This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft File: Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft (raw, json) Hash identifier: iD0AKwp2/SoG0q2Hr1DsDgtOcXi8JHKhUm+bRaAKVYA= Subject key identifier: E4:47:5C:F5:DF:51:3F:9D:20:26:AF:16:D5:EE:AD:6F:D4:F0:6F:6B Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4 Certificate issuer: /CN=321ec194107843848cd36330232b5f6a43791db4 Certificate serial: 019AF3524E1E612DD00BBB98804B0CF4B132 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 11:00:48 +0000 Manifest this update: Sat 06 Dec 2025 11:00:48 +0000 Manifest next update: Sun 07 Dec 2025 11:00:48 +0000 Files and hashes: 1: 3FbaZR0zxfx0WA80YXG85ZDcCq4.roa (hash: qryijX9WTlELqR/vPu/COvNZoSxzH7bA72VNuMKufdo=) 2: Gdu8HvR0GdnLEy7v4D3Y7fu1whI.roa (hash: CRTwkdMF4Lc0blRbrlr/l3IQBv+j5fcBDyVa2paPuVE=) 3: KmGlwP7CjIaywccOkX2DOwKl0TQ.roa (hash: sUOuCVVmxheCpfNzBgnrrUGNWsQqJtbWGWiV/9xLfds=) 4: Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl (hash: J+THbSWUDNOStUl/lIzGK1NKAxVD34cw97FhZUj7UOo=) 5: NVPuKIwqd6rXOALhTsUic2d4hlA.roa (hash: T7Dyc87WaeHKY9kvTOaXHf9jWNh88eWIMhxiFozXzd0=) 6: ZFAYM9mu8jS6R0AyRbdSE1lnwbA.roa (hash: tJHXTlE43Al/Bk06k42NooyquRAu3ree+mY4auRgVIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:4e:1e:61:2d:d0:0b:bb:98:80:4b:0c:f4:b1:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=321ec194107843848cd36330232b5f6a43791db4 Validity Not Before: Dec 6 11:00:48 2025 GMT Not After : Dec 7 11:00:48 2025 GMT Subject: CN=e4475cf5df513f9d2026af16d5eead6fd4f06f6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:62:3b:bb:73:8b:06:d9:8b:6c:c4:5c:22:f0: 9c:27:d7:56:d1:e0:31:f8:8b:51:03:14:47:f2:3d: 80:80:28:16:54:4c:72:ae:c5:70:6e:20:bf:cf:02: 11:24:ca:73:31:5d:06:5a:93:64:a9:52:05:fa:22: b0:f1:e7:bc:45:48:ba:92:4a:94:5d:ff:aa:fb:57: 98:12:22:76:16:4e:8c:38:35:a8:80:77:d3:49:76: b3:cd:9f:98:4b:ea:3b:22:59:33:00:5f:eb:b3:71: f7:59:b9:d7:e8:80:fe:37:c3:b9:a1:aa:eb:48:bd: a2:c3:84:29:14:e5:3d:fd:8b:91:15:5f:dc:1a:e3: af:cd:40:1d:2d:b6:82:e7:2e:0b:14:42:95:d5:91: c0:b2:9e:0c:2e:05:f9:da:33:11:bb:66:07:8c:f6: 25:43:55:fa:2b:2e:2f:7b:f3:6c:bf:ab:8d:d2:33: fe:0d:5f:d0:bd:cb:73:c7:7d:12:43:be:a1:95:4e: bc:c3:c5:0a:92:49:97:55:16:3d:4b:47:c4:e8:59: 1a:0c:53:8b:13:e3:de:91:c2:21:76:a9:db:c7:3e: 3f:4d:f4:de:4b:4a:4f:ab:e3:70:4a:d4:7d:bb:dc: 19:e5:03:a7:1c:74:21:93:54:53:ab:03:12:e8:0c: dc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:47:5C:F5:DF:51:3F:9D:20:26:AF:16:D5:EE:AD:6F:D4:F0:6F:6B X509v3 Authority Key Identifier: keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:74:59:70:05:a8:d5:5e:ce:03:19:a1:b1:2b:c4:71:23:c6: 67:71:60:4c:f5:5e:e3:48:ba:f2:03:48:b5:01:57:ec:fb:f2: 50:bd:02:5b:56:2e:32:a1:49:12:c0:c3:17:d4:e3:ce:a4:84: b7:47:c6:01:41:cd:a6:1e:38:31:6a:91:3b:90:64:4e:7b:39: 6b:d1:bd:7a:81:5f:bd:a0:26:f2:e2:f6:c9:60:20:3e:db:b8: eb:cd:8a:92:c0:db:ac:af:2c:b4:fe:e3:6d:f6:52:48:57:b4: f0:ce:34:9d:f5:da:39:93:ee:5e:9f:ba:cd:29:e5:87:73:6c: 75:4f:a5:2a:9a:76:68:70:fb:02:18:01:58:a8:e2:e2:a4:3c: 6e:87:4a:58:81:d9:0f:45:05:7c:ea:da:54:67:5c:d8:55:fe: b8:eb:4b:e7:0a:af:ee:f1:27:f9:79:d3:46:08:ff:17:40:d6: dd:6c:6a:e8:82:c7:b3:05:ef:4b:01:02:f2:b5:54:f5:e6:36: d8:ad:71:ff:7a:be:6e:ea:f9:63:46:07:b0:7d:9c:56:dd:ff: 13:6d:d2:77:87:55:c3:94:d1:aa:b0:ac:0b:90:84:b0:2f:a2: 18:22:80:70:26:eb:ed:bc:91:b8:ad:6b:97:e9:13:03:b7:b0: a2:a9:0b:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUk4eYS3QC7uYgEsM9LEyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMWVjMTk0MTA3ODQzODQ4Y2QzNjMzMDIzMmI1ZjZhNDM3 OTFkYjQwHhcNMjUxMjA2MTEwMDQ4WhcNMjUxMjA3MTEwMDQ4WjAzMTEwLwYDVQQD EyhlNDQ3NWNmNWRmNTEzZjlkMjAyNmFmMTZkNWVlYWQ2ZmQ0ZjA2ZjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2I7u3OLBtmLbMRcIvCcJ9dW0eAx +ItRAxRH8j2AgCgWVExyrsVwbiC/zwIRJMpzMV0GWpNkqVIF+iKw8ee8RUi6kkqU Xf+q+1eYEiJ2Fk6MODWogHfTSXazzZ+YS+o7IlkzAF/rs3H3WbnX6ID+N8O5oarr SL2iw4QpFOU9/YuRFV/cGuOvzUAdLbaC5y4LFEKV1ZHAsp4MLgX52jMRu2YHjPYl Q1X6Ky4ve/Nsv6uN0jP+DV/Qvctzx30SQ76hlU68w8UKkkmXVRY9S0fE6FkaDFOL E+PekcIhdqnbxz4/TfTeS0pPq+NwStR9u9wZ5QOnHHQhk1RTqwMS6AzcQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORHXPXfUT+dICavFtXurW/U8G9rMB8GA1UdIwQY MBaAFDIewZQQeEOEjNNjMCMrX2pDeR20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgt M2E2MTFjMDkzYTJjLzEvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9mMTQ1OGYtYmRjMy00ZTRiLTlmNjgtM2E2MTFjMDkzYTJj LzEvTWg3QmxCQjRRNFNNMDJNd0l5dGZha041SGJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHRZcAWo 1V7OAxmhsSvEcSPGZ3FgTPVe40i68gNItQFX7PvyUL0CW1YuMqFJEsDDF9TjzqSE t0fGAUHNph44MWqRO5BkTns5a9G9eoFfvaAm8uL2yWAgPtu4682KksDbrK8stP7j bfZSSFe08M40nfXaOZPuXp+6zSnlh3NsdU+lKpp2aHD7AhgBWKji4qQ8bodKWIHZ D0UFfOraVGdc2FX+uOtL5wqv7vEn+XnTRgj/F0DW3Wxq6ILHswXvSwEC8rVU9eY2 2K1x/3q+bur5Y0YHsH2cVt3/E23Sd4dVw5TRqrCsC5CEsC+iGCKAcCbr7byRuK1r l+kTA7ewoqkLJA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:12:30 2025 by rpki-client