This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft File: MHLNXfcyOVerh8B_XN0VyR7_yNU.mft (raw, json) Hash identifier: XxfNqC6vZKMIwNdBrNE1PtWG7Xor1YiOw42ultunoUQ= Subject key identifier: 1B:C4:CA:E6:3D:F9:00:E3:27:78:2E:71:57:6A:FB:69:5E:DF:7D:5A Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5 Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5 Certificate serial: 019B5ABF56D5FCFA685DE02B8F01020A808B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft Manifest number: 048A Signing time: Fri 26 Dec 2025 13:00:47 +0000 Manifest this update: Fri 26 Dec 2025 13:00:47 +0000 Manifest next update: Sat 27 Dec 2025 13:00:47 +0000 Files and hashes: 1: 1-j19Lm_8LkOQ7sD4oDHLKYSPWic.roa (hash: AyGIDkmO70ikRHTGZ5Nr8McTMa0GSHdwM5XnVEHxeLU=) 2: 4K24stKfDp1H3GNlLGKVCADGEk8.roa (hash: UPReXxcNMcYoyQCbGFi6FE4Fmh9h/aMYNiw52x0SkBo=) 3: MHLNXfcyOVerh8B_XN0VyR7_yNU.crl (hash: yS6O10L+mDhpOv3/PXbsbMPPrRRHGQ6sjNht75RNWbc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:56:d5:fc:fa:68:5d:e0:2b:8f:01:02:0a:80:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5 Validity Not Before: Dec 26 13:00:47 2025 GMT Not After : Dec 27 13:00:47 2025 GMT Subject: CN=1bc4cae63df900e327782e71576afb695edf7d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:37:1a:cd:b7:5d:83:98:1e:5f:63:8f:71:ed: d6:2a:1b:55:62:e1:fc:56:58:b4:2b:31:ef:d6:fd: 27:4f:83:80:c9:1c:f6:4f:c9:93:fb:16:72:2c:e3: c6:46:f8:25:b7:ad:d3:a8:a1:1b:b6:bd:29:17:46: f1:5f:f3:4f:a7:88:49:a5:aa:72:32:ad:0c:d9:b7: 8f:1b:d7:7e:76:78:33:5c:d5:79:38:7d:41:d5:42: 9d:a7:8b:d3:1b:91:9c:04:02:c2:13:94:d2:d4:ec: 0b:ee:88:dd:cf:40:3f:5b:74:07:85:5e:b0:1c:dd: e7:f6:82:a1:62:d4:43:9f:c8:14:60:01:cd:90:67: 80:f8:8a:fb:10:21:8d:8d:b4:a7:38:2a:c7:f4:ef: 5f:56:33:98:8e:47:31:de:b8:e9:1e:95:3a:9c:90: cf:86:e9:13:dd:4f:83:91:44:92:2e:88:30:ed:80: df:b1:51:8f:9c:5c:88:c0:a4:54:c3:e5:13:24:4e: 1a:9f:d2:9e:78:05:98:e8:38:39:e1:4d:dc:b4:88: cb:51:fd:51:cd:ef:1e:d3:3b:f3:85:54:0c:3b:1c: 92:68:38:77:4d:88:bd:39:ff:8a:5e:cd:47:67:17: 20:55:49:5c:bb:96:7b:46:68:da:62:da:11:50:4d: 64:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C4:CA:E6:3D:F9:00:E3:27:78:2E:71:57:6A:FB:69:5E:DF:7D:5A X509v3 Authority Key Identifier: keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:b2:fa:6c:1e:68:6e:c7:43:e9:1b:bb:e1:2d:c8:03:9d:24: 57:40:68:f5:a9:b5:c3:92:23:69:8a:8a:b2:3c:23:bd:92:0a: ae:3b:31:80:46:b7:46:69:07:20:64:f3:2b:91:7e:f9:d9:4d: a9:3f:b3:42:d9:13:6c:9c:f0:75:cd:4b:b5:34:ac:55:80:b2: de:d1:95:c3:c6:ec:c0:82:fa:65:f5:eb:95:f0:5a:56:6c:82: c1:66:b1:5c:1e:c8:41:fa:ea:d3:49:7e:fb:14:22:e6:ab:64: ed:ad:ad:93:bc:c5:70:d9:68:41:fb:2c:94:2a:b1:f1:e0:96: 5a:47:0e:39:30:1f:33:f2:01:4b:fe:d3:1c:81:7b:2a:26:4c: 9d:51:9b:13:58:28:99:21:92:d1:84:4d:2f:11:d5:cf:7f:07: cc:c4:f0:4e:fa:5c:a5:d7:13:2d:61:96:d2:e9:48:84:4e:72: 8e:47:f6:f0:5d:82:9d:32:da:9e:25:8a:fb:c5:c5:ca:e1:e1: 5d:28:a1:01:90:51:66:df:6d:00:3c:dd:fa:b2:ac:33:73:90: 0e:ec:ce:77:73:5d:8d:9c:56:f1:d9:39:71:39:1c:44:60:a2: a7:27:cb:23:a3:34:3d:89:72:7c:95:84:b3:4a:ca:3b:72:e2: 79:2e:95:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav1bV/PpoXeArjwECCoCLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzJjZDVkZjczMjM5NTdhYjg3YzA3ZjVjZGQxNWM5MWVm ZmM4ZDUwHhcNMjUxMjI2MTMwMDQ3WhcNMjUxMjI3MTMwMDQ3WjAzMTEwLwYDVQQD EygxYmM0Y2FlNjNkZjkwMGUzMjc3ODJlNzE1NzZhZmI2OTVlZGY3ZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzcazbddg5geX2OPce3WKhtVYuH8 Vli0KzHv1v0nT4OAyRz2T8mT+xZyLOPGRvglt63TqKEbtr0pF0bxX/NPp4hJpapy Mq0M2bePG9d+dngzXNV5OH1B1UKdp4vTG5GcBALCE5TS1OwL7ojdz0A/W3QHhV6w HN3n9oKhYtRDn8gUYAHNkGeA+Ir7ECGNjbSnOCrH9O9fVjOYjkcx3rjpHpU6nJDP hukT3U+DkUSSLogw7YDfsVGPnFyIwKRUw+UTJE4an9KeeAWY6Dg54U3ctIjLUf1R ze8e0zvzhVQMOxySaDh3TYi9Of+KXs1HZxcgVUlcu5Z7RmjaYtoRUE1k/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvEyuY9+QDjJ3gucVdq+2le331aMB8GA1UdIwQY MBaAFDByzV33MjlXq4fAf1zdFcke/8jVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYt NWU5NzQzNzc2MDBjLzEvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYtNWU5NzQzNzc2MDBj LzEvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvbL6bB5o bsdD6Ru74S3IA50kV0Bo9am1w5IjaYqKsjwjvZIKrjsxgEa3RmkHIGTzK5F++dlN qT+zQtkTbJzwdc1LtTSsVYCy3tGVw8bswIL6ZfXrlfBaVmyCwWaxXB7IQfrq00l+ +xQi5qtk7a2tk7zFcNloQfsslCqx8eCWWkcOOTAfM/IBS/7THIF7KiZMnVGbE1go mSGS0YRNLxHVz38HzMTwTvpcpdcTLWGW0ulIhE5yjkf28F2CnTLaniWK+8XFyuHh XSihAZBRZt9tADzd+rKsM3OQDuzOd3NdjZxW8dk5cTkcRGCipyfLI6M0PYlyfJWE s0rKO3LieS6VTQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:47 2025 by rpki-client