This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft File: mMHQO0lQTTRGXcQKPQ-QhsrP244.mft (raw, json) Hash identifier: ZHX2G3FqY6/NCbk/fnou5AyM0V6/Sf6EjagfoK8BZMU= Subject key identifier: C0:71:6E:F9:13:BF:8D:CB:B7:85:1F:0B:57:9D:BE:CA:3D:66:F1:8A Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e Certificate serial: 019AF19BB7E3F8204C7AB8F873FEB17948FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft Manifest number: 0575 Signing time: Sat 06 Dec 2025 03:01:45 +0000 Manifest this update: Sat 06 Dec 2025 03:01:45 +0000 Manifest next update: Sun 07 Dec 2025 03:01:45 +0000 Files and hashes: 1: 4gx5vOTnIWUJl_QAV2mXwq3Lr-4.roa (hash: HfHpcv3dLmrHsA+/nteIdJA+PtlCghL9IWXSgxgW5dk=) 2: 7STy9rKwdVVWBV0PihzyOaaZCGE.roa (hash: rQ7JBMoV5qjUAaqBUkhYTkeegNLJEltgl8G2+dehWX0=) 3: 8tkE_UoEzTGGvSS_bgTvrWx6MpM.roa (hash: ocveRvdKmq2/uNW55ltBS2tVePO3vLCP/eERUMjU3Xk=) 4: SURf7PCqvWoIa7zkJQidqcRcECg.roa (hash: s3AKwYZwkDvcyHArrGNRqobsTcwBzjd0jER/XAbhZfQ=) 5: mMHQO0lQTTRGXcQKPQ-QhsrP244.crl (hash: s8EE0a6azD1uneh6rV/AD6dGCDZmKpvEW0rRqjRvydw=) 6: vELKBYHFEWuziyxwHt8P-AaeZu0.roa (hash: nLjphrnkbyuT7M1CC3aPm0hUWrSdnIQEpDv8szLLPHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:b7:e3:f8:20:4c:7a:b8:f8:73:fe:b1:79:48:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e Validity Not Before: Dec 6 03:01:45 2025 GMT Not After : Dec 7 03:01:45 2025 GMT Subject: CN=c0716ef913bf8dcbb7851f0b579dbeca3d66f18a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f9:16:54:2e:6f:82:14:3c:6b:70:dd:d6:1b: 0f:85:97:8d:55:11:25:dd:6d:b1:87:95:f7:9e:d4: 58:ee:55:e1:1e:6d:59:d2:25:62:ae:d7:20:60:da: 4f:c5:9c:5b:0d:2c:db:01:1b:49:cc:7b:9c:14:54: d1:0a:72:aa:d2:e5:48:a9:6d:20:43:1c:32:31:9f: 21:1f:10:c0:74:66:ac:b7:ab:63:c2:04:68:2a:b7: d9:cd:df:4b:cd:7d:54:98:58:3f:bd:06:33:6d:23: 36:e6:98:98:dd:d7:7d:14:fe:b1:95:c6:e4:08:21: c7:7e:10:9a:15:20:8d:c2:42:a8:08:28:42:cf:84: f6:6d:6e:18:d4:aa:e5:85:aa:ac:f6:7b:4c:f8:1f: 6a:67:4d:5f:63:3f:b8:af:4b:5e:1d:df:45:c6:fb: 83:f7:c7:24:d0:86:ff:fc:19:7c:7d:9a:b5:11:4a: cb:95:5d:f3:9c:41:25:3a:da:08:e5:5c:b6:4f:48: f3:d0:8f:48:a4:e1:3b:42:a5:bf:db:b4:90:1a:38: 81:f6:b6:5d:4e:5f:29:3b:14:68:d9:7c:d6:09:ed: 90:85:68:b2:67:55:c8:6f:e5:d9:dc:da:f5:70:9a: 88:b1:75:e2:14:dd:c1:1c:81:7e:84:40:32:34:cd: 7d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:71:6E:F9:13:BF:8D:CB:B7:85:1F:0B:57:9D:BE:CA:3D:66:F1:8A X509v3 Authority Key Identifier: keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:7a:6a:b1:3f:bd:a6:fe:4b:79:4b:46:eb:1c:9c:e2:45:61: 8e:01:df:05:9d:cd:64:54:69:a0:06:89:6d:57:ab:62:8e:46: 6f:f8:d4:81:3b:5c:64:ec:88:4d:41:c0:51:e4:13:15:ee:c3: eb:90:7d:41:37:7e:94:eb:04:aa:f0:b9:34:2a:43:cb:96:13: 5f:ff:32:77:d1:ca:7f:9c:e4:67:8c:26:2c:25:5b:e7:b5:4d: 7a:84:d4:96:bb:42:54:5e:d1:2e:95:b0:aa:ae:47:b5:4f:bb: 2a:12:49:63:87:7e:dc:03:a3:08:9f:97:02:4d:8c:0f:d1:7c: ea:fe:24:09:22:cc:0f:30:90:84:a6:32:df:0b:3a:78:d6:24: 37:6e:6e:61:26:2b:f2:64:2a:81:65:62:09:31:9f:9c:1d:a3: 36:3c:90:57:45:90:17:90:9c:75:6a:20:06:71:1a:fd:07:27: 6b:ff:84:56:95:9c:f7:07:bc:a7:c7:fa:01:62:1e:93:80:dd: 71:0f:06:57:8e:3e:da:e4:f1:b3:17:6c:29:fe:55:27:db:a0: 3e:a6:d2:07:70:89:49:13:ab:61:6f:d4:7b:52:0c:7b:da:c6: 59:c9:a8:5e:25:fa:2f:24:d6:9f:b8:be:3e:3a:c3:d7:4b:ec: f4:d5:1f:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm7fj+CBMerj4c/6xeUj6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YzFkMDNiNDk1MDRkMzQ0NjVkYzQwYTNkMGY5MDg2Y2Fj ZmRiOGUwHhcNMjUxMjA2MDMwMTQ1WhcNMjUxMjA3MDMwMTQ1WjAzMTEwLwYDVQQD EyhjMDcxNmVmOTEzYmY4ZGNiYjc4NTFmMGI1NzlkYmVjYTNkNjZmMThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fkWVC5vghQ8a3Dd1hsPhZeNVREl 3W2xh5X3ntRY7lXhHm1Z0iVirtcgYNpPxZxbDSzbARtJzHucFFTRCnKq0uVIqW0g QxwyMZ8hHxDAdGast6tjwgRoKrfZzd9LzX1UmFg/vQYzbSM25piY3dd9FP6xlcbk CCHHfhCaFSCNwkKoCChCz4T2bW4Y1Krlhaqs9ntM+B9qZ01fYz+4r0teHd9FxvuD 98ck0Ib//Bl8fZq1EUrLlV3znEElOtoI5Vy2T0jz0I9IpOE7QqW/27SQGjiB9rZd Tl8pOxRo2XzWCe2QhWiyZ1XIb+XZ3Nr1cJqIsXXiFN3BHIF+hEAyNM19ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBxbvkTv43Lt4UfC1edvso9ZvGKMB8GA1UdIwQY MBaAFJjB0DtJUE00Rl3ECj0PkIbKz9uOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEt YzMxYmRlNTEwMDg1LzEvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEtYzMxYmRlNTEwMDg1 LzEvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs3pqsT+9 pv5LeUtG6xyc4kVhjgHfBZ3NZFRpoAaJbVerYo5Gb/jUgTtcZOyITUHAUeQTFe7D 65B9QTd+lOsEqvC5NCpDy5YTX/8yd9HKf5zkZ4wmLCVb57VNeoTUlrtCVF7RLpWw qq5HtU+7KhJJY4d+3AOjCJ+XAk2MD9F86v4kCSLMDzCQhKYy3ws6eNYkN25uYSYr 8mQqgWViCTGfnB2jNjyQV0WQF5CcdWogBnEa/Qcna/+EVpWc9we8p8f6AWIek4Dd cQ8GV44+2uTxsxdsKf5VJ9ugPqbSB3CJSROrYW/Ue1IMe9rGWcmoXiX6LyTWn7i+ PjrD10vs9NUf+w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:26:08 2025 by rpki-client