This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft File: mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json) Hash identifier: Krx9KNX9/fD7vXOJm1iFMbv0A5hHBImA8H3QC8zg0B0= Subject key identifier: 7E:8C:CC:F3:D3:B4:F8:E2:0E:1F:37:1A:6C:7E:98:F4:01:59:75:7D Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 019B39B3CC436AB61569D062159A44431772 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft Manifest number: 118D Signing time: Sat 20 Dec 2025 03:00:43 +0000 Manifest this update: Sat 20 Dec 2025 03:00:43 +0000 Manifest next update: Sun 21 Dec 2025 03:00:43 +0000 Files and hashes: 1: 9_JhIw-bjUbjcsXjaRSJlNBXD-s.roa (hash: Hm59eKak2mRBLnGzAb7+vw2g+CNCplTmTg9aukFT0JE=) 2: Cm5DqrbsctqFvXQRRyRwNPG00IY.roa (hash: O06PA3Ks3knW3J57m8lSN/Hv9kQ6nHGAf+goTnk1j04=) 3: FPzxN2ymmUH78y5haV0PaZXdLVY.roa (hash: DdUQ7lpUro6lEFuSiN9fKQg9b9UllNMKrwO6ynxkjos=) 4: JPO6PlbO7T2lxOXw7VKbRM2Ge5Q.roa (hash: kV6T9GvL2JmIx9RKefMlHDbvnYr8DiGL3xFPvQ3Jx8U=) 5: JfmWtf32dZhRVwJQ1ZtKQrQQAfg.roa (hash: ucBbFh4z7Smi+4uRRA6FLN/GqDjNQS+yFNEoMPGwvug=) 6: Qb3tr77KowtzgTL9aw1f3gQCVLE.roa (hash: Zxsg9qCXLsm0Y5Wh/HJWGmHZtHZnJeva8aly7zFHMd8=) 7: VQJlRnI_FsEKIbEWGLyhLwP0NtM.roa (hash: onaEyOz4ocmnu3HOOu4gakiggdji6MdLGBGGPS11inY=) 8: ZBv1VZ75Z-edNoZRcvYjkb7NpN8.roa (hash: WTUxj+sidK096ykp4PAhTaXWq6bYZtjXmE5iUhcAutU=) 9: a0GKpzKa2l-eFBlKQIWeWorMYWE.roa (hash: ToDMarZPFqTg+Vik2NKe1VnAgzMIR0HHOC5Xh17RUK0=) 10: aEXJ-GLDzjyP60FhTQdWJ8Fvt7E.roa (hash: 0YpF7CPYi6PyoAg9TvQlat07FWQyIu8cHA137q7nQSc=) 11: bmd97yvzsY5Yo2HfnEE_aGsiLVw.roa (hash: rBbiHBTIds8AVFd6SWdPqBeLyfTxB+l6zirCVR5u1u4=) 12: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: F6uaGfwqiIrwXTZLzfweZBigwVKovJ6q6VjXTmTYvaI=) 13: pygxQHbvGZKVLzuvUJnRE055Ymk.roa (hash: jTpMpBKEIx8o2FyniDrKdnhuTZAZvNKL8hZwfmfGnMs=) 14: qYL6kaPJ2b0Ev5p7Oziqiiv4qTc.roa (hash: WBI5DwkHHee0G2mSopIcnWotDs7K8/Lvby/GArK324A=) 15: vY3Y3etrniGVDWVqa-wGwlb4wOM.roa (hash: 3iBpAllkx0+u9qLlhBtBBscqzISkhr+UuWv9+CbK7ew=) 16: yQafrAusZTwTPZBFL3M0qrFQZ04.roa (hash: Bj+Dm5K+2i3MwGi4viuLKNvUn9KDeSK+/ogiA8Pwh18=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:b3:cc:43:6a:b6:15:69:d0:62:15:9a:44:43:17:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Dec 20 03:00:43 2025 GMT Not After : Dec 21 03:00:43 2025 GMT Subject: CN=7e8cccf3d3b4f8e20e1f371a6c7e98f40159757d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:bf:7f:a5:6a:d6:61:cd:e3:3d:92:c3:fe: d7:0c:45:fe:dc:09:a5:fe:70:ce:51:9c:a7:e3:fe: 6b:d9:68:8c:b1:6d:15:73:27:4f:29:c0:65:1b:e7: 04:f5:2a:40:c5:ed:6e:ae:40:c7:31:3d:b3:01:71: 4c:38:d4:fb:b0:29:3c:ba:58:27:b2:52:24:ca:0c: bc:37:e7:de:d1:2b:6e:c6:65:b5:62:50:f6:bc:17: 17:2a:2e:ca:2f:bd:07:05:99:ba:12:3b:a0:1a:6e: e4:08:82:d7:7f:c3:51:23:88:05:08:68:11:cb:f8: 9b:ef:ea:77:e4:b7:f2:ca:16:02:96:41:c5:51:29: bb:b0:e7:4a:bd:e6:e6:09:5b:83:52:4f:f2:48:68: 53:34:9c:a1:a2:dd:00:5e:c3:6f:07:85:e0:8f:81: 31:0a:86:9d:97:ae:ca:48:1c:76:bb:1c:4c:cd:c9: f8:7b:ee:86:20:66:6c:a1:66:12:be:c2:c5:0b:50: 4d:61:b6:63:73:66:18:a1:b9:3c:16:45:12:f0:d2: e1:a2:14:3a:76:0e:41:39:6b:77:fa:31:1c:78:07: e1:17:62:fd:e8:59:07:33:43:2e:da:84:b9:09:42: c0:bc:bd:5b:4c:24:0b:38:57:2a:ef:18:64:f2:47: 11:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8C:CC:F3:D3:B4:F8:E2:0E:1F:37:1A:6C:7E:98:F4:01:59:75:7D X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:a0:2e:00:67:80:df:04:6d:03:85:39:0e:8f:cd:51:7d:1b: 8c:c7:fd:8b:5b:ab:cb:aa:92:3e:a1:fd:b5:0f:cd:17:21:c5: 83:7d:3b:29:c2:d4:c7:e1:f1:1a:d2:6c:11:3c:20:d9:7b:42: 71:a3:8f:70:b1:75:ec:6f:11:7b:c2:e4:ab:39:d6:f6:81:57: d6:b9:33:f3:69:91:9c:54:9d:26:52:09:0c:60:d9:ae:b8:2b: a7:f2:f3:0d:e0:4e:76:04:3a:5d:0b:c6:09:33:79:cc:06:9c: 88:78:33:59:0b:0b:f0:28:d6:cd:f7:19:d0:0f:c1:08:bd:11: 52:dc:d9:33:8a:79:81:9d:c0:a7:02:fd:50:8e:69:16:f4:65: 0d:69:87:fe:0f:8c:7c:3b:e6:c2:3e:0d:41:26:f6:0a:dd:61: 5b:ca:5d:cf:1d:9e:39:bd:87:3b:32:6b:a0:93:93:99:a8:c3: bb:e6:5a:38:11:49:b3:f9:9e:b7:04:0b:2a:53:8f:eb:43:db: ad:5f:b1:63:9c:e4:e2:98:76:05:a6:17:56:be:9e:29:3e:d1: cd:80:a7:e7:76:0b:8d:58:06:6d:63:2c:4f:34:7f:af:7a:10: 42:16:a1:08:61:37:39:6c:d9:87:82:bd:20:ff:85:53:c0:47: 10:fa:d5:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5s8xDarYVadBiFZpEQxdyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjUxMjIwMDMwMDQzWhcNMjUxMjIxMDMwMDQzWjAzMTEwLwYDVQQD Eyg3ZThjY2NmM2QzYjRmOGUyMGUxZjM3MWE2YzdlOThmNDAxNTk3NTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVy/f6Vq1mHN4z2Sw/7XDEX+3Aml /nDOUZyn4/5r2WiMsW0VcydPKcBlG+cE9SpAxe1urkDHMT2zAXFMONT7sCk8ulgn slIkygy8N+fe0StuxmW1YlD2vBcXKi7KL70HBZm6EjugGm7kCILXf8NRI4gFCGgR y/ib7+p35LfyyhYClkHFUSm7sOdKvebmCVuDUk/ySGhTNJyhot0AXsNvB4Xgj4Ex Coadl67KSBx2uxxMzcn4e+6GIGZsoWYSvsLFC1BNYbZjc2YYobk8FkUS8NLhohQ6 dg5BOWt3+jEceAfhF2L96FkHM0Mu2oS5CULAvL1bTCQLOFcq7xhk8kcRhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH6MzPPTtPjiDh83Gmx+mPQBWXV9MB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdKAuAGeA 3wRtA4U5Do/NUX0bjMf9i1ury6qSPqH9tQ/NFyHFg307KcLUx+HxGtJsETwg2XtC caOPcLF17G8Re8LkqznW9oFX1rkz82mRnFSdJlIJDGDZrrgrp/LzDeBOdgQ6XQvG CTN5zAaciHgzWQsL8CjWzfcZ0A/BCL0RUtzZM4p5gZ3ApwL9UI5pFvRlDWmH/g+M fDvmwj4NQSb2Ct1hW8pdzx2eOb2HOzJroJOTmajDu+ZaOBFJs/metwQLKlOP60Pb rV+xY5zk4ph2BaYXVr6eKT7RzYCn53YLjVgGbWMsTzR/r3oQQhahCGE3OWzZh4K9 IP+FU8BHEPrV5w== -----END CERTIFICATE-----Generated at Sat Dec 20 09:40:18 2025 by rpki-client