This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft File: MhS0ivRv_G1W3QurOzGH3lPp6yM.mft (raw, json) Hash identifier: 2xacimZb14Ujmssrxq8LhfxElmNW7J8qZUc4oUx5Wyk= Subject key identifier: EC:AC:86:E4:A9:6A:6F:E7:1B:76:11:04:56:4E:45:91:C5:3B:06:7A Authority key identifier: 32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23 Certificate issuer: /CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23 Certificate serial: 019B5A88E120276BCECF7EDB61933EE6FA35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft Manifest number: 0607 Signing time: Fri 26 Dec 2025 12:01:18 +0000 Manifest this update: Fri 26 Dec 2025 12:01:18 +0000 Manifest next update: Sat 27 Dec 2025 12:01:18 +0000 Files and hashes: 1: MhS0ivRv_G1W3QurOzGH3lPp6yM.crl (hash: RXP8kvr/2Jp85Ujue7YuBQ8iWt96KJs6iIhzaCQ086g=) 2: xjdC4ob7aRS2Ev-O6nidCaBCpZg.roa (hash: SBgN/gihku+/q5pAC+Vic8NfDHBeeV+OVc/nVKV8Vm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:e1:20:27:6b:ce:cf:7e:db:61:93:3e:e6:fa:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23 Validity Not Before: Dec 26 12:01:18 2025 GMT Not After : Dec 27 12:01:18 2025 GMT Subject: CN=ecac86e4a96a6fe71b761104564e4591c53b067a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:22:61:27:dc:43:0b:70:aa:2e:1b:a4:94:a0: 1c:03:ce:f8:cc:a3:a6:3d:81:e6:0b:ff:44:1d:f4: b1:66:50:ae:43:1c:7b:15:10:ba:bc:03:c5:c5:b4: b4:1f:c5:6f:ea:43:c2:aa:98:4a:b1:b9:2b:ac:28: ae:e9:4b:fd:b4:5b:24:43:29:c3:aa:84:4b:52:71: 3c:7d:4e:42:58:c9:7f:41:fd:47:65:c5:c4:ea:ab: b7:ab:18:ae:06:1e:3b:5a:37:ba:69:4f:55:ed:e4: 8d:35:6a:06:92:a8:40:32:63:08:fc:ab:51:08:b8: 8f:2d:96:6d:80:b3:16:39:ec:da:16:cc:f2:48:70: a7:99:e0:e5:1d:44:5e:c6:18:f1:91:47:0e:16:cc: ed:6f:6f:c5:c0:a6:57:2b:9f:d8:a2:e1:d2:f0:e9: 96:d2:ea:e6:a4:f8:53:c5:fd:25:bd:1e:65:7a:12: 0f:3c:9f:72:da:27:5a:2e:94:16:de:e0:61:cc:99: 1b:d5:67:98:cd:8d:cd:80:08:d2:f0:f5:cf:64:e5: 49:30:a3:a4:11:ec:79:06:4d:78:ce:37:25:87:78: 68:e2:7d:d6:0d:8a:01:53:d5:cd:de:42:a6:b4:1f: 4b:7c:ee:1d:e6:7c:ab:06:b2:5c:ee:e6:56:25:2c: b4:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:AC:86:E4:A9:6A:6F:E7:1B:76:11:04:56:4E:45:91:C5:3B:06:7A X509v3 Authority Key Identifier: keyid:32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:bc:e9:62:44:de:25:0b:b5:f1:26:11:89:22:ed:3f:a8:ef: b9:1d:b7:dd:16:a9:27:73:fc:bb:fd:e2:3e:65:21:45:70:23: e2:02:af:4e:ff:94:ea:3a:dd:aa:c5:fc:22:b2:e6:3e:ca:51: ab:a7:65:ee:d7:4b:1a:71:a5:f2:8a:08:62:f8:48:f6:43:6d: c7:49:6a:4c:58:c1:98:b2:7c:a4:73:83:ee:1c:c8:c2:52:c0: ae:9b:07:ab:a9:3b:9a:20:58:09:bf:1b:f3:f7:2b:fd:7e:88: 20:0a:5c:6d:85:72:0c:51:f3:20:43:d6:bc:00:cb:09:a1:7c: fe:1c:4b:a2:d9:a0:55:1b:9d:65:d7:fa:06:c6:ba:c8:9b:20: a3:ad:32:de:fa:44:cd:3c:63:75:48:38:df:55:5e:c2:35:8e: 98:a3:b2:21:46:08:c6:87:3b:b0:49:a2:31:d5:c1:dc:11:8f: cd:e6:ac:af:62:00:7a:39:6d:37:29:ab:a1:5b:7f:9b:c1:aa: 92:57:45:1a:8e:8f:9e:38:85:12:63:61:60:41:ef:25:d6:c8: cf:fe:e2:69:fc:e4:e9:71:39:e6:87:cf:35:e8:6b:e6:70:66: 64:39:40:f5:b0:b7:db:bc:b2:b4:72:67:4d:64:f7:14:c2:b7: c0:fe:78:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiOEgJ2vOz37bYZM+5vo1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMTRiNDhhZjQ2ZmZjNmQ1NmRkMGJhYjNiMzE4N2RlNTNl OWViMjMwHhcNMjUxMjI2MTIwMTE4WhcNMjUxMjI3MTIwMTE4WjAzMTEwLwYDVQQD EyhlY2FjODZlNGE5NmE2ZmU3MWI3NjExMDQ1NjRlNDU5MWM1M2IwNjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyJhJ9xDC3CqLhuklKAcA874zKOm PYHmC/9EHfSxZlCuQxx7FRC6vAPFxbS0H8Vv6kPCqphKsbkrrCiu6Uv9tFskQynD qoRLUnE8fU5CWMl/Qf1HZcXE6qu3qxiuBh47Wje6aU9V7eSNNWoGkqhAMmMI/KtR CLiPLZZtgLMWOezaFszySHCnmeDlHURexhjxkUcOFsztb2/FwKZXK5/YouHS8OmW 0urmpPhTxf0lvR5lehIPPJ9y2idaLpQW3uBhzJkb1WeYzY3NgAjS8PXPZOVJMKOk Eex5Bk14zjclh3ho4n3WDYoBU9XN3kKmtB9LfO4d5nyrBrJc7uZWJSy0jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOyshuSpam/nG3YRBFZORZHFOwZ6MB8GA1UdIwQY MBaAFDIUtIr0b/xtVt0Lqzsxh95T6esjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWhTMGl2UnZfRzFXM1F1ck96R0gzbFBwNnlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wODRmNzEtOTI3YS00ZmE4LWJlYTUt Y2Q4N2VlOTcwZTZmLzEvTWhTMGl2UnZfRzFXM1F1ck96R0gzbFBwNnlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wODRmNzEtOTI3YS00ZmE4LWJlYTUtY2Q4N2VlOTcwZTZm LzEvTWhTMGl2UnZfRzFXM1F1ck96R0gzbFBwNnlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7zpYkTe JQu18SYRiSLtP6jvuR233RapJ3P8u/3iPmUhRXAj4gKvTv+U6jrdqsX8IrLmPspR q6dl7tdLGnGl8ooIYvhI9kNtx0lqTFjBmLJ8pHOD7hzIwlLArpsHq6k7miBYCb8b 8/cr/X6IIApcbYVyDFHzIEPWvADLCaF8/hxLotmgVRudZdf6Bsa6yJsgo60y3vpE zTxjdUg431VewjWOmKOyIUYIxoc7sEmiMdXB3BGPzeasr2IAejltNymroVt/m8Gq kldFGo6PnjiFEmNhYEHvJdbIz/7iafzk6XE55ofPNehr5nBmZDlA9bC327yytHJn TWT3FMK3wP54Cw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:28 2025 by rpki-client