This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft File: MHFOgRmzE03MBg_lkAp82Gj8WXM.mft (raw, json) Hash identifier: 1Lj7dWjouOY0hVhelXrr5b/ehV0n8AzBNm+lSaFkxbI= Subject key identifier: 77:B1:2C:9D:FA:A0:A5:CA:CA:4F:BB:66:86:5D:BD:F0:E9:62:2B:5E Authority key identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73 Certificate issuer: /CN=30714e8119b3134dcc060fe5900a7cd868fc5973 Certificate serial: 019B2E54C334BCC32899C911724CA9CC68F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft Manifest number: 0326 Signing time: Wed 17 Dec 2025 22:01:05 +0000 Manifest this update: Wed 17 Dec 2025 22:01:05 +0000 Manifest next update: Thu 18 Dec 2025 22:01:05 +0000 Files and hashes: 1: MHFOgRmzE03MBg_lkAp82Gj8WXM.crl (hash: 94v6HkhqUSlLRlgQ9Uz9PW9zqatG58hyIVihdz67AJM=) 2: s8cM_dy31wLZQn4guvFF3f9HiZg.roa (hash: 4BYSDQG+JLpKAQER6Y51ZvwyHGW9NfhpGsXwE25xvBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:c3:34:bc:c3:28:99:c9:11:72:4c:a9:cc:68:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30714e8119b3134dcc060fe5900a7cd868fc5973 Validity Not Before: Dec 17 22:01:05 2025 GMT Not After : Dec 18 22:01:05 2025 GMT Subject: CN=77b12c9dfaa0a5caca4fbb66865dbdf0e9622b5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:30:db:ef:7a:08:72:e8:e8:12:ee:6e:d9:dd: 64:cb:39:5b:19:58:59:43:9f:f8:85:c1:49:29:07: 44:61:c5:cf:a9:5c:91:52:44:77:bc:ea:e4:08:17: de:3e:eb:21:3f:46:9e:5f:99:e3:5a:fc:a0:25:58: cf:b7:f4:cb:15:47:71:85:7f:6e:07:9f:15:94:74: c9:36:bf:ee:5c:56:98:be:b9:0b:36:bf:bd:a7:39: c3:04:3a:60:c1:ca:7f:70:37:73:45:20:cc:86:6c: 0d:ce:f5:de:20:ba:f5:c8:e4:08:c9:c0:35:11:53: 35:c6:39:a1:af:d6:20:8b:4d:bf:e8:2c:22:74:e7: 0c:7e:dc:12:c6:d3:0d:e1:42:c8:8f:bf:c5:89:7d: e7:82:08:d8:d6:2a:e3:ba:93:8c:61:2d:2a:51:ad: e8:fa:99:68:ea:f5:6f:79:a5:89:60:0a:bb:36:de: 8d:fb:2b:17:fe:07:c0:30:c6:48:42:f1:a7:56:af: ff:46:b0:a0:3f:30:70:5b:0e:66:1c:7f:6d:a4:e1: ca:4e:6b:f0:c7:1c:b3:9c:44:37:cc:ca:df:aa:b1: 43:00:d2:03:54:16:4a:06:be:7e:92:6d:e0:53:82: f9:9f:34:d6:55:4e:ea:bf:4f:b8:e1:31:21:79:bf: cf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B1:2C:9D:FA:A0:A5:CA:CA:4F:BB:66:86:5D:BD:F0:E9:62:2B:5E X509v3 Authority Key Identifier: keyid:30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:04:29:d0:14:fe:47:ba:30:1f:c3:62:aa:28:24:d7:17:b4: 27:ba:b5:03:6f:66:81:a9:30:ba:05:69:85:1c:71:f5:58:f8: 51:6f:05:14:00:39:6a:88:3b:51:81:a8:2f:76:a6:5b:8d:9e: 7c:0c:0e:cc:ba:4d:6b:ea:b2:a8:f3:f2:b1:f9:41:6b:55:5f: 85:1e:09:c9:0d:79:e2:27:58:fd:53:bd:cd:31:c8:b9:1b:56: 57:ee:cc:ca:61:6e:02:99:f1:1e:dd:3b:14:ef:20:01:d9:3e: 09:69:22:8e:61:f0:81:cf:d7:80:e5:3a:08:ff:b8:c1:c2:86: ba:7c:b0:54:fe:ce:3d:b9:90:9e:a5:c7:a7:04:8f:38:be:7b: b0:04:eb:62:cd:7b:5b:39:d6:fa:51:4a:e6:ca:83:fb:39:01: 90:34:b7:27:b1:f5:66:18:d4:72:1c:3c:cb:89:2b:12:e4:1d: 6c:c5:ae:0b:e0:7f:7d:6d:be:a8:cc:b7:98:ad:b1:3b:80:c2: 3a:2f:2e:dc:da:95:dc:fd:00:c5:ba:4f:50:64:5a:a9:10:79: 7c:20:56:f7:1a:9b:b4:48:f9:1b:07:c3:ac:4c:8c:7c:f3:5e: 5a:d7:50:48:dc:9d:60:24:51:b8:b7:9b:72:b2:58:ae:db:6b: b4:88:ab:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVMM0vMMomckRckypzGj1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzE0ZTgxMTliMzEzNGRjYzA2MGZlNTkwMGE3Y2Q4Njhm YzU5NzMwHhcNMjUxMjE3MjIwMTA1WhcNMjUxMjE4MjIwMTA1WjAzMTEwLwYDVQQD Eyg3N2IxMmM5ZGZhYTBhNWNhY2E0ZmJiNjY4NjVkYmRmMGU5NjIyYjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTDb73oIcujoEu5u2d1kyzlbGVhZ Q5/4hcFJKQdEYcXPqVyRUkR3vOrkCBfePushP0aeX5njWvygJVjPt/TLFUdxhX9u B58VlHTJNr/uXFaYvrkLNr+9pznDBDpgwcp/cDdzRSDMhmwNzvXeILr1yOQIycA1 EVM1xjmhr9Ygi02/6CwidOcMftwSxtMN4ULIj7/FiX3nggjY1irjupOMYS0qUa3o +plo6vVveaWJYAq7Nt6N+ysX/gfAMMZIQvGnVq//RrCgPzBwWw5mHH9tpOHKTmvw xxyznEQ3zMrfqrFDANIDVBZKBr5+km3gU4L5nzTWVU7qv0+44TEheb/PEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHexLJ36oKXKyk+7ZoZdvfDpYiteMB8GA1UdIwQY MBaAFDBxToEZsxNNzAYP5ZAKfNho/FlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEt OGYzNDcwZDgyMDU3LzEvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEtOGYzNDcwZDgyMDU3 LzEvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2wQp0BT+ R7owH8Niqigk1xe0J7q1A29mgakwugVphRxx9Vj4UW8FFAA5aog7UYGoL3amW42e fAwOzLpNa+qyqPPysflBa1VfhR4JyQ154idY/VO9zTHIuRtWV+7MymFuApnxHt07 FO8gAdk+CWkijmHwgc/XgOU6CP+4wcKGunywVP7OPbmQnqXHpwSPOL57sATrYs17 WznW+lFK5sqD+zkBkDS3J7H1ZhjUchw8y4krEuQdbMWuC+B/fW2+qMy3mK2xO4DC Oi8u3NqV3P0AxbpPUGRaqRB5fCBW9xqbtEj5GwfDrEyMfPNeWtdQSNydYCRRuLeb crJYrttrtIirGw== -----END CERTIFICATE-----Generated at Thu Dec 18 07:40:36 2025 by rpki-client