This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft File: mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft (raw, json) Hash identifier: wHttXelqi4dwmwRW0GN2Kc0JNLbNtjpOhGW5KwgH/HA= Subject key identifier: 3C:A2:0D:01:23:05:BD:AA:B2:FE:12:43:05:9E:28:5B:D0:F9:3B:13 Authority key identifier: 98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4 Certificate issuer: /CN=98752d18667dbff8422f97e1e3890e99381d09d4 Certificate serial: 019B5486ABAE81B8F4E67EB2640912225B5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft Manifest number: 082A Signing time: Thu 25 Dec 2025 08:01:10 +0000 Manifest this update: Thu 25 Dec 2025 08:01:10 +0000 Manifest next update: Fri 26 Dec 2025 08:01:10 +0000 Files and hashes: 1: eEuL986vzdl5Ue42JMTwEjrhHL8.roa (hash: sD06A9ioFyTX7xWQwS5R0iqBwd3oxcUKyjznK7FeoF8=) 2: mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl (hash: JOE5A1wqm9vO4fMkhYUpP9bV8c2iKnW8juqMa7ADfyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:86:ab:ae:81:b8:f4:e6:7e:b2:64:09:12:22:5b:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98752d18667dbff8422f97e1e3890e99381d09d4 Validity Not Before: Dec 25 08:01:10 2025 GMT Not After : Dec 26 08:01:10 2025 GMT Subject: CN=3ca20d012305bdaab2fe1243059e285bd0f93b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4f:07:f8:ae:fb:37:88:ae:58:54:6c:63:48: 92:ae:ff:84:14:eb:3f:3f:90:62:f4:a4:c7:5e:ae: 05:56:9d:bd:18:2c:09:65:78:7e:33:ff:5c:85:15: 4e:93:94:84:f1:71:ca:33:d5:76:54:b2:f4:b6:7a: e4:f1:68:74:f6:3e:0e:34:6e:d7:0e:26:a1:b2:8d: 7f:ea:d6:a7:ad:c5:19:92:da:a0:af:e2:c7:1e:77: a9:82:a3:cd:08:77:04:dd:2f:aa:1d:1a:53:12:51: 46:79:34:53:24:f7:d2:5f:19:4e:27:a7:82:f7:e1: c6:f0:c7:53:03:ef:8e:1e:6e:cf:fb:ba:e6:25:a2: 75:66:6a:4a:4e:1c:5d:75:7b:c6:5e:81:d1:de:c9: 3f:e6:9e:d3:f6:66:70:a2:70:e7:6b:7c:5e:8a:d2: fb:c8:63:97:40:6f:0e:db:53:87:c2:4a:65:2d:65: 73:b7:17:fc:49:b6:52:f8:20:cc:8c:1c:ed:bb:9d: 0b:02:bd:25:6c:6a:39:2e:1e:68:92:5f:48:ac:47: 58:f8:9c:87:3e:f9:7c:a4:c2:89:f3:db:0b:8a:31: 7f:bd:0b:0e:25:48:d2:8c:5e:07:5d:54:09:95:fd: 7a:2a:19:79:d3:ba:6c:1f:95:e7:67:1c:e2:ef:05: c5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A2:0D:01:23:05:BD:AA:B2:FE:12:43:05:9E:28:5B:D0:F9:3B:13 X509v3 Authority Key Identifier: keyid:98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:7b:89:d8:ee:ef:90:8f:56:2e:3f:8c:1e:e4:d2:a3:f7:f8: 46:27:44:c5:1a:ca:f4:ff:34:b9:b5:92:ce:5e:74:57:d1:5b: 6d:79:29:ef:3d:59:8c:75:09:42:5b:e0:05:72:42:b4:66:17: 1d:10:40:d0:70:3d:19:f5:a8:2b:33:a4:cc:8d:6e:27:30:ca: 78:f1:47:39:d6:af:ae:54:df:93:e9:a2:26:a6:bc:70:a8:5e: 7d:d1:c9:a6:6f:ba:df:82:89:ef:2e:48:de:5a:00:1a:84:ed: 22:00:42:00:bf:43:6f:b9:26:fb:90:2a:92:d6:54:8e:32:d6: 04:f3:4f:c5:2e:ed:92:4e:8f:33:ce:d8:ea:68:18:ac:19:8a: 5f:2d:77:cd:90:27:68:6f:14:a3:38:59:e1:84:2f:e1:c3:1e: 5f:aa:94:a7:e3:5b:a3:9b:b1:f5:4e:31:f3:b2:96:8d:28:11: ef:7a:72:44:a7:e0:32:2e:f1:84:fa:5d:bf:2f:75:8b:f6:c1: ad:cb:71:5f:88:7f:9b:83:3c:16:84:7c:4e:45:45:54:67:d4: a4:fc:27:36:07:c1:09:3e:fe:fd:78:bb:0a:f8:2b:3c:bc:35: 72:d5:f8:6e:5a:30:84:d7:3f:4f:8d:78:5d:eb:24:1d:0a:b2: f9:46:06:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUhquugbj05n6yZAkSIltfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NzUyZDE4NjY3ZGJmZjg0MjJmOTdlMWUzODkwZTk5Mzgx ZDA5ZDQwHhcNMjUxMjI1MDgwMTEwWhcNMjUxMjI2MDgwMTEwWjAzMTEwLwYDVQQD EygzY2EyMGQwMTIzMDViZGFhYjJmZTEyNDMwNTllMjg1YmQwZjkzYjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp08H+K77N4iuWFRsY0iSrv+EFOs/ P5Bi9KTHXq4FVp29GCwJZXh+M/9chRVOk5SE8XHKM9V2VLL0tnrk8Wh09j4ONG7X Diahso1/6tanrcUZktqgr+LHHnepgqPNCHcE3S+qHRpTElFGeTRTJPfSXxlOJ6eC 9+HG8MdTA++OHm7P+7rmJaJ1ZmpKThxddXvGXoHR3sk/5p7T9mZwonDna3xeitL7 yGOXQG8O21OHwkplLWVztxf8SbZS+CDMjBztu50LAr0lbGo5Lh5okl9IrEdY+JyH Pvl8pMKJ89sLijF/vQsOJUjSjF4HXVQJlf16Khl507psH5XnZxzi7wXF7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyiDQEjBb2qsv4SQwWeKFvQ+TsTMB8GA1UdIwQY MBaAFJh1LRhmfb/4Qi+X4eOJDpk4HQnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUhVdEdHWjl2X2hDTDVmaDQ0a09tVGdkQ2RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iZGM5ZDEtZTU5ZS00ZDFlLWJhODUt MTkwYWZhMmMxMzYxLzEvbUhVdEdHWjl2X2hDTDVmaDQ0a09tVGdkQ2RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iZGM5ZDEtZTU5ZS00ZDFlLWJhODUtMTkwYWZhMmMxMzYx LzEvbUhVdEdHWjl2X2hDTDVmaDQ0a09tVGdkQ2RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfXuJ2O7v kI9WLj+MHuTSo/f4RidExRrK9P80ubWSzl50V9FbbXkp7z1ZjHUJQlvgBXJCtGYX HRBA0HA9GfWoKzOkzI1uJzDKePFHOdavrlTfk+miJqa8cKhefdHJpm+634KJ7y5I 3loAGoTtIgBCAL9Db7km+5AqktZUjjLWBPNPxS7tkk6PM87Y6mgYrBmKXy13zZAn aG8UozhZ4YQv4cMeX6qUp+Nbo5ux9U4x87KWjSgR73pyRKfgMi7xhPpdvy91i/bB rctxX4h/m4M8FoR8TkVFVGfUpPwnNgfBCT7+/Xi7CvgrPLw1ctX4blowhNc/T414 XeskHQqy+UYGsw== -----END CERTIFICATE-----Generated at Thu Dec 25 11:13:41 2025 by rpki-client