This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft File: mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft (raw, json) Hash identifier: 9xB8lQXtHQSQwga2iI8GjPnz6Crq7S3CQy6bM8gFHGw= Subject key identifier: 00:EE:5C:54:5F:55:F9:46:95:D6:D2:7B:7A:CF:F5:AB:C6:A6:7F:AF Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41 Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641 Certificate serial: 019AF2092CA722C3AF1D47555E838E2CF795 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:01:18 +0000 Manifest this update: Sat 06 Dec 2025 05:01:18 +0000 Manifest next update: Sun 07 Dec 2025 05:01:18 +0000 Files and hashes: 1: N_CNkQ4xgCl7xoE5UA_a_QkJVEU.roa (hash: Tpui/v5StmkjsF0FORh913wDyuFXShlf6/KyOzlpFaw=) 2: a9P-AA4M71AoAQl3T5rg8IgqWV8.roa (hash: p+vdBIjmH5hq5HNOBx9P2IYX3IN+k3FDRRTfZzHcnHA=) 3: mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl (hash: ST/Bqk7B2vDCkQ3o5u8hhtkdkc9CzLZYoEpWDcS4lTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:2c:a7:22:c3:af:1d:47:55:5e:83:8e:2c:f7:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641 Validity Not Before: Dec 6 05:01:18 2025 GMT Not After : Dec 7 05:01:18 2025 GMT Subject: CN=00ee5c545f55f94695d6d27b7acff5abc6a67faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8b:80:a6:17:aa:86:b8:7f:ec:42:11:17:47: 44:ca:d8:d3:48:c8:44:56:5d:1c:d1:46:7f:a2:ca: 26:89:6b:14:41:e3:8e:5b:ac:cd:79:bc:08:76:b3: c3:ed:f6:d9:6b:f1:05:50:01:05:36:60:01:f0:65: 6a:f7:97:82:6b:d2:06:66:dd:cb:91:b1:93:2a:e5: 31:37:ac:e5:16:a6:35:ee:da:0e:fe:f7:d2:9e:60: b4:bd:fc:ce:b7:00:c5:09:3f:6e:9b:5d:9e:f0:19: 39:6e:c5:25:75:08:c7:8c:2f:19:79:3a:37:5b:3d: f0:f9:08:7d:c0:82:92:b5:f7:24:10:71:9b:7a:c2: bd:48:d8:6f:eb:70:06:3a:78:3f:6a:4b:e5:75:5e: 0a:2b:56:07:32:8d:81:29:71:61:9a:aa:22:11:e5: b8:ff:26:f1:10:12:b1:bd:ba:72:33:b6:a6:ac:15: 80:df:46:13:8e:b2:d8:67:b0:30:7d:f4:4c:64:7a: fe:cc:3b:b4:cd:ed:c0:a3:5d:7e:b7:14:12:9b:b6: b0:71:a4:38:e5:41:7d:9f:e2:45:9b:65:3b:f3:af: d6:a4:a2:6c:36:98:e8:31:ba:12:4e:e2:6e:d8:39: 13:29:be:0a:f3:45:f7:e7:49:93:0a:2c:c0:78:6f: 29:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EE:5C:54:5F:55:F9:46:95:D6:D2:7B:7A:CF:F5:AB:C6:A6:7F:AF X509v3 Authority Key Identifier: keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a2:2e:0d:40:ae:e4:38:17:2d:6b:bd:46:50:6e:8a:56:04: 61:6f:2d:cd:b3:d7:bb:92:af:1a:4a:86:86:0a:90:5c:e1:2a: 32:88:1f:a8:d5:71:53:b4:d1:09:67:f9:eb:d0:c2:2a:1c:77: c4:b1:16:bd:7c:f1:a2:5e:9a:0c:81:61:4d:f2:57:bd:64:11: 04:57:2a:8b:5b:a0:4d:a5:ed:dd:a2:d2:cd:43:92:45:bb:fd: ab:9b:27:76:ed:7f:a8:13:eb:37:5a:58:50:58:b3:e8:d5:e5: 6a:8e:64:24:42:ef:ed:60:29:ae:1b:3b:9c:42:a4:ea:7c:e7: 71:b2:30:22:2f:13:f7:ed:58:c7:41:23:1d:a4:0b:8f:ab:57: 43:39:77:f4:4a:97:7e:3c:d0:7a:1b:51:b9:07:0c:21:a8:c7: 04:2c:b9:3b:a1:7c:f9:e5:f9:2e:ce:74:0b:ae:fa:8c:dd:26: 74:25:53:35:de:53:77:99:d6:68:07:93:30:df:44:b4:cb:bf: f7:ed:e7:94:c8:1b:b8:25:64:d8:2f:c9:2a:e8:c4:79:ac:28: f9:fd:22:29:a8:c3:58:ce:bb:53:b4:1d:53:f9:c1:df:4d:6c: 27:8a:c9:0a:88:08:2e:c5:e2:0f:97:d8:12:28:61:1f:4a:05: e1:b7:c9:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCSynIsOvHUdVXoOOLPeVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MDdjN2I4OTY1NmRkMzM5Y2I5OGZiN2MyYjAzNzFjNTky NmE2NDEwHhcNMjUxMjA2MDUwMTE4WhcNMjUxMjA3MDUwMTE4WjAzMTEwLwYDVQQD EygwMGVlNWM1NDVmNTVmOTQ2OTVkNmQyN2I3YWNmZjVhYmM2YTY3ZmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYuApheqhrh/7EIRF0dEytjTSMhE Vl0c0UZ/osomiWsUQeOOW6zNebwIdrPD7fbZa/EFUAEFNmAB8GVq95eCa9IGZt3L kbGTKuUxN6zlFqY17toO/vfSnmC0vfzOtwDFCT9um12e8Bk5bsUldQjHjC8ZeTo3 Wz3w+Qh9wIKStfckEHGbesK9SNhv63AGOng/akvldV4KK1YHMo2BKXFhmqoiEeW4 /ybxEBKxvbpyM7amrBWA30YTjrLYZ7AwffRMZHr+zDu0ze3Ao11+txQSm7awcaQ4 5UF9n+JFm2U786/WpKJsNpjoMboSTuJu2DkTKb4K80X350mTCizAeG8pIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADuXFRfVflGldbSe3rP9avGpn+vMB8GA1UdIwQY MBaAFJkHx7iWVt0znLmPt8KwNxxZJqZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83ZGQyODktNmNiNS00MzcxLTg0NmMt OTNkZWM3MzVmNzE3LzEvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS83ZGQyODktNmNiNS00MzcxLTg0NmMtOTNkZWM3MzVmNzE3 LzEvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQqIuDUCu 5DgXLWu9RlBuilYEYW8tzbPXu5KvGkqGhgqQXOEqMogfqNVxU7TRCWf569DCKhx3 xLEWvXzxol6aDIFhTfJXvWQRBFcqi1ugTaXt3aLSzUOSRbv9q5sndu1/qBPrN1pY UFiz6NXlao5kJELv7WAprhs7nEKk6nzncbIwIi8T9+1Yx0EjHaQLj6tXQzl39EqX fjzQehtRuQcMIajHBCy5O6F8+eX5Ls50C676jN0mdCVTNd5Td5nWaAeTMN9EtMu/ 9+3nlMgbuCVk2C/JKujEeawo+f0iKajDWM67U7QdU/nB301sJ4rJCogILsXiD5fY EihhH0oF4bfJ0A== -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:58 2025 by rpki-client