This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: mW4XwO1I82HRG0h9Tu3yyw5xbl0L8LQ5arrt+L8G2EI= Subject key identifier: 57:69:EE:CD:CD:C4:DC:0D:11:24:48:73:83:9B:21:C7:E4:BD:F2:CC Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019B35A04203279CD4B624C9A0A28AD65886 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 1788 Signing time: Fri 19 Dec 2025 08:00:53 +0000 Manifest this update: Fri 19 Dec 2025 08:00:53 +0000 Manifest next update: Sat 20 Dec 2025 08:00:53 +0000 Files and hashes: 1: Go3D60IftVT7kBobBk8HTq_r6wY.roa (hash: /aH1VuqUtHMC947Kt5tr1ajHSrdHN60XTYZiPes2dOU=) 2: JKKr0NwqKrBRfO9-TNMA6fKjebU.roa (hash: +prVLn/SSNSb/SQ4BmX9heAxTyq0XNrqnNVcVb/zNYQ=) 3: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: UcAOHEY6eorBqiiCkPhKBmVbP8S0M7FPFIgQ1JC04Mo=) 4: OrdWNePRO-azuf-x7WJ0gNqkZc8.roa (hash: ehZsJBwER/Ak+kPEJiQOXw5pziTKWHwzzGUWq4oZM/c=) 5: Q3_mv-tF2Z1EHDZHaZk8mJMN1bk.roa (hash: oXSPeYLnMI9gMBulzyR8eDJwfmPdLhgYhc4vqS0U/tE=) 6: S2TXSI-3n25IfgGnM4uuJwml268.roa (hash: DAgFF4qJxC/k8JOz+sB1Q1cvXx4PDaouIru4SXZXgbU=) 7: UJuJe34B0guqTgOl--QOCgSYvZE.roa (hash: c2O3pbkk6z+NjOLR47vzvdpTF+ZJKIik+rzOAO3mk2Y=) 8: bR8kj_c2TPqFFFMT255K3OTqBTI.roa (hash: mIG3JTVdQTlKmcdrQlCtE5KtfNee8F1irJglkfAd6/0=) 9: e_JO57HIUgxnL2zZw_SZRKtvz2k.roa (hash: kYzJL9upOKUtQTqnQ+rXijBf3P483K+T+FEi6SAaLE0=) 10: qkn09gGw9_pYS22v_SrDemeIoJI.roa (hash: OSIoNd4NerHm/MUfEqmcXlQFZ/K6gwLw7wnqNHc3YTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:42:03:27:9c:d4:b6:24:c9:a0:a2:8a:d6:58:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Dec 19 08:00:53 2025 GMT Not After : Dec 20 08:00:53 2025 GMT Subject: CN=5769eecdcdc4dc0d11244873839b21c7e4bdf2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:52:c1:87:0b:c0:dd:35:f6:f5:a5:c5:fa:2d: 81:5c:cc:2e:0d:ed:ab:6b:0d:d1:2b:f4:96:0e:65: 48:25:9e:95:b3:dd:da:77:03:48:d1:e5:0d:20:f0: 83:08:6d:3f:89:22:f2:77:12:47:de:c2:e7:5d:bb: 2a:e6:a5:b7:4a:ee:bb:fb:e3:70:31:64:9a:69:55: d0:33:c2:d5:2d:5c:c5:93:8a:7f:bb:1a:ef:49:09: 6b:29:4d:ce:d0:4e:f2:a6:82:e1:97:fa:39:93:c7: 3f:17:13:d5:79:26:ac:46:94:45:dd:b7:fc:28:92: fb:e1:22:95:dc:bd:59:b0:b2:5b:32:3c:ef:cf:c4: 56:09:0e:f1:44:45:10:49:66:23:7a:ac:f2:cb:63: 09:9e:a1:27:e6:33:e1:c3:5b:f0:ad:9a:77:5b:ad: 5d:18:ab:6e:dd:86:ee:81:3d:4a:46:a4:6d:58:33: 8c:50:fe:a0:19:ee:2c:90:d1:67:e3:d6:22:ab:b3: ff:6b:6e:b5:4e:5a:7b:c5:b8:9e:f5:24:ff:3c:b2: 19:58:33:a4:8a:2c:59:5d:8e:8a:d3:8f:63:89:b3: ff:91:e4:a0:81:b2:32:16:80:6c:62:e5:b7:eb:ec: b1:da:eb:89:5e:3e:54:79:3a:d1:28:67:46:7e:66: 9d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:69:EE:CD:CD:C4:DC:0D:11:24:48:73:83:9B:21:C7:E4:BD:F2:CC X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:09:eb:f3:49:2b:b9:fc:96:22:84:e0:50:b8:23:82:14:70: 1a:f3:db:cb:bf:4b:b3:bd:0d:2c:75:26:ff:42:d5:a9:a4:ca: 2e:af:5d:cc:10:d8:75:f8:6d:47:52:7f:12:d1:a3:13:79:e1: 13:95:a4:d3:8f:a7:9d:a4:3b:06:03:34:bf:c3:9a:a7:c2:b3: ff:d1:8e:77:c9:cd:22:0f:67:ac:e6:3b:74:44:58:ba:40:99: 16:7f:f9:dd:01:3a:7a:e5:25:c8:51:5c:60:f7:d2:bc:1b:6c: 91:cf:c7:30:df:ce:6c:3c:60:3f:2d:1e:16:92:43:2b:22:3d: 86:fd:0d:15:74:4c:51:f5:8d:49:2f:9e:ef:c8:b0:32:d2:20: 3d:63:bb:72:35:33:ab:0e:7c:55:1d:62:8b:c9:4c:e4:99:3a: a9:50:d0:6d:2a:6e:64:e0:e0:34:3d:c7:7a:d7:32:c4:8b:ff: 65:48:6b:33:46:d1:eb:ce:53:ac:0b:1b:94:73:5d:a2:21:a9: 7c:50:77:80:64:f4:52:bf:05:d7:9f:19:e2:43:ce:a6:f6:56: 62:14:99:22:7f:de:db:93:f0:da:d0:91:3f:d4:fd:6f:17:65: 20:b8:2f:da:f5:3e:1e:26:4c:84:bb:ec:7d:f1:55:1e:95:a8: 8a:86:10:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oEIDJ5zUtiTJoKKK1liGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjUxMjE5MDgwMDUzWhcNMjUxMjIwMDgwMDUzWjAzMTEwLwYDVQQD Eyg1NzY5ZWVjZGNkYzRkYzBkMTEyNDQ4NzM4MzliMjFjN2U0YmRmMmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVLBhwvA3TX29aXF+i2BXMwuDe2r aw3RK/SWDmVIJZ6Vs93adwNI0eUNIPCDCG0/iSLydxJH3sLnXbsq5qW3Su67++Nw MWSaaVXQM8LVLVzFk4p/uxrvSQlrKU3O0E7ypoLhl/o5k8c/FxPVeSasRpRF3bf8 KJL74SKV3L1ZsLJbMjzvz8RWCQ7xREUQSWYjeqzyy2MJnqEn5jPhw1vwrZp3W61d GKtu3YbugT1KRqRtWDOMUP6gGe4skNFn49Yiq7P/a261Tlp7xbie9ST/PLIZWDOk iixZXY6K049jibP/keSggbIyFoBsYuW36+yx2uuJXj5UeTrRKGdGfmad6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFdp7s3NxNwNESRIc4ObIcfkvfLMMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtwnr80kr ufyWIoTgULgjghRwGvPby79Ls70NLHUm/0LVqaTKLq9dzBDYdfhtR1J/EtGjE3nh E5Wk04+nnaQ7BgM0v8Oap8Kz/9GOd8nNIg9nrOY7dERYukCZFn/53QE6euUlyFFc YPfSvBtskc/HMN/ObDxgPy0eFpJDKyI9hv0NFXRMUfWNSS+e78iwMtIgPWO7cjUz qw58VR1ii8lM5Jk6qVDQbSpuZODgND3HetcyxIv/ZUhrM0bR685TrAsblHNdoiGp fFB3gGT0Ur8F158Z4kPOpvZWYhSZIn/e25Pw2tCRP9T9bxdlILgv2vU+HiZMhLvs ffFVHpWoioYQCw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:38:36 2025 by rpki-client