This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft File: mHC_T5U1DQN3-ok4v08ty35y_xI.mft (raw, json) Hash identifier: qxNmgfI+STkVdFZwYstTYnYRD4xeUsR2B9YmmKTK7Gw= Subject key identifier: 95:CA:68:C5:0C:A4:D8:88:09:FC:9A:10:C7:A1:1F:F3:8F:80:45:B8 Authority key identifier: 98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12 Certificate issuer: /CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12 Certificate serial: 019B446EC3C47B878B50226D42ABFBDDE386 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft Manifest number: 14EC Signing time: Mon 22 Dec 2025 05:01:08 +0000 Manifest this update: Mon 22 Dec 2025 05:01:08 +0000 Manifest next update: Tue 23 Dec 2025 05:01:08 +0000 Files and hashes: 1: 2-EWeyDof1gs1UXEMD1lZZEw63s.roa (hash: z23ouPdaISiuPb4TFlEiuytYryYuZhpuF1K4d2C9fgs=) 2: ZYUzGeilRyfhVGBGDs3ScwXWgUY.roa (hash: gBAr68IvuzGBsMRnZQFpHYo6Uf7sa+Fh75TAVHTzSCc=) 3: mHC_T5U1DQN3-ok4v08ty35y_xI.crl (hash: BxCSwKHASPLoppmMX+0sQaioBk6+3pZd6C/VaTBsNN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:c3:c4:7b:87:8b:50:22:6d:42:ab:fb:dd:e3:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9870bf4f95350d0377fa8938bf4f2dcb7e72ff12 Validity Not Before: Dec 22 05:01:08 2025 GMT Not After : Dec 23 05:01:08 2025 GMT Subject: CN=95ca68c50ca4d88809fc9a10c7a11ff38f8045b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:82:e0:a8:38:15:6d:97:aa:64:fc:7c:79:e8: f4:db:51:42:79:72:ad:c2:f8:e7:a4:c5:1c:c2:b6: f7:55:e4:d6:9f:23:37:16:4a:d6:ef:18:8b:75:5c: f7:23:93:18:d0:27:8a:cf:7b:ad:ba:d5:9a:16:aa: f6:ae:f6:8b:a5:ac:e5:47:08:9e:08:e8:14:00:cb: 2d:f4:47:4f:2e:2e:55:1f:0a:8a:b8:3f:5e:2f:9d: 0c:c7:d9:e1:5f:4c:eb:c3:4d:13:1c:c7:87:80:81: 3a:2e:58:67:1d:6c:5b:58:5b:35:85:ea:2c:5a:73: 1f:dd:68:27:d6:ab:9a:85:7b:54:e0:df:2d:84:b3: d5:47:a1:66:17:2b:15:5d:85:c9:89:e4:90:65:f6: 9d:cb:c8:a9:bd:8a:04:8e:d3:ce:13:48:ad:94:41: 20:28:99:49:45:7e:82:20:25:ac:80:a4:e1:8f:19: 01:c1:92:b1:f7:86:0d:8e:0e:2c:0c:96:65:9b:84: dc:6d:06:1f:3a:fb:03:59:d3:f9:f6:e5:4b:32:aa: 78:29:d4:c1:49:de:86:0a:94:b1:42:58:64:8d:ab: 59:53:6c:fd:90:69:90:74:b6:9c:da:87:dc:72:b9: cb:6a:8c:6f:9f:ea:14:90:1e:c3:ae:08:92:eb:c7: d7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:CA:68:C5:0C:A4:D8:88:09:FC:9A:10:C7:A1:1F:F3:8F:80:45:B8 X509v3 Authority Key Identifier: keyid:98:70:BF:4F:95:35:0D:03:77:FA:89:38:BF:4F:2D:CB:7E:72:FF:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHC_T5U1DQN3-ok4v08ty35y_xI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/600a37-f967-45b1-a1dd-07a315e9033d/1/mHC_T5U1DQN3-ok4v08ty35y_xI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:61:e1:71:65:cb:f4:1f:81:3b:17:d7:46:f2:5e:94:be:f2: 89:96:47:78:4c:ba:8d:45:5e:ed:5d:3f:ab:f9:f2:0a:19:6c: 02:e9:44:e5:14:e4:b0:9f:45:9b:1e:76:91:49:52:62:b0:c0: ad:19:82:35:89:a4:dd:3a:42:55:b2:e8:5d:28:af:c1:bc:24: 2f:d9:39:ac:67:39:44:e2:96:cc:c6:4c:ca:17:40:68:61:29: 28:cf:1d:ea:7c:cf:bc:05:f7:47:0a:31:4d:dd:d0:2f:64:2f: f7:28:09:61:fa:d9:82:35:d9:c6:80:2c:64:eb:f8:00:2c:a3: 9a:8d:a3:d8:73:d3:44:fb:f8:2a:ea:e7:e6:6e:c5:e5:2a:42: b1:f6:3c:1a:62:90:fc:0b:b1:60:2f:12:1d:e0:9b:53:76:45: 23:07:58:ee:fd:6c:2e:cd:86:2c:14:79:35:c5:31:12:06:ba: f2:ea:e4:e5:28:0e:6b:be:9c:69:56:33:2f:78:13:ef:62:8c: ca:3e:69:76:9a:7d:fd:1e:b9:47:95:7e:77:44:c9:df:8f:8f: a1:c1:ca:63:38:f6:63:ac:e9:fd:63:3b:eb:fd:59:d3:74:26: 96:05:6e:d1:26:57:4f:d0:ff:23:94:07:97:5a:2c:fd:ae:84: 53:b1:37:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbsPEe4eLUCJtQqv73eOGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NzBiZjRmOTUzNTBkMDM3N2ZhODkzOGJmNGYyZGNiN2U3 MmZmMTIwHhcNMjUxMjIyMDUwMTA4WhcNMjUxMjIzMDUwMTA4WjAzMTEwLwYDVQQD Eyg5NWNhNjhjNTBjYTRkODg4MDlmYzlhMTBjN2ExMWZmMzhmODA0NWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoLgqDgVbZeqZPx8eej021FCeXKt wvjnpMUcwrb3VeTWnyM3FkrW7xiLdVz3I5MY0CeKz3ututWaFqr2rvaLpazlRwie COgUAMst9EdPLi5VHwqKuD9eL50Mx9nhX0zrw00THMeHgIE6LlhnHWxbWFs1heos WnMf3Wgn1quahXtU4N8thLPVR6FmFysVXYXJieSQZfady8ipvYoEjtPOE0itlEEg KJlJRX6CICWsgKThjxkBwZKx94YNjg4sDJZlm4TcbQYfOvsDWdP59uVLMqp4KdTB Sd6GCpSxQlhkjatZU2z9kGmQdLac2ofccrnLaoxvn+oUkB7DrgiS68fX1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXKaMUMpNiICfyaEMehH/OPgEW4MB8GA1UdIwQY MBaAFJhwv0+VNQ0Dd/qJOL9PLct+cv8SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82MDBhMzctZjk2Ny00NWIxLWExZGQt MDdhMzE1ZTkwMzNkLzEvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi82MDBhMzctZjk2Ny00NWIxLWExZGQtMDdhMzE1ZTkwMzNk LzEvbUhDX1Q1VTFEUU4zLW9rNHYwOHR5MzV5X3hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGHhcWXL 9B+BOxfXRvJelL7yiZZHeEy6jUVe7V0/q/nyChlsAulE5RTksJ9Fmx52kUlSYrDA rRmCNYmk3TpCVbLoXSivwbwkL9k5rGc5ROKWzMZMyhdAaGEpKM8d6nzPvAX3Rwox Td3QL2Qv9ygJYfrZgjXZxoAsZOv4ACyjmo2j2HPTRPv4Kurn5m7F5SpCsfY8GmKQ /AuxYC8SHeCbU3ZFIwdY7v1sLs2GLBR5NcUxEga68urk5SgOa76caVYzL3gT72KM yj5pdpp9/R65R5V+d0TJ34+PocHKYzj2Y6zp/WM76/1Z03QmlgVu0SZXT9D/I5QH l1os/a6EU7E3rw== -----END CERTIFICATE-----Generated at Mon Dec 22 11:28:18 2025 by rpki-client