This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft File: MHTWUd_sSw03HgJQWx-Gk-0djgI.mft (raw, json) Hash identifier: w0pONV61EmMfr2dQ5v+1/3/N0oE+aT6ctTMRZNZ0868= Subject key identifier: C8:A8:05:A1:A3:0B:67:8F:29:8E:E6:03:BC:3A:C0:E6:E5:2E:8E:BA Authority key identifier: 30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02 Certificate issuer: /CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02 Certificate serial: 019AF2AD44F36DD4229A1A17F31DB347C40E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 08:00:32 +0000 Manifest this update: Sat 06 Dec 2025 08:00:32 +0000 Manifest next update: Sun 07 Dec 2025 08:00:32 +0000 Files and hashes: 1: 1-eAJE_ZPw_LJuNlElXg0BRaL11g.roa (hash: YakZb3LMYAiCfML5t2kxegtBvI+8ocrvx+dTJt+Il2M=) 2: MHTWUd_sSw03HgJQWx-Gk-0djgI.crl (hash: Q/NZ+ObJx2nJekXPHI6oGPJqSoLmIP3S8qoXB+/ldHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:44:f3:6d:d4:22:9a:1a:17:f3:1d:b3:47:c4:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02 Validity Not Before: Dec 6 08:00:32 2025 GMT Not After : Dec 7 08:00:32 2025 GMT Subject: CN=c8a805a1a30b678f298ee603bc3ac0e6e52e8eba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d8:c1:67:d9:0f:b8:ad:5b:e1:15:0b:e7:f6: e2:e5:65:f4:64:80:ef:a7:66:3e:95:d1:21:a6:0b: 94:3f:4d:9c:16:09:44:24:64:77:5c:ab:f2:ba:7f: e1:a2:93:60:c8:26:f0:9a:3f:e4:6c:ab:f4:50:a3: 39:85:20:42:03:f4:47:c6:5a:48:d5:d3:ac:5a:27: 73:00:f1:ba:12:04:65:a6:62:91:9d:44:87:6c:28: 1e:39:d8:f4:76:fb:19:0a:48:0d:7b:e9:87:0f:63: cd:59:03:0a:f7:22:c6:3f:8a:57:cf:73:6c:01:e2: 5a:be:08:f9:db:6a:2c:21:34:49:70:2b:24:85:88: 70:86:5b:5f:bf:7e:90:d5:2d:dd:54:8f:8f:4d:5c: 5c:3d:7d:f2:c3:f4:70:c8:5d:95:14:87:f3:4a:28: 10:6a:d7:18:b4:5e:36:5b:99:b0:08:69:cb:65:11: 56:c4:3a:41:68:a1:84:86:71:9f:4f:83:f8:d3:d7: c8:24:a5:3e:6c:58:47:69:b4:eb:1a:28:e0:2b:06: ba:85:4e:6d:6c:2d:08:10:53:34:22:fb:eb:e9:ac: e4:c2:a9:52:d2:30:7e:43:a4:36:c2:8f:a6:22:34: 3b:a7:54:aa:1d:89:59:84:41:df:68:d8:b7:3d:04: b6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A8:05:A1:A3:0B:67:8F:29:8E:E6:03:BC:3A:C0:E6:E5:2E:8E:BA X509v3 Authority Key Identifier: keyid:30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:f3:7f:51:6d:e6:2e:82:e1:19:a2:c7:98:14:1b:53:88:4a: 96:fe:c9:62:e8:b4:1e:03:f2:f1:b7:d2:e7:1a:39:09:fd:12: d3:36:02:69:35:8d:69:87:2a:12:f2:4b:52:d8:b6:b4:38:76: 38:68:da:06:30:e6:f9:68:95:d0:2a:3d:09:d2:cc:11:a0:cb: cb:b1:52:02:60:c7:59:28:c0:12:ff:65:4c:21:85:9d:33:b0: 6d:8e:48:e5:19:ba:20:0b:6e:36:28:06:e1:5c:62:17:07:5e: 37:8b:ab:47:a7:a3:52:f1:25:75:70:88:21:db:3f:5f:be:cd: 99:21:a6:a0:43:b6:f1:e8:ec:af:0f:93:d5:db:b3:f0:91:99: 03:5e:97:4c:7e:83:e5:48:02:ff:75:4c:24:b0:9a:56:fe:77: 03:3b:15:8c:a9:17:b7:0c:3b:d3:9c:6e:69:67:c8:44:8f:cb: de:49:60:23:1d:5c:eb:e6:f8:b0:59:fe:9c:d0:79:dc:38:1c: 80:cf:33:50:13:dd:dd:d8:34:99:3f:18:8b:0f:4a:20:6c:19: 3f:19:2d:04:bd:b4:d5:b6:33:d7:58:a6:1d:29:86:f9:bf:c2: 58:6d:89:90:e6:24:b9:41:65:2d:e5:5f:c1:29:f3:d3:14:5a: ff:be:30:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUTzbdQimhoX8x2zR8QOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzRkNjUxZGZlYzRiMGQzNzFlMDI1MDViMWY4NjkzZWQx ZDhlMDIwHhcNMjUxMjA2MDgwMDMyWhcNMjUxMjA3MDgwMDMyWjAzMTEwLwYDVQQD EyhjOGE4MDVhMWEzMGI2NzhmMjk4ZWU2MDNiYzNhYzBlNmU1MmU4ZWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtjBZ9kPuK1b4RUL5/bi5WX0ZIDv p2Y+ldEhpguUP02cFglEJGR3XKvyun/hopNgyCbwmj/kbKv0UKM5hSBCA/RHxlpI 1dOsWidzAPG6EgRlpmKRnUSHbCgeOdj0dvsZCkgNe+mHD2PNWQMK9yLGP4pXz3Ns AeJavgj522osITRJcCskhYhwhltfv36Q1S3dVI+PTVxcPX3yw/RwyF2VFIfzSigQ atcYtF42W5mwCGnLZRFWxDpBaKGEhnGfT4P409fIJKU+bFhHabTrGijgKwa6hU5t bC0IEFM0Ivvr6azkwqlS0jB+Q6Q2wo+mIjQ7p1SqHYlZhEHfaNi3PQS2uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMioBaGjC2ePKY7mA7w6wOblLo66MB8GA1UdIwQY MBaAFDB01lHf7EsNNx4CUFsfhpPtHY4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhUV1VkX3NTdzAzSGdKUVd4LUdrLTBkamdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMTI4M2YtZjdhYS00YTY3LTk1NzAt OTJiYTJkNTA3N2MzLzEvTUhUV1VkX3NTdzAzSGdKUVd4LUdrLTBkamdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yMTI4M2YtZjdhYS00YTY3LTk1NzAtOTJiYTJkNTA3N2Mz LzEvTUhUV1VkX3NTdzAzSGdKUVd4LUdrLTBkamdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/N/UW3m LoLhGaLHmBQbU4hKlv7JYui0HgPy8bfS5xo5Cf0S0zYCaTWNaYcqEvJLUti2tDh2 OGjaBjDm+WiV0Co9CdLMEaDLy7FSAmDHWSjAEv9lTCGFnTOwbY5I5Rm6IAtuNigG 4VxiFwdeN4urR6ejUvEldXCIIds/X77NmSGmoEO28ejsrw+T1duz8JGZA16XTH6D 5UgC/3VMJLCaVv53AzsVjKkXtww705xuaWfIRI/L3klgIx1c6+b4sFn+nNB53Dgc gM8zUBPd3dg0mT8Yiw9KIGwZPxktBL201bYz11imHSmG+b/CWG2JkOYkuUFlLeVf wSnz0xRa/74w0Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:01:39 2025 by rpki-client