This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft File: mMHQO0lQTTRGXcQKPQ-QhsrP244.mft (raw, json) Hash identifier: T/RLEAkOeb/YWcU++RM1GpxdH+kCgLKr2hJ+IeBRiL0= Subject key identifier: 72:ED:3B:3C:B1:87:94:F6:C2:19:AE:63:79:1B:29:3D:BC:07:24:5C Authority key identifier: 98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E Certificate issuer: /CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e Certificate serial: 019B6F226DBF2B663A7A49DA06F055D552BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft Manifest number: 05B6 Signing time: Tue 30 Dec 2025 12:01:25 +0000 Manifest this update: Tue 30 Dec 2025 12:01:25 +0000 Manifest next update: Wed 31 Dec 2025 12:01:25 +0000 Files and hashes: 1: 4gx5vOTnIWUJl_QAV2mXwq3Lr-4.roa (hash: HfHpcv3dLmrHsA+/nteIdJA+PtlCghL9IWXSgxgW5dk=) 2: 7STy9rKwdVVWBV0PihzyOaaZCGE.roa (hash: rQ7JBMoV5qjUAaqBUkhYTkeegNLJEltgl8G2+dehWX0=) 3: 8tkE_UoEzTGGvSS_bgTvrWx6MpM.roa (hash: ocveRvdKmq2/uNW55ltBS2tVePO3vLCP/eERUMjU3Xk=) 4: SURf7PCqvWoIa7zkJQidqcRcECg.roa (hash: s3AKwYZwkDvcyHArrGNRqobsTcwBzjd0jER/XAbhZfQ=) 5: mMHQO0lQTTRGXcQKPQ-QhsrP244.crl (hash: 90OSnE9MhVrxKNd6kdPaQh9EbBi2ooiys2nWYnUjvN0=) 6: vELKBYHFEWuziyxwHt8P-AaeZu0.roa (hash: nLjphrnkbyuT7M1CC3aPm0hUWrSdnIQEpDv8szLLPHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 12:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6f:22:6d:bf:2b:66:3a:7a:49:da:06:f0:55:d5:52:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98c1d03b49504d34465dc40a3d0f9086cacfdb8e Validity Not Before: Dec 30 12:01:25 2025 GMT Not After : Dec 31 12:01:25 2025 GMT Subject: CN=72ed3b3cb18794f6c219ae63791b293dbc07245c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e5:40:5c:91:2a:7b:00:0e:80:9a:c9:ab:ae: 4b:43:02:42:ac:55:f0:09:8e:40:32:46:89:9a:fc: 61:9c:6d:77:d5:dc:ff:b0:4c:15:87:52:5f:70:b8: db:78:f1:55:1c:00:8d:b5:d5:08:e0:f1:a8:52:f6: 99:64:3b:20:2b:f4:84:c0:b4:9e:03:0e:78:f6:78: e1:46:0b:08:96:67:63:06:ab:f4:19:69:0e:16:41: c4:ec:fd:b9:53:33:8d:00:d0:ae:a1:77:6c:49:d1: 64:a0:66:07:1c:32:2c:e8:b3:54:6f:1f:bc:cb:ca: 3d:f2:0e:52:30:6b:96:d9:18:34:86:8f:dc:e1:cf: 96:88:8d:c9:a1:16:89:67:01:87:db:16:3e:fa:4a: dc:db:0a:33:b9:10:63:96:b0:f8:80:a8:ff:d5:87: 62:4a:57:e0:93:7c:32:c6:c7:28:02:22:a3:0b:19: 4b:4e:bd:82:22:d2:a9:e5:8b:33:f0:ac:43:c1:83: 5e:4f:ce:83:b5:b2:26:fa:b3:b2:6b:c3:9c:2b:47: 7c:8e:21:7c:13:3e:8a:f0:d7:0c:9b:5d:03:a4:08: b2:fc:f2:d1:93:56:11:cd:95:5a:df:b2:15:eb:ef: 5d:ac:ac:78:b2:71:c9:d5:c8:27:40:39:11:b8:59: 7e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:ED:3B:3C:B1:87:94:F6:C2:19:AE:63:79:1B:29:3D:BC:07:24:5C X509v3 Authority Key Identifier: keyid:98:C1:D0:3B:49:50:4D:34:46:5D:C4:0A:3D:0F:90:86:CA:CF:DB:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMHQO0lQTTRGXcQKPQ-QhsrP244.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/d6c257-f501-4796-aa61-c31bde510085/1/mMHQO0lQTTRGXcQKPQ-QhsrP244.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3e:15:76:a9:2f:ff:b4:4c:12:ef:01:1a:a3:9e:e0:7c:f9: 8d:a5:81:87:12:8d:2e:86:b3:91:27:8d:7d:08:22:aa:7e:30: d7:7f:f0:26:73:c0:13:c3:d0:10:b7:8c:b2:4c:60:91:d9:fb: 2f:7c:22:f2:c8:26:05:3f:38:f6:01:d2:3d:f5:cb:25:c6:7c: 5a:f1:fc:3d:4b:60:d3:59:7f:30:1c:97:b0:c1:cf:0d:ea:e5: 94:18:35:17:9b:95:f2:ff:90:ba:de:41:ef:62:18:3f:3f:a8: ff:a8:1f:43:bb:db:ed:70:fd:40:ee:b2:22:a5:da:8f:78:da: 56:45:54:3b:07:15:01:17:ec:38:a5:40:2e:21:d3:33:98:6b: 40:8c:66:4c:80:5b:e7:94:d4:7a:e2:5b:27:5a:fb:31:89:98: 9a:19:d3:c9:6d:f1:2e:d4:af:c0:20:78:52:32:50:6d:27:47: a4:d1:f3:27:37:2b:c3:30:6f:ec:c7:ba:ef:4a:bc:e5:ce:f0: cc:99:c8:72:64:c7:82:34:b2:2b:c2:91:cc:67:74:72:e6:25: ad:6f:ba:82:42:ce:9d:c9:07:63:63:93:64:1a:2b:9d:77:23: 58:c0:ef:15:83:1d:20:46:2f:f6:6d:f4:61:50:2a:d0:5b:29: fa:55:19:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtvIm2/K2Y6eknaBvBV1VK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YzFkMDNiNDk1MDRkMzQ0NjVkYzQwYTNkMGY5MDg2Y2Fj ZmRiOGUwHhcNMjUxMjMwMTIwMTI1WhcNMjUxMjMxMTIwMTI1WjAzMTEwLwYDVQQD Eyg3MmVkM2IzY2IxODc5NGY2YzIxOWFlNjM3OTFiMjkzZGJjMDcyNDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+VAXJEqewAOgJrJq65LQwJCrFXw CY5AMkaJmvxhnG131dz/sEwVh1JfcLjbePFVHACNtdUI4PGoUvaZZDsgK/SEwLSe Aw549njhRgsIlmdjBqv0GWkOFkHE7P25UzONANCuoXdsSdFkoGYHHDIs6LNUbx+8 y8o98g5SMGuW2Rg0ho/c4c+WiI3JoRaJZwGH2xY++krc2wozuRBjlrD4gKj/1Ydi Slfgk3wyxscoAiKjCxlLTr2CItKp5Ysz8KxDwYNeT86DtbIm+rOya8OcK0d8jiF8 Ez6K8NcMm10DpAiy/PLRk1YRzZVa37IV6+9drKx4snHJ1cgnQDkRuFl+sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLtOzyxh5T2whmuY3kbKT28ByRcMB8GA1UdIwQY MBaAFJjB0DtJUE00Rl3ECj0PkIbKz9uOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEt YzMxYmRlNTEwMDg1LzEvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9kNmMyNTctZjUwMS00Nzk2LWFhNjEtYzMxYmRlNTEwMDg1 LzEvbU1IUU8wbFFUVFJHWGNRS1BRLVFoc3JQMjQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAez4Vdqkv /7RMEu8BGqOe4Hz5jaWBhxKNLoazkSeNfQgiqn4w13/wJnPAE8PQELeMskxgkdn7 L3wi8sgmBT849gHSPfXLJcZ8WvH8PUtg01l/MByXsMHPDerllBg1F5uV8v+Qut5B 72IYPz+o/6gfQ7vb7XD9QO6yIqXaj3jaVkVUOwcVARfsOKVALiHTM5hrQIxmTIBb 55TUeuJbJ1r7MYmYmhnTyW3xLtSvwCB4UjJQbSdHpNHzJzcrwzBv7Me670q85c7w zJnIcmTHgjSyK8KRzGd0cuYlrW+6gkLOnckHY2OTZBornXcjWMDvFYMdIEYv9m30 YVAq0Fsp+lUZig== -----END CERTIFICATE-----Generated at Tue Dec 30 18:42:44 2025 by rpki-client