This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft File: MHFOgRmzE03MBg_lkAp82Gj8WXM.mft (raw, json) Hash identifier: rA5wnbi8iwMq2xZTG2Pi/SO+2nD84/OdqNFuRitUz6E= Subject key identifier: 0A:BB:AB:18:6E:E7:B6:9D:9B:59:39:C6:06:4C:4D:4D:5A:4C:6A:32 Authority key identifier: 30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73 Certificate issuer: /CN=30714e8119b3134dcc060fe5900a7cd868fc5973 Certificate serial: 019AF4656CA57D3982F4BBDBFC74FFE5A674 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft Manifest number: 0308 Signing time: Sat 06 Dec 2025 16:01:18 +0000 Manifest this update: Sat 06 Dec 2025 16:01:18 +0000 Manifest next update: Sun 07 Dec 2025 16:01:18 +0000 Files and hashes: 1: MHFOgRmzE03MBg_lkAp82Gj8WXM.crl (hash: HMJfqtBbshhRb9aIXKJU4/9G1qHIXf+T43HpxGGqDs0=) 2: s8cM_dy31wLZQn4guvFF3f9HiZg.roa (hash: 4BYSDQG+JLpKAQER6Y51ZvwyHGW9NfhpGsXwE25xvBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:6c:a5:7d:39:82:f4:bb:db:fc:74:ff:e5:a6:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30714e8119b3134dcc060fe5900a7cd868fc5973 Validity Not Before: Dec 6 16:01:18 2025 GMT Not After : Dec 7 16:01:18 2025 GMT Subject: CN=0abbab186ee7b69d9b5939c6064c4d4d5a4c6a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a9:59:b3:fd:c6:d1:cc:4e:8d:0b:0a:94:6b: 7a:25:11:74:c2:ce:dc:f3:ef:13:b1:3b:8b:81:48: 05:6d:5b:11:63:80:e6:61:72:c3:dd:ac:7e:ee:74: a7:aa:9b:59:36:44:6b:f3:a2:53:c6:7f:0a:03:06: fa:e2:7e:98:ff:81:1e:b0:56:e6:8f:c6:56:23:65: 19:4a:66:c0:ae:7a:d8:7a:f7:35:16:de:00:38:b1: 31:84:8c:fd:61:10:b1:ef:d4:16:b5:6e:d2:37:1c: a0:a7:ce:7e:9e:1b:5d:db:39:9c:01:80:94:bb:b5: b4:c2:38:67:09:84:b9:0e:97:78:57:3f:c7:ed:f3: 8d:6e:59:50:a3:3b:68:f8:8d:fc:25:21:d7:65:f6: f1:9d:61:cd:aa:b6:d8:46:9a:ed:05:55:e7:a8:1a: 39:f4:e1:18:00:32:1d:94:bc:61:30:95:9e:0d:7e: 86:0e:22:39:0b:87:cf:32:eb:cd:4c:6b:f1:5c:eb: 34:a0:a6:39:4c:0f:7c:61:c1:6d:f3:80:39:53:54: ac:02:3b:7f:c8:65:ed:3c:85:19:4a:18:fc:78:d9: 7d:45:09:c5:73:09:f4:dd:c0:69:34:9c:3a:b8:f0: e4:9a:9c:19:ab:d6:ee:ee:d7:23:73:c7:33:03:c3: 48:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BB:AB:18:6E:E7:B6:9D:9B:59:39:C6:06:4C:4D:4D:5A:4C:6A:32 X509v3 Authority Key Identifier: keyid:30:71:4E:81:19:B3:13:4D:CC:06:0F:E5:90:0A:7C:D8:68:FC:59:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHFOgRmzE03MBg_lkAp82Gj8WXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/74fa13-2cb3-427a-a45a-8f3470d82057/1/MHFOgRmzE03MBg_lkAp82Gj8WXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:37:d7:de:85:41:99:90:d3:50:de:97:ce:6d:9a:2d:08:93: 5a:6a:05:a6:93:f8:34:4d:ca:0e:0b:25:84:2f:b9:d9:4b:6c: 59:0a:a8:15:3f:60:5d:aa:9d:be:fe:73:e5:5f:79:7f:a3:d9: cc:e4:e4:9a:ae:a7:50:09:03:4b:e3:0b:1e:fe:ba:63:50:a5: 50:35:8f:96:d2:e3:21:ca:41:08:c3:9b:07:f7:4d:88:81:28: 21:92:b0:66:b0:5b:bd:ec:38:b9:9a:d9:7b:dc:08:ec:60:77: 8e:37:a8:89:8f:e7:6f:1c:4e:1f:47:4c:c7:06:c5:69:22:e1: 22:f5:4b:37:36:3c:a1:64:68:62:0a:08:aa:2b:f7:17:f9:d0: 03:7d:22:4e:00:70:dd:a3:5c:ec:6f:f1:00:49:74:43:84:ee: b2:80:cf:b8:ab:69:c5:ae:4c:92:19:54:b1:ac:20:f7:4e:a0: 5e:b8:91:31:b4:f8:f2:39:5f:e5:39:54:d6:8b:a7:50:e7:20: ad:c9:32:11:5d:4c:d2:df:4b:8d:4c:3b:de:c5:aa:a8:e1:29: 4e:76:53:62:18:64:6f:06:59:12:39:e5:d7:8c:2a:03:fa:a3: a9:b9:15:04:46:f5:87:15:9b:16:05:5d:00:7c:c5:a1:ac:9f: 5f:d2:5e:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZWylfTmC9Lvb/HT/5aZ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzE0ZTgxMTliMzEzNGRjYzA2MGZlNTkwMGE3Y2Q4Njhm YzU5NzMwHhcNMjUxMjA2MTYwMTE4WhcNMjUxMjA3MTYwMTE4WjAzMTEwLwYDVQQD EygwYWJiYWIxODZlZTdiNjlkOWI1OTM5YzYwNjRjNGQ0ZDVhNGM2YTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KlZs/3G0cxOjQsKlGt6JRF0ws7c 8+8TsTuLgUgFbVsRY4DmYXLD3ax+7nSnqptZNkRr86JTxn8KAwb64n6Y/4EesFbm j8ZWI2UZSmbArnrYevc1Ft4AOLExhIz9YRCx79QWtW7SNxygp85+nhtd2zmcAYCU u7W0wjhnCYS5Dpd4Vz/H7fONbllQozto+I38JSHXZfbxnWHNqrbYRprtBVXnqBo5 9OEYADIdlLxhMJWeDX6GDiI5C4fPMuvNTGvxXOs0oKY5TA98YcFt84A5U1SsAjt/ yGXtPIUZShj8eNl9RQnFcwn03cBpNJw6uPDkmpwZq9bu7tcjc8czA8NIoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAq7qxhu57adm1k5xgZMTU1aTGoyMB8GA1UdIwQY MBaAFDBxToEZsxNNzAYP5ZAKfNho/FlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEt OGYzNDcwZDgyMDU3LzEvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi83NGZhMTMtMmNiMy00MjdhLWE0NWEtOGYzNDcwZDgyMDU3 LzEvTUhGT2dSbXpFMDNNQmdfbGtBcDgyR2o4V1hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyzfX3oVB mZDTUN6Xzm2aLQiTWmoFppP4NE3KDgslhC+52UtsWQqoFT9gXaqdvv5z5V95f6PZ zOTkmq6nUAkDS+MLHv66Y1ClUDWPltLjIcpBCMObB/dNiIEoIZKwZrBbvew4uZrZ e9wI7GB3jjeoiY/nbxxOH0dMxwbFaSLhIvVLNzY8oWRoYgoIqiv3F/nQA30iTgBw 3aNc7G/xAEl0Q4TusoDPuKtpxa5MkhlUsawg906gXriRMbT48jlf5TlU1ounUOcg rckyEV1M0t9LjUw73sWqqOEpTnZTYhhkbwZZEjnl14wqA/qjqbkVBEb1hxWbFgVd AHzFoayfX9JeUw== -----END CERTIFICATE-----Generated at Sun Dec 7 02:15:56 2025 by rpki-client