This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: gRqHWJvsbFtOpbRcW0EYgTbYJGXmBQiprJA2R+WssW8= Subject key identifier: 97:8C:28:D3:07:3E:13:86:39:A0:2E:30:88:C6:B7:5C:E4:0C:2A:1C Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019B5486E851226F29C069E8601E2550D34F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 1798 Signing time: Thu 25 Dec 2025 08:01:25 +0000 Manifest this update: Thu 25 Dec 2025 08:01:25 +0000 Manifest next update: Fri 26 Dec 2025 08:01:25 +0000 Files and hashes: 1: Go3D60IftVT7kBobBk8HTq_r6wY.roa (hash: /aH1VuqUtHMC947Kt5tr1ajHSrdHN60XTYZiPes2dOU=) 2: JKKr0NwqKrBRfO9-TNMA6fKjebU.roa (hash: +prVLn/SSNSb/SQ4BmX9heAxTyq0XNrqnNVcVb/zNYQ=) 3: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: 2qUlfZ+uYxTG/mP6iVtKxEihi/45JQk4GmbJcYx0FmI=) 4: OrdWNePRO-azuf-x7WJ0gNqkZc8.roa (hash: ehZsJBwER/Ak+kPEJiQOXw5pziTKWHwzzGUWq4oZM/c=) 5: Q3_mv-tF2Z1EHDZHaZk8mJMN1bk.roa (hash: oXSPeYLnMI9gMBulzyR8eDJwfmPdLhgYhc4vqS0U/tE=) 6: S2TXSI-3n25IfgGnM4uuJwml268.roa (hash: DAgFF4qJxC/k8JOz+sB1Q1cvXx4PDaouIru4SXZXgbU=) 7: UJuJe34B0guqTgOl--QOCgSYvZE.roa (hash: c2O3pbkk6z+NjOLR47vzvdpTF+ZJKIik+rzOAO3mk2Y=) 8: bR8kj_c2TPqFFFMT255K3OTqBTI.roa (hash: mIG3JTVdQTlKmcdrQlCtE5KtfNee8F1irJglkfAd6/0=) 9: e_JO57HIUgxnL2zZw_SZRKtvz2k.roa (hash: kYzJL9upOKUtQTqnQ+rXijBf3P483K+T+FEi6SAaLE0=) 10: qkn09gGw9_pYS22v_SrDemeIoJI.roa (hash: OSIoNd4NerHm/MUfEqmcXlQFZ/K6gwLw7wnqNHc3YTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 08:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:e8:51:22:6f:29:c0:69:e8:60:1e:25:50:d3:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Dec 25 08:01:25 2025 GMT Not After : Dec 26 08:01:25 2025 GMT Subject: CN=978c28d3073e138639a02e3088c6b75ce40c2a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6d:30:5c:a0:dc:7d:5a:a9:df:ac:58:f1:92: 52:a4:cc:31:ce:98:6e:33:7c:89:0c:86:62:7d:65: 2d:6b:8d:44:be:98:b1:bf:a1:a6:02:a5:9b:f6:e1: 3f:08:08:4f:fd:a1:03:54:c5:70:0b:0d:4e:60:bc: b8:45:50:30:be:bf:a5:1f:b0:49:1c:2d:c8:9a:c0: 63:f2:23:03:2f:d2:18:45:01:3f:3d:b4:8c:54:28: 44:eb:dd:e5:6d:a2:a6:0a:4d:e2:50:96:37:82:86: 12:8c:07:f5:04:9a:05:32:42:be:1d:78:34:6b:ba: bc:80:4b:30:98:e3:86:92:c2:ea:30:6d:c8:86:d1: 88:fc:1d:13:62:9c:33:48:ea:f0:9a:6c:35:75:5a: 00:d2:78:b7:cf:e6:80:32:3a:5d:92:1f:38:72:a1: e0:13:6b:36:1a:f8:4e:4a:39:3d:16:6d:43:20:28: d4:d0:05:66:e1:1e:a4:fc:31:e4:28:64:a1:55:c9: 90:92:72:df:b4:0e:f5:a3:48:bd:b5:ed:0f:08:41: 50:76:b4:14:6b:b5:7f:7a:04:7b:1f:ba:96:72:e5: ff:80:b2:be:87:c1:38:3e:81:22:10:1e:fe:a8:7c: 19:8d:a8:b9:f4:d6:fe:0a:01:02:ff:a6:50:35:fa: 07:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8C:28:D3:07:3E:13:86:39:A0:2E:30:88:C6:B7:5C:E4:0C:2A:1C X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:fc:8a:32:86:8a:71:cb:db:e6:31:89:5b:e1:9f:5a:8b:47: 78:1f:dc:f5:3b:70:0f:56:4d:f2:49:09:20:ed:fc:49:07:de: ed:9b:7d:13:9b:9b:d1:87:04:12:09:68:59:d0:3d:70:0f:5a: 15:3c:0e:a7:71:3c:89:16:16:45:33:24:57:51:a2:a1:9b:1e: 87:12:f8:47:86:3d:15:12:c7:d9:55:41:8f:34:54:41:a0:c3: 47:63:e5:c0:99:8b:2f:75:a3:84:39:4f:fc:c5:3b:e3:3e:2b: b4:00:ca:ba:a6:60:a8:73:13:84:ec:b4:c7:c8:b3:d3:0a:e8: 61:f2:ec:a7:dd:8e:76:d5:a9:6e:32:15:10:54:f4:64:5a:0f: db:9f:3e:d5:fc:6e:d1:ce:d8:ec:f6:b7:0d:0a:99:12:87:54: b8:49:04:16:ac:a9:ab:84:02:22:78:0b:cf:19:b0:a4:56:08: a7:29:d8:7e:ec:74:03:fd:34:cf:d3:2d:a1:38:2e:88:cd:b8: 82:c8:3d:af:fe:b7:4e:13:24:31:4d:09:bc:a3:4d:0d:2e:5f: 07:ab:eb:02:85:12:9f:96:ac:99:62:8d:69:2d:10:b7:28:0b: 3c:9d:f2:25:ee:3f:9c:20:fa:c0:6d:d3:42:88:68:14:59:c3: e8:31:d2:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhuhRIm8pwGnoYB4lUNNPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjUxMjI1MDgwMTI1WhcNMjUxMjI2MDgwMTI1WjAzMTEwLwYDVQQD Eyg5NzhjMjhkMzA3M2UxMzg2MzlhMDJlMzA4OGM2Yjc1Y2U0MGMyYTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG0wXKDcfVqp36xY8ZJSpMwxzphu M3yJDIZifWUta41Evpixv6GmAqWb9uE/CAhP/aEDVMVwCw1OYLy4RVAwvr+lH7BJ HC3ImsBj8iMDL9IYRQE/PbSMVChE693lbaKmCk3iUJY3goYSjAf1BJoFMkK+HXg0 a7q8gEswmOOGksLqMG3IhtGI/B0TYpwzSOrwmmw1dVoA0ni3z+aAMjpdkh84cqHg E2s2GvhOSjk9Fm1DICjU0AVm4R6k/DHkKGShVcmQknLftA71o0i9te0PCEFQdrQU a7V/egR7H7qWcuX/gLK+h8E4PoEiEB7+qHwZjai59Nb+CgEC/6ZQNfoHXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJeMKNMHPhOGOaAuMIjGt1zkDCocMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPyKMoaK ccvb5jGJW+GfWotHeB/c9TtwD1ZN8kkJIO38SQfe7Zt9E5ub0YcEEgloWdA9cA9a FTwOp3E8iRYWRTMkV1GioZsehxL4R4Y9FRLH2VVBjzRUQaDDR2PlwJmLL3WjhDlP /MU74z4rtADKuqZgqHMThOy0x8iz0wroYfLsp92OdtWpbjIVEFT0ZFoP258+1fxu 0c7Y7Pa3DQqZEodUuEkEFqypq4QCIngLzxmwpFYIpynYfux0A/00z9MtoTguiM24 gsg9r/63ThMkMU0JvKNNDS5fB6vrAoUSn5asmWKNaS0QtygLPJ3yJe4/nCD6wG3T QohoFFnD6DHSAg== -----END CERTIFICATE-----Generated at Thu Dec 25 14:16:18 2025 by rpki-client