This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json) Hash identifier: 95dxSgvwZZYLp/AsfR2a31BeJpI2/Gk+7c3BaLeqCIc= Subject key identifier: 58:74:46:07:9E:A0:00:8F:7F:36:09:2F:B6:C9:F4:41:31:D1:55:0B Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2 Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2 Certificate serial: 019AF19B198C3334DF1207E749B7B7A1809C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 03:01:04 +0000 Manifest this update: Sat 06 Dec 2025 03:01:04 +0000 Manifest next update: Sun 07 Dec 2025 03:01:04 +0000 Files and hashes: 1: CQJ6ohZvy-FZZPX13I33PQeWztA.roa (hash: nsudiYfFNFSH0ilCwJgap+Pn3CDxs0wAg3DCTTYrGPQ=) 2: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: bXaEICuKj2x1oUTgEhfrMKvfYdScksPHjidQcNaLIgk=) 3: qAyS6UgRnbonyCG8G2WAnc_nGD8.roa (hash: U80b7Joby5I0WdUM0LGoeNRmJLv7IvwDUZz80x7LHFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:19:8c:33:34:df:12:07:e7:49:b7:b7:a1:80:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2 Validity Not Before: Dec 6 03:01:04 2025 GMT Not After : Dec 7 03:01:04 2025 GMT Subject: CN=587446079ea0008f7f36092fb6c9f44131d1550b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:81:b7:a1:50:df:3e:c1:c8:7b:0a:78:6a:b7: 66:97:ec:fb:ba:bd:4a:eb:4c:84:51:91:d3:06:23: b7:a5:5a:6b:10:e5:07:c6:05:c0:76:e0:7e:ca:ac: b3:3f:46:ba:8e:81:d5:a5:f9:33:8c:8e:1a:71:90: 47:20:f6:99:e6:e1:f9:29:9f:8a:c7:23:cc:3d:7e: f6:9f:a4:eb:b0:61:fd:27:82:d2:e9:01:da:c1:a5: 54:29:c9:10:6c:27:f4:8d:6b:16:0b:97:d5:5a:ed: a8:51:f3:4e:ce:44:3c:9c:87:b1:74:c8:ba:63:04: 91:d3:f3:bd:3c:2d:80:9a:4c:5b:3d:57:44:0f:a5: 7a:99:35:21:49:61:46:2d:5a:c2:d3:b0:e9:9b:b4: 81:ca:7f:f4:76:79:fb:99:9b:1b:21:88:d0:b3:23: 71:2c:7d:82:0e:b3:95:36:c0:f1:ec:9b:be:90:eb: 1f:07:41:0c:06:7d:bb:aa:64:65:72:f5:69:35:1f: 75:23:a4:29:92:ff:62:eb:95:ac:95:35:30:9b:d8: 69:be:9c:96:37:3c:7e:38:7d:55:39:7e:ba:c9:95: 15:21:0e:d6:9c:8f:89:81:39:73:77:28:64:51:b2: 6a:a3:33:f7:51:00:3e:a5:4c:e0:10:96:66:de:61: 2b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:74:46:07:9E:A0:00:8F:7F:36:09:2F:B6:C9:F4:41:31:D1:55:0B X509v3 Authority Key Identifier: keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:cd:e0:a8:fb:85:a0:92:30:7a:a8:74:44:27:02:ea:58:93: 8d:b1:ec:45:a6:e8:11:55:80:74:fd:d9:ac:04:5a:6f:e5:a9: bb:a8:6c:ce:fd:02:eb:90:05:f8:9f:8d:0b:a0:69:e4:0e:02: 59:b9:33:8e:9a:1e:cd:41:74:f3:ab:fc:4e:c1:a4:61:99:15: b8:b5:89:46:b8:64:a3:a7:f9:1c:1f:81:2b:a4:b9:9e:7b:93: f0:b1:f1:9b:28:25:ef:76:3e:e8:ee:cd:f3:dc:b9:6d:51:e6: de:23:7b:71:6c:98:72:0c:9e:67:80:63:d7:cd:64:3b:2d:8f: 88:cf:08:41:92:60:0e:1e:73:86:bb:a8:02:9b:de:98:1a:05: db:5a:a8:f9:c7:3b:86:fb:b7:66:39:07:60:05:dd:0f:5b:0b: 2e:9f:cb:52:ca:f6:8a:57:dc:15:b2:e5:81:b0:ff:7c:e4:39: 53:c1:cd:ed:39:f9:d4:5d:19:a1:c8:51:3a:65:f0:76:a2:f3: 43:cc:38:7b:58:72:0e:c4:89:ee:33:81:64:7f:16:3d:b5:ce: 04:6b:f8:c1:fc:5a:8c:ee:a7:e2:4b:a0:d5:f3:93:10:93:9d: 74:24:18:d6:ea:c3:4b:95:c2:ab:e0:09:45:d0:b4:db:e0:3d: 22:a7:20:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmxmMMzTfEgfnSbe3oYCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzA2YjJiOTU1ODhkNzgwZTM2ZWY4MmE4ZjU0YTMxN2Q1 ODY5ZTIwHhcNMjUxMjA2MDMwMTA0WhcNMjUxMjA3MDMwMTA0WjAzMTEwLwYDVQQD Eyg1ODc0NDYwNzllYTAwMDhmN2YzNjA5MmZiNmM5ZjQ0MTMxZDE1NTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YG3oVDfPsHIewp4ardml+z7ur1K 60yEUZHTBiO3pVprEOUHxgXAduB+yqyzP0a6joHVpfkzjI4acZBHIPaZ5uH5KZ+K xyPMPX72n6TrsGH9J4LS6QHawaVUKckQbCf0jWsWC5fVWu2oUfNOzkQ8nIexdMi6 YwSR0/O9PC2AmkxbPVdED6V6mTUhSWFGLVrC07Dpm7SByn/0dnn7mZsbIYjQsyNx LH2CDrOVNsDx7Ju+kOsfB0EMBn27qmRlcvVpNR91I6Qpkv9i65WslTUwm9hpvpyW Nzx+OH1VOX66yZUVIQ7WnI+JgTlzdyhkUbJqozP3UQA+pUzgEJZm3mEr1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFh0RgeeoACPfzYJL7bJ9EEx0VULMB8GA1UdIwQY MBaAFDBwayuVWI14Djbvgqj1SjF9WGniMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yOGRlYmItM2E1OS00ZWUxLWJkMzct ODRlZDkxZWMxYzY1LzEvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yOGRlYmItM2E1OS00ZWUxLWJkMzctODRlZDkxZWMxYzY1 LzEvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbM3gqPuF oJIweqh0RCcC6liTjbHsRaboEVWAdP3ZrARab+Wpu6hszv0C65AF+J+NC6Bp5A4C WbkzjpoezUF086v8TsGkYZkVuLWJRrhko6f5HB+BK6S5nnuT8LHxmygl73Y+6O7N 89y5bVHm3iN7cWyYcgyeZ4Bj181kOy2PiM8IQZJgDh5zhruoApvemBoF21qo+cc7 hvu3ZjkHYAXdD1sLLp/LUsr2ilfcFbLlgbD/fOQ5U8HN7Tn51F0ZochROmXwdqLz Q8w4e1hyDsSJ7jOBZH8WPbXOBGv4wfxajO6n4kug1fOTEJOddCQY1urDS5XCq+AJ RdC02+A9Iqcgjw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:37 2025 by rpki-client