This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json) Hash identifier: IvrIB19HHKQYeRjxaZSG8KOe+2MLG0JuFi07wVqgsxU= Subject key identifier: 7D:E9:0F:DE:61:7E:65:7D:31:35:7B:03:39:E8:51:42:25:99:F5:88 Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd Certificate serial: 019B3E6DFF248B46FA41E70EDAAB8EC081FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft Manifest number: 0E6F Signing time: Sun 21 Dec 2025 01:02:34 +0000 Manifest this update: Sun 21 Dec 2025 01:02:34 +0000 Manifest next update: Mon 22 Dec 2025 01:02:34 +0000 Files and hashes: 1: CZfN1SE3Kc9ElQiX9c_wypBuCR4.roa (hash: U185B9hh525/Yo0ZTbLEnbl6qvuJNK4eFDrA94l5T14=) 2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: j7vO/JPSN+qkuvjeqdvfy+nyGkpd/CF+scwaa0hpB0c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:ff:24:8b:46:fa:41:e7:0e:da:ab:8e:c0:81:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd Validity Not Before: Dec 21 01:02:34 2025 GMT Not After : Dec 22 01:02:34 2025 GMT Subject: CN=7de90fde617e657d31357b0339e851422599f588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d2:a4:7b:f1:8c:ae:7f:27:36:d0:99:a2:20: fb:2d:8e:b8:90:a3:ce:79:4d:1f:f1:4e:b0:53:20: 36:c0:4c:76:0f:e7:3a:fa:70:d2:52:72:14:e9:e2: 3f:78:8b:99:77:1c:c3:df:2b:bc:b3:a3:a8:bf:34: 59:eb:5c:c4:5a:94:76:8e:e7:31:e8:16:c3:21:55: b0:16:c5:61:03:99:cc:78:9c:33:2c:cd:b7:c1:e5: 7b:41:cd:00:88:8f:48:00:ff:d9:8e:10:94:f7:d2: d4:05:e3:88:01:a0:5c:cc:bf:5a:de:a3:28:a0:61: f4:4f:08:b4:86:c8:28:9b:9d:5e:7d:db:ad:9c:ac: 66:ad:47:7e:c3:cc:78:27:64:14:59:f5:15:88:8d: 50:68:ed:2f:62:cd:3d:89:c7:d9:2a:ea:14:ec:d9: 92:81:4e:15:41:f8:dc:45:c6:ec:72:05:f8:1c:55: 0a:75:27:1f:b1:b3:35:e1:f0:4f:56:0d:ae:7b:eb: 3c:88:34:f6:d4:9a:f0:2c:e6:d4:e1:3a:45:bd:a6: 23:b3:7f:6c:6b:79:9c:74:97:49:8f:64:15:ea:f1: 0c:59:99:62:2c:f6:e3:ae:94:bd:6b:14:bd:b9:33: 7e:1e:a3:40:cd:c9:67:9e:a1:3c:3f:96:d8:54:b9: 5f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E9:0F:DE:61:7E:65:7D:31:35:7B:03:39:E8:51:42:25:99:F5:88 X509v3 Authority Key Identifier: keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:cc:78:8d:b6:2f:02:60:5e:62:fe:1f:3b:14:ed:4d:39:fc: 15:ea:13:d3:e6:77:34:03:8a:03:e9:b2:59:9c:ed:17:ce:7f: a7:2f:f1:fa:ec:05:b5:59:5e:9a:8a:b4:95:32:48:53:02:3f: 7f:9e:28:c2:f4:9b:19:65:9b:25:e8:7a:b2:e6:a6:8f:53:76: ca:70:78:03:26:ea:eb:ff:a0:64:29:a8:d6:dd:f3:ca:07:80: 19:2e:87:d6:92:c8:3e:34:55:e3:03:51:36:40:2d:b1:9f:b0: 19:bf:b6:87:c3:0c:22:61:69:d2:07:ec:12:29:92:80:9f:e9: 25:74:a8:27:16:62:86:3b:54:e4:cf:d7:21:81:01:ed:33:62: 9f:fa:87:c0:ba:5f:82:cd:d9:9a:0e:13:22:61:3b:e3:5d:8d: f8:e9:7b:85:3f:c3:b2:5a:34:7c:4a:60:ec:9f:08:00:cd:f1: b0:e6:bc:76:0b:d6:34:6d:af:c1:f6:8d:3c:fd:a2:fc:be:93: 6b:71:cb:cc:23:6a:f5:ef:95:24:5d:55:4a:d5:69:0f:23:51: 81:27:95:1d:23:cf:3e:73:79:4e:ec:40:c7:b4:d8:e5:35:50: 77:3b:a4:94:26:2e:9a:a7:68:a6:8f:74:8f:b0:4f:fd:b7:31: 3b:7b:2c:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bf8ki0b6QecO2quOwIH7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMThjNzkwNTgyZTk5YmZiNTBlZTc1ODQ2M2RjNWFmZGNj YmY0YmQwHhcNMjUxMjIxMDEwMjM0WhcNMjUxMjIyMDEwMjM0WjAzMTEwLwYDVQQD Eyg3ZGU5MGZkZTYxN2U2NTdkMzEzNTdiMDMzOWU4NTE0MjI1OTlmNTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dKke/GMrn8nNtCZoiD7LY64kKPO eU0f8U6wUyA2wEx2D+c6+nDSUnIU6eI/eIuZdxzD3yu8s6OovzRZ61zEWpR2jucx 6BbDIVWwFsVhA5nMeJwzLM23weV7Qc0AiI9IAP/ZjhCU99LUBeOIAaBczL9a3qMo oGH0Twi0hsgom51efdutnKxmrUd+w8x4J2QUWfUViI1QaO0vYs09icfZKuoU7NmS gU4VQfjcRcbscgX4HFUKdScfsbM14fBPVg2ue+s8iDT21JrwLObU4TpFvaYjs39s a3mcdJdJj2QV6vEMWZliLPbjrpS9axS9uTN+HqNAzclnnqE8P5bYVLlf/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH3pD95hfmV9MTV7AznoUUIlmfWIMB8GA1UdIwQY MBaAFJoYx5BYLpm/tQ7nWEY9xa/cy/S9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYt NWMzNWRiYWJhMjRiLzEvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYtNWMzNWRiYWJhMjRi LzEvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMx4jbYv AmBeYv4fOxTtTTn8FeoT0+Z3NAOKA+myWZztF85/py/x+uwFtVlemoq0lTJIUwI/ f54owvSbGWWbJeh6suamj1N2ynB4Aybq6/+gZCmo1t3zygeAGS6H1pLIPjRV4wNR NkAtsZ+wGb+2h8MMImFp0gfsEimSgJ/pJXSoJxZihjtU5M/XIYEB7TNin/qHwLpf gs3Zmg4TImE7412N+Ol7hT/Dslo0fEpg7J8IAM3xsOa8dgvWNG2vwfaNPP2i/L6T a3HLzCNq9e+VJF1VStVpDyNRgSeVHSPPPnN5TuxAx7TY5TVQdzuklCYumqdopo90 j7BP/bcxO3ssGw== -----END CERTIFICATE-----Generated at Sun Dec 21 05:01:57 2025 by rpki-client