This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft File: mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft (raw, json) Hash identifier: guhDs64qIpYvYavKPHtAxh2zUS0fRli+YK+7Laufd3s= Subject key identifier: 13:AF:22:DE:4C:72:D7:F8:6D:03:FD:D1:DB:46:5C:6A:2D:72:F4:92 Authority key identifier: 98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00 Certificate issuer: /CN=987b6812cf7a074580f5942be762f477f67c9500 Certificate serial: 019B1B3BBB8055B1F9F5C4CE9D9B61B3BC25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft Manifest number: 1779 Signing time: Sun 14 Dec 2025 05:00:57 +0000 Manifest this update: Sun 14 Dec 2025 05:00:57 +0000 Manifest next update: Mon 15 Dec 2025 05:00:57 +0000 Files and hashes: 1: mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl (hash: 0O1jBM2GDslNP9f+hAP85/Vv98xIYDgDqIPYNbOo6Wg=) 2: s3dIm20GepVqtr86hU4U0PO_ew8.roa (hash: IACsMI0iHVIsWExBAgSS418a6ZTtpolE9FZ0jLsNao8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:3b:bb:80:55:b1:f9:f5:c4:ce:9d:9b:61:b3:bc:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=987b6812cf7a074580f5942be762f477f67c9500 Validity Not Before: Dec 14 05:00:57 2025 GMT Not After : Dec 15 05:00:57 2025 GMT Subject: CN=13af22de4c72d7f86d03fdd1db465c6a2d72f492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b1:07:66:97:0e:e2:74:a8:4b:90:c2:35:c7: d9:59:36:21:53:47:ab:86:61:28:36:85:ff:94:93: 10:ec:a2:7b:61:d9:08:19:0b:ef:ee:4f:6b:4a:00: 8f:18:59:d8:89:bf:81:dd:6c:61:30:98:01:e2:0b: b6:af:1e:87:bd:77:50:7c:30:3b:c2:82:c1:d7:b4: c6:bb:f3:55:07:c8:df:8a:2f:cc:bf:27:8c:e5:80: a1:b7:e9:08:31:e8:47:64:ab:1f:ab:49:32:b7:31: 57:05:a7:42:0f:2a:4f:84:d0:f5:ac:28:ce:60:f3: a4:cd:67:d7:ef:07:94:ae:8f:1e:04:d7:58:df:fc: 2e:04:87:82:68:80:25:b1:67:e4:d2:ae:41:8c:d0: c4:7d:14:5a:44:1a:26:93:46:99:6b:a6:cd:05:40: 76:a0:cc:05:d6:95:1f:57:1b:4a:d1:5e:8b:2f:20: 31:9b:f0:11:8c:aa:b4:0f:ea:d7:c9:dc:cc:38:ba: 64:52:f8:77:bb:60:01:f9:ae:c4:2e:b0:e5:d1:b0: 56:68:58:6c:cb:e4:ac:11:5b:29:f1:0a:f7:3b:4d: 2b:04:07:a5:2c:1a:21:b4:f0:5f:5e:4e:38:c3:a6: f8:4b:03:49:1d:d8:c3:74:d6:d9:6d:61:ef:fc:0b: 54:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AF:22:DE:4C:72:D7:F8:6D:03:FD:D1:DB:46:5C:6A:2D:72:F4:92 X509v3 Authority Key Identifier: keyid:98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:f8:de:13:98:a2:89:26:cb:3e:2d:c6:1f:a2:17:c8:57:29: e0:db:78:3b:c8:4a:48:fe:3d:ac:df:02:19:b9:4e:48:5c:23: 01:b0:d2:38:3a:97:60:66:54:26:01:f0:24:8e:47:fb:70:55: a0:04:96:15:47:8d:8d:57:3b:e4:fd:80:ba:55:66:3b:84:d9: e8:30:3a:1c:ec:37:6e:d5:ea:73:18:59:02:dd:e7:c4:d0:58: 7d:22:0b:31:19:47:3d:b4:bd:89:28:ee:56:65:74:6a:40:dc: 40:e0:89:a8:f4:8e:25:58:a5:31:9a:b6:b5:6a:eb:e3:53:2c: df:c1:54:a5:31:7b:d0:c0:7d:bb:14:50:aa:b6:39:dc:5a:2d: 52:84:12:b0:58:84:f0:27:ed:f7:8c:3a:3f:ff:e8:38:02:e0: ba:f7:f4:d6:3d:9b:ac:f4:f4:6f:29:fe:1d:83:e0:3a:fe:e0: 20:d7:03:41:39:76:0a:89:60:33:21:cc:1a:d3:89:cd:5a:e2: 3c:62:a6:92:11:6e:52:d7:54:9d:14:2d:94:34:8d:b5:79:a8: 92:b8:30:fd:87:78:eb:02:d6:a1:4d:23:58:db:e8:5b:3e:fc: 7e:19:c6:fd:0f:6c:d6:af:a5:93:07:8f:24:bb:1c:3b:60:ee: d0:f3:b0:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbO7uAVbH59cTOnZths7wlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4N2I2ODEyY2Y3YTA3NDU4MGY1OTQyYmU3NjJmNDc3ZjY3 Yzk1MDAwHhcNMjUxMjE0MDUwMDU3WhcNMjUxMjE1MDUwMDU3WjAzMTEwLwYDVQQD EygxM2FmMjJkZTRjNzJkN2Y4NmQwM2ZkZDFkYjQ2NWM2YTJkNzJmNDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLEHZpcO4nSoS5DCNcfZWTYhU0er hmEoNoX/lJMQ7KJ7YdkIGQvv7k9rSgCPGFnYib+B3WxhMJgB4gu2rx6HvXdQfDA7 woLB17TGu/NVB8jfii/MvyeM5YCht+kIMehHZKsfq0kytzFXBadCDypPhND1rCjO YPOkzWfX7weUro8eBNdY3/wuBIeCaIAlsWfk0q5BjNDEfRRaRBomk0aZa6bNBUB2 oMwF1pUfVxtK0V6LLyAxm/ARjKq0D+rXydzMOLpkUvh3u2AB+a7ELrDl0bBWaFhs y+SsEVsp8Qr3O00rBAelLBohtPBfXk44w6b4SwNJHdjDdNbZbWHv/AtUhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOvIt5Mctf4bQP90dtGXGotcvSSMB8GA1UdIwQY MBaAFJh7aBLPegdFgPWUK+di9Hf2fJUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUh0b0VzOTZCMFdBOVpRcjUyTDBkX1o4bFFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kOGU2OGUtYWQzOC00NGUxLTlhMmMt NzRhYTNjMGZhZWUwLzEvbUh0b0VzOTZCMFdBOVpRcjUyTDBkX1o4bFFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9kOGU2OGUtYWQzOC00NGUxLTlhMmMtNzRhYTNjMGZhZWUw LzEvbUh0b0VzOTZCMFdBOVpRcjUyTDBkX1o4bFFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvjeE5ii iSbLPi3GH6IXyFcp4Nt4O8hKSP49rN8CGblOSFwjAbDSODqXYGZUJgHwJI5H+3BV oASWFUeNjVc75P2AulVmO4TZ6DA6HOw3btXqcxhZAt3nxNBYfSILMRlHPbS9iSju VmV0akDcQOCJqPSOJVilMZq2tWrr41Ms38FUpTF70MB9uxRQqrY53FotUoQSsFiE 8Cft94w6P//oOALguvf01j2brPT0byn+HYPgOv7gINcDQTl2ColgMyHMGtOJzVri PGKmkhFuUtdUnRQtlDSNtXmokrgw/Yd46wLWoU0jWNvoWz78fhnG/Q9s1q+lkweP JLscO2Du0POwrg== -----END CERTIFICATE-----Generated at Sun Dec 14 11:44:48 2025 by rpki-client