This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft File: mMHQO0lQTTRGXcQKPQ-QhsrP244.mft (raw, json) Hash identifier: zTmThzHSYUiZYtQ+ImupXalQjnk/7fn5ASu1vElYfXc= Subject key identifier: 00:E9:E2:0E:1E:72:D3:3E:57:FE:0C:21:9E:53:1E:26:B0:AC:32:A1 Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e Certificate serial: 019B3AFDA2108CDA4F6FB214F57DFA7F89AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft Manifest number: 059B Signing time: Sat 20 Dec 2025 09:00:59 +0000 Manifest this update: Sat 20 Dec 2025 09:00:59 +0000 Manifest next update: Sun 21 Dec 2025 09:00:59 +0000 Files and hashes: 1: 4gx5vOTnIWUJl_QAV2mXwq3Lr-4.roa (hash: HfHpcv3dLmrHsA+/nteIdJA+PtlCghL9IWXSgxgW5dk=) 2: 7STy9rKwdVVWBV0PihzyOaaZCGE.roa (hash: rQ7JBMoV5qjUAaqBUkhYTkeegNLJEltgl8G2+dehWX0=) 3: 8tkE_UoEzTGGvSS_bgTvrWx6MpM.roa (hash: ocveRvdKmq2/uNW55ltBS2tVePO3vLCP/eERUMjU3Xk=) 4: SURf7PCqvWoIa7zkJQidqcRcECg.roa (hash: s3AKwYZwkDvcyHArrGNRqobsTcwBzjd0jER/XAbhZfQ=) 5: mMHQO0lQTTRGXcQKPQ-QhsrP244.crl (hash: k87LV/6QcZqPVUBe3D+JYZ43Tb1ZMAlMSnXUNpIULEQ=) 6: vELKBYHFEWuziyxwHt8P-AaeZu0.roa (hash: nLjphrnkbyuT7M1CC3aPm0hUWrSdnIQEpDv8szLLPHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:a2:10:8c:da:4f:6f:b2:14:f5:7d:fa:7f:89:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e Validity Not Before: Dec 20 09:00:59 2025 GMT Not After : Dec 21 09:00:59 2025 GMT Subject: CN=00e9e20e1e72d33e57fe0c219e531e26b0ac32a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:26:37:3f:7f:ec:8b:59:44:10:1b:c2:85:47: 62:6b:de:b7:24:ff:e6:03:a8:c4:41:ca:cf:50:99: 6c:d8:ea:01:aa:16:6e:b5:62:9d:b4:ab:f4:90:e3: 18:17:e8:c0:ff:df:86:c4:9a:01:f8:b1:54:23:2b: 25:7e:ae:35:58:ea:c5:e8:44:35:9e:47:b8:d8:f4: 89:19:b7:8e:46:ca:10:68:03:fa:e4:83:80:e2:ce: 08:7d:c3:99:8f:48:d4:26:95:17:73:ee:9d:9d:91: 66:b1:0d:05:69:49:2d:10:f9:33:25:73:7c:3c:68: 92:6e:1e:bc:67:0e:7e:c6:e8:8d:5a:27:9a:52:83: 5e:d0:9f:78:be:51:dd:04:65:c7:aa:1b:b3:54:c0: 9c:31:e1:32:70:b8:b0:9d:58:f0:ad:b3:84:35:6f: 90:4e:d8:ed:ff:5d:7e:9f:02:3e:32:2f:0a:2b:4e: 7b:2e:a1:8a:61:d6:82:d7:ff:0a:db:06:78:36:d1: 5b:bc:ae:9a:0b:81:93:23:4b:2f:b5:e3:43:f1:12: 93:b5:27:fd:68:37:42:d1:c3:48:c6:8b:b6:43:f1: e4:f1:7b:ce:d6:88:62:ac:a7:55:11:63:3b:e6:23: 22:f5:8d:1a:a7:53:b4:1b:00:53:27:7e:99:70:05: 45:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:E9:E2:0E:1E:72:D3:3E:57:FE:0C:21:9E:53:1E:26:B0:AC:32:A1 X509v3 Authority Key Identifier: keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:80:f6:23:97:f5:d6:14:ed:62:08:e0:42:6d:81:6e:f4:14: 1a:e3:ce:ec:be:02:1d:eb:50:9f:eb:7f:69:0d:32:12:7c:a3: a9:53:72:a7:a9:73:82:73:f8:4d:d5:c1:aa:c4:29:b4:0d:33: dc:a7:f6:45:46:38:1b:62:eb:d7:dc:23:c1:26:a7:1b:18:0b: 28:99:3e:4b:ae:c7:22:e9:bc:e4:10:ff:89:67:66:73:e0:86: c6:19:6a:b5:77:97:7a:4d:75:e8:00:e7:0e:19:3c:e3:9e:02: ac:48:4a:2e:05:9e:8a:97:3c:ec:0d:d4:a3:2d:a1:ec:b1:ff: e0:f1:c6:3a:9b:2e:b6:87:f8:fc:6e:2e:c5:47:d0:11:be:fa: ca:7f:90:5a:58:4c:68:3c:70:b0:1d:fd:93:ec:7f:21:4c:ca: e8:a4:2e:ec:ea:f8:f1:5c:e6:aa:5a:54:a6:1e:de:f2:13:3e: bf:4f:90:f6:e3:1d:42:f2:00:a6:d9:80:1d:c8:94:30:93:79: 00:df:5f:41:21:41:a4:40:64:c6:ba:04:7a:29:0e:19:9e:d6: 3b:e4:73:25:97:61:3a:19:3d:ff:0a:15:f4:2a:69:5f:47:0c: a7:85:b2:25:f6:00:37:e4:38:84:9e:d3:cf:a6:f0:13:ef:58: 8f:fc:88:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/aIQjNpPb7IU9X36f4msMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YzFkMDNiNDk1MDRkMzQ0NjVkYzQwYTNkMGY5MDg2Y2Fj ZmRiOGUwHhcNMjUxMjIwMDkwMDU5WhcNMjUxMjIxMDkwMDU5WjAzMTEwLwYDVQQD EygwMGU5ZTIwZTFlNzJkMzNlNTdmZTBjMjE5ZTUzMWUyNmIwYWMzMmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviY3P3/si1lEEBvChUdia963JP/m A6jEQcrPUJls2OoBqhZutWKdtKv0kOMYF+jA/9+GxJoB+LFUIyslfq41WOrF6EQ1 nke42PSJGbeORsoQaAP65IOA4s4IfcOZj0jUJpUXc+6dnZFmsQ0FaUktEPkzJXN8 PGiSbh68Zw5+xuiNWieaUoNe0J94vlHdBGXHqhuzVMCcMeEycLiwnVjwrbOENW+Q Ttjt/11+nwI+Mi8KK057LqGKYdaC1/8K2wZ4NtFbvK6aC4GTI0svteND8RKTtSf9 aDdC0cNIxou2Q/Hk8XvO1ohirKdVEWM75iMi9Y0ap1O0GwBTJ36ZcAVFnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADp4g4ectM+V/4MIZ5THiawrDKhMB8GA1UdIwQY MBaAFJjB0DtJUE00Rl3ECj0PkIbKz9uOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEt YzMxYmRlNTEwMDg1LzEvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEtYzMxYmRlNTEwMDg1 LzEvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4D2I5f1 1hTtYgjgQm2BbvQUGuPO7L4CHetQn+t/aQ0yEnyjqVNyp6lzgnP4TdXBqsQptA0z 3Kf2RUY4G2Lr19wjwSanGxgLKJk+S67HIum85BD/iWdmc+CGxhlqtXeXek116ADn Dhk8454CrEhKLgWeipc87A3Uoy2h7LH/4PHGOpsutof4/G4uxUfQEb76yn+QWlhM aDxwsB39k+x/IUzK6KQu7Or48VzmqlpUph7e8hM+v0+Q9uMdQvIAptmAHciUMJN5 AN9fQSFBpEBkxroEeikOGZ7WO+RzJZdhOhk9/woV9CppX0cMp4WyJfYAN+Q4hJ7T z6bwE+9Yj/yIRA== -----END CERTIFICATE-----Generated at Sat Dec 20 16:05:53 2025 by rpki-client