This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json) Hash identifier: e/iozx5LTjN8dOBtTMy61gw6Ya9JoncjFJp2YN9gjYs= Subject key identifier: C2:33:E1:D0:ED:4C:82:C8:50:8B:A5:90:A9:24:42:7E:4C:72:FF:2D Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12 Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12 Certificate serial: 019AF1648032043552C12F792BC13815CA36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft Manifest number: 14C1 Signing time: Sat 06 Dec 2025 02:01:26 +0000 Manifest this update: Sat 06 Dec 2025 02:01:26 +0000 Manifest next update: Sun 07 Dec 2025 02:01:26 +0000 Files and hashes: 1: 2-EWeyDof1gs1UXEMD1lZZEw63s.roa (hash: z23ouPdaISiuPb4TFlEiuytYryYuZhpuF1K4d2C9fgs=) 2: ZYUzGeilRyfhVGBGDs3ScwXWgUY.roa (hash: gBAr68IvuzGBsMRnZQFpHYo6Uf7sa+Fh75TAVHTzSCc=) 3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: 49YJLo62Q+aoWLsqorF/H0jKHpmX1QGNOOLxC4Rc7xI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:80:32:04:35:52:c1:2f:79:2b:c1:38:15:ca:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12 Validity Not Before: Dec 6 02:01:26 2025 GMT Not After : Dec 7 02:01:26 2025 GMT Subject: CN=c233e1d0ed4c82c8508ba590a924427e4c72ff2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:68:34:cd:9d:36:e1:7b:6c:8c:ab:83:37: cc:e8:dc:4d:e9:ee:d9:4b:7b:ab:69:2d:e9:91:c0: 2e:80:b6:fb:15:80:17:da:c0:25:65:9e:b0:99:01: 8d:87:08:63:57:fc:ed:36:19:b9:6b:f1:f1:b8:51: 94:16:7a:f5:67:2e:a6:ff:85:a5:b2:34:fc:e8:7c: cd:0a:af:0e:79:f8:56:7d:3f:68:00:30:5f:6f:b0: df:07:ff:0f:78:96:69:6f:04:03:4a:ab:8d:93:ba: 33:0d:8b:dc:cb:1f:9a:a9:75:aa:96:31:14:9d:ee: 4a:15:cd:bf:93:d4:51:aa:05:72:35:34:da:62:49: cb:a1:4e:20:34:23:b7:15:e3:c6:51:3d:19:c4:b4: 3b:38:be:07:6e:6d:01:f6:46:47:0d:86:ae:e8:9f: 12:7f:06:69:dd:0b:5b:1b:a2:57:ef:5d:91:c6:7b: 6c:bd:d0:cf:2a:20:cc:11:84:ac:58:b0:01:3c:f8: 81:42:23:8e:39:b7:1c:58:77:76:85:98:ac:eb:e3: 77:86:a5:7b:4d:86:13:29:6c:23:ac:e5:f0:82:65: 36:87:2d:f9:b9:39:17:9d:2a:ed:03:a9:b0:3d:19: 9c:06:d2:39:2c:55:bb:03:12:46:94:2f:20:a1:cd: 6e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:33:E1:D0:ED:4C:82:C8:50:8B:A5:90:A9:24:42:7E:4C:72:FF:2D X509v3 Authority Key Identifier: keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f8:b3:6b:c5:61:5a:7b:cf:d8:38:a9:9b:ee:e7:1a:cf:17: ce:3c:af:8f:27:2e:a4:05:4b:43:7b:ba:37:89:8f:ff:c4:ad: f5:ca:0a:5a:35:51:cb:30:f0:38:95:1a:35:bb:89:82:6f:b6: fe:78:e9:1b:19:13:4e:c8:ef:20:15:8a:34:4c:ec:c6:3b:9e: e2:67:ac:37:82:d9:11:e1:f8:37:dc:c2:8b:73:bd:18:04:30: f1:93:79:6f:a7:b6:f1:82:a5:48:90:1b:1c:f8:fa:d1:02:85: 37:b7:e7:08:2e:a2:90:e1:7b:fe:b7:e6:33:2e:2f:99:8f:33: 1a:47:b5:f8:b2:97:e6:f8:d8:a3:5d:b3:0c:cd:4c:3f:54:9b: 4a:ef:e0:5e:83:12:f3:0a:97:73:b8:d9:70:af:65:64:2a:51: c8:0d:db:73:41:fd:47:89:07:31:8d:cb:b1:b5:92:df:da:9d: ec:c6:cb:67:ca:f9:cb:ca:1b:69:20:a0:39:09:50:38:7e:0c: ac:86:5c:8e:36:64:cc:93:c3:4e:03:74:4f:94:b4:56:d7:8a: 31:03:c4:e8:a1:3d:1d:3b:67:82:03:3f:01:8c:cd:91:f1:26: 60:ab:76:66:07:24:5a:95:2f:44:78:e8:63:21:f9:d1:19:45: 37:24:36:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZIAyBDVSwS95K8E4Fco2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NzBiZjRmOTUzNTBkMDM3N2ZhODkzOGJmNGYyZGNiN2U3 MmZmMTIwHhcNMjUxMjA2MDIwMTI2WhcNMjUxMjA3MDIwMTI2WjAzMTEwLwYDVQQD EyhjMjMzZTFkMGVkNGM4MmM4NTA4YmE1OTBhOTI0NDI3ZTRjNzJmZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NNoNM2dNuF7bIyrgzfM6NxN6e7Z S3uraS3pkcAugLb7FYAX2sAlZZ6wmQGNhwhjV/ztNhm5a/HxuFGUFnr1Zy6m/4Wl sjT86HzNCq8OefhWfT9oADBfb7DfB/8PeJZpbwQDSquNk7ozDYvcyx+aqXWqljEU ne5KFc2/k9RRqgVyNTTaYknLoU4gNCO3FePGUT0ZxLQ7OL4Hbm0B9kZHDYau6J8S fwZp3QtbG6JX712RxntsvdDPKiDMEYSsWLABPPiBQiOOObccWHd2hZis6+N3hqV7 TYYTKWwjrOXwgmU2hy35uTkXnSrtA6mwPRmcBtI5LFW7AxJGlC8goc1uZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIz4dDtTILIUIulkKkkQn5Mcv8tMB8GA1UdIwQY MBaAFJhwv0+VNQ0Dd/qJOL9PLct+cv8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82MDBhMzctZjk2Ny00NWIxLWExZGQt MDdhMzE1ZTkwMzNkLzEvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi82MDBhMzctZjk2Ny00NWIxLWExZGQtMDdhMzE1ZTkwMzNk LzEvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPiza8Vh WnvP2Dipm+7nGs8XzjyvjycupAVLQ3u6N4mP/8St9coKWjVRyzDwOJUaNbuJgm+2 /njpGxkTTsjvIBWKNEzsxjue4mesN4LZEeH4N9zCi3O9GAQw8ZN5b6e28YKlSJAb HPj60QKFN7fnCC6ikOF7/rfmMy4vmY8zGke1+LKX5vjYo12zDM1MP1SbSu/gXoMS 8wqXc7jZcK9lZCpRyA3bc0H9R4kHMY3LsbWS39qd7MbLZ8r5y8obaSCgOQlQOH4M rIZcjjZkzJPDTgN0T5S0VteKMQPE6KE9HTtnggM/AYzNkfEmYKt2ZgckWpUvRHjo YyH50RlFNyQ2Sg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:01:22 2025 by rpki-client