This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft File: Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft (raw, json) Hash identifier: 4MDrlJWdyVNtPGziL1Ihw+p2bBoAhgxG36517SwsApA= Subject key identifier: 90:89:A9:00:46:CE:6E:ED:A1:FF:D3:10:9F:48:28:F2:0B:31:BA:3D Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4 Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4 Certificate serial: 019B1BE0BE4F9397AC1460E7C241227FFF5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft Manifest number: 177B Signing time: Sun 14 Dec 2025 08:01:12 +0000 Manifest this update: Sun 14 Dec 2025 08:01:12 +0000 Manifest next update: Mon 15 Dec 2025 08:01:12 +0000 Files and hashes: 1: 3FbaZR0zxfx0WA80YXG85ZDcCq4.roa (hash: qryijX9WTlELqR/vPu/COvNZoSxzH7bA72VNuMKufdo=) 2: Gdu8HvR0GdnLEy7v4D3Y7fu1whI.roa (hash: CRTwkdMF4Lc0blRbrlr/l3IQBv+j5fcBDyVa2paPuVE=) 3: KmGlwP7CjIaywccOkX2DOwKl0TQ.roa (hash: sUOuCVVmxheCpfNzBgnrrUGNWsQqJtbWGWiV/9xLfds=) 4: Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl (hash: 0E6i9+JIleqKznb0CFOzIFmYME84RjUQNouBAFH6Vt4=) 5: NVPuKIwqd6rXOALhTsUic2d4hlA.roa (hash: T7Dyc87WaeHKY9kvTOaXHf9jWNh88eWIMhxiFozXzd0=) 6: ZFAYM9mu8jS6R0AyRbdSE1lnwbA.roa (hash: tJHXTlE43Al/Bk06k42NooyquRAu3ree+mY4auRgVIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:e0:be:4f:93:97:ac:14:60:e7:c2:41:22:7f:ff:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=321ec194107843848cd36330232b5f6a43791db4 Validity Not Before: Dec 14 08:01:12 2025 GMT Not After : Dec 15 08:01:12 2025 GMT Subject: CN=9089a90046ce6eeda1ffd3109f4828f20b31ba3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5a:d4:53:1f:2c:40:95:6f:ee:1a:8d:bf:64: df:7d:43:b0:8e:79:60:05:b5:b8:20:06:58:df:32: a4:65:25:0b:b8:de:17:d7:d8:bb:ab:2e:7b:e4:11: f2:8e:4d:5c:25:ad:3e:45:55:d2:a6:b2:ae:22:6e: c3:a7:60:d6:d4:69:9f:46:f9:84:dd:3d:22:85:e0: d2:d3:5e:ce:e6:ec:21:52:64:4f:79:db:2b:c5:fc: 86:6f:59:5a:ba:0f:6d:2d:8c:36:79:8b:77:a4:45: c0:b1:69:75:40:47:d7:77:cb:93:dd:76:ca:70:a6: 88:c4:56:f3:be:9d:0f:b4:d0:f8:e1:4c:fe:1c:c6: 5c:0e:56:9a:2d:23:a2:a0:db:87:e5:0a:02:0d:dc: fb:9c:4b:5f:d3:7f:a5:3e:f0:fc:38:5a:49:80:1d: 4d:b6:3b:41:27:74:f6:08:23:2c:04:23:be:a0:d5: f2:0f:d6:a8:b1:0e:f0:ba:9a:a1:1b:2a:92:65:89: 43:b3:c7:f2:27:a1:5b:3c:71:f7:d6:c6:e1:16:24: 21:0f:95:e1:43:6b:5d:ef:98:8a:07:e8:f5:e0:93: e6:a0:5d:59:27:64:32:7f:c7:5e:7a:5d:d3:b6:f7: ea:fb:9c:3e:a0:31:98:41:08:fb:10:bf:da:f8:dd: 2e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:89:A9:00:46:CE:6E:ED:A1:FF:D3:10:9F:48:28:F2:0B:31:BA:3D X509v3 Authority Key Identifier: keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:7d:cf:04:9c:85:b5:78:35:2a:1a:ec:d4:1d:58:d2:06:d8: d3:c5:75:fc:a1:bc:00:5b:a9:94:1e:fc:2b:68:14:c3:e4:8f: 07:19:13:62:6a:cc:69:d3:a9:5a:86:ef:6f:4e:2e:d7:ea:99: cd:97:1d:5b:98:bb:20:2e:5d:c8:a0:7d:37:3e:ae:a7:ec:78: 15:96:97:c7:4f:73:12:51:f3:2a:24:af:4e:70:9c:a1:15:57: 10:df:c4:4a:4a:19:73:1b:bb:59:45:0f:5d:71:2c:d5:85:e8: 24:d5:7b:d8:e9:a6:06:48:ad:63:d1:c3:f3:5a:0c:d1:71:08: 76:b6:d8:c0:fa:d4:52:13:b1:c1:af:2c:cf:c1:2d:15:4c:88: a4:27:ac:8f:f8:3c:f5:08:e2:c4:f7:d5:a9:8d:cf:c8:59:cc: 06:d9:e2:d5:75:e1:1a:98:34:53:23:c0:8e:24:e3:b4:ea:57: b0:67:a1:6f:be:46:7e:97:14:41:9b:b1:0b:fb:29:f4:ee:c9: 84:b1:e5:6c:d2:cd:33:de:5e:cc:a3:fd:6f:ed:57:99:c9:20: 6a:f9:94:f6:c6:7c:5a:a2:93:a4:54:73:ab:f6:a8:b2:0c:52: 9c:7f:ab:2b:63:a2:f2:7e:6e:12:ee:58:fd:bd:37:66:21:b2: f1:07:e0:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsb4L5Pk5esFGDnwkEif/9dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMWVjMTk0MTA3ODQzODQ4Y2QzNjMzMDIzMmI1ZjZhNDM3 OTFkYjQwHhcNMjUxMjE0MDgwMTEyWhcNMjUxMjE1MDgwMTEyWjAzMTEwLwYDVQQD Eyg5MDg5YTkwMDQ2Y2U2ZWVkYTFmZmQzMTA5ZjQ4MjhmMjBiMzFiYTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVrUUx8sQJVv7hqNv2TffUOwjnlg BbW4IAZY3zKkZSULuN4X19i7qy575BHyjk1cJa0+RVXSprKuIm7Dp2DW1GmfRvmE 3T0iheDS017O5uwhUmRPedsrxfyGb1laug9tLYw2eYt3pEXAsWl1QEfXd8uT3XbK cKaIxFbzvp0PtND44Uz+HMZcDlaaLSOioNuH5QoCDdz7nEtf03+lPvD8OFpJgB1N tjtBJ3T2CCMsBCO+oNXyD9aosQ7wupqhGyqSZYlDs8fyJ6FbPHH31sbhFiQhD5Xh Q2td75iKB+j14JPmoF1ZJ2Qyf8deel3Ttvfq+5w+oDGYQQj7EL/a+N0uUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCJqQBGzm7tof/TEJ9IKPILMbo9MB8GA1UdIwQY MBaAFDIewZQQeEOEjNNjMCMrX2pDeR20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgt M2E2MTFjMDkzYTJjLzEvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgtM2E2MTFjMDkzYTJj LzEvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWH3PBJyF tXg1Khrs1B1Y0gbY08V1/KG8AFuplB78K2gUw+SPBxkTYmrMadOpWobvb04u1+qZ zZcdW5i7IC5dyKB9Nz6up+x4FZaXx09zElHzKiSvTnCcoRVXEN/ESkoZcxu7WUUP XXEs1YXoJNV72OmmBkitY9HD81oM0XEIdrbYwPrUUhOxwa8sz8EtFUyIpCesj/g8 9QjixPfVqY3PyFnMBtni1XXhGpg0UyPAjiTjtOpXsGehb75GfpcUQZuxC/sp9O7J hLHlbNLNM95ezKP9b+1XmckgavmU9sZ8WqKTpFRzq/aosgxSnH+rK2Oi8n5uEu5Y /b03ZiGy8QfgyA== -----END CERTIFICATE-----Generated at Sun Dec 14 15:04:31 2025 by rpki-client