This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft File: mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft (raw, json) Hash identifier: zpKhdZSHWuDMmiLNAtsl9cZ5xwJmEgODU4cBBkqySOA= Subject key identifier: 4D:C2:E2:E4:AB:60:46:42:16:FD:D2:6B:49:F4:76:AE:BA:AE:13:23 Authority key identifier: 98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00 Certificate issuer: /CN=987b6812cf7a074580f5942be762f477f67c9500 Certificate serial: 019AF49C41CDC8AF093CBD82E0A19CA8C6BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 17:01:12 +0000 Manifest this update: Sat 06 Dec 2025 17:01:12 +0000 Manifest next update: Sun 07 Dec 2025 17:01:12 +0000 Files and hashes: 1: mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl (hash: ++F9XoTekGLnShA58h385HP7ThK8ioac1vFaw20WkhU=) 2: s3dIm20GepVqtr86hU4U0PO_ew8.roa (hash: IACsMI0iHVIsWExBAgSS418a6ZTtpolE9FZ0jLsNao8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:41:cd:c8:af:09:3c:bd:82:e0:a1:9c:a8:c6:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=987b6812cf7a074580f5942be762f477f67c9500 Validity Not Before: Dec 6 17:01:12 2025 GMT Not After : Dec 7 17:01:12 2025 GMT Subject: CN=4dc2e2e4ab60464216fdd26b49f476aebaae1323 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:6b:cd:28:1b:c2:cf:1f:86:ae:fe:c0:6e: 1f:31:09:f6:07:b5:b2:8c:ea:6c:0c:50:ee:c7:17: 68:cb:e8:c6:bc:05:b7:12:4b:32:7b:d8:74:31:72: ac:38:f5:e9:e3:dd:d7:c9:7b:e7:cd:1d:04:2a:5c: 72:d6:17:8e:0d:cb:8c:03:e9:32:2c:5b:7b:2f:66: 9f:01:4c:9d:9f:67:30:20:3c:0f:f1:05:85:7a:72: 85:cc:43:83:38:48:32:63:a0:a6:d9:e4:bc:97:f7: d4:61:a9:e8:71:31:18:0b:fd:e6:0d:e0:6f:39:f9: c9:4b:90:2f:8e:dd:93:5c:71:19:f4:7d:70:c7:a4: fd:01:a7:77:22:d3:45:c4:d5:59:e1:f7:44:51:43: 1e:e3:68:3d:cd:f7:84:39:2e:e0:7d:b6:bd:06:0e: 91:21:dc:8a:ea:ec:28:9e:7b:07:8a:0a:f3:1a:74: b9:39:2d:6f:bb:09:38:44:61:31:58:18:c4:7e:bc: 8c:18:26:82:a0:35:11:03:11:ea:a8:c3:c7:ae:f5: 91:75:36:28:4f:ba:e7:16:53:de:2a:ea:8b:6f:5a: b0:aa:dd:34:b1:ca:64:78:7a:1a:eb:ef:5b:33:a5: a3:26:f8:8e:61:1a:2d:d3:0a:22:21:f5:5e:1e:d0: 31:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C2:E2:E4:AB:60:46:42:16:FD:D2:6B:49:F4:76:AE:BA:AE:13:23 X509v3 Authority Key Identifier: keyid:98:7B:68:12:CF:7A:07:45:80:F5:94:2B:E7:62:F4:77:F6:7C:95:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHtoEs96B0WA9ZQr52L0d_Z8lQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/d8e68e-ad38-44e1-9a2c-74aa3c0faee0/1/mHtoEs96B0WA9ZQr52L0d_Z8lQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:0d:b4:fe:0c:70:3b:2b:a4:6f:df:a9:3b:02:78:2b:16:ac: 3c:f1:bb:89:63:08:75:e9:7f:56:86:d2:d9:f2:5a:db:65:a2: ff:24:6c:fb:e2:ea:73:67:aa:af:8c:32:11:55:f3:fd:98:33: c9:56:f8:55:9a:61:20:1e:44:c8:ae:4e:fd:75:4f:38:4a:7e: ec:a9:5f:de:00:99:20:77:0b:c9:a4:7c:22:95:a1:5d:64:af: eb:96:06:c0:d1:26:6b:3d:01:e7:b8:ea:dc:c9:4e:a7:60:1b: f4:97:13:30:a5:64:a0:e3:f5:4c:61:ec:ea:da:51:1a:c5:ad: 63:8f:bb:c3:04:d6:c1:78:fe:fa:71:5d:6b:06:82:85:2c:62: ee:c9:26:fb:1c:96:99:c7:23:9b:d1:0f:7c:ef:5e:f4:46:66: 68:7c:91:4e:5d:8b:82:45:33:82:41:97:15:77:52:70:e3:fc: 7a:c3:f4:ac:54:35:41:d1:7d:5d:02:f7:a6:3d:80:57:30:e6: 0b:5e:a6:3e:07:7c:0f:57:21:56:7c:97:ce:6d:fc:f8:4c:8e: 09:03:33:bf:80:94:57:aa:19:31:9a:5a:9c:f5:fb:a8:56:a1: d9:52:61:92:eb:bd:89:6a:02:a0:17:e0:ee:07:25:8d:6e:30: 59:e9:29:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nEHNyK8JPL2C4KGcqMa8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4N2I2ODEyY2Y3YTA3NDU4MGY1OTQyYmU3NjJmNDc3ZjY3 Yzk1MDAwHhcNMjUxMjA2MTcwMTEyWhcNMjUxMjA3MTcwMTEyWjAzMTEwLwYDVQQD Eyg0ZGMyZTJlNGFiNjA0NjQyMTZmZGQyNmI0OWY0NzZhZWJhYWUxMzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjxrzSgbws8fhq7+wG4fMQn2B7Wy jOpsDFDuxxdoy+jGvAW3Eksye9h0MXKsOPXp493XyXvnzR0EKlxy1heODcuMA+ky LFt7L2afAUydn2cwIDwP8QWFenKFzEODOEgyY6Cm2eS8l/fUYanocTEYC/3mDeBv OfnJS5Avjt2TXHEZ9H1wx6T9Aad3ItNFxNVZ4fdEUUMe42g9zfeEOS7gfba9Bg6R IdyK6uwonnsHigrzGnS5OS1vuwk4RGExWBjEfryMGCaCoDURAxHqqMPHrvWRdTYo T7rnFlPeKuqLb1qwqt00scpkeHoa6+9bM6WjJviOYRot0woiIfVeHtAxpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3C4uSrYEZCFv3Sa0n0dq66rhMjMB8GA1UdIwQY MBaAFJh7aBLPegdFgPWUK+di9Hf2fJUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUh0b0VzOTZCMFdBOVpRcjUyTDBkX1o4bFFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9kOGU2OGUtYWQzOC00NGUxLTlhMmMt NzRhYTNjMGZhZWUwLzEvbUh0b0VzOTZCMFdBOVpRcjUyTDBkX1o4bFFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9kOGU2OGUtYWQzOC00NGUxLTlhMmMtNzRhYTNjMGZhZWUw LzEvbUh0b0VzOTZCMFdBOVpRcjUyTDBkX1o4bFFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlw20/gxw Oyukb9+pOwJ4KxasPPG7iWMIdel/VobS2fJa22Wi/yRs++Lqc2eqr4wyEVXz/Zgz yVb4VZphIB5EyK5O/XVPOEp+7Klf3gCZIHcLyaR8IpWhXWSv65YGwNEmaz0B57jq 3MlOp2Ab9JcTMKVkoOP1TGHs6tpRGsWtY4+7wwTWwXj++nFdawaChSxi7skm+xyW mccjm9EPfO9e9EZmaHyRTl2LgkUzgkGXFXdScOP8esP0rFQ1QdF9XQL3pj2AVzDm C16mPgd8D1chVnyXzm38+EyOCQMzv4CUV6oZMZpanPX7qFah2VJhkuu9iWoCoBfg 7gcljW4wWekpKQ== -----END CERTIFICATE-----Generated at Sat Dec 6 23:47:58 2025 by rpki-client