This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: jeT7+4bN3YLVj5fEEcOZArewkXbVrX0hSRyNc9XNONI= Subject key identifier: 7C:EC:1E:12:3E:10:F0:64:33:2D:F3:AE:41:F8:1C:98:D9:E7:E7:6C Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019AF20946C1FD7614AC8B7342305240AA76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 05:01:25 +0000 Manifest this update: Sat 06 Dec 2025 05:01:25 +0000 Manifest next update: Sun 07 Dec 2025 05:01:25 +0000 Files and hashes: 1: Go3D60IftVT7kBobBk8HTq_r6wY.roa (hash: /aH1VuqUtHMC947Kt5tr1ajHSrdHN60XTYZiPes2dOU=) 2: JKKr0NwqKrBRfO9-TNMA6fKjebU.roa (hash: +prVLn/SSNSb/SQ4BmX9heAxTyq0XNrqnNVcVb/zNYQ=) 3: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: FkIvOBMQAZ2yFjiACAl18HUcILays1dNVX0MvRfSzsY=) 4: OrdWNePRO-azuf-x7WJ0gNqkZc8.roa (hash: ehZsJBwER/Ak+kPEJiQOXw5pziTKWHwzzGUWq4oZM/c=) 5: Q3_mv-tF2Z1EHDZHaZk8mJMN1bk.roa (hash: oXSPeYLnMI9gMBulzyR8eDJwfmPdLhgYhc4vqS0U/tE=) 6: S2TXSI-3n25IfgGnM4uuJwml268.roa (hash: DAgFF4qJxC/k8JOz+sB1Q1cvXx4PDaouIru4SXZXgbU=) 7: UJuJe34B0guqTgOl--QOCgSYvZE.roa (hash: c2O3pbkk6z+NjOLR47vzvdpTF+ZJKIik+rzOAO3mk2Y=) 8: bR8kj_c2TPqFFFMT255K3OTqBTI.roa (hash: mIG3JTVdQTlKmcdrQlCtE5KtfNee8F1irJglkfAd6/0=) 9: e_JO57HIUgxnL2zZw_SZRKtvz2k.roa (hash: kYzJL9upOKUtQTqnQ+rXijBf3P483K+T+FEi6SAaLE0=) 10: qkn09gGw9_pYS22v_SrDemeIoJI.roa (hash: OSIoNd4NerHm/MUfEqmcXlQFZ/K6gwLw7wnqNHc3YTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:46:c1:fd:76:14:ac:8b:73:42:30:52:40:aa:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Dec 6 05:01:25 2025 GMT Not After : Dec 7 05:01:25 2025 GMT Subject: CN=7cec1e123e10f064332df3ae41f81c98d9e7e76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8f:b3:c7:01:a0:84:7a:ae:ab:d9:4b:45:c5: 00:75:8c:bc:57:c1:36:1e:19:05:50:d6:2f:50:ef: db:46:f7:c4:6e:54:40:e1:2e:a3:f9:69:f5:38:98: e3:81:2d:4d:c4:61:02:a5:e0:fc:b7:55:0a:16:54: aa:4f:b7:44:bc:b2:67:3d:0f:04:98:69:65:95:5c: 8d:2e:3e:c9:2c:9a:b0:9c:3b:f8:e9:c8:e1:5c:be: fd:26:d5:44:89:37:28:71:6f:12:90:4f:ba:dc:89: e2:48:54:b2:ae:7c:55:c4:1c:3f:45:73:18:5f:57: 9c:e3:17:76:2b:e4:a4:2e:bf:19:c7:ad:7b:38:31: 21:e6:eb:79:69:e8:71:34:5c:fa:64:3c:c7:7b:26: 80:36:a7:24:3e:3e:54:ce:5d:92:26:86:bb:81:60: 39:21:1b:67:c7:be:9b:9a:0c:26:89:c6:90:f7:e9: db:07:3f:b1:d9:9f:80:ff:91:da:5b:90:27:f3:25: e6:68:21:84:dc:7c:11:7e:43:53:a1:2c:80:35:c3: 62:a1:23:b3:fb:46:3a:de:9c:cb:74:50:d7:e6:1f: ab:90:85:a4:4c:b6:c8:7a:70:77:f8:74:25:df:1c: 38:24:76:75:f8:30:68:d8:64:fa:a3:68:8b:fe:da: 9d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:EC:1E:12:3E:10:F0:64:33:2D:F3:AE:41:F8:1C:98:D9:E7:E7:6C X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a3:8e:89:78:2e:76:82:50:59:ab:91:7d:85:eb:f9:cf:9d: 87:1d:a1:4a:04:6a:9e:85:cd:21:19:42:da:b3:91:f5:1c:df: 24:94:15:85:88:fa:47:af:d7:4c:e1:64:b3:01:06:d3:1f:90: 8a:c5:24:29:f4:e5:f1:f9:53:e7:33:48:e0:6e:5e:3d:90:1f: d0:5c:c3:4d:10:90:f9:4e:23:89:b8:8a:e9:ca:7f:22:4e:29: df:f6:41:81:55:95:c4:68:ab:36:cb:fc:76:49:43:22:bd:8b: 95:c2:8b:1f:42:77:97:2d:97:2c:d1:1a:15:30:da:a0:47:bc: 6c:d9:4d:8f:d3:4b:a8:d5:2b:01:fa:3a:04:65:e8:8f:18:5a: 5c:f0:ae:69:e5:70:27:99:ed:e2:c9:04:23:17:3b:6e:ee:28: 43:db:f9:08:30:4d:40:31:dd:a5:13:ba:f9:fc:60:f8:a1:66: 33:d1:f0:72:6a:f3:2d:e8:31:1a:b4:90:fc:83:72:96:b5:a7: 2a:b0:3a:4b:48:0b:ab:b8:c8:e0:3b:51:fd:02:3e:b3:f6:cb: 32:35:66:87:a8:3a:5e:b6:25:27:a5:95:71:55:45:ee:9c:d2: 74:62:cf:b7:75:a1:43:77:40:34:1b:0f:d8:38:ab:5c:fb:de: a8:f5:1d:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUbB/XYUrItzQjBSQKp2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjUxMjA2MDUwMTI1WhcNMjUxMjA3MDUwMTI1WjAzMTEwLwYDVQQD Eyg3Y2VjMWUxMjNlMTBmMDY0MzMyZGYzYWU0MWY4MWM5OGQ5ZTdlNzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I+zxwGghHquq9lLRcUAdYy8V8E2 HhkFUNYvUO/bRvfEblRA4S6j+Wn1OJjjgS1NxGECpeD8t1UKFlSqT7dEvLJnPQ8E mGlllVyNLj7JLJqwnDv46cjhXL79JtVEiTcocW8SkE+63IniSFSyrnxVxBw/RXMY X1ec4xd2K+SkLr8Zx617ODEh5ut5aehxNFz6ZDzHeyaANqckPj5Uzl2SJoa7gWA5 IRtnx76bmgwmicaQ9+nbBz+x2Z+A/5HaW5An8yXmaCGE3HwRfkNToSyANcNioSOz +0Y63pzLdFDX5h+rkIWkTLbIenB3+HQl3xw4JHZ1+DBo2GT6o2iL/tqdOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzsHhI+EPBkMy3zrkH4HJjZ5+dsMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKOOiXgu doJQWauRfYXr+c+dhx2hSgRqnoXNIRlC2rOR9RzfJJQVhYj6R6/XTOFkswEG0x+Q isUkKfTl8flT5zNI4G5ePZAf0FzDTRCQ+U4jibiK6cp/Ik4p3/ZBgVWVxGirNsv8 dklDIr2LlcKLH0J3ly2XLNEaFTDaoEe8bNlNj9NLqNUrAfo6BGXojxhaXPCuaeVw J5nt4skEIxc7bu4oQ9v5CDBNQDHdpRO6+fxg+KFmM9HwcmrzLegxGrSQ/INylrWn KrA6S0gLq7jI4DtR/QI+s/bLMjVmh6g6XrYlJ6WVcVVF7pzSdGLPt3WhQ3dANBsP 2DirXPveqPUdFQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:21:27 2025 by rpki-client