This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json) Hash identifier: tjg4jXRlYKOV33h20Ff1FGk4VRbhWQqOmRSPRG/y9M4= Subject key identifier: F5:F0:61:CA:6C:84:5A:1D:40:FD:EE:5A:EC:69:BB:10:33:72:6D:B8 Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24 Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24 Certificate serial: 019AF19B42AEBD8C3291A8768F32945EC02D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 03:01:15 +0000 Manifest this update: Sat 06 Dec 2025 03:01:15 +0000 Manifest next update: Sun 07 Dec 2025 03:01:15 +0000 Files and hashes: 1: DOtwGbtfl6s-x4f6aE2W8WlzVNw.roa (hash: ZfbdXBQ4B0vsaA9tpmB6Y8tzcJv8ZqF7FOHdCGM+Zl4=) 2: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: vKD0Ak076xHj/tBYRX9p+QjjNeqT/iJbasms9PC5+5c=) 3: VEwZGvZC8CGE0lsKNB1ekuITOKI.roa (hash: ruqW88ZWJqaz7y+HRNbaxPPhfL3FKhp6ygNCnPCWApo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:42:ae:bd:8c:32:91:a8:76:8f:32:94:5e:c0:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24 Validity Not Before: Dec 6 03:01:15 2025 GMT Not After : Dec 7 03:01:15 2025 GMT Subject: CN=f5f061ca6c845a1d40fdee5aec69bb1033726db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ad:b7:c5:9a:10:c3:20:6c:23:74:65:35:b7: 2b:d4:bd:59:1d:db:7a:63:4f:35:7e:bd:d5:c5:f6: 52:54:ee:d7:d5:2b:8a:36:ef:f2:21:1d:bf:8d:1d: bd:4e:d3:39:9a:9d:70:38:bb:45:a5:af:17:44:3f: 8a:bd:8c:22:4b:29:41:28:78:ee:b9:94:cb:39:e7: 76:3e:75:10:a3:16:42:2a:c4:ea:68:74:7e:28:1a: c9:9e:28:6d:ee:74:32:fc:00:3d:0d:56:0e:bc:97: 2e:6e:f2:f2:79:5c:f1:3f:5f:ea:9f:91:79:49:2c: aa:58:6b:9f:45:4a:e3:36:df:9c:8c:06:5f:91:ed: a2:4a:4a:df:0b:e6:46:11:ac:71:73:a2:d1:1b:1e: 19:86:12:8e:27:ed:01:af:d8:5a:0f:69:95:35:f2: 25:55:56:4d:b2:40:3c:01:7e:de:11:f2:67:1e:70: 11:5b:a5:98:2f:29:a5:4f:28:2e:2b:a1:4d:0a:09: 37:60:80:55:ee:fa:d1:33:a1:13:40:1c:c2:dd:51: 99:9a:f6:d3:23:cf:62:fd:0d:26:93:8f:28:f8:de: 73:8f:8c:b7:0b:f0:0c:38:6c:c8:72:2f:84:cd:9a: bc:f1:68:1e:3d:c9:68:93:29:22:fe:f0:ae:a8:84: 71:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:F0:61:CA:6C:84:5A:1D:40:FD:EE:5A:EC:69:BB:10:33:72:6D:B8 X509v3 Authority Key Identifier: keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:f5:c7:0e:6a:11:38:16:32:ec:52:e9:e7:c9:bf:8b:fe:bb: 57:e4:1d:dd:cb:a4:40:54:df:c7:4a:88:25:11:3a:8a:51:0d: 16:65:e7:75:8a:28:25:e5:d7:ad:44:93:d2:0a:4a:02:9f:7a: 27:23:e4:ee:de:40:d7:af:81:1e:9e:b0:2f:a1:0c:86:51:93: 86:81:5f:ec:e1:30:44:f4:46:e1:3d:8e:4e:f4:f3:3b:fd:68: 51:87:83:c7:d2:5c:10:4a:d3:ce:ae:25:fc:46:a7:f8:09:e7: f9:b7:89:e9:a9:6d:74:86:6b:ee:ec:37:67:4c:fb:66:9e:f7: 66:85:47:16:cc:a0:41:bd:b7:95:45:c3:7a:70:01:6b:b3:d8: e3:3c:f5:7d:b1:cb:f9:d3:e9:db:04:4e:e4:de:4c:05:d8:59: 92:24:c4:67:eb:c4:8f:09:d1:f4:db:e1:28:cb:01:60:d2:cb: 44:45:19:6e:ab:5c:f7:de:e5:ce:85:84:ee:fa:ab:03:77:8d: 28:16:a7:aa:16:2c:8f:d8:9a:80:91:cc:31:86:49:14:8b:c6: 02:74:54:48:b7:3a:9d:32:fe:ec:41:69:0d:86:00:5d:0c:45: 38:35:4e:b8:17:71:78:35:73:c6:70:0c:8d:5d:8b:3c:d0:1a: b7:ef:a5:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm0KuvYwykah2jzKUXsAtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMWVjNDYyNmVjZGUyNTMzNWFmZjA4OGIwNGM3MTM5NWFl NmJjMjQwHhcNMjUxMjA2MDMwMTE1WhcNMjUxMjA3MDMwMTE1WjAzMTEwLwYDVQQD EyhmNWYwNjFjYTZjODQ1YTFkNDBmZGVlNWFlYzY5YmIxMDMzNzI2ZGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7q23xZoQwyBsI3RlNbcr1L1ZHdt6 Y081fr3VxfZSVO7X1SuKNu/yIR2/jR29TtM5mp1wOLtFpa8XRD+KvYwiSylBKHju uZTLOed2PnUQoxZCKsTqaHR+KBrJniht7nQy/AA9DVYOvJcubvLyeVzxP1/qn5F5 SSyqWGufRUrjNt+cjAZfke2iSkrfC+ZGEaxxc6LRGx4ZhhKOJ+0Br9haD2mVNfIl VVZNskA8AX7eEfJnHnARW6WYLymlTyguK6FNCgk3YIBV7vrRM6ETQBzC3VGZmvbT I89i/Q0mk48o+N5zj4y3C/AMOGzIci+EzZq88WgePclokyki/vCuqIRxvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXwYcpshFodQP3uWuxpuxAzcm24MB8GA1UdIwQY MBaAFDIexGJuzeJTNa/wiLBMcTla5rwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWg3RVltN040bE0xcl9DSXNFeHhPVnJtdkNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84ZTA4YjMtNDg3Yy00ODVhLTk0Nzkt YjA4NGM3Mzg2MWI4LzEvTWg3RVltN040bE0xcl9DSXNFeHhPVnJtdkNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84ZTA4YjMtNDg3Yy00ODVhLTk0NzktYjA4NGM3Mzg2MWI4 LzEvTWg3RVltN040bE0xcl9DSXNFeHhPVnJtdkNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASfXHDmoR OBYy7FLp58m/i/67V+Qd3cukQFTfx0qIJRE6ilENFmXndYooJeXXrUST0gpKAp96 JyPk7t5A16+BHp6wL6EMhlGThoFf7OEwRPRG4T2OTvTzO/1oUYeDx9JcEErTzq4l /Ean+Ann+beJ6altdIZr7uw3Z0z7Zp73ZoVHFsygQb23lUXDenABa7PY4zz1fbHL +dPp2wRO5N5MBdhZkiTEZ+vEjwnR9NvhKMsBYNLLREUZbqtc997lzoWE7vqrA3eN KBanqhYsj9iagJHMMYZJFIvGAnRUSLc6nTL+7EFpDYYAXQxFODVOuBdxeDVzxnAM jV2LPNAat++lGw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:57:33 2025 by rpki-client