This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft File: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft (raw, json) Hash identifier: g2Bdsec/xGEHEpCANG7rlXMHwsLpUEnKA+z/hHrMddE= Subject key identifier: DC:DB:A6:92:49:E9:13:F6:81:B3:30:C7:8C:4E:19:6B:3D:D6:7F:11 Authority key identifier: 32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E Certificate issuer: /CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e Certificate serial: 019AF12DD37FCE797AA2424B23B1747EC39F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft Manifest number: 1409 Signing time: Sat 06 Dec 2025 01:01:43 +0000 Manifest this update: Sat 06 Dec 2025 01:01:43 +0000 Manifest next update: Sun 07 Dec 2025 01:01:43 +0000 Files and hashes: 1: MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl (hash: jZda3S5TJ/7RZgmnr/oiB5QUcc4rIjZMcrJ0dncF9Vw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:d3:7f:ce:79:7a:a2:42:4b:23:b1:74:7e:c3:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3291c7fd5712f90ed5d131d3ab18cbad7dd7ae5e Validity Not Before: Dec 6 01:01:43 2025 GMT Not After : Dec 7 01:01:43 2025 GMT Subject: CN=dcdba69249e913f681b330c78c4e196b3dd67f11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ac:4c:58:37:db:84:c2:cf:6f:2f:69:3c:a1: e0:12:5a:51:4f:52:d5:27:04:64:83:c6:38:e3:4d: 30:53:7f:90:24:43:3e:4f:8b:6b:53:e7:49:bb:be: 74:22:d6:8a:ff:8d:85:0c:58:20:f9:81:7d:7f:fb: b5:b0:4e:66:52:8a:16:00:89:dd:e0:c7:d5:56:bc: e7:d7:2a:e8:72:b7:c4:6f:9b:1e:f5:a3:81:36:df: 7a:60:60:1a:40:b6:c2:00:f7:39:c1:77:55:cb:32: 4e:77:06:e9:b2:df:b7:db:ff:d4:e6:3d:a9:ed:77: 8e:47:a0:85:32:74:d1:ec:44:28:e1:5b:89:0a:c4: 33:fe:ef:1d:00:d7:cb:df:7e:c5:48:da:7c:d0:a8: f1:32:72:6c:5d:70:be:2e:44:3c:9e:50:f6:12:4d: d7:a4:18:00:57:08:7d:55:ef:d4:ce:f7:2b:49:8b: 6f:55:3f:22:f8:45:43:88:27:9e:12:30:7b:de:57: 29:ed:a6:e8:a2:30:66:3d:5c:89:e1:b2:5a:d4:12: 6b:39:e1:1e:98:59:f6:05:77:01:bf:97:b1:20:47: 43:95:a4:c7:f7:91:96:13:c5:44:db:17:81:1a:35: 41:9b:ec:80:88:b2:0e:3c:11:66:6f:e4:5b:cd:89: a1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DB:A6:92:49:E9:13:F6:81:B3:30:C7:8C:4E:19:6B:3D:D6:7F:11 X509v3 Authority Key Identifier: keyid:32:91:C7:FD:57:12:F9:0E:D5:D1:31:D3:AB:18:CB:AD:7D:D7:AE:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/b117dd-8632-45a4-b0fd-86fa2ddd33d1/1/MpHH_VcS-Q7V0THTqxjLrX3Xrl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ec:d0:ec:69:c5:26:e3:be:4e:7b:13:5c:01:f7:2d:0b:3b: ef:45:14:e4:e3:ee:73:b4:68:8f:42:88:25:f3:0c:9d:60:cb: 6e:d9:18:c5:39:80:08:9e:17:ca:38:c1:56:19:26:ef:27:8d: 2c:06:f5:ce:9f:71:9e:ee:29:e8:d2:4e:db:9c:4c:e6:fa:50: 0c:4f:59:f6:0a:12:a8:4f:a9:1c:0f:74:38:bc:c1:09:3d:04: dc:a0:5c:2a:58:a3:61:7c:38:ec:14:f6:cc:80:82:37:19:29: 54:a4:36:ec:91:96:b4:e2:57:ee:79:8c:c2:c1:58:07:85:ff: 34:9e:aa:8c:ed:73:47:7a:15:75:66:e3:9d:d9:9a:1d:64:e2: 86:c3:2b:6e:07:8c:60:d5:9a:f8:2e:94:a0:ac:bc:9e:08:4a: c1:db:65:41:7f:6e:a4:96:b3:2e:9d:b5:83:a5:4c:13:4a:13: 93:28:16:8f:80:93:24:75:f4:28:26:f3:c0:96:dc:42:2e:e5: 73:a2:62:10:50:ed:31:00:2d:e7:0d:da:14:f3:dd:39:90:e0: 28:fa:99:df:5c:1a:6d:95:7c:5c:93:fb:1e:f7:75:63:b6:f4: 0c:b6:bf:28:79:ff:f9:2e:d9:11:af:fd:37:c5:b2:03:39:7e: ee:dc:7b:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdN/znl6okJLI7F0fsOfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyOTFjN2ZkNTcxMmY5MGVkNWQxMzFkM2FiMThjYmFkN2Rk N2FlNWUwHhcNMjUxMjA2MDEwMTQzWhcNMjUxMjA3MDEwMTQzWjAzMTEwLwYDVQQD EyhkY2RiYTY5MjQ5ZTkxM2Y2ODFiMzMwYzc4YzRlMTk2YjNkZDY3ZjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6xMWDfbhMLPby9pPKHgElpRT1LV JwRkg8Y4400wU3+QJEM+T4trU+dJu750ItaK/42FDFgg+YF9f/u1sE5mUooWAInd 4MfVVrzn1yrocrfEb5se9aOBNt96YGAaQLbCAPc5wXdVyzJOdwbpst+32//U5j2p 7XeOR6CFMnTR7EQo4VuJCsQz/u8dANfL337FSNp80KjxMnJsXXC+LkQ8nlD2Ek3X pBgAVwh9Ve/UzvcrSYtvVT8i+EVDiCeeEjB73lcp7aboojBmPVyJ4bJa1BJrOeEe mFn2BXcBv5exIEdDlaTH95GWE8VE2xeBGjVBm+yAiLIOPBFmb+RbzYmh4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzbppJJ6RP2gbMwx4xOGWs91n8RMB8GA1UdIwQY MBaAFDKRx/1XEvkO1dEx06sYy619165eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXBISF9WY1MtUTdWMFRIVHF4akxyWDNYcmw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9iMTE3ZGQtODYzMi00NWE0LWIwZmQt ODZmYTJkZGQzM2QxLzEvTXBISF9WY1MtUTdWMFRIVHF4akxyWDNYcmw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9iMTE3ZGQtODYzMi00NWE0LWIwZmQtODZmYTJkZGQzM2Qx LzEvTXBISF9WY1MtUTdWMFRIVHF4akxyWDNYcmw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOzQ7GnF JuO+TnsTXAH3LQs770UU5OPuc7Roj0KIJfMMnWDLbtkYxTmACJ4XyjjBVhkm7yeN LAb1zp9xnu4p6NJO25xM5vpQDE9Z9goSqE+pHA90OLzBCT0E3KBcKlijYXw47BT2 zICCNxkpVKQ27JGWtOJX7nmMwsFYB4X/NJ6qjO1zR3oVdWbjndmaHWTihsMrbgeM YNWa+C6UoKy8nghKwdtlQX9upJazLp21g6VME0oTkygWj4CTJHX0KCbzwJbcQi7l c6JiEFDtMQAt5w3aFPPdOZDgKPqZ31wabZV8XJP7Hvd1Y7b0DLa/KHn/+S7ZEa/9 N8WyAzl+7tx70A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:05 2025 by rpki-client