This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft File: MHTWUd_sSw03HgJQWx-Gk-0djgI.mft (raw, json) Hash identifier: f3eKcHxM7htqRSaMco8nhleo2D5+JuZ42fFOJxYJzkk= Subject key identifier: 33:E7:0B:04:8A:3F:3D:60:0D:68:B6:83:32:15:BC:D6:A1:F7:6C:FF Authority key identifier: 30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02 Certificate issuer: /CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02 Certificate serial: 019B2E8B39108C61A97389F9AA84CDB2C8FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft Manifest number: 1782 Signing time: Wed 17 Dec 2025 23:00:34 +0000 Manifest this update: Wed 17 Dec 2025 23:00:34 +0000 Manifest next update: Thu 18 Dec 2025 23:00:34 +0000 Files and hashes: 1: 1-eAJE_ZPw_LJuNlElXg0BRaL11g.roa (hash: YakZb3LMYAiCfML5t2kxegtBvI+8ocrvx+dTJt+Il2M=) 2: MHTWUd_sSw03HgJQWx-Gk-0djgI.crl (hash: ie5YQbsT8FL842pPGZqsltXgSQXkEUcebdvTuPDgkBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:8b:39:10:8c:61:a9:73:89:f9:aa:84:cd:b2:c8:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3074d651dfec4b0d371e02505b1f8693ed1d8e02 Validity Not Before: Dec 17 23:00:34 2025 GMT Not After : Dec 18 23:00:34 2025 GMT Subject: CN=33e70b048a3f3d600d68b6833215bcd6a1f76cff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:bc:bb:4b:9f:80:7c:37:4f:d5:72:92:c0:72: 2f:b2:72:16:47:66:e0:3f:ae:8a:75:46:9c:6e:d0: 9b:1b:fa:bf:ff:7b:94:2b:7c:d1:84:45:f7:d3:c6: d8:05:d2:ee:ab:86:e1:c8:b4:d8:ff:94:c7:40:93: 4a:26:66:a5:50:b6:77:84:cb:84:66:63:f5:c0:b8: 59:db:71:ac:b9:99:11:f5:ac:7a:5d:5c:58:73:e5: b5:d2:42:35:37:90:e3:cd:20:5c:9b:d7:b8:cb:e9: 74:b1:4d:ac:fe:a9:2a:6e:2d:c4:65:9d:e8:92:93: b6:b4:13:c4:d2:ff:44:f1:82:8f:1c:5e:6b:2d:53: fe:55:8e:7e:a5:f5:7f:aa:87:80:ac:e6:55:b8:86: 94:1c:4b:62:9e:60:4c:90:5a:74:48:3b:6b:c8:df: 65:9e:61:9e:d5:21:cb:99:47:92:ff:69:b7:cf:57: a7:51:4b:83:8e:7a:37:6f:b1:39:19:1c:88:7c:d5: 8c:d5:4f:f3:91:8b:b9:ee:45:6e:73:db:6b:20:42: 58:15:94:47:b8:73:e0:f3:44:f2:61:c5:26:fa:e4: 68:26:17:5e:8d:3f:d0:59:88:72:25:b1:9f:c1:d1: a3:76:09:38:48:af:46:6c:78:d1:bb:f8:08:cc:c8: 36:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E7:0B:04:8A:3F:3D:60:0D:68:B6:83:32:15:BC:D6:A1:F7:6C:FF X509v3 Authority Key Identifier: keyid:30:74:D6:51:DF:EC:4B:0D:37:1E:02:50:5B:1F:86:93:ED:1D:8E:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHTWUd_sSw03HgJQWx-Gk-0djgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21283f-f7aa-4a67-9570-92ba2d5077c3/1/MHTWUd_sSw03HgJQWx-Gk-0djgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:87:a7:41:8f:fb:72:d0:b4:4e:b4:fb:2d:d7:f0:32:0d:cb: fc:c8:2e:b5:3a:e8:af:fb:ef:e0:f3:0f:fc:0c:c8:ea:d0:82: fb:11:d3:a3:7d:5d:c4:b3:63:0d:32:a4:f2:c7:56:f1:30:6e: d4:de:9a:27:82:80:d8:5d:9d:7e:40:f4:5b:66:c4:e5:8b:cf: 34:5d:c5:b3:55:07:06:29:e0:d2:b1:93:de:8b:e3:27:c3:a1: 90:90:e2:50:13:5d:6f:24:eb:4f:bd:32:61:66:72:02:ed:da: c2:cd:dd:dc:a5:11:56:8e:85:04:bc:8f:4a:23:0f:54:23:c3: e8:e1:6e:c4:98:3f:b2:ae:0c:90:1d:3e:26:ff:c1:03:2f:cc: 32:6f:cf:64:ee:b9:e3:7c:8a:ad:7f:d3:2b:27:a4:c7:0a:67: a3:8d:1d:14:d7:72:20:4b:e0:75:75:98:c0:ef:35:0c:40:d3: 1c:44:08:ef:22:29:db:51:19:62:72:c0:43:cf:6a:b4:23:20: cc:44:81:f7:98:ef:76:e9:c1:60:e2:d9:c0:ff:6e:31:97:0e: 61:da:9f:f1:c5:47:5f:87:ac:b6:41:d4:c6:85:79:14:b6:53: e8:27:35:cd:3b:4c:65:0b:61:c5:66:3c:42:9b:c4:38:94:38: 90:f4:27:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuizkQjGGpc4n5qoTNssj+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzRkNjUxZGZlYzRiMGQzNzFlMDI1MDViMWY4NjkzZWQx ZDhlMDIwHhcNMjUxMjE3MjMwMDM0WhcNMjUxMjE4MjMwMDM0WjAzMTEwLwYDVQQD EygzM2U3MGIwNDhhM2YzZDYwMGQ2OGI2ODMzMjE1YmNkNmExZjc2Y2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLy7S5+AfDdP1XKSwHIvsnIWR2bg P66KdUacbtCbG/q//3uUK3zRhEX308bYBdLuq4bhyLTY/5THQJNKJmalULZ3hMuE ZmP1wLhZ23GsuZkR9ax6XVxYc+W10kI1N5DjzSBcm9e4y+l0sU2s/qkqbi3EZZ3o kpO2tBPE0v9E8YKPHF5rLVP+VY5+pfV/qoeArOZVuIaUHEtinmBMkFp0SDtryN9l nmGe1SHLmUeS/2m3z1enUUuDjno3b7E5GRyIfNWM1U/zkYu57kVuc9trIEJYFZRH uHPg80TyYcUm+uRoJhdejT/QWYhyJbGfwdGjdgk4SK9GbHjRu/gIzMg2wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDPnCwSKPz1gDWi2gzIVvNah92z/MB8GA1UdIwQY MBaAFDB01lHf7EsNNx4CUFsfhpPtHY4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhUV1VkX3NTdzAzSGdKUVd4LUdrLTBkamdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMTI4M2YtZjdhYS00YTY3LTk1NzAt OTJiYTJkNTA3N2MzLzEvTUhUV1VkX3NTdzAzSGdKUVd4LUdrLTBkamdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yMTI4M2YtZjdhYS00YTY3LTk1NzAtOTJiYTJkNTA3N2Mz LzEvTUhUV1VkX3NTdzAzSGdKUVd4LUdrLTBkamdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIenQY/7 ctC0TrT7LdfwMg3L/MgutTror/vv4PMP/AzI6tCC+xHTo31dxLNjDTKk8sdW8TBu 1N6aJ4KA2F2dfkD0W2bE5YvPNF3Fs1UHBing0rGT3ovjJ8OhkJDiUBNdbyTrT70y YWZyAu3aws3d3KURVo6FBLyPSiMPVCPD6OFuxJg/sq4MkB0+Jv/BAy/MMm/PZO65 43yKrX/TKyekxwpno40dFNdyIEvgdXWYwO81DEDTHEQI7yIp21EZYnLAQ89qtCMg zESB95jvdunBYOLZwP9uMZcOYdqf8cVHX4estkHUxoV5FLZT6Cc1zTtMZQthxWY8 QpvEOJQ4kPQncg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:07:58 2025 by rpki-client