This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json) Hash identifier: 8YQTgDXNcsNSFQTdopPYnA/0vz6XWSrsGQ+xcqJxzb0= Subject key identifier: 61:2D:A3:E4:94:70:E2:FD:63:05:F8:90:93:45:68:8C:B8:86:0A:C8 Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd Certificate serial: 019B23638F63BA5AE88EBD1E73FE3F094D66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft Manifest number: 0E61 Signing time: Mon 15 Dec 2025 19:01:25 +0000 Manifest this update: Mon 15 Dec 2025 19:01:25 +0000 Manifest next update: Tue 16 Dec 2025 19:01:25 +0000 Files and hashes: 1: CZfN1SE3Kc9ElQiX9c_wypBuCR4.roa (hash: U185B9hh525/Yo0ZTbLEnbl6qvuJNK4eFDrA94l5T14=) 2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: jOpX+7cX4BRzIjUMBe9CG9wOFnXZdUvHOtsl87PsBrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 19:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:63:8f:63:ba:5a:e8:8e:bd:1e:73:fe:3f:09:4d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd Validity Not Before: Dec 15 19:01:25 2025 GMT Not After : Dec 16 19:01:25 2025 GMT Subject: CN=612da3e49470e2fd6305f8909345688cb8860ac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3a:81:97:60:f7:61:f5:9b:85:3b:b4:c8:7b: 95:9b:a0:55:e6:ed:40:e2:82:91:75:a5:0e:d4:5f: db:dc:11:50:82:01:3b:83:fd:2b:64:10:5e:81:a8: 29:45:e6:6a:2c:9e:25:24:c3:ba:fa:82:05:27:d2: 36:63:48:2e:24:3a:d4:41:35:79:a5:9e:d7:7c:4d: 6a:31:d6:6d:54:3c:c7:22:cc:ec:5e:fb:95:8e:eb: 4e:b4:d0:af:cf:69:ce:66:35:54:f5:18:71:90:77: b8:90:c6:57:e7:cf:5a:69:74:78:9c:1c:a2:57:3b: 4b:2e:64:ac:0f:0e:f6:16:b6:f5:5a:d8:d8:4a:aa: 85:90:04:a6:e9:2f:86:78:3d:79:d6:16:d6:82:35: c4:a1:44:d7:5c:50:f1:e7:5d:5f:da:7c:34:3c:64: f4:11:de:a2:14:b9:f0:51:8a:cb:94:6b:f3:14:6b: 87:41:44:fc:72:f3:67:d6:9b:b8:1c:33:3c:44:2c: 6a:94:38:7d:3b:98:de:64:7b:97:5f:c4:71:be:fe: 9c:e2:ac:2e:7d:e9:45:71:13:51:e7:ee:e0:2e:e3: ff:68:0c:b8:40:04:2a:de:25:7a:f8:14:12:6a:f5: f1:0d:5c:e5:f3:0e:a8:0e:31:48:59:8f:2b:0a:73: ab:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2D:A3:E4:94:70:E2:FD:63:05:F8:90:93:45:68:8C:B8:86:0A:C8 X509v3 Authority Key Identifier: keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ec:ed:76:e1:72:f3:44:bf:d3:47:5c:64:0c:18:c7:17:43: 0b:71:fb:c1:3f:70:d0:11:fe:c0:79:96:ce:9d:fc:d3:28:ef: b8:f6:95:06:f3:2b:14:55:d9:f5:59:84:cc:51:ae:dd:e6:03: 0d:39:3b:1d:22:bd:b5:ee:b1:2f:29:6d:a6:c3:a5:9d:a5:f3: b1:98:d5:53:f1:b4:12:eb:e7:b0:8c:2b:c0:b8:64:69:95:46: f3:0d:f6:ef:19:97:51:54:bb:95:fc:99:f2:d8:7a:bb:95:b6: a8:2e:28:6e:91:8c:ff:35:2a:e1:a3:6b:b1:60:5e:bd:21:d3: 4d:da:4f:47:7e:ce:a1:8d:3e:ff:90:d5:17:4a:95:e9:b2:f9: 10:ec:7d:11:79:5e:71:0d:2e:37:66:3a:f0:83:42:eb:87:77: 96:49:a7:2c:03:0d:c8:99:28:7e:22:29:94:90:ba:a2:66:e4: f8:0c:27:58:76:ab:df:2d:6e:85:13:26:46:b2:19:84:9d:25: 2f:ee:9b:cb:67:f0:80:68:d3:c4:e7:a1:1a:5e:ae:37:7a:9b: df:f1:d3:b5:ee:7f:33:6e:a7:51:fc:62:f3:39:2f:e3:70:c1: a4:ef:b6:26:03:fa:98:3d:36:c6:54:d5:f7:e6:63:3f:3f:68: 52:c1:50:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsjY49julrojr0ec/4/CU1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMThjNzkwNTgyZTk5YmZiNTBlZTc1ODQ2M2RjNWFmZGNj YmY0YmQwHhcNMjUxMjE1MTkwMTI1WhcNMjUxMjE2MTkwMTI1WjAzMTEwLwYDVQQD Eyg2MTJkYTNlNDk0NzBlMmZkNjMwNWY4OTA5MzQ1Njg4Y2I4ODYwYWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TqBl2D3YfWbhTu0yHuVm6BV5u1A 4oKRdaUO1F/b3BFQggE7g/0rZBBegagpReZqLJ4lJMO6+oIFJ9I2Y0guJDrUQTV5 pZ7XfE1qMdZtVDzHIszsXvuVjutOtNCvz2nOZjVU9RhxkHe4kMZX589aaXR4nByi VztLLmSsDw72Frb1WtjYSqqFkASm6S+GeD151hbWgjXEoUTXXFDx511f2nw0PGT0 Ed6iFLnwUYrLlGvzFGuHQUT8cvNn1pu4HDM8RCxqlDh9O5jeZHuXX8Rxvv6c4qwu felFcRNR5+7gLuP/aAy4QAQq3iV6+BQSavXxDVzl8w6oDjFIWY8rCnOrNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEto+SUcOL9YwX4kJNFaIy4hgrIMB8GA1UdIwQY MBaAFJoYx5BYLpm/tQ7nWEY9xa/cy/S9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYt NWMzNWRiYWJhMjRiLzEvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYtNWMzNWRiYWJhMjRi LzEvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuztduFy 80S/00dcZAwYxxdDC3H7wT9w0BH+wHmWzp380yjvuPaVBvMrFFXZ9VmEzFGu3eYD DTk7HSK9te6xLyltpsOlnaXzsZjVU/G0EuvnsIwrwLhkaZVG8w327xmXUVS7lfyZ 8th6u5W2qC4obpGM/zUq4aNrsWBevSHTTdpPR37OoY0+/5DVF0qV6bL5EOx9EXle cQ0uN2Y68INC64d3lkmnLAMNyJkofiIplJC6ombk+AwnWHar3y1uhRMmRrIZhJ0l L+6by2fwgGjTxOehGl6uN3qb3/HTte5/M26nUfxi8zkv43DBpO+2JgP6mD02xlTV 9+ZjPz9oUsFQKA== -----END CERTIFICATE-----Generated at Tue Dec 16 04:45:28 2025 by rpki-client