This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json) Hash identifier: yxx46orFBa0wiebkTGVHBQH89PR5gzCYPg816PYXsRs= Subject key identifier: 32:AC:5D:5D:DF:95:B6:B1:5D:B9:8A:90:AD:C3:DF:EB:8B:85:8E:AD Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24 Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24 Certificate serial: 019B4882A4118286049FCD44135CB2B74E36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft Manifest number: 178E Signing time: Tue 23 Dec 2025 00:01:19 +0000 Manifest this update: Tue 23 Dec 2025 00:01:19 +0000 Manifest next update: Wed 24 Dec 2025 00:01:19 +0000 Files and hashes: 1: DOtwGbtfl6s-x4f6aE2W8WlzVNw.roa (hash: ZfbdXBQ4B0vsaA9tpmB6Y8tzcJv8ZqF7FOHdCGM+Zl4=) 2: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: wUrbU9StWAqSRfTGN9Y0ON7hFTAnVAK8gxN6PF807Zs=) 3: VEwZGvZC8CGE0lsKNB1ekuITOKI.roa (hash: ruqW88ZWJqaz7y+HRNbaxPPhfL3FKhp6ygNCnPCWApo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:a4:11:82:86:04:9f:cd:44:13:5c:b2:b7:4e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24 Validity Not Before: Dec 23 00:01:19 2025 GMT Not After : Dec 24 00:01:19 2025 GMT Subject: CN=32ac5d5ddf95b6b15db98a90adc3dfeb8b858ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:30:33:21:28:07:36:34:81:a5:f3:8f:b0:b0: 16:44:14:2a:4d:2c:05:10:5c:96:67:09:77:ed:d6: 95:23:73:2b:30:c4:11:c7:14:ce:a9:5a:8a:a6:60: 29:6e:6e:e5:f9:bf:82:c4:8b:d8:20:28:bf:c1:1d: ad:63:90:db:1a:df:af:d1:43:21:45:2d:87:df:bf: a0:19:5e:2d:a7:33:06:1a:d5:0d:9d:68:fd:d5:e4: 91:c0:28:5b:7d:c7:d9:3d:d8:a6:79:71:cd:67:e8: d1:70:38:98:0e:af:d2:67:a4:d6:db:c6:4c:40:67: da:81:cd:72:45:aa:bb:3e:e1:07:1a:8d:c4:28:ec: 2f:18:d0:36:8c:50:c7:d3:1b:2a:51:87:3e:29:d9: 7e:57:53:f2:3c:9c:76:73:e5:85:4d:24:b0:f0:01: a5:b9:4f:51:f4:4f:d7:23:db:5c:16:56:ab:5c:24: 1e:4a:8a:8d:4d:bb:59:b9:99:76:27:bb:68:c4:49: e3:95:92:42:a0:1e:cc:61:34:a7:17:b0:ce:76:97: e7:f4:c7:ed:9c:26:1f:70:ca:2f:90:13:91:4c:65: c7:2c:d6:4f:31:da:1a:06:1b:e3:c2:28:5b:e1:6e: 2b:eb:90:0b:d5:8b:09:7a:e5:79:71:f7:d9:ef:cb: 94:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AC:5D:5D:DF:95:B6:B1:5D:B9:8A:90:AD:C3:DF:EB:8B:85:8E:AD X509v3 Authority Key Identifier: keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:c3:77:4e:7a:3f:c1:7b:dd:79:ea:63:44:f9:44:9a:a3:78: 61:d1:1b:80:cf:62:af:97:e2:f2:28:15:15:cb:66:79:d0:1b: ff:f2:36:0c:55:e0:f7:55:33:1b:ca:79:a3:6b:6b:77:bb:dd: bc:2b:fc:1f:36:20:ee:99:ee:22:42:94:df:8d:1e:ca:77:5b: 08:9b:9f:5e:a5:1c:f9:dd:72:fe:64:a1:5d:ea:b4:aa:23:f9: 25:77:77:12:5b:8a:42:16:2e:0e:0d:49:17:4f:48:89:3e:08: 49:c9:69:1c:24:20:54:77:e5:1a:e8:ec:ac:77:ce:3b:83:05: e2:ad:d6:70:59:8c:ca:0c:ab:4b:c4:bf:47:03:04:8c:da:bb: 1e:5c:d3:e2:57:8c:ca:b4:30:02:6e:91:12:99:8d:b1:70:68: 11:81:e3:0c:2e:df:b3:de:14:1c:b3:3e:36:96:b5:3e:11:a8: 14:09:ac:8c:53:4a:ac:eb:9a:31:ba:03:21:14:da:92:b0:a7: db:71:72:68:77:de:1f:66:d8:20:c9:40:36:5c:c8:83:a0:8a: 46:06:8f:b1:53:47:95:29:cb:70:33:8f:fd:38:6f:19:c8:3c: ef:09:bb:bb:0f:7e:60:8e:1a:46:ea:e0:eb:60:a0:b4:7e:4a: 38:1b:03:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgqQRgoYEn81EE1yyt042MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMWVjNDYyNmVjZGUyNTMzNWFmZjA4OGIwNGM3MTM5NWFl NmJjMjQwHhcNMjUxMjIzMDAwMTE5WhcNMjUxMjI0MDAwMTE5WjAzMTEwLwYDVQQD EygzMmFjNWQ1ZGRmOTViNmIxNWRiOThhOTBhZGMzZGZlYjhiODU4ZWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTAzISgHNjSBpfOPsLAWRBQqTSwF EFyWZwl37daVI3MrMMQRxxTOqVqKpmApbm7l+b+CxIvYICi/wR2tY5DbGt+v0UMh RS2H37+gGV4tpzMGGtUNnWj91eSRwChbfcfZPdimeXHNZ+jRcDiYDq/SZ6TW28ZM QGfagc1yRaq7PuEHGo3EKOwvGNA2jFDH0xsqUYc+Kdl+V1PyPJx2c+WFTSSw8AGl uU9R9E/XI9tcFlarXCQeSoqNTbtZuZl2J7toxEnjlZJCoB7MYTSnF7DOdpfn9Mft nCYfcMovkBORTGXHLNZPMdoaBhvjwihb4W4r65AL1YsJeuV5cffZ78uU7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKsXV3flbaxXbmKkK3D3+uLhY6tMB8GA1UdIwQY MBaAFDIexGJuzeJTNa/wiLBMcTla5rwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWg3RVltN040bE0xcl9DSXNFeHhPVnJtdkNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84ZTA4YjMtNDg3Yy00ODVhLTk0Nzkt YjA4NGM3Mzg2MWI4LzEvTWg3RVltN040bE0xcl9DSXNFeHhPVnJtdkNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84ZTA4YjMtNDg3Yy00ODVhLTk0NzktYjA4NGM3Mzg2MWI4 LzEvTWg3RVltN040bE0xcl9DSXNFeHhPVnJtdkNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx8N3Tno/ wXvdeepjRPlEmqN4YdEbgM9ir5fi8igVFctmedAb//I2DFXg91UzG8p5o2trd7vd vCv8HzYg7pnuIkKU340eyndbCJufXqUc+d1y/mShXeq0qiP5JXd3EluKQhYuDg1J F09IiT4ISclpHCQgVHflGujsrHfOO4MF4q3WcFmMygyrS8S/RwMEjNq7HlzT4leM yrQwAm6REpmNsXBoEYHjDC7fs94UHLM+Npa1PhGoFAmsjFNKrOuaMboDIRTakrCn 23FyaHfeH2bYIMlANlzIg6CKRgaPsVNHlSnLcDOP/ThvGcg87wm7uw9+YI4aRurg 62CgtH5KOBsD2Q== -----END CERTIFICATE-----Generated at Tue Dec 23 08:04:43 2025 by rpki-client