This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft File: mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft (raw, json) Hash identifier: 3Xs6nxNODyWhu4e8yd2AnqnA+rBTNL1uXFeXMdq9rmo= Subject key identifier: E7:D6:C5:6E:F4:53:FC:2F:55:D8:D4:23:0F:59:B1:FE:BA:78:B3:CF Authority key identifier: 9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1 Certificate issuer: /CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1 Certificate serial: 019ABA074E100B22C580B73FABB2D676C502 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft Manifest number: 156C Signing time: Tue 25 Nov 2025 08:00:32 +0000 Manifest this update: Tue 25 Nov 2025 08:00:32 +0000 Manifest next update: Wed 26 Nov 2025 08:00:32 +0000 Files and hashes: 1: 0aA52a05uApLKY3CXNmnXhwKrks.roa (hash: MeSVjVqbWBXWuoo0WV7N+n6x9g24v2DXI6O3Ubp3bGI=) 2: mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl (hash: U1O0M7P0gVHkrnMQPqjZdj8LFWfukzq2z5Yv/JBVgz0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 08:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:07:4e:10:0b:22:c5:80:b7:3f:ab:b2:d6:76:c5:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1 Validity Not Before: Nov 25 08:00:32 2025 GMT Not After : Nov 26 08:00:32 2025 GMT Subject: CN=e7d6c56ef453fc2f55d8d4230f59b1feba78b3cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:be:2f:a8:f6:ec:53:57:bc:e4:05:3f:1f: 0a:d4:c8:3c:cb:76:82:1b:a3:5e:52:f7:30:1e:67: ef:41:06:70:52:af:43:78:6b:5b:b3:78:6c:32:a1: 87:a6:0d:41:3e:30:1f:8f:10:1c:04:33:40:88:f2: f6:4e:f1:ca:d8:2f:2f:a4:d5:b4:80:e8:3a:0a:a7: ac:8f:db:6f:c0:5d:21:19:73:f2:1f:3f:bb:82:c8: 27:59:fb:d7:c5:d0:f6:9e:64:f2:64:0f:23:ac:4b: 13:a2:be:50:ce:f9:c8:0c:fd:e2:8c:05:44:3a:23: 3e:3f:0e:21:f5:26:aa:d5:69:d4:97:6d:1e:f5:f1: d5:e8:5e:02:19:98:f5:d6:c6:d3:bd:ed:4f:21:0c: 66:63:59:98:7e:45:d5:41:1b:da:de:b1:aa:93:80: a7:ba:79:3e:13:76:66:f5:b7:8f:83:87:89:e5:6d: 78:58:b2:ec:52:58:c6:d8:04:04:83:4d:c8:76:7a: e1:16:22:8f:02:60:37:d4:b8:45:86:80:2f:8d:ba: 1b:f1:84:5b:53:31:9b:66:7d:b9:1d:62:2a:be:69: 43:ac:8e:ac:d9:5b:9b:5a:a0:2b:9b:11:be:0a:7a: 2d:73:9e:10:6a:cf:1e:16:ec:64:b7:a2:4e:50:8b: 7d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D6:C5:6E:F4:53:FC:2F:55:D8:D4:23:0F:59:B1:FE:BA:78:B3:CF X509v3 Authority Key Identifier: keyid:9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c4:34:f9:6d:d4:6b:91:f3:c9:76:85:36:4d:85:d5:f5:d2: 59:3d:f3:f8:8a:5e:08:bd:c4:b5:67:d4:90:f8:86:cf:39:80: 8b:a4:1b:a0:05:24:25:ce:49:b5:cb:c4:e4:2d:3c:e8:bd:9b: 64:a1:6c:d6:32:9b:ad:e6:ee:53:cf:6e:0a:22:59:4a:f9:a6: 56:54:92:2c:4d:91:e6:a6:10:ba:08:b5:14:48:34:28:bc:0a: 24:a6:4a:9f:8b:f6:9b:c2:b5:af:cf:75:f6:bb:62:f4:47:9b: b1:3b:0c:87:8e:fc:15:af:5d:6c:97:79:02:63:92:f3:96:8d: b3:d7:62:11:01:4d:80:43:49:17:1a:da:5c:25:f5:ae:3f:ed: 47:01:63:45:b9:7d:da:36:f5:e0:99:55:34:8d:ca:4c:24:07: 84:1f:59:c1:5d:4c:68:70:1a:d2:ce:6e:8b:ea:d2:a2:81:06: e9:ee:d4:f0:57:2a:3e:dc:7e:2e:f5:40:09:bb:10:d0:a4:38: 92:ae:e5:87:ea:05:29:9b:f8:09:62:c6:18:c0:1f:f3:de:ca: d6:3a:cf:d7:fe:f1:ac:dd:ba:3c:82:5f:65:fb:f0:a6:02:90: 7a:e2:e9:52:34:d5:38:cc:fb:0f:5d:09:10:de:55:23:81:f4: 96:70:71:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZq6B04QCyLFgLc/q7LWdsUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWEwODY5MmYyMjhkYTBjNDFiMzE3YzZmYTdjYzVjM2Jl YzUxZTEwHhcNMjUxMTI1MDgwMDMyWhcNMjUxMTI2MDgwMDMyWjAzMTEwLwYDVQQD EyhlN2Q2YzU2ZWY0NTNmYzJmNTVkOGQ0MjMwZjU5YjFmZWJhNzhiM2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwi+L6j27FNXvOQFPx8K1Mg8y3aC G6NeUvcwHmfvQQZwUq9DeGtbs3hsMqGHpg1BPjAfjxAcBDNAiPL2TvHK2C8vpNW0 gOg6Cqesj9tvwF0hGXPyHz+7gsgnWfvXxdD2nmTyZA8jrEsTor5QzvnIDP3ijAVE OiM+Pw4h9Saq1WnUl20e9fHV6F4CGZj11sbTve1PIQxmY1mYfkXVQRva3rGqk4Cn unk+E3Zm9bePg4eJ5W14WLLsUljG2AQEg03IdnrhFiKPAmA31LhFhoAvjbob8YRb UzGbZn25HWIqvmlDrI6s2VubWqArmxG+Cnotc54Qas8eFuxkt6JOUIt9swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfWxW70U/wvVdjUIw9Zsf66eLPPMB8GA1UdIwQY MBaAFJoaCGkvIo2gxBsxfG+nzFw77FHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWhvSWFTOGlqYURFR3pGOGI2Zk1YRHZzVWVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kMGZhZDEtYjhiMS00OTYwLWI2N2Yt MDJlZGYwOGY3Y2Y4LzEvbWhvSWFTOGlqYURFR3pGOGI2Zk1YRHZzVWVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kMGZhZDEtYjhiMS00OTYwLWI2N2YtMDJlZGYwOGY3Y2Y4 LzEvbWhvSWFTOGlqYURFR3pGOGI2Zk1YRHZzVWVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMQ0+W3U a5HzyXaFNk2F1fXSWT3z+IpeCL3EtWfUkPiGzzmAi6QboAUkJc5JtcvE5C086L2b ZKFs1jKbrebuU89uCiJZSvmmVlSSLE2R5qYQugi1FEg0KLwKJKZKn4v2m8K1r891 9rti9EebsTsMh478Fa9dbJd5AmOS85aNs9diEQFNgENJFxraXCX1rj/tRwFjRbl9 2jb14JlVNI3KTCQHhB9ZwV1MaHAa0s5ui+rSooEG6e7U8FcqPtx+LvVACbsQ0KQ4 kq7lh+oFKZv4CWLGGMAf897K1jrP1/7xrN26PIJfZfvwpgKQeuLpUjTVOMz7D10J EN5VI4H0lnBxBg== -----END CERTIFICATE-----Generated at Tue Nov 25 13:00:47 2025 by rpki-client