This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft File: MHFOgRmzE03MBg_lkAp82Gj8WXM.mft (raw, json) Hash identifier: EzPEtjDpGQFXkzzm5OXFnkyxNyr3uN/nSXOFcNuEvKc= Subject key identifier: F1:2E:24:0E:1E:96:03:63:D2:AC:F9:C7:9E:49:69:FE:1F:55:AD:EF Authority key identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73 Certificate issuer: /CN=30714e8119b3134dcc060fe5900a7cd868fc5973 Certificate serial: 019B24AC7D222CFDBC3E15EFA8FF6F78397D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft Manifest number: 0321 Signing time: Tue 16 Dec 2025 01:00:42 +0000 Manifest this update: Tue 16 Dec 2025 01:00:42 +0000 Manifest next update: Wed 17 Dec 2025 01:00:42 +0000 Files and hashes: 1: MHFOgRmzE03MBg_lkAp82Gj8WXM.crl (hash: X5e3NtShS1MzJwl2VgV5GUgFG2mKGqgAAkQhNfHC7uw=) 2: s8cM_dy31wLZQn4guvFF3f9HiZg.roa (hash: 4BYSDQG+JLpKAQER6Y51ZvwyHGW9NfhpGsXwE25xvBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:7d:22:2c:fd:bc:3e:15:ef:a8:ff:6f:78:39:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30714e8119b3134dcc060fe5900a7cd868fc5973 Validity Not Before: Dec 16 01:00:42 2025 GMT Not After : Dec 17 01:00:42 2025 GMT Subject: CN=f12e240e1e960363d2acf9c79e4969fe1f55adef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0c:40:26:0b:e9:30:db:44:ce:82:73:e4:65: 32:90:c0:13:38:35:b4:c6:40:62:f5:27:7f:75:fa: 77:cb:c1:8e:2b:15:93:ff:3b:3f:31:3d:1f:d9:87: db:5f:25:6c:a6:27:a6:58:04:a0:63:bc:f8:86:55: 0a:18:73:18:d4:a1:e1:2c:f3:80:48:c5:89:01:41: db:ed:b8:e8:6b:79:46:e1:fc:fe:b5:47:d2:39:fc: 6d:8f:5e:be:88:d5:1e:c4:0a:e9:91:6a:80:db:26: 01:37:16:25:1f:97:d3:90:6c:de:5b:12:ac:f8:31: 27:e5:a6:e5:4d:71:07:10:a2:f0:b9:52:cc:3f:58: 94:d6:f5:c3:ad:87:de:8a:78:b5:a5:25:de:f9:f1: 00:b7:e1:6e:22:42:bd:b0:b0:7f:48:2e:50:94:34: b1:aa:fc:30:d7:10:2f:db:13:5e:a1:1f:61:22:85: b2:af:d7:82:07:20:c9:28:26:b4:06:82:56:46:2c: c5:ae:a3:35:64:f9:6e:03:20:37:f5:f1:c3:75:f4: 3f:21:e1:01:f7:4d:64:c6:51:f2:ae:f8:e2:13:4f: 5b:6c:58:3f:b0:e9:f4:d9:ac:e2:72:dd:23:7d:e2: 52:40:ff:cb:ec:14:4f:63:67:68:b6:12:74:a3:7c: b4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:2E:24:0E:1E:96:03:63:D2:AC:F9:C7:9E:49:69:FE:1F:55:AD:EF X509v3 Authority Key Identifier: keyid:30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:25:92:a3:7c:df:b2:2c:4e:2f:e8:b2:f8:52:4f:12:a3:03: 3b:be:4e:66:03:a3:65:7c:74:4a:e5:38:59:b2:f4:89:85:64: 13:61:01:48:e1:a7:e0:84:91:43:de:71:30:a3:fb:b0:fc:49: 59:58:28:08:6f:91:4c:ea:66:6e:c3:c0:b1:f3:91:7d:bc:d0: 26:74:5a:f9:8a:23:d0:8e:5b:f2:4d:36:17:32:e5:59:ab:70: e4:27:78:e6:81:10:eb:83:7b:32:04:fe:82:ba:11:65:32:41: fc:de:34:86:55:1a:6a:cc:9b:bb:03:f5:b6:86:c9:84:a1:3b: 84:30:c5:c1:56:e9:7b:16:8e:f5:e8:28:05:ce:ab:df:d7:5e: 2b:1d:86:02:1c:31:42:19:e8:2b:13:ce:5b:93:85:55:8b:89: b8:1f:0e:20:ee:a2:84:f1:e7:9e:b4:ef:5d:5f:d7:a8:27:b4: d7:4d:69:ae:52:87:38:f8:7b:f1:51:0f:a2:26:c2:47:f8:65: 62:ca:0c:6e:70:c4:e4:9e:fe:a5:94:a2:88:49:cc:55:1f:d4: de:31:79:de:0d:aa:35:43:41:a5:25:d0:d8:b9:b8:df:f2:e3: 64:40:6b:0c:98:5e:89:df:b9:8e:98:13:29:d7:bc:f3:7f:3e: 59:32:fe:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrH0iLP28PhXvqP9veDl9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzE0ZTgxMTliMzEzNGRjYzA2MGZlNTkwMGE3Y2Q4Njhm YzU5NzMwHhcNMjUxMjE2MDEwMDQyWhcNMjUxMjE3MDEwMDQyWjAzMTEwLwYDVQQD EyhmMTJlMjQwZTFlOTYwMzYzZDJhY2Y5Yzc5ZTQ5NjlmZTFmNTVhZGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7AxAJgvpMNtEzoJz5GUykMATODW0 xkBi9Sd/dfp3y8GOKxWT/zs/MT0f2YfbXyVspiemWASgY7z4hlUKGHMY1KHhLPOA SMWJAUHb7bjoa3lG4fz+tUfSOfxtj16+iNUexArpkWqA2yYBNxYlH5fTkGzeWxKs +DEn5ablTXEHEKLwuVLMP1iU1vXDrYfeini1pSXe+fEAt+FuIkK9sLB/SC5QlDSx qvww1xAv2xNeoR9hIoWyr9eCByDJKCa0BoJWRizFrqM1ZPluAyA39fHDdfQ/IeEB 901kxlHyrvjiE09bbFg/sOn02azict0jfeJSQP/L7BRPY2dothJ0o3y0rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEuJA4elgNj0qz5x55Jaf4fVa3vMB8GA1UdIwQY MBaAFDBxToEZsxNNzAYP5ZAKfNho/FlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEt OGYzNDcwZDgyMDU3LzEvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEtOGYzNDcwZDgyMDU3 LzEvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSWSo3zf sixOL+iy+FJPEqMDO75OZgOjZXx0SuU4WbL0iYVkE2EBSOGn4ISRQ95xMKP7sPxJ WVgoCG+RTOpmbsPAsfORfbzQJnRa+Yoj0I5b8k02FzLlWatw5Cd45oEQ64N7MgT+ groRZTJB/N40hlUaasybuwP1tobJhKE7hDDFwVbpexaO9egoBc6r39deKx2GAhwx QhnoKxPOW5OFVYuJuB8OIO6ihPHnnrTvXV/XqCe0101prlKHOPh78VEPoibCR/hl YsoMbnDE5J7+pZSiiEnMVR/U3jF53g2qNUNBpSXQ2Lm43/LjZEBrDJheid+5jpgT Kde8838+WTL+Gw== -----END CERTIFICATE-----Generated at Tue Dec 16 06:39:45 2025 by rpki-client