This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft File: HoYS4w6WzLqJ514Et7uhwreXxcM.mft (raw, json) Hash identifier: CdrnX8jOqhr8JgKGq3ubrLZTd8w1yK4pDRfD0kQa4xY= Subject key identifier: BF:39:7F:FE:8B:25:3F:34:74:1D:36:ED:C7:C9:88:95:D4:76:63:1D Authority key identifier: 1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3 Certificate issuer: /CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3 Certificate serial: 019B3FECD2379486B172A26152F08D1835E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft Manifest number: 02D7 Signing time: Sun 21 Dec 2025 08:00:43 +0000 Manifest this update: Sun 21 Dec 2025 08:00:43 +0000 Manifest next update: Mon 22 Dec 2025 08:00:43 +0000 Files and hashes: 1: 3liyadxkeB4PeF6Cj_CpA_Z7U3U.roa (hash: BkpSf3XaltWEFzfRC33a/AQ/WD3A00IBXqDokzMsdrM=) 2: HoYS4w6WzLqJ514Et7uhwreXxcM.crl (hash: MEQKFI/VxSEQymUzfMtUNWUeV1aYs2PBcsmilxSHmgA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 08:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:d2:37:94:86:b1:72:a2:61:52:f0:8d:18:35:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e8612e30e96ccba89e75e04b7bba1c2b797c5c3 Validity Not Before: Dec 21 08:00:43 2025 GMT Not After : Dec 22 08:00:43 2025 GMT Subject: CN=bf397ffe8b253f34741d36edc7c98895d476631d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d8:70:01:82:71:d6:05:b1:61:e8:09:c5:29: 95:ef:54:8c:b1:e2:07:94:aa:da:24:3e:be:1d:9c: e1:31:cb:ac:5e:d8:08:40:c2:1f:9a:55:60:97:86: 8c:29:ae:2d:f3:63:5c:76:5e:e3:0a:f2:99:b1:bb: 24:c4:1e:2d:60:8b:15:7d:a5:9a:76:b4:05:b5:2a: 4a:6f:1a:22:9c:0b:36:7d:ca:f9:5c:c6:23:cd:b1: 76:bd:af:89:37:a9:84:13:73:cb:31:97:d9:58:0e: 9b:4e:51:34:a6:ce:06:ba:7d:53:3d:fa:14:52:fd: ad:db:96:1a:73:89:e2:44:da:20:bf:a9:e9:a9:84: d6:36:33:46:e6:cb:c7:2a:a0:77:2b:4a:5b:b9:e0: 4f:da:e6:20:2f:fc:bc:cf:55:71:ed:8f:c7:9c:a3: 09:38:bc:2c:75:cf:c1:60:45:f8:e5:a3:03:fe:7d: 79:57:cd:fb:7e:45:1a:35:34:23:f5:4e:c5:83:cd: 7c:03:d2:46:dd:7b:24:0d:e3:3f:c2:74:03:cc:9a: d1:ec:57:da:58:4d:3b:07:c7:94:59:ab:36:61:15: ac:cf:35:28:31:31:11:ea:a3:03:b4:63:4e:04:bb: 32:d3:c3:a2:5f:6f:35:1b:d3:5b:61:08:cb:ea:5b: cf:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:39:7F:FE:8B:25:3F:34:74:1D:36:ED:C7:C9:88:95:D4:76:63:1D X509v3 Authority Key Identifier: keyid:1E:86:12:E3:0E:96:CC:BA:89:E7:5E:04:B7:BB:A1:C2:B7:97:C5:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HoYS4w6WzLqJ514Et7uhwreXxcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/730bd4-db33-4552-bad5-b6dc2b7bf30a/1/HoYS4w6WzLqJ514Et7uhwreXxcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:cc:9a:78:62:7d:15:79:5b:56:f2:02:8f:e1:e7:83:34:39: 72:25:87:9d:1f:a6:74:d7:de:ca:ca:e6:a5:c7:66:79:43:ab: a3:5e:5b:24:76:f5:5d:6e:bf:b6:37:90:62:45:b6:a1:e8:18: 2c:d6:9e:7f:34:c8:27:5b:5a:6d:f9:86:81:bd:cd:e4:d8:bf: c1:eb:7f:a6:fb:18:7f:37:30:c3:84:2a:ec:e7:ab:08:6b:2c: b1:a3:f4:ba:10:cf:22:e8:35:65:6b:ec:26:be:17:71:47:d7: 9e:c8:dc:63:3d:f8:29:cf:0d:96:60:45:0f:34:6d:62:c0:02: 7c:4f:98:34:f4:26:5e:3b:73:65:36:9a:0d:d9:e7:13:e9:01: 92:ca:73:07:b4:10:d1:07:84:51:b9:c3:6c:fd:7a:c7:a3:22: ff:21:31:cd:f1:5f:f1:6a:e7:9f:f6:98:9e:f5:86:90:a3:70: c5:53:8e:e5:0e:35:50:d4:ba:4f:70:14:9b:5f:85:5e:4d:87: 25:c2:48:7a:ea:31:76:e6:89:91:db:35:01:ff:39:4f:5b:90: 57:70:77:75:54:89:bd:2f:d8:f7:0b:8f:c0:42:82:04:1f:65: 05:68:f5:f6:ae:84:bc:59:93:fe:3e:b4:59:2c:84:bb:14:90: 80:5c:9e:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7NI3lIaxcqJhUvCNGDXhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlODYxMmUzMGU5NmNjYmE4OWU3NWUwNGI3YmJhMWMyYjc5 N2M1YzMwHhcNMjUxMjIxMDgwMDQzWhcNMjUxMjIyMDgwMDQzWjAzMTEwLwYDVQQD EyhiZjM5N2ZmZThiMjUzZjM0NzQxZDM2ZWRjN2M5ODg5NWQ0NzY2MzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdhwAYJx1gWxYegJxSmV71SMseIH lKraJD6+HZzhMcusXtgIQMIfmlVgl4aMKa4t82Ncdl7jCvKZsbskxB4tYIsVfaWa drQFtSpKbxoinAs2fcr5XMYjzbF2va+JN6mEE3PLMZfZWA6bTlE0ps4Gun1TPfoU Uv2t25Yac4niRNogv6npqYTWNjNG5svHKqB3K0pbueBP2uYgL/y8z1Vx7Y/HnKMJ OLwsdc/BYEX45aMD/n15V837fkUaNTQj9U7Fg818A9JG3XskDeM/wnQDzJrR7Ffa WE07B8eUWas2YRWszzUoMTER6qMDtGNOBLsy08OiX281G9NbYQjL6lvPoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL85f/6LJT80dB027cfJiJXUdmMdMB8GA1UdIwQY MBaAFB6GEuMOlsy6iedeBLe7ocK3l8XDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC83MzBiZDQtZGIzMy00NTUyLWJhZDUt YjZkYzJiN2JmMzBhLzEvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC83MzBiZDQtZGIzMy00NTUyLWJhZDUtYjZkYzJiN2JmMzBh LzEvSG9ZUzR3Nld6THFKNTE0RXQ3dWh3cmVYeGNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcyaeGJ9 FXlbVvICj+HngzQ5ciWHnR+mdNfeysrmpcdmeUOro15bJHb1XW6/tjeQYkW2oegY LNaefzTIJ1tabfmGgb3N5Ni/wet/pvsYfzcww4Qq7OerCGsssaP0uhDPIug1ZWvs Jr4XcUfXnsjcYz34Kc8NlmBFDzRtYsACfE+YNPQmXjtzZTaaDdnnE+kBkspzB7QQ 0QeEUbnDbP16x6Mi/yExzfFf8Wrnn/aYnvWGkKNwxVOO5Q41UNS6T3AUm1+FXk2H JcJIeuoxduaJkds1Af85T1uQV3B3dVSJvS/Y9wuPwEKCBB9lBWj19q6EvFmT/j60 WSyEuxSQgFyeNw== -----END CERTIFICATE-----Generated at Sun Dec 21 17:57:19 2025 by rpki-client