This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft File: MHBrK5VYjXgONu-CqPVKMX1YaeI.mft (raw, json) Hash identifier: VT20rmDAWXK0I7t0rZiw9q3mQ/E95yAcFUr4SZFJtcQ= Subject key identifier: 0F:60:04:BA:0E:D3:2A:61:15:6B:09:BC:83:C4:1A:15:87:61:2C:1D Authority key identifier: 30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2 Certificate issuer: /CN=30706b2b95588d780e36ef82a8f54a317d5869e2 Certificate serial: 019B522A586C1F3DAB9730658E3C4735D651 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft Manifest number: 1796 Signing time: Wed 24 Dec 2025 21:01:05 +0000 Manifest this update: Wed 24 Dec 2025 21:01:05 +0000 Manifest next update: Thu 25 Dec 2025 21:01:05 +0000 Files and hashes: 1: CQJ6ohZvy-FZZPX13I33PQeWztA.roa (hash: nsudiYfFNFSH0ilCwJgap+Pn3CDxs0wAg3DCTTYrGPQ=) 2: MHBrK5VYjXgONu-CqPVKMX1YaeI.crl (hash: kdYnf6SBBiHRmmcYfmNpsRF1w2/d0wDojnHkbqDwfBg=) 3: qAyS6UgRnbonyCG8G2WAnc_nGD8.roa (hash: U80b7Joby5I0WdUM0LGoeNRmJLv7IvwDUZz80x7LHFc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:58:6c:1f:3d:ab:97:30:65:8e:3c:47:35:d6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30706b2b95588d780e36ef82a8f54a317d5869e2 Validity Not Before: Dec 24 21:01:05 2025 GMT Not After : Dec 25 21:01:05 2025 GMT Subject: CN=0f6004ba0ed32a61156b09bc83c41a1587612c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:83:9f:60:8e:e3:74:33:97:5b:b4:05:76:a9: a9:99:96:7b:37:19:10:09:d8:dc:7b:31:10:13:5d: eb:42:d4:b4:cf:43:d0:f7:58:9e:3b:34:8e:ac:f6: 09:2b:7f:e7:d8:cb:f2:f9:51:30:60:ea:29:8e:36: d5:02:ad:15:04:69:70:b8:11:61:5f:04:a3:e3:6c: 57:10:6f:30:f8:3e:d3:71:2d:5e:47:e6:7e:d8:55: d9:6e:26:69:23:6e:d2:4e:43:4c:06:61:52:ca:05: db:49:cb:74:65:1e:aa:ea:14:c5:95:7d:f5:e3:a7: e4:7c:69:fc:38:69:23:80:1a:41:c3:a8:14:13:a0: d7:c0:8f:1b:00:82:b5:ea:d5:41:c9:fb:b9:68:88: 09:e9:da:a6:35:8b:c4:5f:20:59:94:18:4d:8f:27: 79:f0:79:be:56:65:ef:01:c8:90:40:77:46:ac:89: 2c:9d:f0:9f:e3:37:5e:7b:3c:28:0b:35:f6:00:c6: 1c:f9:3a:78:84:68:76:ec:31:dc:cd:ad:d1:21:8e: 0d:93:53:5f:6b:21:4b:b4:bb:d1:f4:c3:de:23:2b: ca:52:6d:9c:1c:5c:a7:94:99:b3:cb:ed:b6:a3:ab: c0:17:47:4d:e3:3c:86:91:58:10:5a:2e:2f:c0:fc: 8f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:60:04:BA:0E:D3:2A:61:15:6B:09:BC:83:C4:1A:15:87:61:2C:1D X509v3 Authority Key Identifier: keyid:30:70:6B:2B:95:58:8D:78:0E:36:EF:82:A8:F5:4A:31:7D:58:69:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHBrK5VYjXgONu-CqPVKMX1YaeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/28debb-3a59-4ee1-bd37-84ed91ec1c65/1/MHBrK5VYjXgONu-CqPVKMX1YaeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:91:d6:6c:8f:7c:42:65:cc:63:f5:2a:f7:45:dd:f6:d8:9e: ad:1f:1b:69:cc:0f:b2:8b:df:82:31:41:35:75:74:d4:5f:82: ff:44:13:b8:1f:d9:af:c8:20:b1:a6:a1:40:3e:3f:fe:d5:8f: a2:ab:37:bb:d3:32:7f:87:72:b9:44:d7:dd:64:91:6f:5a:66: 27:4a:f3:17:ab:49:0e:75:71:7a:3d:ce:1f:ca:14:30:ee:5c: fc:ad:18:e5:50:be:9f:65:f8:53:44:45:12:3e:25:1a:e6:62: 5a:1e:77:19:e0:1b:d5:3c:3a:1c:dd:0b:bd:87:9b:07:48:20: d4:7e:78:cc:f5:a1:76:ed:69:11:cc:7b:e2:d0:56:7a:ac:a3: 20:8b:e8:0a:b6:ef:cb:1d:3f:78:52:15:c3:78:e5:94:cb:00: 81:d7:1f:b5:6d:70:50:23:f6:92:db:c5:76:25:0e:60:1b:a8: 86:0a:24:15:f6:9c:72:8a:0f:61:c0:87:ff:ad:25:8b:69:0f: 52:61:1a:1a:20:ba:2b:ed:66:2b:92:50:a2:cb:55:f3:de:e8: 8c:10:dc:74:61:af:16:77:d9:3b:bc:4c:7e:f1:8b:95:2d:ec: 8b:5d:d3:d2:77:97:d7:00:ec:c8:fa:8a:dc:75:df:7f:36:28: 12:09:9c:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKlhsHz2rlzBljjxHNdZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzA2YjJiOTU1ODhkNzgwZTM2ZWY4MmE4ZjU0YTMxN2Q1 ODY5ZTIwHhcNMjUxMjI0MjEwMTA1WhcNMjUxMjI1MjEwMTA1WjAzMTEwLwYDVQQD EygwZjYwMDRiYTBlZDMyYTYxMTU2YjA5YmM4M2M0MWExNTg3NjEyYzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oOfYI7jdDOXW7QFdqmpmZZ7NxkQ CdjcezEQE13rQtS0z0PQ91ieOzSOrPYJK3/n2Mvy+VEwYOopjjbVAq0VBGlwuBFh XwSj42xXEG8w+D7TcS1eR+Z+2FXZbiZpI27STkNMBmFSygXbSct0ZR6q6hTFlX31 46fkfGn8OGkjgBpBw6gUE6DXwI8bAIK16tVByfu5aIgJ6dqmNYvEXyBZlBhNjyd5 8Hm+VmXvAciQQHdGrIksnfCf4zdeezwoCzX2AMYc+Tp4hGh27DHcza3RIY4Nk1Nf ayFLtLvR9MPeIyvKUm2cHFynlJmzy+22o6vAF0dN4zyGkVgQWi4vwPyPswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA9gBLoO0yphFWsJvIPEGhWHYSwdMB8GA1UdIwQY MBaAFDBwayuVWI14Djbvgqj1SjF9WGniMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8yOGRlYmItM2E1OS00ZWUxLWJkMzct ODRlZDkxZWMxYzY1LzEvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8yOGRlYmItM2E1OS00ZWUxLWJkMzctODRlZDkxZWMxYzY1 LzEvTUhCcks1VllqWGdPTnUtQ3FQVktNWDFZYWVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaZHWbI98 QmXMY/Uq90Xd9tierR8bacwPsovfgjFBNXV01F+C/0QTuB/Zr8ggsaahQD4//tWP oqs3u9Myf4dyuUTX3WSRb1pmJ0rzF6tJDnVxej3OH8oUMO5c/K0Y5VC+n2X4U0RF Ej4lGuZiWh53GeAb1Tw6HN0LvYebB0gg1H54zPWhdu1pEcx74tBWeqyjIIvoCrbv yx0/eFIVw3jllMsAgdcftW1wUCP2ktvFdiUOYBuohgokFfaccooPYcCH/60li2kP UmEaGiC6K+1mK5JQostV897ojBDcdGGvFnfZO7xMfvGLlS3si13T0neX1wDsyPqK 3HXffzYoEgmcyw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:00:46 2025 by rpki-client