPWW5A2GD2TBQU8xLMSEYTUzh7F91cZVv9GTm5ILPVkvMso/+D8/SlSt 7qzvMmUvTebR6lYECzrWCrDG7jD1a8NpizXqLQdMDbSBbqff+SkOFcPvCcOETjXC hy8Hvsa/TDCBxKLlaZTmPanNld3/2PTlMWdOk9D/wcH4ditVSbaR/hT7jF2dpjZX mvAIBM7tCA7Sdw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:04:11 2025 by rpki-client