This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft File: MHLNXfcyOVerh8B_XN0VyR7_yNU.mft (raw, json) Hash identifier: Ss3tJFJ940IvJCORgA1I/99fCSI0abniFVVTjHHnP0g= Subject key identifier: 44:5C:D1:20:1C:2C:3B:E0:2E:96:CA:96:FB:5F:3F:0F:10:B3:A8:3B Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5 Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5 Certificate serial: 019AF08874346A0E9700476A7C1E9934D403 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft Manifest number: 0453 Signing time: Fri 05 Dec 2025 22:01:05 +0000 Manifest this update: Fri 05 Dec 2025 22:01:05 +0000 Manifest next update: Sat 06 Dec 2025 22:01:05 +0000 Files and hashes: 1: 1-j19Lm_8LkOQ7sD4oDHLKYSPWic.roa (hash: AyGIDkmO70ikRHTGZ5Nr8McTMa0GSHdwM5XnVEHxeLU=) 2: 4K24stKfDp1H3GNlLGKVCADGEk8.roa (hash: UPReXxcNMcYoyQCbGFi6FE4Fmh9h/aMYNiw52x0SkBo=) 3: MHLNXfcyOVerh8B_XN0VyR7_yNU.crl (hash: 6U+vBs6TC52LPkfFf7A5FgFfSt45MyfPOhQJpT0zFVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:74:34:6a:0e:97:00:47:6a:7c:1e:99:34:d4:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5 Validity Not Before: Dec 5 22:01:05 2025 GMT Not After : Dec 6 22:01:05 2025 GMT Subject: CN=445cd1201c2c3be02e96ca96fb5f3f0f10b3a83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7f:6f:26:f3:0d:1f:f7:a5:9b:0d:b1:d3:66: bf:05:49:de:62:63:60:24:c5:e9:cc:a1:39:a6:0e: c0:b3:5d:57:72:f4:00:8e:99:32:8c:b8:77:12:d1: bf:60:5a:d2:6f:e2:b6:8a:03:f6:f2:2f:bc:2d:72: 50:b5:2c:54:29:67:1d:41:05:00:9d:46:ec:b8:4c: b1:6b:8d:e3:f0:6a:17:6a:89:06:25:0f:6a:b3:ea: 01:e2:c4:db:32:7b:2d:9f:d5:69:68:df:6f:bc:d6: 3c:6f:02:8e:27:5e:35:c5:bc:c3:fb:06:30:85:a1: 22:05:5d:37:6d:d4:8b:cd:3f:4a:ab:a1:a3:0a:2e: d3:a5:16:45:c6:98:38:94:54:d9:09:96:8b:4b:66: 71:0e:5e:fe:af:a7:23:ac:3c:93:e3:72:e2:55:03: 59:07:36:56:6d:22:5e:21:99:1c:a4:cd:da:54:d4: 6a:d0:3b:56:25:59:ef:20:5b:52:03:2d:1b:36:e7: 48:61:e0:39:8e:ff:51:36:2a:f9:b3:66:60:2d:42: c0:86:d7:77:79:b9:4a:0d:17:bb:eb:c1:0d:97:da: 12:f0:27:f9:99:11:e1:2b:63:5a:7b:f8:8a:2c:58: 65:84:be:15:03:0a:cf:ef:ea:6a:d9:ef:8e:36:fd: 95:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:5C:D1:20:1C:2C:3B:E0:2E:96:CA:96:FB:5F:3F:0F:10:B3:A8:3B X509v3 Authority Key Identifier: keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:bb:86:ad:1f:83:d9:ad:68:e2:3c:c3:46:b0:9b:a6:dd:64: 13:43:c2:6c:be:b9:44:5d:dd:be:89:72:07:6d:41:2c:25:84: 3c:92:e5:e8:3a:09:64:0e:5b:52:1d:39:b5:a1:5e:07:9b:49: 41:05:eb:2e:5f:67:d9:a6:bf:f9:cc:02:6f:c7:df:c2:d4:20: a8:1e:05:31:ff:d7:cc:df:98:43:34:2f:2a:04:6b:3b:ba:a5: 52:09:d1:5c:ee:02:7c:53:71:6d:5e:bb:57:da:d4:fa:83:45: 33:5d:4d:16:a6:94:c1:fc:a3:5c:40:a6:07:ae:45:90:9f:a4: 89:16:ca:2b:f0:e1:e1:0b:bc:92:52:86:57:88:f9:f0:65:3c: 79:a9:09:ea:a3:fa:ae:23:f3:08:97:e3:7d:6a:6c:0f:48:13: 32:a9:27:e9:d0:76:dc:00:a8:67:d4:d6:6b:70:9e:fd:e0:a2: e1:e4:15:5a:45:10:18:9c:d3:3a:eb:d2:fd:17:27:65:73:fe: d6:d8:b5:87:0a:29:55:29:e7:25:91:7c:87:17:30:e3:4e:9d: 31:19:d8:87:c9:ab:3e:b9:1e:83:2b:e4:b3:dc:e4:46:5a:ff: ee:8b:5e:9a:7b:d7:70:4f:af:ee:9e:4f:51:1c:c1:e3:64:c7: a8:bf:a7:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiHQ0ag6XAEdqfB6ZNNQDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzJjZDVkZjczMjM5NTdhYjg3YzA3ZjVjZGQxNWM5MWVm ZmM4ZDUwHhcNMjUxMjA1MjIwMTA1WhcNMjUxMjA2MjIwMTA1WjAzMTEwLwYDVQQD Eyg0NDVjZDEyMDFjMmMzYmUwMmU5NmNhOTZmYjVmM2YwZjEwYjNhODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n9vJvMNH/elmw2x02a/BUneYmNg JMXpzKE5pg7As11XcvQAjpkyjLh3EtG/YFrSb+K2igP28i+8LXJQtSxUKWcdQQUA nUbsuEyxa43j8GoXaokGJQ9qs+oB4sTbMnstn9VpaN9vvNY8bwKOJ141xbzD+wYw haEiBV03bdSLzT9Kq6GjCi7TpRZFxpg4lFTZCZaLS2ZxDl7+r6cjrDyT43LiVQNZ BzZWbSJeIZkcpM3aVNRq0DtWJVnvIFtSAy0bNudIYeA5jv9RNir5s2ZgLULAhtd3 eblKDRe768ENl9oS8Cf5mRHhK2Nae/iKLFhlhL4VAwrP7+pq2e+ONv2VgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFERc0SAcLDvgLpbKlvtfPw8Qs6g7MB8GA1UdIwQY MBaAFDByzV33MjlXq4fAf1zdFcke/8jVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYt NWU5NzQzNzc2MDBjLzEvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYtNWU5NzQzNzc2MDBj LzEvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgLuGrR+D 2a1o4jzDRrCbpt1kE0PCbL65RF3dvolyB21BLCWEPJLl6DoJZA5bUh05taFeB5tJ QQXrLl9n2aa/+cwCb8ffwtQgqB4FMf/XzN+YQzQvKgRrO7qlUgnRXO4CfFNxbV67 V9rU+oNFM11NFqaUwfyjXECmB65FkJ+kiRbKK/Dh4Qu8klKGV4j58GU8eakJ6qP6 riPzCJfjfWpsD0gTMqkn6dB23ACoZ9TWa3Ce/eCi4eQVWkUQGJzTOuvS/RcnZXP+ 1ti1hwopVSnnJZF8hxcw406dMRnYh8mrPrkegyvks9zkRlr/7otemnvXcE+v7p5P URzB42THqL+n/Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:25 2025 by rpki-client