This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json) Hash identifier: twnQc2+gPc6ooy71NWkoOsZKJzsDwSv868pwENTl8+g= Subject key identifier: D3:29:E6:7E:A8:C1:3E:2B:06:8A:E2:41:BC:53:9B:7C:D6:69:34:7B Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd Certificate serial: 019B4DE084BAB231C380CDBC3269C6127D53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft Manifest number: 0E77 Signing time: Wed 24 Dec 2025 01:01:58 +0000 Manifest this update: Wed 24 Dec 2025 01:01:58 +0000 Manifest next update: Thu 25 Dec 2025 01:01:58 +0000 Files and hashes: 1: CZfN1SE3Kc9ElQiX9c_wypBuCR4.roa (hash: U185B9hh525/Yo0ZTbLEnbl6qvuJNK4eFDrA94l5T14=) 2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: AKnq42xtcv0/EctMrzqbVifDnZUkntHe6iSABJqnpro=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 01:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:e0:84:ba:b2:31:c3:80:cd:bc:32:69:c6:12:7d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd Validity Not Before: Dec 24 01:01:58 2025 GMT Not After : Dec 25 01:01:58 2025 GMT Subject: CN=d329e67ea8c13e2b068ae241bc539b7cd669347b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cd:a9:4b:c7:1b:9b:45:4e:61:3e:38:99:9f: 70:95:c8:e8:78:5e:ba:0a:97:52:c9:ea:18:63:98: 24:65:67:6d:ad:67:77:cc:31:7e:16:5c:d0:df:b6: 17:87:fe:50:91:3c:4a:03:65:12:15:9d:42:a0:52: ce:a6:55:2e:bb:f0:04:f2:f5:47:08:c3:6a:b3:08: fa:2e:7f:3c:ad:2e:a1:fb:8f:11:22:b4:fe:91:02: ae:5b:29:41:48:20:18:e5:0c:19:aa:a7:da:70:d4: 96:43:17:04:bd:d1:1c:e4:ce:55:4b:f6:43:08:4a: 14:a3:75:1a:6a:7b:46:e3:a1:92:04:3f:9c:85:c1: 6d:3e:2b:27:80:44:11:95:24:97:66:c0:77:fe:08: 35:1d:f0:da:6c:1c:1a:46:64:b8:8c:25:3d:f8:bb: 75:3e:07:44:cd:6a:1f:a7:0c:5d:bd:ae:d5:4d:3b: b0:ed:9b:7e:a0:91:e8:b4:21:76:fa:30:f9:8b:a6: 1b:6f:2b:b2:54:c5:9b:fe:7f:7c:c1:4e:78:8d:1b: 46:05:04:a0:7c:ad:7b:28:65:56:b3:ff:a2:6f:50: 67:7a:39:30:be:ac:7f:15:49:60:1e:5d:14:5c:0e: ce:67:c6:52:c8:2f:f0:67:69:a9:f5:23:9a:10:58: 56:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:29:E6:7E:A8:C1:3E:2B:06:8A:E2:41:BC:53:9B:7C:D6:69:34:7B X509v3 Authority Key Identifier: keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:f0:6d:db:2d:22:e9:e0:b2:9f:58:3b:f2:55:be:44:b2:e7: 6b:9b:e7:09:d0:79:ba:9c:0d:c7:06:a5:e5:fc:0f:9c:fb:e7: 3b:c9:8c:14:91:98:7c:6a:1c:10:33:71:2b:93:7a:2a:98:f7: 7f:96:8d:ee:08:5c:34:58:7a:ce:54:e4:09:2b:90:4f:60:12: e7:d7:9a:8b:38:92:87:be:d0:77:86:b5:33:78:3d:41:9e:0f: c4:1d:e9:05:56:01:4d:8d:05:16:f9:fc:92:44:dc:98:36:52: fa:dc:86:32:5a:57:73:7b:1c:4a:1f:42:48:2c:9b:dd:23:ec: c7:0e:aa:3f:e3:8a:82:0f:63:c9:47:43:dc:4a:c7:ff:71:61: c6:68:b5:e7:f5:8c:d8:be:aa:ca:f4:1f:06:58:e9:f7:5f:6a: 8b:62:72:06:47:30:cd:53:16:da:f4:13:44:d4:95:17:b9:ba: 06:f5:d5:ca:8c:15:3e:d7:4b:94:5b:ad:86:be:20:3b:88:6b: d7:7d:de:85:af:8e:bc:b9:95:f2:ed:e5:3e:2a:42:a0:06:61: 02:ec:f3:0c:3a:f2:cc:76:f3:78:aa:65:44:ed:31:e6:a2:af: 0b:4a:3d:b9:e2:d8:cd:be:bb:62:bc:d4:ce:a4:60:d7:dd:8a: 76:95:bc:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN4IS6sjHDgM28MmnGEn1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMThjNzkwNTgyZTk5YmZiNTBlZTc1ODQ2M2RjNWFmZGNj YmY0YmQwHhcNMjUxMjI0MDEwMTU4WhcNMjUxMjI1MDEwMTU4WjAzMTEwLwYDVQQD EyhkMzI5ZTY3ZWE4YzEzZTJiMDY4YWUyNDFiYzUzOWI3Y2Q2NjkzNDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxs2pS8cbm0VOYT44mZ9wlcjoeF66 CpdSyeoYY5gkZWdtrWd3zDF+FlzQ37YXh/5QkTxKA2USFZ1CoFLOplUuu/AE8vVH CMNqswj6Ln88rS6h+48RIrT+kQKuWylBSCAY5QwZqqfacNSWQxcEvdEc5M5VS/ZD CEoUo3UaantG46GSBD+chcFtPisngEQRlSSXZsB3/gg1HfDabBwaRmS4jCU9+Lt1 PgdEzWofpwxdva7VTTuw7Zt+oJHotCF2+jD5i6YbbyuyVMWb/n98wU54jRtGBQSg fK17KGVWs/+ib1Bnejkwvqx/FUlgHl0UXA7OZ8ZSyC/wZ2mp9SOaEFhWYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMp5n6owT4rBoriQbxTm3zWaTR7MB8GA1UdIwQY MBaAFJoYx5BYLpm/tQ7nWEY9xa/cy/S9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYt NWMzNWRiYWJhMjRiLzEvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYtNWMzNWRiYWJhMjRi LzEvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN/Bt2y0i 6eCyn1g78lW+RLLna5vnCdB5upwNxwal5fwPnPvnO8mMFJGYfGocEDNxK5N6Kpj3 f5aN7ghcNFh6zlTkCSuQT2AS59eaiziSh77Qd4a1M3g9QZ4PxB3pBVYBTY0FFvn8 kkTcmDZS+tyGMlpXc3scSh9CSCyb3SPsxw6qP+OKgg9jyUdD3ErH/3Fhxmi15/WM 2L6qyvQfBljp919qi2JyBkcwzVMW2vQTRNSVF7m6BvXVyowVPtdLlFuthr4gO4hr 133eha+OvLmV8u3lPipCoAZhAuzzDDryzHbzeKplRO0x5qKvC0o9ueLYzb67YrzU zqRg192KdpW8gg== -----END CERTIFICATE-----Generated at Wed Dec 24 10:36:49 2025 by rpki-client