This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json) Hash identifier: JMHdp/UBWbfroTQiHHwFYvhtM/y34YkL5igWvGGofWE= Subject key identifier: 7F:BD:2A:C7:9E:77:AC:31:1A:AE:50:F8:96:C0:16:CD:0B:9F:3E:5B Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd Certificate serial: 019B32D7B2329B1781CF4F1CC915B4358683 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft Manifest number: 0E69 Signing time: Thu 18 Dec 2025 19:02:34 +0000 Manifest this update: Thu 18 Dec 2025 19:02:34 +0000 Manifest next update: Fri 19 Dec 2025 19:02:34 +0000 Files and hashes: 1: CZfN1SE3Kc9ElQiX9c_wypBuCR4.roa (hash: U185B9hh525/Yo0ZTbLEnbl6qvuJNK4eFDrA94l5T14=) 2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: 40VfNxbIe5wLamZgwBFa7BSg3YO+JjAYQwfqyl5aVv4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d7:b2:32:9b:17:81:cf:4f:1c:c9:15:b4:35:86:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd Validity Not Before: Dec 18 19:02:34 2025 GMT Not After : Dec 19 19:02:34 2025 GMT Subject: CN=7fbd2ac79e77ac311aae50f896c016cd0b9f3e5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4e:22:23:fe:c2:d4:ba:fa:88:5d:e2:ba:3c: 00:aa:ec:17:ac:58:9c:7c:fe:2a:a4:8b:b8:b6:c3: ef:93:9e:c0:8d:92:73:af:8d:09:b0:93:6c:49:2d: 02:31:75:dd:aa:ac:bc:45:9a:dd:85:61:16:1a:01: 4e:e7:d1:34:d7:10:1a:c7:4d:d0:93:c7:19:da:33: ca:8a:bb:0e:3c:d5:42:8b:db:eb:e2:35:87:2c:c0: 8d:dd:8e:88:30:9d:7c:42:07:a4:73:98:4b:76:7f: 5a:fa:0c:38:1c:49:7e:6c:45:c6:e6:bd:4a:55:b7: d7:6c:8a:24:f7:e5:2b:13:41:74:68:11:f2:45:18: c5:9f:71:29:64:bc:c4:2e:32:e2:74:00:eb:98:94: 34:9f:c9:fa:9d:3c:3a:18:94:ad:9f:86:1c:df:3e: 3d:78:4f:7d:3b:68:d0:70:72:87:28:2c:d2:be:3d: 37:cf:e7:62:64:9e:b9:67:7a:a6:fc:e7:46:19:01: 59:d4:6e:34:a7:ad:d9:b1:4d:d5:9d:99:37:37:a1: cb:81:99:22:49:54:d3:c7:ba:a0:94:34:24:3f:79: ba:6b:0c:d5:f3:ab:59:16:e7:26:88:19:c9:df:6c: 36:21:7f:0d:58:ce:9a:2a:e7:d2:fe:12:12:2d:82: 3e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BD:2A:C7:9E:77:AC:31:1A:AE:50:F8:96:C0:16:CD:0B:9F:3E:5B X509v3 Authority Key Identifier: keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e0:b3:33:cc:d9:c5:4d:79:5f:31:f4:d9:6a:cc:23:54:44: 57:0b:dc:55:a1:27:f7:6a:34:1c:1c:12:3c:6f:09:07:1a:a3: 9a:74:58:10:d6:be:1f:b8:4d:28:36:9e:42:11:25:8a:46:47: b5:83:45:a2:75:92:45:d1:33:64:c0:a2:a9:67:f2:ca:a3:e1: ec:a2:85:dc:cd:09:98:93:cf:f7:ca:c0:a3:18:85:62:69:f3: a7:d5:22:35:b3:4c:f0:b2:1a:5e:05:d8:b2:6c:19:be:b5:36: 92:1a:96:ad:51:9d:59:85:cc:35:f8:0d:56:8a:9d:15:da:3b: 6d:c6:da:64:93:95:f2:30:14:17:2e:ec:d2:16:03:b5:8e:e5: 99:8b:bb:a7:f2:3a:c3:5d:54:66:db:6f:0d:49:74:69:21:ec: a6:17:a0:f1:bd:3a:7f:17:f0:f7:c9:7d:41:0b:82:94:3b:22: c8:f8:89:71:e7:fb:95:b0:ca:7c:05:54:88:41:4f:92:4f:53: 3c:77:8d:17:f5:2d:2f:17:03:1b:4b:80:02:61:af:f7:65:87: 32:4f:04:05:35:ac:7e:44:f5:92:c5:f2:3c:8b:b6:f2:58:4f: c8:fa:34:46:cd:f9:a4:04:cb:da:18:10:f8:9b:6f:48:33:fd: ed:16:04:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy17IymxeBz08cyRW0NYaDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMThjNzkwNTgyZTk5YmZiNTBlZTc1ODQ2M2RjNWFmZGNj YmY0YmQwHhcNMjUxMjE4MTkwMjM0WhcNMjUxMjE5MTkwMjM0WjAzMTEwLwYDVQQD Eyg3ZmJkMmFjNzllNzdhYzMxMWFhZTUwZjg5NmMwMTZjZDBiOWYzZTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k4iI/7C1Lr6iF3iujwAquwXrFic fP4qpIu4tsPvk57AjZJzr40JsJNsSS0CMXXdqqy8RZrdhWEWGgFO59E01xAax03Q k8cZ2jPKirsOPNVCi9vr4jWHLMCN3Y6IMJ18Qgekc5hLdn9a+gw4HEl+bEXG5r1K VbfXbIok9+UrE0F0aBHyRRjFn3EpZLzELjLidADrmJQ0n8n6nTw6GJStn4Yc3z49 eE99O2jQcHKHKCzSvj03z+diZJ65Z3qm/OdGGQFZ1G40p63ZsU3VnZk3N6HLgZki SVTTx7qglDQkP3m6awzV86tZFucmiBnJ32w2IX8NWM6aKufS/hISLYI+GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+9Kseed6wxGq5Q+JbAFs0Lnz5bMB8GA1UdIwQY MBaAFJoYx5BYLpm/tQ7nWEY9xa/cy/S9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYt NWMzNWRiYWJhMjRiLzEvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYtNWMzNWRiYWJhMjRi LzEvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguCzM8zZ xU15XzH02WrMI1REVwvcVaEn92o0HBwSPG8JBxqjmnRYENa+H7hNKDaeQhElikZH tYNFonWSRdEzZMCiqWfyyqPh7KKF3M0JmJPP98rAoxiFYmnzp9UiNbNM8LIaXgXY smwZvrU2khqWrVGdWYXMNfgNVoqdFdo7bcbaZJOV8jAUFy7s0hYDtY7lmYu7p/I6 w11UZttvDUl0aSHspheg8b06fxfw98l9QQuClDsiyPiJcef7lbDKfAVUiEFPkk9T PHeNF/UtLxcDG0uAAmGv92WHMk8EBTWsfkT1ksXyPIu28lhPyPo0Rs35pATL2hgQ +JtvSDP97RYExA== -----END CERTIFICATE-----Generated at Thu Dec 18 22:05:52 2025 by rpki-client