This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft File: mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft (raw, json) Hash identifier: b7thiGIbvgyig4oZhsIfbfqPxFqchQp7kT6baSEj8kg= Subject key identifier: 9D:86:E0:E1:4E:C4:BA:19:01:C7:C6:F7:49:7C:D9:58:6A:95:9C:31 Authority key identifier: 98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0 Certificate issuer: /CN=9821e37eab6ef6326933e5fa3748d07d83026db0 Certificate serial: 019AF464EE246AB3538F3FF9EADFFC07D866 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft Manifest number: 1768 Signing time: Sat 06 Dec 2025 16:00:46 +0000 Manifest this update: Sat 06 Dec 2025 16:00:46 +0000 Manifest next update: Sun 07 Dec 2025 16:00:46 +0000 Files and hashes: 1: CcUGGJ0q890w20Dwur-E0JX_IFA.roa (hash: pzbw/eSZwYj99oiYEKp9OWnuAPOe6A5SqgzuvD1PZvc=) 2: mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl (hash: xtKwAyQ1tpG5yIcZ1Ut25uqXlRtsva+PlYnHIGHBHTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:ee:24:6a:b3:53:8f:3f:f9:ea:df:fc:07:d8:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9821e37eab6ef6326933e5fa3748d07d83026db0 Validity Not Before: Dec 6 16:00:46 2025 GMT Not After : Dec 7 16:00:46 2025 GMT Subject: CN=9d86e0e14ec4ba1901c7c6f7497cd9586a959c31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2d:f7:75:b0:e8:c4:07:57:0c:d6:f4:df:84: a3:c1:b5:3d:18:ea:e9:4b:65:5c:76:fd:d5:c3:a8: b9:41:e0:70:cc:90:9e:c9:58:2d:ce:34:bb:78:cd: 2e:5b:f9:df:d5:7b:01:ea:44:ce:4e:d4:71:e2:45: 4f:18:44:8a:be:17:b8:9a:4d:6f:3d:2c:bb:26:34: 10:98:27:14:80:6d:2a:20:4e:54:4f:f7:4f:4f:51: 23:61:47:62:66:5b:25:0a:22:10:ff:d6:88:58:85: c8:75:40:a4:84:d3:6a:fc:6a:78:8b:9e:1d:1e:ea: ca:59:97:19:92:b8:32:e8:b5:50:8f:9d:cc:dd:28: f1:b5:10:73:48:dd:48:18:f3:8c:ac:b1:19:ed:c5: 38:18:af:b6:ea:74:7b:82:4e:7d:0c:34:3d:f6:c2: bc:8d:2f:b1:a0:45:78:39:e0:92:53:27:96:3b:e2: a2:c6:63:ac:36:2b:86:8b:8b:11:8e:5f:0b:0f:3e: a9:5f:8e:7b:0e:f0:bd:4f:0d:79:8c:48:0e:8e:24: 6a:09:ea:8a:3a:2c:3d:68:78:28:5f:51:6d:54:c6: 6c:8f:9c:e3:47:c7:df:84:d5:61:d6:65:3e:a7:c4: 6f:11:a4:e8:71:b2:32:b9:3a:df:a7:5d:7c:18:94: 4e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:86:E0:E1:4E:C4:BA:19:01:C7:C6:F7:49:7C:D9:58:6A:95:9C:31 X509v3 Authority Key Identifier: keyid:98:21:E3:7E:AB:6E:F6:32:69:33:E5:FA:37:48:D0:7D:83:02:6D:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCHjfqtu9jJpM-X6N0jQfYMCbbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c15ddb-e1ef-4308-988d-aefa757e0c38/1/mCHjfqtu9jJpM-X6N0jQfYMCbbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:d9:ea:af:9b:0c:24:d4:7f:31:83:84:43:37:89:89:9b:89: 2e:66:eb:b5:a9:9e:d1:a0:96:af:f5:f2:5b:db:bb:8a:29:ae: 27:7d:8c:32:7f:c6:27:0c:c2:46:26:e7:dc:e5:f0:ab:cc:86: 01:d1:26:32:c7:1f:93:94:57:32:1a:bd:76:51:33:d0:84:5c: ad:c8:5f:1f:2e:fb:dd:5e:23:3f:c3:6b:5b:a7:20:b9:36:37: 68:a6:54:f4:5e:08:ac:b7:1f:b0:52:d8:1b:a2:f6:47:45:db: 28:df:fb:45:32:72:54:59:d2:6b:9c:0b:ee:cf:81:e9:fe:f6: 05:c5:54:53:58:9b:65:1a:a8:33:fc:04:a9:e5:e4:cd:a1:59: 75:a3:2b:2d:7a:26:a8:66:2b:8b:94:2a:d4:f1:e0:0d:b1:d5: 88:d9:3b:3b:47:3d:8d:71:ed:63:70:c9:1e:5f:00:af:70:01: d6:8f:36:b8:00:de:1e:c5:2a:3f:72:90:8a:28:b2:c4:ec:4d: 64:a0:d7:bb:72:86:3f:5f:78:e0:90:00:ba:fe:17:64:e3:fd: 0f:62:fe:1d:c2:92:03:e4:41:bb:fe:ed:38:54:ac:fc:76:38: eb:4e:90:39:af:92:4a:e4:19:0f:22:a9:ef:ed:7b:3f:a5:88: d4:aa:d2:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZO4karNTjz/56t/8B9hmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MjFlMzdlYWI2ZWY2MzI2OTMzZTVmYTM3NDhkMDdkODMw MjZkYjAwHhcNMjUxMjA2MTYwMDQ2WhcNMjUxMjA3MTYwMDQ2WjAzMTEwLwYDVQQD Eyg5ZDg2ZTBlMTRlYzRiYTE5MDFjN2M2Zjc0OTdjZDk1ODZhOTU5YzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS33dbDoxAdXDNb034SjwbU9GOrp S2Vcdv3Vw6i5QeBwzJCeyVgtzjS7eM0uW/nf1XsB6kTOTtRx4kVPGESKvhe4mk1v PSy7JjQQmCcUgG0qIE5UT/dPT1EjYUdiZlslCiIQ/9aIWIXIdUCkhNNq/Gp4i54d HurKWZcZkrgy6LVQj53M3SjxtRBzSN1IGPOMrLEZ7cU4GK+26nR7gk59DDQ99sK8 jS+xoEV4OeCSUyeWO+KixmOsNiuGi4sRjl8LDz6pX457DvC9Tw15jEgOjiRqCeqK Oiw9aHgoX1FtVMZsj5zjR8ffhNVh1mU+p8RvEaTocbIyuTrfp118GJROZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2G4OFOxLoZAcfG90l82VhqlZwxMB8GA1UdIwQY MBaAFJgh436rbvYyaTPl+jdI0H2DAm2wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUNIamZxdHU5akpwTS1YNk4walFmWU1DYmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jMTVkZGItZTFlZi00MzA4LTk4OGQt YWVmYTc1N2UwYzM4LzEvbUNIamZxdHU5akpwTS1YNk4walFmWU1DYmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jMTVkZGItZTFlZi00MzA4LTk4OGQtYWVmYTc1N2UwYzM4 LzEvbUNIamZxdHU5akpwTS1YNk4walFmWU1DYmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOdnqr5sM JNR/MYOEQzeJiZuJLmbrtame0aCWr/XyW9u7iimuJ32MMn/GJwzCRibn3OXwq8yG AdEmMscfk5RXMhq9dlEz0IRcrchfHy773V4jP8NrW6cguTY3aKZU9F4IrLcfsFLY G6L2R0XbKN/7RTJyVFnSa5wL7s+B6f72BcVUU1ibZRqoM/wEqeXkzaFZdaMrLXom qGYri5Qq1PHgDbHViNk7O0c9jXHtY3DJHl8Ar3AB1o82uADeHsUqP3KQiiiyxOxN ZKDXu3KGP1944JAAuv4XZOP9D2L+HcKSA+RBu/7tOFSs/HY4606QOa+SSuQZDyKp 7+17P6WI1KrS7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 19:33:34 2025 by rpki-client