This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft File: Mh__9QM6eQGj6fJ19txujqD5O4o.mft (raw, json) Hash identifier: 3HmzSg8SyAuZ8Ew41nNJwO/jIB5muc55Ll4al15zVLU= Subject key identifier: 8F:BE:46:6A:EF:2E:55:23:AC:B4:22:48:19:7B:BE:E6:F6:CB:29:4A Authority key identifier: 32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A Certificate issuer: /CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a Certificate serial: 019AF0883CE27CA71599AA4FA40470CA17BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft Manifest number: 15F5 Signing time: Fri 05 Dec 2025 22:00:51 +0000 Manifest this update: Fri 05 Dec 2025 22:00:51 +0000 Manifest next update: Sat 06 Dec 2025 22:00:51 +0000 Files and hashes: 1: FcJIJ_7sGn_eFfivWYZxJ7ia4HA.roa (hash: Z8CjY0pPayO+MrbN0Iu5JVGrCs1wHK4dfVgqvLTMoog=) 2: Mh__9QM6eQGj6fJ19txujqD5O4o.crl (hash: gPCoqpcHKaBHUiJvKdCyYhpIoZKuP+GrEiyINRQvt9o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:3c:e2:7c:a7:15:99:aa:4f:a4:04:70:ca:17:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a Validity Not Before: Dec 5 22:00:51 2025 GMT Not After : Dec 6 22:00:51 2025 GMT Subject: CN=8fbe466aef2e5523acb42248197bbee6f6cb294a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4a:af:ec:dd:ce:ae:43:64:dd:1e:f4:38:5a: ce:c8:e2:0f:bb:24:9b:b6:ed:5e:9f:ec:09:fe:d2: dc:f7:24:67:d4:3e:b7:0e:14:e9:ba:8b:5d:aa:bb: df:c9:f2:11:23:b2:ef:61:b2:51:38:26:b3:9b:f5: ad:11:a4:e7:82:26:76:37:d0:b6:1a:a0:62:f2:a2: 21:dd:08:ff:81:12:d6:cd:b0:28:49:3d:84:d1:82: 3b:8d:f2:f5:30:ba:38:dd:13:17:19:1a:69:ec:89: 9d:7b:7a:88:e5:fb:30:23:6f:25:f1:e0:89:4f:d0: bd:42:df:1e:64:b3:14:f5:f8:09:bc:a7:aa:06:e8: e1:bc:1e:31:eb:22:54:25:1d:b1:76:af:9b:27:ab: de:9f:19:0d:9c:b0:64:95:98:eb:11:6b:cb:52:0c: a1:95:43:a5:3e:8b:25:7b:fa:4b:38:ed:6a:42:81: 6e:07:10:a6:fa:53:88:b8:90:b5:0f:de:89:18:f5: c0:11:af:a8:8e:9a:d1:37:60:5c:bc:bd:88:c4:04: 75:a1:5a:18:1d:e4:12:05:69:95:70:34:a5:0d:54: b9:58:92:1e:3a:ec:d6:29:b9:3e:62:66:93:ab:fb: 26:bb:9f:b0:0d:d8:05:b3:4b:19:b3:c3:b8:d7:21: b0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BE:46:6A:EF:2E:55:23:AC:B4:22:48:19:7B:BE:E6:F6:CB:29:4A X509v3 Authority Key Identifier: keyid:32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:89:69:33:c6:28:59:36:3c:50:6d:2e:1a:94:c4:17:8d:60: 2c:04:0c:e6:4f:3b:d2:de:7a:64:5f:f0:40:97:5e:eb:0e:2e: 68:be:49:b7:da:b8:42:ce:06:86:cf:45:9f:12:24:b6:8c:81: c3:06:6d:70:80:e0:a0:07:3c:81:b9:f1:b9:d9:50:85:b2:dd: 08:bd:d8:ff:7f:8e:26:b7:eb:83:0c:d2:95:6d:7c:5a:b0:9e: 6a:f1:b5:a5:6c:24:32:c1:a9:68:21:c0:40:8e:ac:b6:74:2f: c8:26:4c:26:31:cf:66:a6:b0:19:b0:72:f7:ba:08:29:c9:f9: d5:53:25:08:9e:62:6e:92:e5:58:91:d7:28:cf:8c:a4:94:1f: a9:b4:61:96:a3:1a:5f:7b:c2:ad:ac:d7:8b:a7:ea:55:50:6b: 99:f4:5f:53:93:e9:92:95:9c:2b:16:81:73:5c:0a:11:43:16: 35:c5:91:ec:c1:20:10:81:9e:c8:af:cf:4a:9e:80:5a:69:9f: e8:7c:26:95:4c:04:1e:ab:f3:ee:6d:ea:17:ad:8f:6e:7e:b6: f8:10:0c:80:58:47:50:55:29:a5:fa:be:6c:f8:39:a5:1b:e4: cf:fd:f9:99:b1:7f:ea:3a:e6:8f:ac:52:c2:eb:31:9e:76:06: 58:38:52:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiDzifKcVmapPpARwyhe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMWZmZmY1MDMzYTc5MDFhM2U5ZjI3NWY2ZGM2ZThlYTBm OTNiOGEwHhcNMjUxMjA1MjIwMDUxWhcNMjUxMjA2MjIwMDUxWjAzMTEwLwYDVQQD Eyg4ZmJlNDY2YWVmMmU1NTIzYWNiNDIyNDgxOTdiYmVlNmY2Y2IyOTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0qv7N3OrkNk3R70OFrOyOIPuySb tu1en+wJ/tLc9yRn1D63DhTpuotdqrvfyfIRI7LvYbJROCazm/WtEaTngiZ2N9C2 GqBi8qIh3Qj/gRLWzbAoST2E0YI7jfL1MLo43RMXGRpp7Imde3qI5fswI28l8eCJ T9C9Qt8eZLMU9fgJvKeqBujhvB4x6yJUJR2xdq+bJ6venxkNnLBklZjrEWvLUgyh lUOlPosle/pLOO1qQoFuBxCm+lOIuJC1D96JGPXAEa+ojprRN2BcvL2IxAR1oVoY HeQSBWmVcDSlDVS5WJIeOuzWKbk+YmaTq/smu5+wDdgFs0sZs8O41yGw/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI++RmrvLlUjrLQiSBl7vub2yylKMB8GA1UdIwQY MBaAFDIf//UDOnkBo+nydfbcbo6g+TuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWhfXzlRTTZlUUdqNmZKMTl0eHVqcUQ1TzRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8wZjRkMWEtZTRiNi00OWM2LWE1MGQt ZDFlMzBhNWNhYzg4LzEvTWhfXzlRTTZlUUdqNmZKMTl0eHVqcUQ1TzRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy8wZjRkMWEtZTRiNi00OWM2LWE1MGQtZDFlMzBhNWNhYzg4 LzEvTWhfXzlRTTZlUUdqNmZKMTl0eHVqcUQ1TzRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIlpM8Yo WTY8UG0uGpTEF41gLAQM5k870t56ZF/wQJde6w4uaL5Jt9q4Qs4Ghs9FnxIktoyB wwZtcIDgoAc8gbnxudlQhbLdCL3Y/3+OJrfrgwzSlW18WrCeavG1pWwkMsGpaCHA QI6stnQvyCZMJjHPZqawGbBy97oIKcn51VMlCJ5ibpLlWJHXKM+MpJQfqbRhlqMa X3vCrazXi6fqVVBrmfRfU5PpkpWcKxaBc1wKEUMWNcWR7MEgEIGeyK/PSp6AWmmf 6HwmlUwEHqvz7m3qF62Pbn62+BAMgFhHUFUppfq+bPg5pRvkz/35mbF/6jrmj6xS wusxnnYGWDhSXg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:19 2025 by rpki-client