This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json) Hash identifier: AnfXslZ7RSik/7u9PcavkOFp+4SZB9Zp7JbAYzhleGI= Subject key identifier: BA:49:16:1C:9D:3B:95:93:5B:B3:F3:78:73:E5:24:82:E0:B2:68:63 Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41 Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641 Certificate serial: 019B33B20E233FCE4E85E827353236E65208 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 23:01:05 +0000 Manifest this update: Thu 18 Dec 2025 23:01:05 +0000 Manifest next update: Fri 19 Dec 2025 23:01:05 +0000 Files and hashes: 1: N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa (hash: Tpui/v5StmkjsF0FORh913wDyuFXShlf6/KyOzlpFaw=) 2: a9P-AA4M71AoAQl3T5rg8IgqWV8.roa (hash: p+vdBIjmH5hq5HNOBx9P2IYX3IN+k3FDRRTfZzHcnHA=) 3: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: suXTw7RNGlQrKQxOKc3X5/xA9SHpXaCoKfVJOuCro1U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:0e:23:3f:ce:4e:85:e8:27:35:32:36:e6:52:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641 Validity Not Before: Dec 18 23:01:05 2025 GMT Not After : Dec 19 23:01:05 2025 GMT Subject: CN=ba49161c9d3b95935bb3f37873e52482e0b26863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a2:f9:97:c5:7f:94:b1:97:8b:d4:e2:b6:86: 2d:53:ff:88:e7:66:85:de:bf:5c:fa:47:63:56:5a: 98:f5:a4:0c:b7:fd:dd:e2:ce:dd:8a:3a:37:27:f1: 23:f7:6b:51:55:09:13:4c:bd:5e:a7:91:72:d8:73: a1:1b:41:0d:44:48:7a:32:ed:60:01:8a:27:fc:c4: 26:7b:59:f5:3e:a0:18:7c:50:44:e2:11:eb:d8:1f: 6a:35:eb:1d:3b:23:9d:b2:18:38:43:ca:9e:be:ab: 60:70:96:c8:b6:9c:1c:78:8d:4d:dc:44:5a:c5:9c: ba:77:c5:7a:7e:1d:f8:df:9c:ba:4f:5b:20:15:8d: 10:2d:47:99:62:21:fd:eb:4a:fc:2a:3b:08:d5:2a: a3:6f:00:00:60:2a:eb:6c:30:8d:bf:19:94:b2:78: d3:14:16:db:e2:86:48:9c:95:c1:5a:d7:e3:57:59: cf:66:4c:c4:93:21:f1:9a:bb:b7:50:09:c6:14:11: dd:80:7a:c6:80:e9:29:73:13:4f:cd:ea:f7:64:c4: c1:1c:ef:6e:5a:c1:ac:02:43:ff:30:e3:b7:10:b8: 0a:76:bd:5e:d6:aa:9c:3d:92:3f:c4:3a:07:97:87: bf:d2:a5:43:ee:52:13:73:09:38:35:2f:97:53:9f: e0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:49:16:1C:9D:3B:95:93:5B:B3:F3:78:73:E5:24:82:E0:B2:68:63 X509v3 Authority Key Identifier: keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:4e:4d:ce:e1:af:c7:90:e0:b9:25:c3:9a:83:f0:d1:f0:6a: 51:1b:a8:1f:b1:e5:58:e3:b4:6e:f5:99:26:d9:75:e8:15:08: 68:38:a3:5f:c4:06:f3:57:12:70:d0:b6:de:86:6c:2f:d0:a7: 80:5d:20:7d:1b:18:19:0c:87:86:00:83:d3:78:b0:5b:2e:7e: fd:5d:a0:64:e2:03:ca:5f:8b:6b:e2:b4:83:aa:cb:bf:ca:c4: b3:ab:bb:86:a3:fa:b9:93:2c:13:3d:5c:25:9e:ff:2c:82:d0: fc:4d:ad:e8:b6:82:b4:be:94:6d:6c:4d:5d:22:4e:2f:bc:a9: 50:c5:3d:68:92:de:70:7a:b2:fb:a5:34:34:69:07:6e:af:08: 70:5c:7b:7e:01:91:d5:0b:1c:da:89:01:66:e7:c5:96:f7:97: 08:95:b1:aa:8a:61:fe:64:77:8a:9e:63:bb:f9:07:d4:e9:b7: e7:e5:ab:7f:78:01:25:73:d7:6c:39:63:ef:c4:a7:49:b9:88: 12:db:3e:d0:61:89:02:2d:54:54:0b:d5:b9:7c:a8:4e:fd:fb: 5e:0d:ee:e3:e0:b0:42:ac:6f:a7:b5:3b:e4:eb:44:40:2a:60: 7f:16:a9:55:cd:8e:d1:04:b8:23:34:fd:49:14:d8:e0:0d:2e: cf:32:24:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsg4jP85OhegnNTI25lIIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MDdjN2I4OTY1NmRkMzM5Y2I5OGZiN2MyYjAzNzFjNTky NmE2NDEwHhcNMjUxMjE4MjMwMTA1WhcNMjUxMjE5MjMwMTA1WjAzMTEwLwYDVQQD EyhiYTQ5MTYxYzlkM2I5NTkzNWJiM2YzNzg3M2U1MjQ4MmUwYjI2ODYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqL5l8V/lLGXi9TitoYtU/+I52aF 3r9c+kdjVlqY9aQMt/3d4s7dijo3J/Ej92tRVQkTTL1ep5Fy2HOhG0ENREh6Mu1g AYon/MQme1n1PqAYfFBE4hHr2B9qNesdOyOdshg4Q8qevqtgcJbItpwceI1N3ERa xZy6d8V6fh3435y6T1sgFY0QLUeZYiH960r8KjsI1SqjbwAAYCrrbDCNvxmUsnjT FBbb4oZInJXBWtfjV1nPZkzEkyHxmru3UAnGFBHdgHrGgOkpcxNPzer3ZMTBHO9u WsGsAkP/MOO3ELgKdr1e1qqcPZI/xDoHl4e/0qVD7lITcwk4NS+XU5/gMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLpJFhydO5WTW7PzeHPlJILgsmhjMB8GA1UdIwQY MBaAFJkHx7iWVt0znLmPt8KwNxxZJqZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83ZGQyODktNmNiNS00MzcxLTg0NmMt OTNkZWM3MzVmNzE3LzEvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS83ZGQyODktNmNiNS00MzcxLTg0NmMtOTNkZWM3MzVmNzE3 LzEvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk05NzuGv x5DguSXDmoPw0fBqURuoH7HlWOO0bvWZJtl16BUIaDijX8QG81cScNC23oZsL9Cn gF0gfRsYGQyHhgCD03iwWy5+/V2gZOIDyl+La+K0g6rLv8rEs6u7hqP6uZMsEz1c JZ7/LILQ/E2t6LaCtL6UbWxNXSJOL7ypUMU9aJLecHqy+6U0NGkHbq8IcFx7fgGR 1Qsc2okBZufFlveXCJWxqoph/mR3ip5ju/kH1Om35+Wrf3gBJXPXbDlj78SnSbmI Ets+0GGJAi1UVAvVuXyoTv37Xg3u4+CwQqxvp7U75OtEQCpgfxapVc2O0QS4IzT9 SRTY4A0uzzIkoQ== -----END CERTIFICATE-----Generated at Fri Dec 19 03:49:45 2025 by rpki-client