This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json) Hash identifier: qdRqyxuPaiwoDUiDDaKrMNUA/1hIGP1anJUfog06nS0= Subject key identifier: A2:56:1E:2E:C3:9E:AC:EC:7A:9F:10:76:91:25:A2:F5:50:24:37:25 Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd Certificate serial: 019AF12ED5EC9BA7F161442B5C52A75ACDE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft Manifest number: 0E47 Signing time: Sat 06 Dec 2025 01:02:49 +0000 Manifest this update: Sat 06 Dec 2025 01:02:49 +0000 Manifest next update: Sun 07 Dec 2025 01:02:49 +0000 Files and hashes: 1: CZfN1SE3Kc9ElQiX9c_wypBuCR4.roa (hash: U185B9hh525/Yo0ZTbLEnbl6qvuJNK4eFDrA94l5T14=) 2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: i1YuW/mXYFXCM7NQWsa+/Hwx2T4hw+T+6lkheK9T9+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d5:ec:9b:a7:f1:61:44:2b:5c:52:a7:5a:cd:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd Validity Not Before: Dec 6 01:02:49 2025 GMT Not After : Dec 7 01:02:49 2025 GMT Subject: CN=a2561e2ec39eacec7a9f10769125a2f550243725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:68:94:68:14:cb:d8:14:85:0d:c9:dd:6d:b0: af:f1:4d:1a:b3:2a:d5:02:d7:24:46:d0:f8:fe:9b: 1e:d3:45:0b:9f:83:4a:65:e7:66:d8:d0:08:82:43: ff:89:e0:24:37:5c:54:d9:75:59:75:97:d1:da:1a: 56:1d:ae:ae:a7:0f:a0:ed:e5:1e:9f:8f:25:7a:8d: 38:d8:09:37:7a:55:40:dc:92:85:65:4a:96:09:51: b4:2c:29:9c:b8:46:96:2f:3c:31:a7:60:91:18:0f: e2:3e:53:ba:f7:c2:d5:74:cc:32:0e:26:0a:69:6d: cf:0f:99:b2:1d:23:ed:22:6b:bc:75:fa:ff:15:bd: 60:99:02:88:4f:bd:a5:46:38:fa:5e:0c:62:1c:0e: 46:e7:3f:58:bb:86:fb:5d:3d:01:e3:0b:30:77:98: 66:01:24:75:da:4a:20:57:36:c7:0a:d1:76:bb:5b: 1f:96:d2:f8:99:26:6a:cd:51:7c:58:f0:3f:a0:ae: 4c:8d:5f:13:f3:e1:1e:c5:07:88:bc:b4:c1:e6:2d: 19:c0:46:56:a2:f9:4e:b5:34:13:8c:b2:04:2a:bb: 26:69:ec:05:2e:e6:ff:06:da:73:51:3d:6b:3a:43: a3:fc:62:ef:84:91:6b:96:0a:62:d7:db:a8:e6:36: da:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:56:1E:2E:C3:9E:AC:EC:7A:9F:10:76:91:25:A2:F5:50:24:37:25 X509v3 Authority Key Identifier: keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:90:97:d2:08:54:29:e4:1d:b5:6d:36:ca:43:d1:41:59:85: 10:4b:25:a6:18:22:c5:ac:fa:95:b8:ea:fa:b4:dd:1d:2a:60: 73:ae:61:82:5c:dc:64:4a:db:9d:f0:f1:2c:03:17:d9:68:56: 9e:80:53:63:f2:63:41:59:a9:a7:75:57:0d:51:27:43:48:02: 9e:00:f2:09:6c:79:89:1e:c8:30:d1:39:a2:aa:ce:82:ca:37: 2b:37:f2:a0:47:ab:3a:5b:9d:c9:68:bf:af:35:71:19:38:9a: c2:2c:11:19:51:6c:cb:41:ea:60:3b:3d:ab:0a:f9:05:63:9f: ae:20:0b:30:cc:3a:48:97:23:6e:a7:28:93:ef:6d:b5:0c:9d: 4d:66:82:e9:51:67:f0:eb:9d:a1:c7:4d:a0:13:4a:f2:e1:ed: d9:72:62:a4:d0:87:9f:26:87:ca:3b:91:c6:56:e0:d7:38:a6: b8:17:a7:89:67:3f:d2:ad:29:d5:dc:6b:25:6e:bf:64:df:ca: ba:2c:c9:7b:cb:fa:eb:91:29:c6:d8:73:ac:72:a7:a8:24:aa: 6c:4f:9b:c3:2c:12:68:90:1d:cb:06:b5:4e:64:a3:c6:23:36: 9b:fa:9a:af:e4:e0:6b:df:d7:5b:15:4d:49:5f:12:b4:c3:e5: 8b:ce:b4:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtXsm6fxYUQrXFKnWs3jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMThjNzkwNTgyZTk5YmZiNTBlZTc1ODQ2M2RjNWFmZGNj YmY0YmQwHhcNMjUxMjA2MDEwMjQ5WhcNMjUxMjA3MDEwMjQ5WjAzMTEwLwYDVQQD EyhhMjU2MWUyZWMzOWVhY2VjN2E5ZjEwNzY5MTI1YTJmNTUwMjQzNzI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymiUaBTL2BSFDcndbbCv8U0asyrV AtckRtD4/pse00ULn4NKZedm2NAIgkP/ieAkN1xU2XVZdZfR2hpWHa6upw+g7eUe n48leo042Ak3elVA3JKFZUqWCVG0LCmcuEaWLzwxp2CRGA/iPlO698LVdMwyDiYK aW3PD5myHSPtImu8dfr/Fb1gmQKIT72lRjj6XgxiHA5G5z9Yu4b7XT0B4wswd5hm ASR12kogVzbHCtF2u1sfltL4mSZqzVF8WPA/oK5MjV8T8+EexQeIvLTB5i0ZwEZW ovlOtTQTjLIEKrsmaewFLub/BtpzUT1rOkOj/GLvhJFrlgpi19uo5jbaowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJWHi7Dnqzsep8QdpElovVQJDclMB8GA1UdIwQY MBaAFJoYx5BYLpm/tQ7nWEY9xa/cy/S9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYt NWMzNWRiYWJhMjRiLzEvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYtNWMzNWRiYWJhMjRi LzEvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5CX0ghU KeQdtW02ykPRQVmFEEslphgixaz6lbjq+rTdHSpgc65hglzcZErbnfDxLAMX2WhW noBTY/JjQVmpp3VXDVEnQ0gCngDyCWx5iR7IMNE5oqrOgso3KzfyoEerOludyWi/ rzVxGTiawiwRGVFsy0HqYDs9qwr5BWOfriALMMw6SJcjbqcok+9ttQydTWaC6VFn 8OudocdNoBNK8uHt2XJipNCHnyaHyjuRxlbg1zimuBeniWc/0q0p1dxrJW6/ZN/K uizJe8v665EpxthzrHKnqCSqbE+bwywSaJAdywa1TmSjxiM2m/qar+Tga9/XWxVN SV8StMPli860vQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:09:16 2025 by rpki-client