This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: iTU49vAhklX1kE8a8eM8IuT/SRCg3D3wYNhkqOnqlfs= Subject key identifier: 0B:D7:2F:32:07:1A:8D:7A:FB:97:78:10:33:02:26:C3:C8:54:3A:07 Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019B3B6BF8AADEC63C71193EE9AEC707E6EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 11:01:30 +0000 Manifest this update: Sat 20 Dec 2025 11:01:30 +0000 Manifest next update: Sun 21 Dec 2025 11:01:30 +0000 Files and hashes: 1: Go3D60IftVT7kBobBk8HTq_r6wY.roa (hash: /aH1VuqUtHMC947Kt5tr1ajHSrdHN60XTYZiPes2dOU=) 2: JKKr0NwqKrBRfO9-TNMA6fKjebU.roa (hash: +prVLn/SSNSb/SQ4BmX9heAxTyq0XNrqnNVcVb/zNYQ=) 3: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: nhRKV8LkFXtyi8Hzr2zBQGIbwr3TQ9t7c9AAU3TU1+0=) 4: OrdWNePRO-azuf-x7WJ0gNqkZc8.roa (hash: ehZsJBwER/Ak+kPEJiQOXw5pziTKWHwzzGUWq4oZM/c=) 5: Q3_mv-tF2Z1EHDZHaZk8mJMN1bk.roa (hash: oXSPeYLnMI9gMBulzyR8eDJwfmPdLhgYhc4vqS0U/tE=) 6: S2TXSI-3n25IfgGnM4uuJwml268.roa (hash: DAgFF4qJxC/k8JOz+sB1Q1cvXx4PDaouIru4SXZXgbU=) 7: UJuJe34B0guqTgOl--QOCgSYvZE.roa (hash: c2O3pbkk6z+NjOLR47vzvdpTF+ZJKIik+rzOAO3mk2Y=) 8: bR8kj_c2TPqFFFMT255K3OTqBTI.roa (hash: mIG3JTVdQTlKmcdrQlCtE5KtfNee8F1irJglkfAd6/0=) 9: e_JO57HIUgxnL2zZw_SZRKtvz2k.roa (hash: kYzJL9upOKUtQTqnQ+rXijBf3P483K+T+FEi6SAaLE0=) 10: qkn09gGw9_pYS22v_SrDemeIoJI.roa (hash: OSIoNd4NerHm/MUfEqmcXlQFZ/K6gwLw7wnqNHc3YTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:f8:aa:de:c6:3c:71:19:3e:e9:ae:c7:07:e6:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Dec 20 11:01:30 2025 GMT Not After : Dec 21 11:01:30 2025 GMT Subject: CN=0bd72f32071a8d7afb977810330226c3c8543a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:21:ac:c8:f8:35:e5:10:b2:eb:5b:1d:83:3e: ab:38:6d:43:bc:9e:fb:8e:92:32:34:ed:5e:aa:cf: 7c:56:c5:59:11:27:5e:2e:11:cf:a3:d7:1b:d7:1a: a4:ed:39:d6:f4:d2:d0:e3:a6:cc:44:98:ed:72:6b: 54:f2:c9:d1:eb:60:14:96:86:61:82:22:a1:fd:9f: ca:39:ce:49:22:d6:ce:f4:8e:d2:b0:22:34:91:ae: ff:7d:3d:61:a1:b9:8a:70:82:93:9b:24:a6:50:2d: 06:5b:13:37:7d:e8:b6:2a:ab:25:0e:a5:0b:d7:b9: 49:c6:a3:66:c5:27:d9:51:22:0d:bf:e6:d6:6e:0c: 74:a6:04:e2:ae:80:06:be:d6:d4:ba:d5:f3:fe:e1: 33:7c:00:85:e3:36:c0:ac:7f:3f:b0:62:0d:ce:22: 6a:a5:2e:3b:5e:b8:05:a3:b9:04:69:71:5f:23:37: 01:b2:6c:b1:17:ec:86:1c:8a:58:41:b4:f3:85:ad: 19:b0:bf:4a:16:35:0a:21:61:1f:8f:2b:4f:11:d1: ec:72:86:3e:37:16:16:7a:6d:a6:ac:3b:69:a5:e0: e0:91:b0:d7:6c:ea:ad:00:86:fd:0d:bb:22:5c:48: e3:ba:83:ea:3d:16:dc:21:f7:6b:03:7c:71:5a:b2: da:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:D7:2F:32:07:1A:8D:7A:FB:97:78:10:33:02:26:C3:C8:54:3A:07 X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:98:c9:55:4a:31:25:a6:0c:5c:fd:c9:3e:7e:16:ab:1a:2f: 3a:d6:fa:ce:45:79:c4:c9:3d:bc:62:49:91:ae:67:dd:6b:08: a7:5b:f0:3e:ad:d0:c1:79:b5:8e:85:71:88:b1:c6:7d:c8:56: f5:5c:ce:d0:08:5f:df:4b:7b:ec:15:ec:42:10:58:99:a4:84: ea:81:a2:f1:96:b8:fa:71:79:1b:1e:8b:7b:24:67:0a:61:b5: d0:52:53:a6:6c:d7:1c:a0:c3:11:ae:15:7d:5d:e2:d5:78:13: 2b:2f:cf:82:86:b0:d6:15:6e:ef:32:7c:b3:0f:ce:d4:1e:04: d8:10:d4:1b:f9:05:63:9f:c9:f4:98:e4:0f:81:4c:8c:70:b6: 80:eb:2e:7a:cb:5f:1d:dd:ff:27:07:5f:c0:db:54:fe:f9:6e: b3:f2:fe:99:b4:9a:e0:b4:5f:bf:6a:37:6b:4b:d4:b6:14:e2: 90:ab:84:86:f8:97:8d:a9:ef:3c:34:a7:e5:e6:28:f6:01:a4: ca:36:f2:32:18:d3:92:ec:cb:b0:45:ac:d3:ba:91:92:d5:eb: f5:ec:85:fa:27:09:1c:56:33:f0:3b:92:21:b7:e9:29:11:24: 3a:0d:f4:4a:31:73:17:9c:8d:a1:7c:96:0b:40:06:6e:6c:a6: 22:bf:35:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a/iq3sY8cRk+6a7HB+bqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjUxMjIwMTEwMTMwWhcNMjUxMjIxMTEwMTMwWjAzMTEwLwYDVQQD EygwYmQ3MmYzMjA3MWE4ZDdhZmI5Nzc4MTAzMzAyMjZjM2M4NTQzYTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSGsyPg15RCy61sdgz6rOG1DvJ77 jpIyNO1eqs98VsVZESdeLhHPo9cb1xqk7TnW9NLQ46bMRJjtcmtU8snR62AUloZh giKh/Z/KOc5JItbO9I7SsCI0ka7/fT1hobmKcIKTmySmUC0GWxM3fei2KqslDqUL 17lJxqNmxSfZUSINv+bWbgx0pgTiroAGvtbUutXz/uEzfACF4zbArH8/sGINziJq pS47XrgFo7kEaXFfIzcBsmyxF+yGHIpYQbTzha0ZsL9KFjUKIWEfjytPEdHscoY+ NxYWem2mrDtppeDgkbDXbOqtAIb9DbsiXEjjuoPqPRbcIfdrA3xxWrLawQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAvXLzIHGo16+5d4EDMCJsPIVDoHMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJjJVUox JaYMXP3JPn4WqxovOtb6zkV5xMk9vGJJka5n3WsIp1vwPq3QwXm1joVxiLHGfchW 9VzO0Ahf30t77BXsQhBYmaSE6oGi8Za4+nF5Gx6LeyRnCmG10FJTpmzXHKDDEa4V fV3i1XgTKy/Pgoaw1hVu7zJ8sw/O1B4E2BDUG/kFY5/J9JjkD4FMjHC2gOsuestf Hd3/JwdfwNtU/vlus/L+mbSa4LRfv2o3a0vUthTikKuEhviXjanvPDSn5eYo9gGk yjbyMhjTkuzLsEWs07qRktXr9eyF+icJHFYz8DuSIbfpKREkOg30SjFzF5yNoXyW C0AGbmymIr817w== -----END CERTIFICATE-----Generated at Sat Dec 20 19:50:18 2025 by rpki-client