This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft File: Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft (raw, json) Hash identifier: bzAADAxxvizn3E7B9SorC6V61DechCAaqWB2tx19Vo0= Subject key identifier: F3:B8:B4:8E:F1:BC:DD:7D:C4:50:E8:21:33:6E:53:34:D5:D5:BE:29 Authority key identifier: 32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56 Certificate issuer: /CN=3238786e9f70e6db74230d72675a483bd24ef256 Certificate serial: 019B725974B0E8DE5619D0EF5697365ABBD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft Manifest number: 165D Signing time: Wed 31 Dec 2025 03:00:23 +0000 Manifest this update: Wed 31 Dec 2025 03:00:23 +0000 Manifest next update: Thu 01 Jan 2026 03:00:23 +0000 Files and hashes: 1: Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl (hash: CUGWom41kwyw/yZ8tmoQrUP0Q+WRGg3tZcnl6AwJa7Y=) 2: iRUodLE1DVdXVbsDmeR8dkSigaA.roa (hash: kHQs2ZLF93r8KV/ddmtNOXWCYhSdAElOf8ic9XQOGBo=) 3: l77XDKqfVAj_0QN9hL5E5zPQSwI.roa (hash: JB8S1ZVJbd9P8hIkFLEuRz8lxPAo3SSfvjCCRc2tF5c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:59:74:b0:e8:de:56:19:d0:ef:56:97:36:5a:bb:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3238786e9f70e6db74230d72675a483bd24ef256 Validity Not Before: Dec 31 03:00:23 2025 GMT Not After : Jan 1 03:00:23 2026 GMT Subject: CN=f3b8b48ef1bcdd7dc450e821336e5334d5d5be29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:29:70:43:f6:61:f4:71:35:e1:6e:81:f6:0b: 31:87:4a:23:3e:9b:e5:09:3d:95:89:ca:e7:96:7f: 56:3d:be:fd:8e:fb:0a:5f:d9:56:f6:a6:8f:7a:0b: fc:bf:32:50:f8:2b:50:a8:0c:ff:b5:0e:40:01:66: 67:38:11:0f:bb:24:55:27:e2:fa:a9:c1:db:6f:fc: f3:13:48:b1:d4:32:29:b9:4e:11:4a:05:ca:ee:60: 9c:e4:91:f9:d7:73:72:9e:09:27:67:8f:a9:f8:e8: 96:a7:d5:07:98:b1:9d:4a:50:69:96:92:c1:49:8c: f0:32:bc:4a:8a:e4:b9:cd:12:e8:3d:47:cd:53:49: 15:2b:b3:6e:15:67:5e:a4:1e:de:33:4e:ed:8b:02: c4:d1:f7:08:10:3e:13:ba:f4:e2:7b:09:d9:35:c1: 81:5c:57:c2:5c:a0:00:77:93:af:cd:c1:11:f6:c9: 8b:95:64:ea:b0:e4:03:86:bf:4c:19:2b:94:eb:3d: 46:bb:29:98:8f:06:58:67:43:ed:bc:94:44:a2:09: be:1b:68:28:ef:7e:b0:6c:20:49:89:c3:18:c7:15: 60:c8:87:3f:f0:23:ac:77:92:a4:b3:03:db:ec:e7: ee:98:79:45:d0:f4:8c:d6:32:3a:d0:b9:2c:e8:32: a6:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B8:B4:8E:F1:BC:DD:7D:C4:50:E8:21:33:6E:53:34:D5:D5:BE:29 X509v3 Authority Key Identifier: keyid:32:38:78:6E:9F:70:E6:DB:74:23:0D:72:67:5A:48:3B:D2:4E:F2:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a9506-20d4-4ab7-b563-e2d3d94cc238/1/Mjh4bp9w5tt0Iw1yZ1pIO9JO8lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:73:f8:7f:54:de:4d:6d:00:9c:aa:d7:7a:eb:4f:98:aa:21: 79:06:b5:da:54:d3:f1:1e:65:77:7d:47:d1:da:8b:e6:6a:d1: 81:66:b4:5a:2d:7b:2f:30:f3:e1:f0:13:b7:23:28:36:7a:70: fb:4e:c6:f9:f9:db:16:47:84:9b:9b:9d:d2:30:2f:62:11:4c: 50:5a:42:84:2a:6c:20:57:81:c4:69:e7:d8:a9:39:51:54:8f: 08:ae:fb:02:e5:53:63:c3:81:b9:7c:f1:12:98:91:72:3c:9f: 7a:39:53:4c:1e:e2:1b:7c:3e:16:e6:c5:66:8c:5f:12:7a:22: 01:1e:e4:b1:5b:cc:02:ea:1d:05:ca:05:a8:b0:db:ce:d2:94: 1a:1e:1b:5d:12:ff:2d:35:19:08:1a:3e:0f:0b:a3:1c:86:59: 34:35:6b:30:14:c9:72:73:ae:ad:3d:2c:31:97:c4:1d:cb:d2: 6d:1a:ab:d4:6d:cc:7a:38:e9:4a:13:b9:04:4e:9f:38:6d:8c: e8:d0:0a:20:d2:7b:9e:a7:01:a9:d2:53:c0:06:0e:5d:8c:2d: 3c:77:36:57:e0:b7:0a:23:31:05:86:09:8f:49:ef:74:84:05: fe:1a:26:11:bf:06:74:19:62:f0:f5:0b:6a:bf:e6:d1:95:10: 01:ff:60:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtyWXSw6N5WGdDvVpc2WrvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMzg3ODZlOWY3MGU2ZGI3NDIzMGQ3MjY3NWE0ODNiZDI0 ZWYyNTYwHhcNMjUxMjMxMDMwMDIzWhcNMjYwMTAxMDMwMDIzWjAzMTEwLwYDVQQD EyhmM2I4YjQ4ZWYxYmNkZDdkYzQ1MGU4MjEzMzZlNTMzNGQ1ZDViZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmylwQ/Zh9HE14W6B9gsxh0ojPpvl CT2Vicrnln9WPb79jvsKX9lW9qaPegv8vzJQ+CtQqAz/tQ5AAWZnOBEPuyRVJ+L6 qcHbb/zzE0ix1DIpuU4RSgXK7mCc5JH513NyngknZ4+p+OiWp9UHmLGdSlBplpLB SYzwMrxKiuS5zRLoPUfNU0kVK7NuFWdepB7eM07tiwLE0fcIED4TuvTiewnZNcGB XFfCXKAAd5OvzcER9smLlWTqsOQDhr9MGSuU6z1GuymYjwZYZ0PtvJREogm+G2go 736wbCBJicMYxxVgyIc/8COsd5KkswPb7OfumHlF0PSM1jI60Lks6DKmnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPO4tI7xvN19xFDoITNuUzTV1b4pMB8GA1UdIwQY MBaAFDI4eG6fcObbdCMNcmdaSDvSTvJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWpoNGJwOXc1dHQwSXcxeVoxcElPOUpPOGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YTk1MDYtMjBkNC00YWI3LWI1NjMt ZTJkM2Q5NGNjMjM4LzEvTWpoNGJwOXc1dHQwSXcxeVoxcElPOUpPOGxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS85YTk1MDYtMjBkNC00YWI3LWI1NjMtZTJkM2Q5NGNjMjM4 LzEvTWpoNGJwOXc1dHQwSXcxeVoxcElPOUpPOGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXP4f1Te TW0AnKrXeutPmKoheQa12lTT8R5ld31H0dqL5mrRgWa0Wi17LzDz4fATtyMoNnpw +07G+fnbFkeEm5ud0jAvYhFMUFpChCpsIFeBxGnn2Kk5UVSPCK77AuVTY8OBuXzx EpiRcjyfejlTTB7iG3w+FubFZoxfEnoiAR7ksVvMAuodBcoFqLDbztKUGh4bXRL/ LTUZCBo+DwujHIZZNDVrMBTJcnOurT0sMZfEHcvSbRqr1G3MejjpShO5BE6fOG2M 6NAKINJ7nqcBqdJTwAYOXYwtPHc2V+C3CiMxBYYJj0nvdIQF/homEb8GdBli8PUL ar/m0ZUQAf9gzQ== -----END CERTIFICATE-----Generated at Wed Dec 31 09:21:27 2025 by rpki-client