This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft File: mHyvDLazMBzAhKJdXCFBCpLKfjY.mft (raw, json) Hash identifier: COwRpOmtKn2hVh329AR1A1sd2PPu0EVCd9WmZIos6gA= Subject key identifier: 49:18:04:85:09:92:65:B3:5F:FC:DC:9A:B9:3D:74:B9:89:FE:05:9F Authority key identifier: 98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36 Certificate issuer: /CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36 Certificate serial: 019AFBE76FFF62BE6E90B0736B6671216ADA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft Manifest number: 08D9 Signing time: Mon 08 Dec 2025 03:00:39 +0000 Manifest this update: Mon 08 Dec 2025 03:00:39 +0000 Manifest next update: Tue 09 Dec 2025 03:00:39 +0000 Files and hashes: 1: mANtdvjrwJb7CPzwvDq9bTI0qtY.roa (hash: bxccQm8ZlD2A8QhBkFeAoasQeWmGc7036H8m3hd3seo=) 2: mHyvDLazMBzAhKJdXCFBCpLKfjY.crl (hash: cQ52dZE8B2Q7CBCvjc9EriMcrsIPjAozwPe4vE8cSAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fb:e7:6f:ff:62:be:6e:90:b0:73:6b:66:71:21:6a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=987caf0cb6b3301cc084a25d5c21410a92ca7e36 Validity Not Before: Dec 8 03:00:39 2025 GMT Not After : Dec 9 03:00:39 2025 GMT Subject: CN=49180485099265b35ffcdc9ab93d74b989fe059f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1a:af:eb:3f:5d:89:f8:05:49:5c:e1:94:ee: 53:cd:4c:56:8f:f3:95:a5:51:46:fa:04:c5:0f:c3: ed:43:ba:48:2d:7e:11:28:a8:57:b5:6b:81:63:54: 09:a3:77:ad:e3:c1:04:9b:f7:4a:6c:da:dc:84:54: a4:91:b4:21:91:ca:31:50:36:04:a2:d0:69:6b:74: fd:a8:f8:32:96:74:24:98:a4:b3:e8:7e:50:d0:ac: c7:02:53:50:aa:16:01:12:95:db:14:48:85:72:77: 48:16:02:91:8d:cd:94:76:64:31:5d:a9:8f:62:1a: 41:09:e6:d0:3e:4f:d9:f5:d6:79:80:b6:10:31:7f: 71:90:5d:9c:52:30:6f:72:ef:0b:8f:2b:5e:f0:b7: 01:f8:1e:ef:cc:cf:5b:ac:0f:0c:aa:51:8d:74:4b: 08:00:b0:49:35:6a:7a:76:66:e3:b8:b8:9c:b7:09: 01:dd:e9:96:a3:7d:e7:b1:3e:85:b5:eb:7c:eb:2e: e1:d9:d6:2e:8a:28:61:be:08:14:08:b7:7c:5c:6f: d5:2c:46:be:af:04:62:31:7b:8c:39:c7:7d:e5:4e: f1:63:ce:10:59:86:54:8e:04:58:31:b4:a6:d3:06: 7a:e7:68:b8:ad:b9:1c:b3:0d:75:19:73:70:8a:fa: 21:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:18:04:85:09:92:65:B3:5F:FC:DC:9A:B9:3D:74:B9:89:FE:05:9F X509v3 Authority Key Identifier: keyid:98:7C:AF:0C:B6:B3:30:1C:C0:84:A2:5D:5C:21:41:0A:92:CA:7E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHyvDLazMBzAhKJdXCFBCpLKfjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f58da0-dfbe-416a-bfaa-36170cd81330/1/mHyvDLazMBzAhKJdXCFBCpLKfjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:20:40:3b:5c:88:ee:e8:72:9c:3c:d9:53:b3:76:a7:38:e9: 0b:92:47:ed:37:9a:f2:a7:9f:3f:46:6d:3c:06:38:55:67:14: 78:ab:87:7c:a0:5e:a3:d5:90:16:4f:ed:0f:86:e8:f8:65:9f: ec:f6:7b:c8:1e:ac:36:76:5d:c8:88:fc:de:a0:44:30:e5:13: 80:18:76:73:de:e1:93:b6:a5:f1:89:70:78:ea:08:03:98:54: b6:ea:eb:b9:02:58:10:b0:77:24:5c:47:ca:fa:0f:3f:86:81: 71:f0:c7:51:7a:78:01:12:2e:69:5b:62:18:8c:eb:47:49:28: 2b:51:83:ad:b1:b7:79:a1:8c:06:6e:e5:88:73:27:a7:ca:fd: 9d:5f:f7:46:a3:7f:5b:c0:81:2b:6a:7d:7c:a4:39:cd:c5:64: b3:4e:f2:9c:75:4f:13:f2:82:0b:d1:72:54:38:4d:c6:72:90: bf:2a:1b:bf:37:cf:d4:b3:d4:cf:67:07:39:9b:a5:39:00:32: de:f3:71:2c:45:f5:12:3b:a8:45:10:78:7b:11:72:9b:ca:20: 1a:56:5d:ec:da:69:85:08:3c:0f:93:f5:b9:a4:2c:e1:04:b1: 7e:67:b7:a6:76:9d:e4:f7:96:eb:a6:57:cc:ae:22:5b:18:c5: 71:28:15:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr752//Yr5ukLBza2ZxIWraMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4N2NhZjBjYjZiMzMwMWNjMDg0YTI1ZDVjMjE0MTBhOTJj YTdlMzYwHhcNMjUxMjA4MDMwMDM5WhcNMjUxMjA5MDMwMDM5WjAzMTEwLwYDVQQD Eyg0OTE4MDQ4NTA5OTI2NWIzNWZmY2RjOWFiOTNkNzRiOTg5ZmUwNTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBqv6z9difgFSVzhlO5TzUxWj/OV pVFG+gTFD8PtQ7pILX4RKKhXtWuBY1QJo3et48EEm/dKbNrchFSkkbQhkcoxUDYE otBpa3T9qPgylnQkmKSz6H5Q0KzHAlNQqhYBEpXbFEiFcndIFgKRjc2UdmQxXamP YhpBCebQPk/Z9dZ5gLYQMX9xkF2cUjBvcu8Ljyte8LcB+B7vzM9brA8MqlGNdEsI ALBJNWp6dmbjuLictwkB3emWo33nsT6Ftet86y7h2dYuiihhvggUCLd8XG/VLEa+ rwRiMXuMOcd95U7xY84QWYZUjgRYMbSm0wZ652i4rbkcsw11GXNwivohDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEkYBIUJkmWzX/zcmrk9dLmJ/gWfMB8GA1UdIwQY MBaAFJh8rwy2szAcwISiXVwhQQqSyn42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUh5dkRMYXpNQnpBaEtKZFhDRkJDcExLZmpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mNThkYTAtZGZiZS00MTZhLWJmYWEt MzYxNzBjZDgxMzMwLzEvbUh5dkRMYXpNQnpBaEtKZFhDRkJDcExLZmpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mNThkYTAtZGZiZS00MTZhLWJmYWEtMzYxNzBjZDgxMzMw LzEvbUh5dkRMYXpNQnpBaEtKZFhDRkJDcExLZmpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiBAO1yI 7uhynDzZU7N2pzjpC5JH7Tea8qefP0ZtPAY4VWcUeKuHfKBeo9WQFk/tD4bo+GWf 7PZ7yB6sNnZdyIj83qBEMOUTgBh2c97hk7al8YlweOoIA5hUturruQJYELB3JFxH yvoPP4aBcfDHUXp4ARIuaVtiGIzrR0koK1GDrbG3eaGMBm7liHMnp8r9nV/3RqN/ W8CBK2p9fKQ5zcVks07ynHVPE/KCC9FyVDhNxnKQvyobvzfP1LPUz2cHOZulOQAy 3vNxLEX1EjuoRRB4exFym8ogGlZd7NpphQg8D5P1uaQs4QSxfme3pnad5PeW66ZX zK4iWxjFcSgV6A== -----END CERTIFICATE-----Generated at Mon Dec 8 08:41:54 2025 by rpki-client