This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json) Hash identifier: YVkTxCaghUbiSrYOIqmtUuZGT+0mzLXaagMaFuaqIzs= Subject key identifier: 07:1F:D5:E3:39:66:CB:1E:7A:1E:41:7E:31:54:AF:2A:84:2A:B6:15 Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12 Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12 Certificate serial: 019B2588A0B28ADEAB47EB691B27137007B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft Manifest number: 14DC Signing time: Tue 16 Dec 2025 05:01:09 +0000 Manifest this update: Tue 16 Dec 2025 05:01:09 +0000 Manifest next update: Wed 17 Dec 2025 05:01:09 +0000 Files and hashes: 1: 2-EWeyDof1gs1UXEMD1lZZEw63s.roa (hash: z23ouPdaISiuPb4TFlEiuytYryYuZhpuF1K4d2C9fgs=) 2: ZYUzGeilRyfhVGBGDs3ScwXWgUY.roa (hash: gBAr68IvuzGBsMRnZQFpHYo6Uf7sa+Fh75TAVHTzSCc=) 3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: HTAuNvurU6mcoqZUCOWKQlOutMyQF3Zch5DKcMcwEss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:a0:b2:8a:de:ab:47:eb:69:1b:27:13:70:07:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12 Validity Not Before: Dec 16 05:01:09 2025 GMT Not After : Dec 17 05:01:09 2025 GMT Subject: CN=071fd5e33966cb1e7a1e417e3154af2a842ab615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:d5:41:b8:7f:32:b2:e2:a7:d4:a3:4e:8a:15: 50:c9:e0:4a:95:a3:79:60:7c:99:e9:7f:d8:6e:85: 23:78:ab:4a:c0:42:44:87:02:f6:dd:fb:3d:a4:8f: 23:f5:19:2e:be:b8:81:fc:b5:b8:fe:17:a1:4b:b9: 24:8f:3c:f2:cc:f1:26:1d:cc:8c:e6:35:4e:8e:d6: 01:ae:82:34:a7:77:d0:1d:f2:4e:86:d4:9a:05:63: 85:bf:61:08:d1:1e:92:e9:de:43:6a:8a:1c:a2:29: f0:4e:15:6a:a2:98:b7:b4:f2:a7:e1:ea:00:43:24: 69:60:40:4e:42:a3:25:27:98:31:db:b3:09:41:e8: 67:c6:d0:74:2d:7e:7b:ba:68:bc:16:89:5b:f2:5d: 56:d7:29:f9:28:6e:ba:0f:39:29:34:5f:98:24:2f: c8:02:b0:7e:68:16:41:41:31:ed:f9:82:c5:d1:f9: df:2f:91:29:c7:11:45:98:ce:80:3c:c0:7d:f4:aa: 28:90:ae:3f:9f:31:e6:04:09:50:73:51:de:a7:d4: 41:46:0a:86:0a:44:b5:eb:4c:eb:8e:ff:66:1d:bb: e2:f5:86:e5:60:76:fe:74:ce:b5:55:33:ff:b9:3d: 6a:09:0a:4b:6a:96:d6:73:87:b7:90:9b:ee:14:d6: b2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1F:D5:E3:39:66:CB:1E:7A:1E:41:7E:31:54:AF:2A:84:2A:B6:15 X509v3 Authority Key Identifier: keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:22:18:84:41:85:6e:06:02:f4:bf:3b:a7:fc:1b:15:b0:66: 7f:62:f3:96:62:34:a3:c5:53:73:7d:91:2e:2c:9f:14:2e:2b: f9:df:92:0b:fb:f3:7e:f6:16:d4:c2:e1:84:09:f4:34:6e:fc: 03:d8:83:53:d8:a8:6e:04:3c:28:f7:11:8d:0c:c8:14:44:f3: a8:59:08:17:c3:5e:e0:d8:7c:37:31:57:77:02:fb:93:6c:3c: dc:ab:07:85:27:03:1a:16:48:30:5c:f1:1a:26:0f:db:a3:39: 06:f2:7c:2c:0a:d5:c4:29:b5:e3:4c:4f:14:ed:13:72:89:c3: 37:0e:50:c9:aa:4f:55:fc:a9:2b:8b:de:dd:d4:0f:af:f1:17: 54:32:05:86:01:0a:7a:3c:a6:48:c3:22:c7:65:8f:70:99:5c: 1a:1b:5a:5b:6c:95:4d:7e:79:b8:93:7c:fd:76:2c:34:0b:42: 35:27:d2:61:e7:22:7d:8c:8f:a7:85:b3:6b:e9:da:7d:50:d5: 4c:98:37:fc:8a:51:77:f0:49:ff:d3:ef:15:2e:43:7f:0c:35: 2e:1c:ce:31:67:38:73:d5:ba:c7:b0:d2:14:b8:8f:86:94:1f: 21:ca:c8:6b:fd:3e:d1:d6:9f:84:4b:70:1b:23:2e:3e:89:e0: d0:f9:85:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliKCyit6rR+tpGycTcAe3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NzBiZjRmOTUzNTBkMDM3N2ZhODkzOGJmNGYyZGNiN2U3 MmZmMTIwHhcNMjUxMjE2MDUwMTA5WhcNMjUxMjE3MDUwMTA5WjAzMTEwLwYDVQQD EygwNzFmZDVlMzM5NjZjYjFlN2ExZTQxN2UzMTU0YWYyYTg0MmFiNjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29VBuH8ysuKn1KNOihVQyeBKlaN5 YHyZ6X/YboUjeKtKwEJEhwL23fs9pI8j9RkuvriB/LW4/hehS7kkjzzyzPEmHcyM 5jVOjtYBroI0p3fQHfJOhtSaBWOFv2EI0R6S6d5DaoocoinwThVqopi3tPKn4eoA QyRpYEBOQqMlJ5gx27MJQehnxtB0LX57umi8Folb8l1W1yn5KG66DzkpNF+YJC/I ArB+aBZBQTHt+YLF0fnfL5EpxxFFmM6APMB99KookK4/nzHmBAlQc1Hep9RBRgqG CkS160zrjv9mHbvi9YblYHb+dM61VTP/uT1qCQpLapbWc4e3kJvuFNay9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcf1eM5Zsseeh5BfjFUryqEKrYVMB8GA1UdIwQY MBaAFJhwv0+VNQ0Dd/qJOL9PLct+cv8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82MDBhMzctZjk2Ny00NWIxLWExZGQt MDdhMzE1ZTkwMzNkLzEvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi82MDBhMzctZjk2Ny00NWIxLWExZGQtMDdhMzE1ZTkwMzNk LzEvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCIYhEGF bgYC9L87p/wbFbBmf2LzlmI0o8VTc32RLiyfFC4r+d+SC/vzfvYW1MLhhAn0NG78 A9iDU9iobgQ8KPcRjQzIFETzqFkIF8Ne4Nh8NzFXdwL7k2w83KsHhScDGhZIMFzx GiYP26M5BvJ8LArVxCm140xPFO0TconDNw5QyapPVfypK4ve3dQPr/EXVDIFhgEK ejymSMMix2WPcJlcGhtaW2yVTX55uJN8/XYsNAtCNSfSYecifYyPp4Wza+nafVDV TJg3/IpRd/BJ/9PvFS5Dfww1LhzOMWc4c9W6x7DSFLiPhpQfIcrIa/0+0dafhEtw GyMuPong0PmFYQ== -----END CERTIFICATE-----Generated at Tue Dec 16 10:50:32 2025 by rpki-client