This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft File: MAhC2wg32vMRozS3IjGOcLWIsAk.mft (raw, json) Hash identifier: OKVHPYpYl6j7yas4khO8qukLXVNNkdVCzEuX/bWkmnE= Subject key identifier: 5D:0E:33:D8:A5:F5:B9:47:C4:7D:DB:87:53:AE:1A:4D:AC:2E:D9:91 Authority key identifier: 30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09 Certificate issuer: /CN=300842db0837daf311a334b722318e70b588b009 Certificate serial: 019B3C7E85BE83B8B44CE03E61CBE1BCBA65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 16:01:23 +0000 Manifest this update: Sat 20 Dec 2025 16:01:23 +0000 Manifest next update: Sun 21 Dec 2025 16:01:23 +0000 Files and hashes: 1: MAhC2wg32vMRozS3IjGOcLWIsAk.crl (hash: F+NQsp2eP0ZOlOj8Z+Y2nNxRcoUhfW7OKMaM2jAYtuY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:85:be:83:b8:b4:4c:e0:3e:61:cb:e1:bc:ba:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=300842db0837daf311a334b722318e70b588b009 Validity Not Before: Dec 20 16:01:23 2025 GMT Not After : Dec 21 16:01:23 2025 GMT Subject: CN=5d0e33d8a5f5b947c47ddb8753ae1a4dac2ed991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cb:70:3c:f6:d1:df:cc:e6:ef:40:b4:c7:6f: e0:16:0b:1b:32:16:88:2f:e7:e9:64:21:bc:43:9a: 1f:b2:57:8a:78:e1:cd:03:33:a1:70:e0:63:98:88: 97:a7:df:d5:c2:44:c2:db:0a:35:77:e6:fe:f3:72: 80:c1:11:94:ec:69:38:7e:8d:3f:a1:bf:bf:33:f1: 6c:0f:98:14:95:84:f6:73:7e:8f:ff:72:36:8b:d9: f6:39:88:31:db:ac:6b:33:b2:e3:d1:44:a7:b2:14: 7e:5a:26:a1:59:53:73:7c:02:ea:4e:14:b7:8a:dc: 9b:b4:c8:02:bd:8b:0a:ed:3d:ce:e6:76:3f:be:24: 78:07:23:41:8b:61:f7:2d:ea:86:02:1b:88:bf:30: 5b:00:c4:4f:7d:40:ca:89:c4:99:21:ad:fa:01:d7: 72:94:af:cd:53:90:8f:73:5a:76:5e:eb:1b:42:d4: 7b:7b:92:ed:28:fc:02:95:c9:39:91:16:7c:76:76: 93:67:30:60:3c:b8:57:d2:fa:ed:3a:fa:c9:4a:a0: 3f:06:2d:dd:6e:61:49:ff:db:65:d9:20:34:60:44: 65:6b:10:eb:78:da:8b:20:c8:c6:35:61:96:52:0e: a2:83:76:d3:8d:06:0a:f2:3e:54:a1:fd:c8:fd:fe: 79:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0E:33:D8:A5:F5:B9:47:C4:7D:DB:87:53:AE:1A:4D:AC:2E:D9:91 X509v3 Authority Key Identifier: keyid:30:08:42:DB:08:37:DA:F3:11:A3:34:B7:22:31:8E:70:B5:88:B0:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAhC2wg32vMRozS3IjGOcLWIsAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8d64d1-4940-40e7-895c-5312a133b94e/1/MAhC2wg32vMRozS3IjGOcLWIsAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:1e:d6:00:44:7b:4f:3c:b0:a6:fb:f4:5e:14:63:73:5f:4a: 60:73:81:63:10:85:9c:4d:5f:0b:ea:43:01:d8:43:c5:df:c4: 09:46:68:e2:1d:66:12:d2:fb:e6:40:72:6f:b2:d2:cd:7e:77: 85:ec:26:7c:df:13:f4:cf:92:76:1d:ad:f3:01:43:8f:ed:21: fc:6c:dd:68:fc:ff:ce:21:3b:56:80:2c:8d:bb:64:0e:8a:92: fe:3f:3a:b5:30:3a:8a:bf:d8:51:a4:f0:26:b6:9e:16:35:48: 3c:fe:ee:9b:54:04:ee:6f:7e:c0:01:62:2b:c7:3e:2e:36:3d: 33:d6:17:0b:90:a6:78:52:ee:55:45:2a:48:5a:13:5f:aa:0a: ad:01:b5:95:4c:60:ea:3d:05:a9:1a:f1:d1:66:12:96:5b:4f: b9:06:b1:01:e2:53:6a:69:b5:6c:c1:ac:af:5f:8f:fd:37:2d: 92:a1:a1:c5:18:e6:15:dc:c4:e8:1c:80:45:17:a5:18:91:1e: 28:ac:08:4c:b5:d6:22:95:71:0c:5c:9a:15:bb:71:2e:5d:fc: 36:4c:37:c2:78:52:d0:15:86:49:22:eb:51:3a:59:bb:ca:d7: 10:7f:b8:24:c8:28:1e:4f:01:3d:3a:92:2e:2e:1f:65:5d:61: b8:67:5d:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8foW+g7i0TOA+YcvhvLplMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwMDg0MmRiMDgzN2RhZjMxMWEzMzRiNzIyMzE4ZTcwYjU4 OGIwMDkwHhcNMjUxMjIwMTYwMTIzWhcNMjUxMjIxMTYwMTIzWjAzMTEwLwYDVQQD Eyg1ZDBlMzNkOGE1ZjViOTQ3YzQ3ZGRiODc1M2FlMWE0ZGFjMmVkOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMtwPPbR38zm70C0x2/gFgsbMhaI L+fpZCG8Q5ofsleKeOHNAzOhcOBjmIiXp9/VwkTC2wo1d+b+83KAwRGU7Gk4fo0/ ob+/M/FsD5gUlYT2c36P/3I2i9n2OYgx26xrM7Lj0USnshR+WiahWVNzfALqThS3 itybtMgCvYsK7T3O5nY/viR4ByNBi2H3LeqGAhuIvzBbAMRPfUDKicSZIa36Addy lK/NU5CPc1p2XusbQtR7e5LtKPwClck5kRZ8dnaTZzBgPLhX0vrtOvrJSqA/Bi3d bmFJ/9tl2SA0YERlaxDreNqLIMjGNWGWUg6ig3bTjQYK8j5Uof3I/f552QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0OM9il9blHxH3bh1OuGk2sLtmRMB8GA1UdIwQY MBaAFDAIQtsIN9rzEaM0tyIxjnC1iLAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUFoQzJ3ZzMydk1Sb3pTM0lqR09jTFdJc0FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84ZDY0ZDEtNDk0MC00MGU3LTg5NWMt NTMxMmExMzNiOTRlLzEvTUFoQzJ3ZzMydk1Sb3pTM0lqR09jTFdJc0FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS84ZDY0ZDEtNDk0MC00MGU3LTg5NWMtNTMxMmExMzNiOTRl LzEvTUFoQzJ3ZzMydk1Sb3pTM0lqR09jTFdJc0FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAx7WAER7 Tzywpvv0XhRjc19KYHOBYxCFnE1fC+pDAdhDxd/ECUZo4h1mEtL75kByb7LSzX53 hewmfN8T9M+Sdh2t8wFDj+0h/GzdaPz/ziE7VoAsjbtkDoqS/j86tTA6ir/YUaTw JraeFjVIPP7um1QE7m9+wAFiK8c+LjY9M9YXC5CmeFLuVUUqSFoTX6oKrQG1lUxg 6j0FqRrx0WYSlltPuQaxAeJTamm1bMGsr1+P/TctkqGhxRjmFdzE6ByARRelGJEe KKwITLXWIpVxDFyaFbtxLl38Nkw3wnhS0BWGSSLrUTpZu8rXEH+4JMgoHk8BPTqS Li4fZV1huGdd/A== -----END CERTIFICATE-----Generated at Sat Dec 20 18:41:05 2025 by rpki-client