This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft File: mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft (raw, json) Hash identifier: sQJXtgeLwS+XrZZzS6e4jY7P3kmxBEBSvR1M4BT7YKo= Subject key identifier: DB:4F:B1:CC:2D:96:20:17:CA:0F:D6:B8:18:3F:B0:D5:5B:D5:2F:CB Authority key identifier: 9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1 Certificate issuer: /CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1 Certificate serial: 019B35A08562B99E207B586260BB4CFE6F4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft Manifest number: 15AC Signing time: Fri 19 Dec 2025 08:01:10 +0000 Manifest this update: Fri 19 Dec 2025 08:01:10 +0000 Manifest next update: Sat 20 Dec 2025 08:01:10 +0000 Files and hashes: 1: 0aA52a05uApLKY3CXNmnXhwKrks.roa (hash: MeSVjVqbWBXWuoo0WV7N+n6x9g24v2DXI6O3Ubp3bGI=) 2: mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl (hash: nHmmSRy6qayPDimb4Y+fOyPGf1aCUt/RcSFXKtTob3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:85:62:b9:9e:20:7b:58:62:60:bb:4c:fe:6f:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1 Validity Not Before: Dec 19 08:01:10 2025 GMT Not After : Dec 20 08:01:10 2025 GMT Subject: CN=db4fb1cc2d962017ca0fd6b8183fb0d55bd52fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:64:1d:f3:bc:00:0c:00:0c:93:0b:64:f7:37: 1d:6b:ac:7f:0b:8b:f3:86:b1:15:ce:cc:5d:ad:37: 35:d6:51:f5:bf:be:77:e8:75:39:c1:e0:f7:d2:49: 4c:59:68:df:50:d5:80:5e:db:cd:16:8e:63:95:8b: 0a:87:f3:3d:08:47:45:18:49:51:49:ee:3c:04:3b: 90:7f:ca:d3:48:db:7f:b1:8a:cc:85:f6:6e:92:8c: 0b:7e:4b:e2:69:b3:41:bc:62:9f:b9:60:a9:b5:41: a4:b5:51:57:36:a5:43:06:81:74:f8:23:ce:9e:c0: fb:c4:e8:42:60:f5:21:dc:f8:02:49:d7:e4:c6:09: 9b:15:b1:41:dd:0e:74:67:bc:bc:d5:de:f5:44:d6: 9c:43:21:57:48:6c:57:f2:c0:3b:c3:64:d7:12:9c: cc:14:e1:c2:3a:a0:b0:64:b4:ca:04:d1:0d:97:7a: 47:44:e3:4b:ff:27:34:29:9d:6d:4c:0e:4a:33:85: c9:17:ef:8b:8a:b7:5e:52:17:df:df:2a:22:c1:1e: 14:50:c6:fe:ca:0f:3a:90:03:e5:e3:ac:ba:d9:80: 88:67:6f:56:34:1e:69:4b:3d:51:6f:db:db:ba:97: 40:10:ab:a4:c1:c1:49:e9:6d:1e:80:72:b5:f5:00: 24:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4F:B1:CC:2D:96:20:17:CA:0F:D6:B8:18:3F:B0:D5:5B:D5:2F:CB X509v3 Authority Key Identifier: keyid:9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:b6:3b:74:3a:06:e9:68:e0:8e:17:c6:8b:4a:92:af:90:ee: c0:e3:f7:db:f3:ae:a8:0c:80:28:3c:06:e5:93:7e:a2:ac:db: 85:da:7e:64:23:41:1c:68:14:b3:21:15:3b:27:75:92:36:35: c1:8d:a0:6b:d7:ae:42:85:4c:6e:76:1d:f8:ab:03:99:ec:9d: 3a:97:7f:44:75:15:04:73:f5:25:13:2b:b7:b4:4a:09:e9:af: bc:4f:12:b0:59:07:30:eb:93:a5:8b:ef:4e:5e:53:9b:41:f1: a6:ed:96:e3:78:f3:7a:f2:22:b0:fc:6d:f2:35:65:25:01:c8: 49:a3:e5:57:de:05:8f:23:ba:e0:27:cb:c0:39:3f:70:38:e2: d7:18:31:c1:2a:84:75:ca:86:fd:56:15:e6:10:9b:28:01:d3: 0d:a2:99:cd:41:11:6b:a9:17:0f:ab:68:40:70:ae:d5:74:43: ed:c6:20:7c:bc:b4:c7:be:f2:98:a8:b2:b8:05:5a:37:62:ca: e2:4f:b2:7f:f1:ba:40:db:58:55:cb:11:07:1b:b7:ea:97:a9: 7e:3d:34:1b:cb:6e:9f:30:94:30:9b:00:8f:64:b5:8f:2c:4a: 32:fc:78:f1:cc:7d:26:64:36:cd:9b:66:f3:08:c8:c1:04:89: bd:f6:06:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oIViuZ4ge1hiYLtM/m9KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWEwODY5MmYyMjhkYTBjNDFiMzE3YzZmYTdjYzVjM2Jl YzUxZTEwHhcNMjUxMjE5MDgwMTEwWhcNMjUxMjIwMDgwMTEwWjAzMTEwLwYDVQQD EyhkYjRmYjFjYzJkOTYyMDE3Y2EwZmQ2YjgxODNmYjBkNTViZDUyZmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymQd87wADAAMkwtk9zcda6x/C4vz hrEVzsxdrTc11lH1v7536HU5weD30klMWWjfUNWAXtvNFo5jlYsKh/M9CEdFGElR Se48BDuQf8rTSNt/sYrMhfZukowLfkviabNBvGKfuWCptUGktVFXNqVDBoF0+CPO nsD7xOhCYPUh3PgCSdfkxgmbFbFB3Q50Z7y81d71RNacQyFXSGxX8sA7w2TXEpzM FOHCOqCwZLTKBNENl3pHRONL/yc0KZ1tTA5KM4XJF++LirdeUhff3yoiwR4UUMb+ yg86kAPl46y62YCIZ29WNB5pSz1Rb9vbupdAEKukwcFJ6W0egHK19QAkVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtPscwtliAXyg/WuBg/sNVb1S/LMB8GA1UdIwQY MBaAFJoaCGkvIo2gxBsxfG+nzFw77FHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWhvSWFTOGlqYURFR3pGOGI2Zk1YRHZzVWVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kMGZhZDEtYjhiMS00OTYwLWI2N2Yt MDJlZGYwOGY3Y2Y4LzEvbWhvSWFTOGlqYURFR3pGOGI2Zk1YRHZzVWVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kMGZhZDEtYjhiMS00OTYwLWI2N2YtMDJlZGYwOGY3Y2Y4 LzEvbWhvSWFTOGlqYURFR3pGOGI2Zk1YRHZzVWVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk7Y7dDoG 6WjgjhfGi0qSr5DuwOP32/OuqAyAKDwG5ZN+oqzbhdp+ZCNBHGgUsyEVOyd1kjY1 wY2ga9euQoVMbnYd+KsDmeydOpd/RHUVBHP1JRMrt7RKCemvvE8SsFkHMOuTpYvv Tl5Tm0Hxpu2W43jzevIisPxt8jVlJQHISaPlV94FjyO64CfLwDk/cDji1xgxwSqE dcqG/VYV5hCbKAHTDaKZzUERa6kXD6toQHCu1XRD7cYgfLy0x77ymKiyuAVaN2LK 4k+yf/G6QNtYVcsRBxu36pepfj00G8tunzCUMJsAj2S1jyxKMvx48cx9JmQ2zZtm 8wjIwQSJvfYGfQ== -----END CERTIFICATE-----Generated at Fri Dec 19 11:51:36 2025 by rpki-client