This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft File: hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json) Hash identifier: t03jSOUvXNjZ5dJcTocY0OitOaTbcbmpyea3218I3v8= Subject key identifier: D4:81:E5:8E:32:FF:4D:68:ED:1E:40:25:7A:78:27:27:DB:9F:2E:BB Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54 Certificate issuer: /CN=8686ae8e49374bac84caa3de0d26070b6b190054 Certificate serial: 019B3D2300CFB8F58517CACC7FA797B754EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 19:01:02 +0000 Manifest this update: Sat 20 Dec 2025 19:01:02 +0000 Manifest next update: Sun 21 Dec 2025 19:01:02 +0000 Files and hashes: 1: ZqMG8mpe5nSXKW1FrNNGNQPtlac.roa (hash: KO75sPS4/XP/JBEid5X4pt0EZyoaOZvo180Eq+iiPnQ=) 2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: SiLggEYgHPdoFONN9fKCpFGJbpPHhHZOMon9aeS6WnM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:00:cf:b8:f5:85:17:ca:cc:7f:a7:97:b7:54:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054 Validity Not Before: Dec 20 19:01:02 2025 GMT Not After : Dec 21 19:01:02 2025 GMT Subject: CN=d481e58e32ff4d68ed1e40257a782727db9f2ebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d4:2d:68:00:03:43:82:53:92:73:78:f9:f6: 8f:10:b7:db:e3:c3:45:01:68:86:b4:d2:a4:e5:49: 8b:7c:bd:a8:9d:87:b5:4b:bf:1c:fa:ce:00:4e:94: df:dc:67:f5:2a:d1:a3:23:cd:37:50:f6:ea:9f:2c: 5e:e8:9f:8f:b8:e1:67:fc:5a:b1:3b:6f:1d:18:e1: 31:98:d1:24:eb:fd:95:72:de:c2:05:6d:01:e1:fc: 0e:b0:e6:38:7b:d5:64:9c:8e:d2:50:20:0e:04:7e: 99:79:b1:a5:65:87:75:55:9b:81:56:4d:46:05:c1: a2:bc:00:15:5e:4a:92:40:4a:cf:2f:0d:3b:15:ba: 28:21:87:8c:ff:21:1c:8f:6a:5e:ae:ff:d6:ad:9d: a7:ca:42:30:c5:17:b5:52:a0:ad:26:50:a1:34:54: 30:47:de:8d:26:3c:68:fb:fd:4b:9a:77:8b:ba:b3: dd:31:b1:e2:52:b4:f2:06:d3:0b:72:7c:cd:4f:c4: c1:94:e8:c8:d1:a4:ad:70:51:8d:e3:b7:66:a9:0e: c0:96:9b:48:54:c9:e4:94:38:0b:6d:2e:a6:ce:03: 64:03:71:54:a1:95:7a:73:a7:ba:d9:41:fd:64:f8: d9:a9:36:95:93:cc:68:25:7f:e7:90:af:8b:9f:66: 32:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:81:E5:8E:32:FF:4D:68:ED:1E:40:25:7A:78:27:27:DB:9F:2E:BB X509v3 Authority Key Identifier: keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:52:71:e0:50:4f:bd:6f:48:29:f9:2f:9f:1f:82:4c:14:42: ca:ac:d2:ed:78:41:6b:9f:2e:d6:6c:85:07:07:11:6b:22:a9: ae:6c:b1:4c:68:eb:a6:41:17:47:86:06:5d:72:dd:77:00:e6: 40:a8:a7:b8:ca:c0:fb:d1:9b:3b:b2:d9:43:b9:8d:59:28:d3: 3a:14:d9:ad:d6:a5:fe:bc:8e:a0:30:36:aa:f4:5e:e7:98:96: c4:df:ab:c9:f8:2c:1e:b1:66:41:f1:5b:0f:41:40:f3:0e:00: 28:f4:fc:07:60:3f:55:04:b9:b7:2a:9c:e0:5b:28:3b:7a:3e: 99:e6:a3:48:21:68:81:65:f8:4b:ae:ca:c9:93:8c:44:e1:64: 14:9d:41:e9:5e:08:bf:cc:ec:1e:37:13:84:d4:fa:da:27:5e: 33:8b:f7:c5:99:ef:99:35:86:ce:95:91:c1:11:2d:89:3a:59: c1:0b:19:7d:ff:99:0f:b4:7e:af:ec:9c:63:31:b5:da:0b:3c: 94:cf:8f:1e:b6:a1:b2:04:4b:76:66:23:ea:09:73:04:c4:23: f9:8a:da:15:62:28:d5:16:90:a8:44:48:dd:80:6b:33:77:cc: 72:ba:3e:22:2a:15:bc:e1:5c:26:70:59:98:82:20:5a:d5:08: c6:47:ae:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IwDPuPWFF8rMf6eXt1TsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ODZhZThlNDkzNzRiYWM4NGNhYTNkZTBkMjYwNzBiNmIx OTAwNTQwHhcNMjUxMjIwMTkwMTAyWhcNMjUxMjIxMTkwMTAyWjAzMTEwLwYDVQQD EyhkNDgxZTU4ZTMyZmY0ZDY4ZWQxZTQwMjU3YTc4MjcyN2RiOWYyZWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dQtaAADQ4JTknN4+faPELfb48NF AWiGtNKk5UmLfL2onYe1S78c+s4ATpTf3Gf1KtGjI803UPbqnyxe6J+PuOFn/Fqx O28dGOExmNEk6/2Vct7CBW0B4fwOsOY4e9VknI7SUCAOBH6ZebGlZYd1VZuBVk1G BcGivAAVXkqSQErPLw07FbooIYeM/yEcj2perv/WrZ2nykIwxRe1UqCtJlChNFQw R96NJjxo+/1LmneLurPdMbHiUrTyBtMLcnzNT8TBlOjI0aStcFGN47dmqQ7AlptI VMnklDgLbS6mzgNkA3FUoZV6c6e62UH9ZPjZqTaVk8xoJX/nkK+Ln2YyVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSB5Y4y/01o7R5AJXp4Jyfbny67MB8GA1UdIwQY MBaAFIaGro5JN0ushMqj3g0mBwtrGQBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jMTk2MmEtYzY3OC00ZTQ2LWEwNzYt YTc0ZjUwZTAwZGQ1LzEvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9jMTk2MmEtYzY3OC00ZTQ2LWEwNzYtYTc0ZjUwZTAwZGQ1 LzEvaG9hdWprazNTNnlFeXFQZURTWUhDMnNaQUZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyVJx4FBP vW9IKfkvnx+CTBRCyqzS7XhBa58u1myFBwcRayKprmyxTGjrpkEXR4YGXXLddwDm QKinuMrA+9GbO7LZQ7mNWSjTOhTZrdal/ryOoDA2qvRe55iWxN+ryfgsHrFmQfFb D0FA8w4AKPT8B2A/VQS5tyqc4FsoO3o+meajSCFogWX4S67KyZOMROFkFJ1B6V4I v8zsHjcThNT62ideM4v3xZnvmTWGzpWRwREtiTpZwQsZff+ZD7R+r+ycYzG12gs8 lM+PHrahsgRLdmYj6glzBMQj+YraFWIo1RaQqERI3YBrM3fMcro+IioVvOFcJnBZ mIIgWtUIxkeuDA== -----END CERTIFICATE-----Generated at Sat Dec 20 22:35:43 2025 by rpki-client