This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft File: MhS0ivRv_G1W3QurOzGH3lPp6yM.mft (raw, json) Hash identifier: PnqxNGS9uC4GRZ54dM/vgp3kb6jDgf0s7sl0G+fypbw= Subject key identifier: 72:29:5D:79:4A:75:94:B8:1A:30:EA:23:FA:53:AA:34:19:68:45:E8 Authority key identifier: 32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23 Certificate issuer: /CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23 Certificate serial: 019B680D815787D994CDF77B8CB2305EF789 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft Manifest number: 060E Signing time: Mon 29 Dec 2025 03:01:13 +0000 Manifest this update: Mon 29 Dec 2025 03:01:13 +0000 Manifest next update: Tue 30 Dec 2025 03:01:13 +0000 Files and hashes: 1: MhS0ivRv_G1W3QurOzGH3lPp6yM.crl (hash: N8EvXJDl+8T2q2lSD+2sw5syxU9OML4/iKGssiAppz4=) 2: xjdC4ob7aRS2Ev-O6nidCaBCpZg.roa (hash: SBgN/gihku+/q5pAC+Vic8NfDHBeeV+OVc/nVKV8Vm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 03:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:68:0d:81:57:87:d9:94:cd:f7:7b:8c:b2:30:5e:f7:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3214b48af46ffc6d56dd0bab3b3187de53e9eb23 Validity Not Before: Dec 29 03:01:13 2025 GMT Not After : Dec 30 03:01:13 2025 GMT Subject: CN=72295d794a7594b81a30ea23fa53aa34196845e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:60:6a:e1:96:60:50:9d:3e:45:6c:93:59:6e: 88:9d:27:06:17:b7:52:56:96:a6:1c:02:dd:24:0d: b9:d9:4a:47:65:5c:78:f2:50:49:9d:2c:ba:fa:76: 8f:c9:a4:4b:bf:8d:08:bd:ce:08:69:43:25:41:3b: 32:61:8c:76:38:0e:03:7d:aa:2b:00:af:ec:b6:5e: 0b:73:77:19:b3:ec:51:9a:3b:a9:12:69:b7:a7:89: a5:17:80:1e:30:fa:89:54:ed:63:54:d8:25:96:5c: 88:1e:ac:ef:95:9c:3f:ae:3e:1a:3a:a7:c4:04:56: 34:5f:84:78:de:da:35:6d:71:cc:88:cd:21:5e:e3: fc:fc:ff:1c:0b:41:e5:76:ad:60:11:c1:58:f6:31: 64:29:17:02:ca:9a:8a:84:2f:02:c0:cd:0b:41:90: 42:e8:83:77:4a:e1:24:07:88:00:30:93:1f:c2:09: 43:c6:5d:d1:1d:3a:5a:dc:d1:ce:1d:5e:34:3b:54: ae:0e:25:36:86:7d:78:c7:63:7f:19:59:f4:9b:7d: a0:b5:55:fa:57:8d:d4:7c:a4:53:db:8a:bb:5e:c8: e6:8d:88:9b:62:85:01:11:34:60:53:ea:8b:23:17: 6d:eb:c6:51:49:fb:e1:ca:04:17:81:6e:25:ec:23: c2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:29:5D:79:4A:75:94:B8:1A:30:EA:23:FA:53:AA:34:19:68:45:E8 X509v3 Authority Key Identifier: keyid:32:14:B4:8A:F4:6F:FC:6D:56:DD:0B:AB:3B:31:87:DE:53:E9:EB:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhS0ivRv_G1W3QurOzGH3lPp6yM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/084f71-927a-4fa8-bea5-cd87ee970e6f/1/MhS0ivRv_G1W3QurOzGH3lPp6yM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:53:b8:59:71:ce:0c:64:6b:00:53:94:b6:bd:c5:e8:2f:09: 05:09:be:85:19:04:4d:49:91:27:c3:83:a2:05:1b:cf:8b:6c: 4a:99:36:0e:f2:4a:22:ad:b5:d4:9f:b8:24:e2:64:58:cf:09: 62:94:05:34:c7:41:25:5e:11:27:27:6d:aa:b4:00:d8:84:99: aa:1a:16:99:02:fa:e2:4b:71:4e:3c:ba:39:b4:eb:f2:31:7b: dc:9f:3d:42:99:a5:d8:95:57:06:2b:49:e2:63:04:4b:01:1e: 63:1b:2c:0c:69:32:2b:12:83:2f:40:c0:1b:48:05:55:0a:7e: 66:b0:24:21:c6:fe:4f:bb:f0:2e:c2:a7:7b:fd:c8:79:96:30: 80:94:9f:fa:be:34:cc:b6:93:0e:db:38:5f:d8:a9:ce:df:ae: 8d:db:b7:cc:62:3d:e9:b8:70:b4:c6:33:5a:f7:88:e2:fb:06: 4c:bf:82:94:19:4f:64:39:4a:4c:8a:ca:e6:73:1c:8a:e8:4f: e0:5c:67:41:ad:b9:ff:8c:17:e8:8e:a4:ee:d6:ca:d1:41:8b: aa:be:de:e2:af:c3:46:92:e2:12:42:95:14:84:32:d4:46:a9: 1b:53:af:34:d1:be:bc:50:c0:f8:4b:08:75:89:e6:78:9e:33: 5b:33:52:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtoDYFXh9mUzfd7jLIwXveJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMTRiNDhhZjQ2ZmZjNmQ1NmRkMGJhYjNiMzE4N2RlNTNl OWViMjMwHhcNMjUxMjI5MDMwMTEzWhcNMjUxMjMwMDMwMTEzWjAzMTEwLwYDVQQD Eyg3MjI5NWQ3OTRhNzU5NGI4MWEzMGVhMjNmYTUzYWEzNDE5Njg0NWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomBq4ZZgUJ0+RWyTWW6InScGF7dS VpamHALdJA252UpHZVx48lBJnSy6+naPyaRLv40Ivc4IaUMlQTsyYYx2OA4Dfaor AK/stl4Lc3cZs+xRmjupEmm3p4mlF4AeMPqJVO1jVNglllyIHqzvlZw/rj4aOqfE BFY0X4R43to1bXHMiM0hXuP8/P8cC0Hldq1gEcFY9jFkKRcCypqKhC8CwM0LQZBC 6IN3SuEkB4gAMJMfwglDxl3RHTpa3NHOHV40O1SuDiU2hn14x2N/GVn0m32gtVX6 V43UfKRT24q7XsjmjYibYoUBETRgU+qLIxdt68ZRSfvhygQXgW4l7CPCOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHIpXXlKdZS4GjDqI/pTqjQZaEXoMB8GA1UdIwQY MBaAFDIUtIr0b/xtVt0Lqzsxh95T6esjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWhTMGl2UnZfRzFXM1F1ck96R0gzbFBwNnlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wODRmNzEtOTI3YS00ZmE4LWJlYTUt Y2Q4N2VlOTcwZTZmLzEvTWhTMGl2UnZfRzFXM1F1ck96R0gzbFBwNnlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wODRmNzEtOTI3YS00ZmE4LWJlYTUtY2Q4N2VlOTcwZTZm LzEvTWhTMGl2UnZfRzFXM1F1ck96R0gzbFBwNnlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElO4WXHO DGRrAFOUtr3F6C8JBQm+hRkETUmRJ8ODogUbz4tsSpk2DvJKIq211J+4JOJkWM8J YpQFNMdBJV4RJydtqrQA2ISZqhoWmQL64ktxTjy6ObTr8jF73J89Qpml2JVXBitJ 4mMESwEeYxssDGkyKxKDL0DAG0gFVQp+ZrAkIcb+T7vwLsKne/3IeZYwgJSf+r40 zLaTDts4X9ipzt+ujdu3zGI96bhwtMYzWveI4vsGTL+ClBlPZDlKTIrK5nMciuhP 4FxnQa25/4wX6I6k7tbK0UGLqr7e4q/DRpLiEkKVFIQy1EapG1OvNNG+vFDA+EsI dYnmeJ4zWzNSaw== -----END CERTIFICATE-----Generated at Mon Dec 29 12:05:16 2025 by rpki-client