This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft File: MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json) Hash identifier: HM0kI4wy3wkvZTIReh4XF72hGWcvtUYEDobjBoYQ38Q= Subject key identifier: 91:42:F8:61:64:C1:1E:9A:87:B8:FE:8E:7F:6C:58:53:42:94:35:90 Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e Certificate serial: 019AF3896A5F0D512A56747FCE81938C8BFB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft Manifest number: 0BC1 Signing time: Sat 06 Dec 2025 12:01:00 +0000 Manifest this update: Sat 06 Dec 2025 12:01:00 +0000 Manifest next update: Sun 07 Dec 2025 12:01:00 +0000 Files and hashes: 1: Ly1MWymIvXOCybb36lr4yOkjsU8.roa (hash: VpBFbk8tqcALSJaD09pM7y3kJlzVLbs+HEbBlDB9T94=) 2: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: XcB7/F6Qvjdh7rPCeJHRwKxvXzelDwiHWkbAeGiGaEU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:6a:5f:0d:51:2a:56:74:7f:ce:81:93:8c:8b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e Validity Not Before: Dec 6 12:01:00 2025 GMT Not After : Dec 7 12:01:00 2025 GMT Subject: CN=9142f86164c11e9a87b8fe8e7f6c585342943590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:23:4d:38:95:b8:eb:0c:51:61:d9:fc:fa:1b: cf:42:c7:2d:a6:f8:bc:ab:37:89:e4:3a:ff:47:ef: 72:a8:a2:58:2f:21:cb:cb:d9:be:84:30:c6:db:78: f6:37:20:ba:69:fe:b1:0d:dd:02:83:e6:12:a8:90: b9:b6:33:65:15:5f:ab:9a:c7:54:ad:94:09:e6:a4: 91:70:ae:3a:69:5f:62:4b:24:fa:80:f5:88:df:4f: 16:45:8a:a2:7e:06:25:85:80:48:66:7b:1e:40:a8: 13:e4:64:03:3d:79:70:a2:40:29:3c:4d:2d:bc:bf: c6:12:7c:cf:9b:47:bb:54:4a:97:d3:20:19:69:b9: dc:49:88:f2:15:c5:89:18:64:5e:a6:03:d1:d1:c7: 50:58:d7:8c:f0:81:6e:f6:e2:62:2b:5a:e5:7a:fa: 41:15:6d:2d:3d:e6:f7:b5:f1:ea:c7:4a:35:18:b1: 48:de:ef:8d:18:3a:e4:fa:e2:39:bc:30:0c:0a:f5: cf:cf:f2:a9:7f:ae:48:13:f4:e2:5c:41:af:94:3f: cd:46:53:04:71:aa:c6:20:e8:a4:56:ef:43:e9:f7: a3:08:c4:6f:12:86:0f:04:ae:df:e6:85:42:6c:e8: 99:5e:2c:26:00:f1:d8:4a:66:21:cc:59:a0:c7:a0: 29:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:42:F8:61:64:C1:1E:9A:87:B8:FE:8E:7F:6C:58:53:42:94:35:90 X509v3 Authority Key Identifier: keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a4:b2:d0:f4:73:5b:46:af:a9:d5:15:dc:f8:88:f7:72:b3: dd:b4:26:f4:ca:65:24:3a:bd:0a:d3:35:88:d1:4c:d8:d4:0b: b2:d4:98:3f:e5:35:55:3a:cb:be:c9:29:09:7e:02:5a:5d:41: 45:b4:63:64:b1:72:dc:73:48:ee:c4:40:12:48:97:2b:f1:37: de:74:ad:f9:25:9c:36:58:2b:8e:98:95:d8:7b:c4:01:df:f1: a3:40:fa:ce:1c:48:bf:4e:ea:13:5c:f3:f9:02:f1:59:83:e9: d3:03:81:27:10:14:98:a8:81:52:5f:3e:ef:20:f7:d3:7b:33: dc:c4:30:5f:20:67:90:5e:03:8a:b3:55:2a:a6:ea:cf:3d:3f: 70:28:95:bd:c2:cd:79:d7:1a:3f:a2:54:49:bd:bf:58:c0:9c: 03:2d:75:a2:6b:45:b2:30:27:de:cd:a8:01:45:07:86:c5:0c: 08:81:6c:0d:5c:b6:cd:e0:7b:a8:06:e3:33:71:ac:8b:6b:90: 7d:3a:c5:c2:46:8d:5b:8c:fb:3c:b5:bb:39:bc:0e:68:39:0f: 93:08:de:4e:63:c0:d6:1d:b3:95:54:27:cd:1d:4b:c6:13:36: be:bd:41:39:2d:8e:4f:92:8c:8f:72:9c:1d:9c:8c:2d:33:ee: 85:ad:3a:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziWpfDVEqVnR/zoGTjIv7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2EwMzk1MDJkNDZhNmI5OTA5MTEwY2UyYWIxMzk2ODc3 YmQwOGUwHhcNMjUxMjA2MTIwMTAwWhcNMjUxMjA3MTIwMTAwWjAzMTEwLwYDVQQD Eyg5MTQyZjg2MTY0YzExZTlhODdiOGZlOGU3ZjZjNTg1MzQyOTQzNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iNNOJW46wxRYdn8+hvPQsctpvi8 qzeJ5Dr/R+9yqKJYLyHLy9m+hDDG23j2NyC6af6xDd0Cg+YSqJC5tjNlFV+rmsdU rZQJ5qSRcK46aV9iSyT6gPWI308WRYqifgYlhYBIZnseQKgT5GQDPXlwokApPE0t vL/GEnzPm0e7VEqX0yAZabncSYjyFcWJGGRepgPR0cdQWNeM8IFu9uJiK1rlevpB FW0tPeb3tfHqx0o1GLFI3u+NGDrk+uI5vDAMCvXPz/Kpf65IE/TiXEGvlD/NRlME carGIOikVu9D6fejCMRvEoYPBK7f5oVCbOiZXiwmAPHYSmYhzFmgx6ApNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFC+GFkwR6ah7j+jn9sWFNClDWQMB8GA1UdIwQY MBaAFDB6A5UC1GprmQkRDOKrE5aHe9COMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhvRGxRTFVhbXVaQ1JFTTRxc1Rsb2Q3MEk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kNTEyMTEtZDBiYi00YTU3LTkzOTAt Y2UyYTQ5NmZlZTg2LzEvTUhvRGxRTFVhbXVaQ1JFTTRxc1Rsb2Q3MEk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kNTEyMTEtZDBiYi00YTU3LTkzOTAtY2UyYTQ5NmZlZTg2 LzEvTUhvRGxRTFVhbXVaQ1JFTTRxc1Rsb2Q3MEk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEaSy0PRz W0avqdUV3PiI93Kz3bQm9MplJDq9CtM1iNFM2NQLstSYP+U1VTrLvskpCX4CWl1B RbRjZLFy3HNI7sRAEkiXK/E33nSt+SWcNlgrjpiV2HvEAd/xo0D6zhxIv07qE1zz +QLxWYPp0wOBJxAUmKiBUl8+7yD303sz3MQwXyBnkF4DirNVKqbqzz0/cCiVvcLN edcaP6JUSb2/WMCcAy11omtFsjAn3s2oAUUHhsUMCIFsDVy2zeB7qAbjM3Gsi2uQ fTrFwkaNW4z7PLW7ObwOaDkPkwjeTmPA1h2zlVQnzR1LxhM2vr1BOS2OT5KMj3Kc HZyMLTPuha06gw== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:42 2025 by rpki-client