This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft File: mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft (raw, json) Hash identifier: AqvwSxCRmzcxD/PQrHbJHOFh2gszw9dGiLeM7qCnyjA= Subject key identifier: 79:58:F0:60:B2:7B:C8:BA:4C:46:FE:08:79:4C:4C:7D:46:75:0E:C8 Authority key identifier: 98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4 Certificate issuer: /CN=98752d18667dbff8422f97e1e3890e99381d09d4 Certificate serial: 019AF208DA5A8D03E4394087084A99461B7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft Manifest number: 07F7 Signing time: Sat 06 Dec 2025 05:00:57 +0000 Manifest this update: Sat 06 Dec 2025 05:00:57 +0000 Manifest next update: Sun 07 Dec 2025 05:00:57 +0000 Files and hashes: 1: eEuL986vzdl5Ue42JMTwEjrhHL8.roa (hash: sD06A9ioFyTX7xWQwS5R0iqBwd3oxcUKyjznK7FeoF8=) 2: mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl (hash: MvcjAPvODHJGgowZ/1LRDgVI3rBWXodBgxjWqLViywk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:da:5a:8d:03:e4:39:40:87:08:4a:99:46:1b:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98752d18667dbff8422f97e1e3890e99381d09d4 Validity Not Before: Dec 6 05:00:57 2025 GMT Not After : Dec 7 05:00:57 2025 GMT Subject: CN=7958f060b27bc8ba4c46fe08794c4c7d46750ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:1e:02:04:fb:38:94:97:25:e1:90:6e:d6:4e: a3:b8:b9:fa:0b:bd:3a:b8:48:91:a1:37:0e:83:a6: 28:89:cc:34:90:5a:20:09:5d:4d:08:4a:ff:fb:06: 02:61:5f:10:a1:41:d4:da:c4:82:78:ea:ff:1e:32: 6f:5c:12:27:0c:70:77:79:2f:c2:10:96:60:b4:34: 3f:83:88:3a:53:86:52:6e:13:a8:76:3a:64:3f:64: 74:34:d0:6d:08:74:70:f6:3e:81:e4:6e:84:71:1e: ec:0d:fa:dd:f6:a2:b8:e6:d9:10:6f:76:2d:15:01: e5:fd:f7:78:8b:20:03:20:2a:be:b8:28:6e:a5:0c: bc:f8:a8:63:ae:f5:19:0d:7c:0a:11:74:4b:c8:be: c8:1f:2c:1e:5c:5a:3a:8b:cb:b8:c0:0c:3a:86:e1: bb:54:fb:6e:4a:31:f2:ec:61:72:f2:48:8f:f5:8a: 50:a4:61:1c:30:9d:13:19:01:7f:9a:27:cd:9f:c8: da:e9:ac:a2:be:30:3a:02:90:b5:77:fb:e5:0d:1c: 65:77:18:78:39:ab:ae:60:a3:11:32:7a:09:93:dc: 91:be:28:81:4a:87:22:12:21:54:f6:5d:91:c9:a6: 31:b2:4f:53:f8:87:94:e3:92:84:97:03:0f:b9:4d: 19:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:58:F0:60:B2:7B:C8:BA:4C:46:FE:08:79:4C:4C:7D:46:75:0E:C8 X509v3 Authority Key Identifier: keyid:98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:94:d5:76:5a:80:73:c8:d1:e1:58:05:9a:b2:7a:41:4d:d7: 87:9c:dc:8d:ce:b7:fe:64:c1:ed:81:f4:fe:79:a9:bb:62:15: 16:70:e0:8a:a5:df:da:7b:63:5e:9a:53:ae:78:97:99:60:6a: 8a:34:4c:08:25:b6:7b:35:14:b1:b5:42:7c:62:20:2d:75:f3: 79:b5:61:1e:77:07:3c:a6:62:74:18:9c:a1:19:4f:fc:49:42: 9d:f8:1e:8f:72:bd:01:e3:48:05:de:87:35:4f:c2:5e:ba:ad: 34:f4:ae:17:e0:cd:2b:48:5d:6c:40:69:dd:4f:60:19:39:76: 61:03:3a:5a:d6:d5:05:e3:b5:77:94:1b:96:30:e1:6c:15:3c: 7b:51:2a:34:13:04:fd:d8:4e:06:f1:c8:c1:6a:0f:b6:8d:d3: c8:f1:83:ac:b5:c5:32:3c:52:2d:2e:51:42:47:20:64:d0:c1: f5:00:d4:b8:a6:48:46:8f:13:e5:3d:9a:a8:f0:30:f9:b9:9c: f0:e6:97:db:fe:40:ba:73:1f:34:99:21:08:5e:a6:14:7f:e1: 69:92:b6:41:ff:8b:bb:79:d0:19:61:e5:42:fd:2d:95:4c:76: d8:07:3c:23:37:83:a0:ca:a3:bf:b8:4b:5e:59:53:96:c7:7e: 7c:39:f2:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNpajQPkOUCHCEqZRht+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NzUyZDE4NjY3ZGJmZjg0MjJmOTdlMWUzODkwZTk5Mzgx ZDA5ZDQwHhcNMjUxMjA2MDUwMDU3WhcNMjUxMjA3MDUwMDU3WjAzMTEwLwYDVQQD Eyg3OTU4ZjA2MGIyN2JjOGJhNGM0NmZlMDg3OTRjNGM3ZDQ2NzUwZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8B4CBPs4lJcl4ZBu1k6juLn6C706 uEiRoTcOg6Yoicw0kFogCV1NCEr/+wYCYV8QoUHU2sSCeOr/HjJvXBInDHB3eS/C EJZgtDQ/g4g6U4ZSbhOodjpkP2R0NNBtCHRw9j6B5G6EcR7sDfrd9qK45tkQb3Yt FQHl/fd4iyADICq+uChupQy8+KhjrvUZDXwKEXRLyL7IHyweXFo6i8u4wAw6huG7 VPtuSjHy7GFy8kiP9YpQpGEcMJ0TGQF/mifNn8ja6ayivjA6ApC1d/vlDRxldxh4 OauuYKMRMnoJk9yRviiBSociEiFU9l2RyaYxsk9T+IeU45KElwMPuU0ZjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlY8GCye8i6TEb+CHlMTH1GdQ7IMB8GA1UdIwQY MBaAFJh1LRhmfb/4Qi+X4eOJDpk4HQnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUhVdEdHWjl2X2hDTDVmaDQ0a09tVGdkQ2RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iZGM5ZDEtZTU5ZS00ZDFlLWJhODUt MTkwYWZhMmMxMzYxLzEvbUhVdEdHWjl2X2hDTDVmaDQ0a09tVGdkQ2RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iZGM5ZDEtZTU5ZS00ZDFlLWJhODUtMTkwYWZhMmMxMzYx LzEvbUhVdEdHWjl2X2hDTDVmaDQ0a09tVGdkQ2RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpTVdlqA c8jR4VgFmrJ6QU3Xh5zcjc63/mTB7YH0/nmpu2IVFnDgiqXf2ntjXppTrniXmWBq ijRMCCW2ezUUsbVCfGIgLXXzebVhHncHPKZidBicoRlP/ElCnfgej3K9AeNIBd6H NU/CXrqtNPSuF+DNK0hdbEBp3U9gGTl2YQM6WtbVBeO1d5QbljDhbBU8e1EqNBME /dhOBvHIwWoPto3TyPGDrLXFMjxSLS5RQkcgZNDB9QDUuKZIRo8T5T2aqPAw+bmc 8OaX2/5AunMfNJkhCF6mFH/haZK2Qf+Lu3nQGWHlQv0tlUx22Ac8IzeDoMqjv7hL XllTlsd+fDnyng== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:56 2025 by rpki-client