This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.mft File: MH3iES3L0Gv7x-h_O_8jcinS0XM.mft (raw, json) Hash identifier: e5ZT+Hr4aD8fh1oU6jVMH0SAYVeP7F+/Auw6TDBv9ck= Subject key identifier: 54:41:61:85:AA:73:CE:4A:84:E8:DC:43:CB:62:55:EA:F8:3C:5B:1A Authority key identifier: 30:7D:E2:11:2D:CB:D0:6B:FB:C7:E8:7F:3B:FF:23:72:29:D2:D1:73 Certificate issuer: /CN=307de2112dcbd06bfbc7e87f3bff237229d2d173 Certificate serial: 019B4926C3BB478C81A8E9822BE5640A5D85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH3iES3L0Gv7x-h_O_8jcinS0XM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.mft Manifest number: 02C2 Signing time: Tue 23 Dec 2025 03:00:35 +0000 Manifest this update: Tue 23 Dec 2025 03:00:35 +0000 Manifest next update: Wed 24 Dec 2025 03:00:35 +0000 Files and hashes: 1: MH3iES3L0Gv7x-h_O_8jcinS0XM.crl (hash: jNoyDe0Dg18PIga+vzrySljYGKhE/K3qLM5M+Oq2RC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.mft rsync://rpki.ripe.net/repository/DEFAULT/MH3iES3L0Gv7x-h_O_8jcinS0XM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:c3:bb:47:8c:81:a8:e9:82:2b:e5:64:0a:5d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307de2112dcbd06bfbc7e87f3bff237229d2d173 Validity Not Before: Dec 23 03:00:35 2025 GMT Not After : Dec 24 03:00:35 2025 GMT Subject: CN=54416185aa73ce4a84e8dc43cb6255eaf83c5b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:db:83:f9:0c:77:7e:24:0f:56:28:02:38:c5: e6:7b:05:67:83:20:25:8f:e6:39:53:dd:a6:b6:a6: 72:92:5d:44:64:5a:a1:3c:b5:c5:81:d7:ce:c0:f8: 3c:a9:f2:25:3c:e2:79:d0:af:94:f4:5d:87:6e:86: 7a:2b:4d:b1:cd:a0:48:d4:b0:ad:a3:ed:f0:a5:22: 97:93:25:2c:e4:29:ec:79:6e:c3:7b:c0:14:99:43: fe:0d:62:9d:cb:75:34:ac:e1:a0:63:92:a3:be:65: 75:fc:75:79:26:46:ce:41:17:1f:ed:e7:23:13:a5: 5d:a4:1e:9d:a7:bc:27:32:12:42:f0:2f:a1:8d:b2: e8:b8:88:41:a0:81:36:14:ab:46:58:14:69:25:75: 0a:cc:a5:a8:a9:35:40:9f:d3:20:a8:52:61:78:00: 9f:39:85:76:91:09:0d:fb:fc:d0:b4:01:0f:a7:3d: 7c:1b:14:0a:54:d8:6c:14:c2:08:18:0f:5b:6c:d1: 45:40:f1:52:0a:a1:98:6f:92:99:5d:d3:84:84:3c: f0:05:e9:45:70:4a:85:e7:7d:1f:ce:63:c8:4c:6a: 1f:d9:cf:0c:26:13:e3:8d:35:bc:5f:f7:77:07:ad: 9e:7f:da:0b:6b:2f:f2:35:9e:95:d0:1c:66:df:b9: 20:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:41:61:85:AA:73:CE:4A:84:E8:DC:43:CB:62:55:EA:F8:3C:5B:1A X509v3 Authority Key Identifier: keyid:30:7D:E2:11:2D:CB:D0:6B:FB:C7:E8:7F:3B:FF:23:72:29:D2:D1:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH3iES3L0Gv7x-h_O_8jcinS0XM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/aec877-59d5-42f9-967e-2732151b8e86/1/MH3iES3L0Gv7x-h_O_8jcinS0XM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:d8:8a:da:b5:a7:01:b9:91:d1:dc:ce:e2:cb:53:a7:a7:34: 2c:40:6a:82:ee:ab:48:a7:5b:90:40:7e:44:a7:7e:e0:60:dc: 56:a7:94:25:cb:ca:43:85:64:6d:b4:f9:4c:69:b2:6f:5f:89: 12:e6:4e:17:6e:8a:2d:ef:bf:9a:29:39:f2:17:6a:cd:cd:db: 47:11:5f:15:a4:b7:73:68:71:8f:3e:79:07:2f:31:d7:47:64: 1c:dc:33:3c:2d:cc:0f:74:f4:ab:e0:29:dc:69:27:20:a9:85: 0f:15:d1:d4:51:54:31:47:50:7b:d0:6a:e8:66:9a:4f:87:71: fc:f4:93:8d:62:d4:b2:a5:f9:7a:0c:c1:ab:3a:b3:44:8d:9d: e8:1c:69:30:d1:a6:8f:d4:d8:7b:d8:ee:96:72:28:7b:f9:03: 6a:be:3b:ae:d1:93:08:23:dc:41:a7:99:f9:ac:b5:71:83:73: df:17:69:4a:88:7a:b3:2d:16:47:7f:01:74:51:83:8e:54:ff: 08:71:26:b7:78:ea:85:a0:a8:56:08:35:d9:a0:fe:25:ba:7f: 4d:a9:f0:44:4c:42:65:70:78:07:35:43:49:70:d0:9e:a0:c7: 1b:f5:18:3b:d0:0a:ef:1e:98:97:fc:dc:db:0e:60:c2:55:c6: f7:b5:b9:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJsO7R4yBqOmCK+VkCl2FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2RlMjExMmRjYmQwNmJmYmM3ZTg3ZjNiZmYyMzcyMjlk MmQxNzMwHhcNMjUxMjIzMDMwMDM1WhcNMjUxMjI0MDMwMDM1WjAzMTEwLwYDVQQD Eyg1NDQxNjE4NWFhNzNjZTRhODRlOGRjNDNjYjYyNTVlYWY4M2M1YjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NuD+Qx3fiQPVigCOMXmewVngyAl j+Y5U92mtqZykl1EZFqhPLXFgdfOwPg8qfIlPOJ50K+U9F2HboZ6K02xzaBI1LCt o+3wpSKXkyUs5CnseW7De8AUmUP+DWKdy3U0rOGgY5KjvmV1/HV5JkbOQRcf7ecj E6VdpB6dp7wnMhJC8C+hjbLouIhBoIE2FKtGWBRpJXUKzKWoqTVAn9MgqFJheACf OYV2kQkN+/zQtAEPpz18GxQKVNhsFMIIGA9bbNFFQPFSCqGYb5KZXdOEhDzwBelF cEqF530fzmPITGof2c8MJhPjjTW8X/d3B62ef9oLay/yNZ6V0Bxm37kg4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRBYYWqc85KhOjcQ8tiVer4PFsaMB8GA1UdIwQY MBaAFDB94hEty9Br+8fofzv/I3Ip0tFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgzaUVTM0wwR3Y3eC1oX09fOGpjaW5TMFhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9hZWM4NzctNTlkNS00MmY5LTk2N2Ut MjczMjE1MWI4ZTg2LzEvTUgzaUVTM0wwR3Y3eC1oX09fOGpjaW5TMFhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9hZWM4NzctNTlkNS00MmY5LTk2N2UtMjczMjE1MWI4ZTg2 LzEvTUgzaUVTM0wwR3Y3eC1oX09fOGpjaW5TMFhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNiK2rWn AbmR0dzO4stTp6c0LEBqgu6rSKdbkEB+RKd+4GDcVqeUJcvKQ4VkbbT5TGmyb1+J EuZOF26KLe+/mik58hdqzc3bRxFfFaS3c2hxjz55By8x10dkHNwzPC3MD3T0q+Ap 3GknIKmFDxXR1FFUMUdQe9Bq6GaaT4dx/PSTjWLUsqX5egzBqzqzRI2d6BxpMNGm j9TYe9julnIoe/kDar47rtGTCCPcQaeZ+ay1cYNz3xdpSoh6sy0WR38BdFGDjlT/ CHEmt3jqhaCoVgg12aD+Jbp/TanwRExCZXB4BzVDSXDQnqDHG/UYO9AK7x6Yl/zc 2w5gwlXG97W5Nw== -----END CERTIFICATE-----Generated at Tue Dec 23 09:03:53 2025 by rpki-client