This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft File: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft (raw, json) Hash identifier: nVyqzO+KJ+sLh4l645lkbb5z35bMbmeiXHKEorHgAtk= Subject key identifier: F1:D0:FC:EC:52:49:4C:AF:D8:9F:6F:22:62:C7:5C:A3:29:18:E0:15 Authority key identifier: 32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24 Certificate issuer: /CN=321ec4626ecde25335aff088b04c71395ae6bc24 Certificate serial: 019B2F674B51D7FA1A00F4C70B14E909A8DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft Manifest number: 1781 Signing time: Thu 18 Dec 2025 03:00:57 +0000 Manifest this update: Thu 18 Dec 2025 03:00:57 +0000 Manifest next update: Fri 19 Dec 2025 03:00:57 +0000 Files and hashes: 1: DOtwGbtfl6s-x4f6aE2W8WlzVNw.roa (hash: ZfbdXBQ4B0vsaA9tpmB6Y8tzcJv8ZqF7FOHdCGM+Zl4=) 2: Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl (hash: /fDAzqsc27gt/4ncowPxBhEqjRwIWh8xCmPl+iLmDgA=) 3: VEwZGvZC8CGE0lsKNB1ekuITOKI.roa (hash: ruqW88ZWJqaz7y+HRNbaxPPhfL3FKhp6ygNCnPCWApo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:4b:51:d7:fa:1a:00:f4:c7:0b:14:e9:09:a8:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=321ec4626ecde25335aff088b04c71395ae6bc24 Validity Not Before: Dec 18 03:00:57 2025 GMT Not After : Dec 19 03:00:57 2025 GMT Subject: CN=f1d0fcec52494cafd89f6f2262c75ca32918e015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f8:b2:37:52:13:a8:1d:cb:6a:f5:68:7d:66: 32:0d:c3:90:63:81:72:47:f7:90:5d:d6:10:36:4a: 8d:0e:77:60:69:3d:bb:90:70:a8:5d:db:28:f7:ed: 63:24:84:3e:97:39:66:4d:69:73:21:c0:15:3c:14: 66:75:85:8d:aa:9f:7b:9f:a7:86:82:eb:51:9e:83: 36:c0:08:bd:12:c8:a0:f4:7d:b7:48:43:fd:e6:b3: 76:41:1c:ca:e4:8d:21:4e:29:a7:1f:46:49:e6:a5: 8a:72:be:2a:86:0d:21:02:01:8d:08:b4:b4:53:b0: 0e:ca:23:27:d1:3e:30:6f:d1:36:43:a7:b1:93:d6: d5:86:22:7f:1d:b5:57:b3:49:98:90:2b:3d:69:76: 5f:b6:6d:28:3e:70:1b:62:11:44:44:dd:2e:2b:98: 81:7d:12:c4:05:ef:c4:44:6b:ea:2b:77:46:fd:63: 8a:77:2d:55:d6:3e:ae:49:22:14:df:35:62:f0:3f: 5b:b1:e2:81:ba:80:86:94:df:69:3b:00:b6:82:90: 72:8e:1c:49:cf:ac:56:d4:94:2a:2f:92:7f:0d:51: 29:5a:73:e2:25:87:56:5c:6d:f2:b5:6f:a1:f1:69: c0:ed:f3:a4:df:ca:3b:7e:2c:33:07:c6:f1:c0:60: 66:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:D0:FC:EC:52:49:4C:AF:D8:9F:6F:22:62:C7:5C:A3:29:18:E0:15 X509v3 Authority Key Identifier: keyid:32:1E:C4:62:6E:CD:E2:53:35:AF:F0:88:B0:4C:71:39:5A:E6:BC:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8e08b3-487c-485a-9479-b084c73861b8/1/Mh7EYm7N4lM1r_CIsExxOVrmvCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:f1:a3:ca:10:39:a0:a2:d1:dc:30:bb:71:44:8f:af:b2:28: 5f:11:ea:b8:ca:10:9a:4e:99:d2:6b:db:ee:98:98:ed:04:ae: de:8e:b7:58:c8:71:a4:c6:91:67:e9:ea:58:7e:1c:f3:c2:78: 4f:f3:fc:f4:be:fd:cb:ab:3f:b3:19:87:e3:4a:27:bc:ba:70: 41:18:bb:47:26:30:63:57:a2:77:97:63:e7:c0:50:2b:3b:86: b4:d1:55:a0:f3:98:38:a6:70:47:be:94:18:10:a8:3f:87:f2: 7c:77:d3:77:9d:d6:00:0e:07:d7:d7:5a:ce:e1:de:20:59:a7: ed:da:5d:34:f5:67:e4:67:b1:98:72:af:91:2b:e4:d8:fa:11: 1d:5f:26:67:ac:c3:62:66:26:a2:41:64:ca:48:05:89:7d:22: 68:32:87:0f:98:a7:b2:60:d1:32:13:b7:09:eb:fe:54:52:53: 06:07:89:3e:77:01:33:9b:11:89:3e:95:fa:e7:a4:72:ab:90: 56:ef:a2:86:1e:33:6b:ea:1c:79:34:db:d3:45:f4:6f:47:01: 17:74:c5:c1:ff:cd:03:3c:ee:76:c7:5a:af:08:4a:83:34:a9: bd:e5:e5:8b:b7:b8:6c:c8:2c:4b:44:3b:80:07:51:72:27:55: a3:9e:0e:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ0tR1/oaAPTHCxTpCajdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMWVjNDYyNmVjZGUyNTMzNWFmZjA4OGIwNGM3MTM5NWFl NmJjMjQwHhcNMjUxMjE4MDMwMDU3WhcNMjUxMjE5MDMwMDU3WjAzMTEwLwYDVQQD EyhmMWQwZmNlYzUyNDk0Y2FmZDg5ZjZmMjI2MmM3NWNhMzI5MThlMDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfiyN1ITqB3LavVofWYyDcOQY4Fy R/eQXdYQNkqNDndgaT27kHCoXdso9+1jJIQ+lzlmTWlzIcAVPBRmdYWNqp97n6eG gutRnoM2wAi9Esig9H23SEP95rN2QRzK5I0hTimnH0ZJ5qWKcr4qhg0hAgGNCLS0 U7AOyiMn0T4wb9E2Q6exk9bVhiJ/HbVXs0mYkCs9aXZftm0oPnAbYhFERN0uK5iB fRLEBe/ERGvqK3dG/WOKdy1V1j6uSSIU3zVi8D9bseKBuoCGlN9pOwC2gpByjhxJ z6xW1JQqL5J/DVEpWnPiJYdWXG3ytW+h8WnA7fOk38o7fiwzB8bxwGBmPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPHQ/OxSSUyv2J9vImLHXKMpGOAVMB8GA1UdIwQY MBaAFDIexGJuzeJTNa/wiLBMcTla5rwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWg3RVltN040bE0xcl9DSXNFeHhPVnJtdkNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84ZTA4YjMtNDg3Yy00ODVhLTk0Nzkt YjA4NGM3Mzg2MWI4LzEvTWg3RVltN040bE0xcl9DSXNFeHhPVnJtdkNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84ZTA4YjMtNDg3Yy00ODVhLTk0NzktYjA4NGM3Mzg2MWI4 LzEvTWg3RVltN040bE0xcl9DSXNFeHhPVnJtdkNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH/GjyhA5 oKLR3DC7cUSPr7IoXxHquMoQmk6Z0mvb7piY7QSu3o63WMhxpMaRZ+nqWH4c88J4 T/P89L79y6s/sxmH40onvLpwQRi7RyYwY1eid5dj58BQKzuGtNFVoPOYOKZwR76U GBCoP4fyfHfTd53WAA4H19dazuHeIFmn7dpdNPVn5GexmHKvkSvk2PoRHV8mZ6zD YmYmokFkykgFiX0iaDKHD5insmDRMhO3Cev+VFJTBgeJPncBM5sRiT6V+uekcquQ Vu+ihh4za+oceTTb00X0b0cBF3TFwf/NAzzudsdarwhKgzSpveXli7e4bMgsS0Q7 gAdRcidVo54OiQ== -----END CERTIFICATE-----Generated at Thu Dec 18 09:54:21 2025 by rpki-client