This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json) Hash identifier: 987Ev8ETaVCNfGOnmIYTq6VAWyy1RwZy5ivThh6SQVY= Subject key identifier: E3:3A:92:E1:B7:3E:32:E0:41:F8:7E:28:2E:43:80:AB:E9:00:66:47 Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2 Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2 Certificate serial: 019AAC14C94523320AF66EFAAAD41161F872 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft Manifest number: 1740 Signing time: Sat 22 Nov 2025 15:00:34 +0000 Manifest this update: Sat 22 Nov 2025 15:00:34 +0000 Manifest next update: Sun 23 Nov 2025 15:00:34 +0000 Files and hashes: 1: CQJ6ohZvy-FZZPX13I33PQeWztA.roa (hash: nsudiYfFNFSH0ilCwJgap+Pn3CDxs0wAg3DCTTYrGPQ=) 2: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: QTXmk9fo+rN+6rkJfmlRyu/Nk+Nu3eCkcogbOdGkL1c=) 3: qAyS6UgRnbonyCG8G2WAnc_nGD8.roa (hash: U80b7Joby5I0WdUM0LGoeNRmJLv7IvwDUZz80x7LHFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 12:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ac:14:c9:45:23:32:0a:f6:6e:fa:aa:d4:11:61:f8:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2 Validity Not Before: Nov 22 15:00:34 2025 GMT Not After : Nov 23 15:00:34 2025 GMT Subject: CN=e33a92e1b73e32e041f87e282e4380abe9006647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6f:2a:98:38:28:e3:64:a6:69:6a:38:10:23: 8f:98:3a:a2:fe:c7:9d:10:3d:10:68:d1:bf:c0:29: 54:7c:cc:41:fe:d7:81:a9:06:ec:5b:7e:c3:54:44: a0:f8:84:0f:30:db:d0:00:3a:a3:52:25:23:da:1e: 39:ae:5e:42:63:61:08:03:28:35:b6:10:de:cf:29: 01:d3:7c:27:1b:b0:e5:19:02:81:6e:6a:da:34:6d: 3f:33:1d:e5:da:ec:9b:c5:c8:a1:a3:9d:ac:09:38: 81:39:27:bc:7d:84:3d:fc:0f:56:9f:6e:c1:26:43: e6:a0:8a:c8:9f:ff:4a:5e:95:e5:cf:3c:89:f6:0c: 00:6e:09:f0:b3:73:1f:a5:8b:2c:ad:13:0e:d0:74: 29:12:08:47:83:0f:da:ca:e6:d4:cb:eb:88:f4:57: db:b9:e2:e4:af:4f:56:c3:6f:bf:2c:e2:98:14:c7: 8f:8a:95:a9:87:be:36:70:21:5a:e1:98:d6:29:10: 27:eb:92:e8:3a:17:4a:f1:02:33:4b:15:69:c5:13: e1:3d:1d:3f:df:94:ee:e3:0f:40:4a:d2:b8:a0:3f: ff:94:91:aa:1e:9b:d2:f0:dc:28:bf:42:18:83:7f: f9:06:3f:50:52:4f:c6:ff:05:9a:a3:6c:24:93:fc: 9e:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:3A:92:E1:B7:3E:32:E0:41:F8:7E:28:2E:43:80:AB:E9:00:66:47 X509v3 Authority Key Identifier: keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:42:fd:9a:25:1e:a3:4e:d1:45:d6:f8:9d:5c:8d:10:5e:7f: 54:88:2f:b3:14:a5:90:09:5b:3d:73:5a:bf:41:0a:e9:1d:a2: 39:a5:53:88:a4:0f:87:38:ba:ce:59:fc:88:3a:aa:86:0a:3d: 06:d0:91:e0:b0:bd:4a:d1:9a:62:bb:dd:e3:10:0f:a4:f3:36: 73:c1:7d:e6:3c:6a:5b:9e:89:5d:05:ec:16:0a:9b:29:40:b5: ba:59:63:56:46:2f:79:5e:3c:49:39:f6:c0:00:67:e7:3b:b3: 71:a8:69:3f:cc:4a:c6:32:58:91:91:68:be:2c:d5:3b:5e:35: e4:b1:e1:db:c6:c4:3c:c0:6a:0a:c3:33:ff:47:a0:fe:c7:0b: 3c:f0:b5:92:94:23:e6:57:3a:40:8b:f4:80:bf:62:e6:ac:cf: 37:4f:cd:04:be:ea:01:6a:dc:a4:4c:91:a8:a8:b9:f9:37:98: 1c:4e:85:09:14:07:49:fe:b6:97:4b:7d:ce:56:5f:94:81:d8: 1c:1e:14:d7:66:a6:30:d3:0c:6b:46:13:dd:a8:31:cb:cf:d6: 19:53:e7:3b:30:8d:38:95:df:b6:d1:22:e9:fc:08:89:95:8d: 18:db:23:dd:95:9e:93:d0:34:07:e1:6f:9f:b3:c1:88:63:e3: d8:5f:30:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZqsFMlFIzIK9m76qtQRYfhyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzA2YjJiOTU1ODhkNzgwZTM2ZWY4MmE4ZjU0YTMxN2Q1 ODY5ZTIwHhcNMjUxMTIyMTUwMDM0WhcNMjUxMTIzMTUwMDM0WjAzMTEwLwYDVQQD EyhlMzNhOTJlMWI3M2UzMmUwNDFmODdlMjgyZTQzODBhYmU5MDA2NjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG8qmDgo42SmaWo4ECOPmDqi/sed ED0QaNG/wClUfMxB/teBqQbsW37DVESg+IQPMNvQADqjUiUj2h45rl5CY2EIAyg1 thDezykB03wnG7DlGQKBbmraNG0/Mx3l2uybxciho52sCTiBOSe8fYQ9/A9Wn27B JkPmoIrIn/9KXpXlzzyJ9gwAbgnws3MfpYssrRMO0HQpEghHgw/ayubUy+uI9Ffb ueLkr09Ww2+/LOKYFMePipWph742cCFa4ZjWKRAn65LoOhdK8QIzSxVpxRPhPR0/ 35Tu4w9AStK4oD//lJGqHpvS8Nwov0IYg3/5Bj9QUk/G/wWao2wkk/yebwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOM6kuG3PjLgQfh+KC5DgKvpAGZHMB8GA1UdIwQY MBaAFDBwayuVWI14Djbvgqj1SjF9WGniMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yOGRlYmItM2E1OS00ZWUxLWJkMzct ODRlZDkxZWMxYzY1LzEvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yOGRlYmItM2E1OS00ZWUxLWJkMzctODRlZDkxZWMxYzY1 LzEvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUL9miUe o07RRdb4nVyNEF5/VIgvsxSlkAlbPXNav0EK6R2iOaVTiKQPhzi6zln8iDqqhgo9 BtCR4LC9StGaYrvd4xAPpPM2c8F95jxqW56JXQXsFgqbKUC1ulljVkYveV48STn2 wABn5zuzcahpP8xKxjJYkZFovizVO1415LHh28bEPMBqCsMz/0eg/scLPPC1kpQj 5lc6QIv0gL9i5qzPN0/NBL7qAWrcpEyRqKi5+TeYHE6FCRQHSf62l0t9zlZflIHY HB4U12amMNMMa0YT3agxy8/WGVPnOzCNOJXfttEi6fwIiZWNGNsj3ZWek9A0B+Fv n7PBiGPj2F8wWQ== -----END CERTIFICATE-----Generated at Sat Nov 22 21:49:59 2025 by rpki-client