This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft File: MhS0ivRv_G1W3QurOzGH3lPp6yM.mft (raw, json) Hash identifier: Uk6G3z72X5d1WryeWb9RGEhXpDFpcVhx/g1WAKDoZp8= Subject key identifier: 01:1F:7B:5A:82:10:B1:4A:4D:FB:9B:C6:5C:E5:CF:35:E0:EB:C8:2B Authority key identifier: 32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23 Certificate issuer: /CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23 Certificate serial: 019AF24015EA137F28DB56AED994196E720B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft Manifest number: 05D1 Signing time: Sat 06 Dec 2025 06:01:17 +0000 Manifest this update: Sat 06 Dec 2025 06:01:17 +0000 Manifest next update: Sun 07 Dec 2025 06:01:17 +0000 Files and hashes: 1: MhS0ivRv_G1W3QurOzGH3lPp6yM.crl (hash: vN3LA29n5kXEyZVQHmq2TSu918m5A3EUMtldcorb2lk=) 2: xjdC4ob7aRS2Ev-O6nidCaBCpZg.roa (hash: SBgN/gihku+/q5pAC+Vic8NfDHBeeV+OVc/nVKV8Vm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:15:ea:13:7f:28:db:56:ae:d9:94:19:6e:72:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23 Validity Not Before: Dec 6 06:01:17 2025 GMT Not After : Dec 7 06:01:17 2025 GMT Subject: CN=011f7b5a8210b14a4dfb9bc65ce5cf35e0ebc82b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:b1:e8:81:38:99:16:58:67:75:2a:65:53: 72:e6:5b:1d:fb:4b:26:a7:ab:70:75:eb:69:d7:0c: 9c:19:d2:93:67:17:56:44:a9:de:e1:ec:67:dd:85: 13:bb:49:89:84:b3:49:ec:28:c3:89:a9:4b:0e:74: 69:82:74:70:59:6c:b2:7b:a4:c4:3d:37:a5:da:59: 50:c6:f2:7b:62:1c:0a:cd:be:27:bc:55:21:56:05: 32:dc:ee:99:6a:6f:45:0c:77:b8:3f:a4:83:ed:52: 9e:74:47:f6:ac:3d:e9:4e:b9:d9:b7:4e:a8:93:09: b2:f3:83:29:9c:ba:26:94:ca:2d:b3:3a:b8:b9:1a: d2:e4:02:80:d7:29:04:a6:fb:ce:77:ec:63:79:0d: 25:99:0f:bd:3b:bb:77:44:35:57:6e:23:4c:94:af: 1f:d5:fe:ae:44:f9:53:9c:d5:2e:54:c4:79:7e:73: 5a:b5:61:cf:eb:82:e2:8c:53:fc:fe:34:3a:c8:ff: fa:be:f2:a2:74:54:ce:af:e1:4d:67:ee:d7:be:4f: 2e:7e:d8:ee:15:8c:03:fa:72:a2:0f:73:5d:ba:b5: fb:bb:ac:09:71:7e:74:e4:06:45:af:85:e4:e3:a7: 66:2c:9a:51:00:65:2a:dc:b1:0b:af:89:06:5f:4c: e5:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1F:7B:5A:82:10:B1:4A:4D:FB:9B:C6:5C:E5:CF:35:E0:EB:C8:2B X509v3 Authority Key Identifier: keyid:32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a9:5e:32:40:6a:8e:e8:6e:e7:e2:9b:2e:fe:14:aa:28:3d: 5d:2a:df:e5:c5:14:da:69:20:9b:f4:21:a4:a3:3e:61:89:58: 81:9f:56:29:58:cd:97:6c:22:c4:51:3b:34:92:7b:04:8b:49: 01:f4:d3:b9:40:0c:9b:6b:7b:ae:4d:1a:7d:0e:04:6f:00:f6: f5:79:d2:ce:bc:a1:aa:cf:3a:69:2f:db:51:41:44:73:66:74: c5:89:3c:04:14:14:2e:7b:37:00:14:fe:85:40:4a:d1:c4:f9: 13:4e:6d:bd:92:40:e1:30:c3:2c:d6:50:f1:a9:14:1a:ac:95: 0f:2c:6d:1e:28:41:1d:bd:97:24:45:f1:5f:88:42:83:4a:bb: 83:e8:fa:63:e9:eb:c4:97:e0:67:87:f3:a5:7e:d9:7b:ff:53: a5:03:a0:26:68:0e:12:18:5c:ce:c2:6e:ea:99:51:cd:e2:d2: 1a:b3:44:20:f3:05:b9:ac:22:44:c7:bc:94:32:06:4c:4c:15: c6:9d:c4:d4:9d:76:09:0e:f6:c6:61:95:51:52:e8:78:ab:31: db:b1:81:67:c7:b8:38:73:0e:4c:7f:c7:4c:f7:b8:e5:e7:79: 95:e8:c8:36:c3:fd:5a:12:b6:54:ed:71:ec:3b:bc:e8:db:94: e0:cd:52:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQBXqE38o21au2ZQZbnILMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMTRiNDhhZjQ2ZmZjNmQ1NmRkMGJhYjNiMzE4N2RlNTNl OWViMjMwHhcNMjUxMjA2MDYwMTE3WhcNMjUxMjA3MDYwMTE3WjAzMTEwLwYDVQQD EygwMTFmN2I1YTgyMTBiMTRhNGRmYjliYzY1Y2U1Y2YzNWUwZWJjODJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOWx6IE4mRZYZ3UqZVNy5lsd+0sm p6twdetp1wycGdKTZxdWRKne4exn3YUTu0mJhLNJ7CjDialLDnRpgnRwWWyye6TE PTel2llQxvJ7YhwKzb4nvFUhVgUy3O6Zam9FDHe4P6SD7VKedEf2rD3pTrnZt06o kwmy84MpnLomlMotszq4uRrS5AKA1ykEpvvOd+xjeQ0lmQ+9O7t3RDVXbiNMlK8f 1f6uRPlTnNUuVMR5fnNatWHP64LijFP8/jQ6yP/6vvKidFTOr+FNZ+7Xvk8uftju FYwD+nKiD3NdurX7u6wJcX505AZFr4Xk46dmLJpRAGUq3LELr4kGX0zlIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAEfe1qCELFKTfubxlzlzzXg68grMB8GA1UdIwQY MBaAFDIUtIr0b/xtVt0Lqzsxh95T6esjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWhTMGl2UnZfRzFXM1F1ck96R0gzbFBwNnlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wODRmNzEtOTI3YS00ZmE4LWJlYTUt Y2Q4N2VlOTcwZTZmLzEvTWhTMGl2UnZfRzFXM1F1ck96R0gzbFBwNnlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wODRmNzEtOTI3YS00ZmE4LWJlYTUtY2Q4N2VlOTcwZTZm LzEvTWhTMGl2UnZfRzFXM1F1ck96R0gzbFBwNnlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaleMkBq juhu5+KbLv4Uqig9XSrf5cUU2mkgm/QhpKM+YYlYgZ9WKVjNl2wixFE7NJJ7BItJ AfTTuUAMm2t7rk0afQ4EbwD29XnSzryhqs86aS/bUUFEc2Z0xYk8BBQULns3ABT+ hUBK0cT5E05tvZJA4TDDLNZQ8akUGqyVDyxtHihBHb2XJEXxX4hCg0q7g+j6Y+nr xJfgZ4fzpX7Ze/9TpQOgJmgOEhhczsJu6plRzeLSGrNEIPMFuawiRMe8lDIGTEwV xp3E1J12CQ72xmGVUVLoeKsx27GBZ8e4OHMOTH/HTPe45ed5lejINsP9WhK2VO1x 7Du86NuU4M1Spg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:23:02 2025 by rpki-client