This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft File: MH-1ujHWxAxPLiMjPmB17q8tUwc.mft (raw, json) Hash identifier: +NI6cjU3wT21v4fYsdsmJRBSp/29lZi7YgTBM+Jyq/o= Subject key identifier: 04:DC:91:BD:70:62:68:B8:DD:D3:B2:FB:22:33:3E:A0:C6:18:FB:22 Authority key identifier: 30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07 Certificate issuer: /CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307 Certificate serial: 019AF50B0F5C8B765E238B310F79D354959D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 19:02:13 +0000 Manifest this update: Sat 06 Dec 2025 19:02:13 +0000 Manifest next update: Sun 07 Dec 2025 19:02:13 +0000 Files and hashes: 1: MH-1ujHWxAxPLiMjPmB17q8tUwc.crl (hash: TTVuBYKQCS8bmKDjKL6k2UMDOJDeDvYN9KbUA9ALAxs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:0f:5c:8b:76:5e:23:8b:31:0f:79:d3:54:95:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307fb5ba31d6c40c4f2e23233e6075eeaf2d5307 Validity Not Before: Dec 6 19:02:13 2025 GMT Not After : Dec 7 19:02:13 2025 GMT Subject: CN=04dc91bd706268b8ddd3b2fb22333ea0c618fb22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:14:b2:12:26:da:93:65:c3:cc:f5:22:73:3d: 64:38:2a:ad:41:ea:f7:7d:8c:bd:5e:f8:17:f5:3d: 80:91:43:b6:ff:1e:45:80:df:24:68:df:23:19:6e: d0:c8:f2:b6:22:00:fe:13:e1:9a:c2:08:90:a3:77: 2a:9c:5f:69:98:76:3a:d0:52:17:2e:69:31:f0:3c: ee:c8:e3:54:00:4c:8d:b5:aa:88:59:7c:2d:56:79: e5:cf:9b:32:2f:67:d0:74:15:27:9d:57:e0:d7:e4: d0:d7:5d:d3:bc:80:9e:49:a1:21:ab:c0:03:5d:0d: 3d:bd:1a:75:e9:e8:f8:7f:b9:55:5c:5a:83:54:dc: 75:a6:0a:7e:d7:af:a1:a5:ea:29:f3:3a:8d:b4:63: ae:d4:a2:93:a3:f0:98:9e:f0:af:4b:e6:43:4f:fe: 03:23:03:5e:b5:d8:f3:cf:ad:56:a5:ea:89:3a:43: cd:d8:74:02:29:9c:fc:f6:64:b3:5d:13:f1:82:b5: d8:bf:fb:ed:02:35:f1:4c:12:7c:4d:05:b8:4c:20: d7:3d:f2:c0:56:ac:3c:31:f2:02:87:5a:76:be:1b: e5:21:df:4b:f8:02:ca:af:fb:6f:65:24:2f:9b:c6: 36:bc:8e:42:54:25:b8:f9:4a:f4:06:bf:79:5e:6c: f8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DC:91:BD:70:62:68:B8:DD:D3:B2:FB:22:33:3E:A0:C6:18:FB:22 X509v3 Authority Key Identifier: keyid:30:7F:B5:BA:31:D6:C4:0C:4F:2E:23:23:3E:60:75:EE:AF:2D:53:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH-1ujHWxAxPLiMjPmB17q8tUwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/55d7c5-374a-4876-9934-ae3f052ffaad/1/MH-1ujHWxAxPLiMjPmB17q8tUwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:95:45:89:30:9d:43:37:62:b0:cd:8d:34:f4:fe:bb:ee:5e: 24:20:5f:70:0a:81:d7:d1:1d:61:bb:b2:78:2f:2e:a7:ec:a0: 71:25:7b:6a:06:84:2d:ab:7f:2a:26:cb:f3:c4:68:a1:a7:82: e8:e9:46:27:0a:0d:7c:0b:52:fc:40:2a:a1:07:8a:1d:fb:72: f1:ec:66:47:e2:a9:1e:25:f6:27:08:b4:a0:9a:01:5e:50:be: ad:52:8a:ba:b1:4d:d4:1a:29:a5:1a:1b:bd:e2:bd:be:07:29: 23:07:3f:5d:29:0e:b5:2d:d9:c8:ab:28:b5:a4:42:7e:cd:64: c6:c1:a3:bd:c5:99:d3:d4:6a:96:27:98:20:34:54:c2:e7:65: 60:bd:28:a2:16:15:b2:12:09:d3:a4:29:14:76:c1:d3:eb:f6: de:ca:50:c2:38:0b:29:2e:4d:64:4f:b9:97:b2:9b:3f:4c:09: a3:ed:d9:36:78:56:4b:4d:79:b5:d1:c7:37:20:ca:3d:a7:10: 79:f9:e6:5f:a8:9f:6d:25:48:a1:32:c3:0d:c2:a7:13:05:66: 4b:03:ad:eb:82:f9:a0:8b:86:d3:67:a5:91:89:b7:88:f8:96: 89:f5:0f:b6:7e:9d:a2:01:85:7a:92:c0:50:f2:87:77:16:53: 46:aa:bc:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cw9ci3ZeI4sxD3nTVJWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2ZiNWJhMzFkNmM0MGM0ZjJlMjMyMzNlNjA3NWVlYWYy ZDUzMDcwHhcNMjUxMjA2MTkwMjEzWhcNMjUxMjA3MTkwMjEzWjAzMTEwLwYDVQQD EygwNGRjOTFiZDcwNjI2OGI4ZGRkM2IyZmIyMjMzM2VhMGM2MThmYjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRSyEibak2XDzPUicz1kOCqtQer3 fYy9XvgX9T2AkUO2/x5FgN8kaN8jGW7QyPK2IgD+E+GawgiQo3cqnF9pmHY60FIX Lmkx8DzuyONUAEyNtaqIWXwtVnnlz5syL2fQdBUnnVfg1+TQ113TvICeSaEhq8AD XQ09vRp16ej4f7lVXFqDVNx1pgp+16+hpeop8zqNtGOu1KKTo/CYnvCvS+ZDT/4D IwNetdjzz61WpeqJOkPN2HQCKZz89mSzXRPxgrXYv/vtAjXxTBJ8TQW4TCDXPfLA Vqw8MfICh1p2vhvlId9L+ALKr/tvZSQvm8Y2vI5CVCW4+Ur0Br95Xmz4cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATckb1wYmi43dOy+yIzPqDGGPsiMB8GA1UdIwQY MBaAFDB/tbox1sQMTy4jIz5gde6vLVMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgtMXVqSFd4QXhQTGlNalBtQjE3cTh0VXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81NWQ3YzUtMzc0YS00ODc2LTk5MzQt YWUzZjA1MmZmYWFkLzEvTUgtMXVqSFd4QXhQTGlNalBtQjE3cTh0VXdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC81NWQ3YzUtMzc0YS00ODc2LTk5MzQtYWUzZjA1MmZmYWFk LzEvTUgtMXVqSFd4QXhQTGlNalBtQjE3cTh0VXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZVFiTCd QzdisM2NNPT+u+5eJCBfcAqB19EdYbuyeC8up+ygcSV7agaELat/KibL88RooaeC 6OlGJwoNfAtS/EAqoQeKHfty8exmR+KpHiX2Jwi0oJoBXlC+rVKKurFN1BoppRob veK9vgcpIwc/XSkOtS3ZyKsotaRCfs1kxsGjvcWZ09RqlieYIDRUwudlYL0oohYV shIJ06QpFHbB0+v23spQwjgLKS5NZE+5l7KbP0wJo+3ZNnhWS015tdHHNyDKPacQ efnmX6ifbSVIoTLDDcKnEwVmSwOt64L5oIuG02elkYm3iPiWifUPtn6dogGFepLA UPKHdxZTRqq8Rg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:12:48 2025 by rpki-client