This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft File: mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft (raw, json) Hash identifier: nu6H36JwBO5uExgVb3s8oO1FYu3LFrOng8ZJMOpDDXY= Subject key identifier: 1B:A3:67:A5:27:05:FB:A9:23:63:A0:5F:1C:F9:B7:14:20:E3:91:35 Authority key identifier: 98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4 Certificate issuer: /CN=98752d18667dbff8422f97e1e3890e99381d09d4 Certificate serial: 019B4136C3C2891E0EBA7CB41EAB5C9CA9DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft Manifest number: 0820 Signing time: Sun 21 Dec 2025 14:01:06 +0000 Manifest this update: Sun 21 Dec 2025 14:01:06 +0000 Manifest next update: Mon 22 Dec 2025 14:01:06 +0000 Files and hashes: 1: eEuL986vzdl5Ue42JMTwEjrhHL8.roa (hash: sD06A9ioFyTX7xWQwS5R0iqBwd3oxcUKyjznK7FeoF8=) 2: mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl (hash: 846eKCYc5EG/7JpQ2HgOs6NvDuNRK3iOXJPAGN5IZUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:c3:c2:89:1e:0e:ba:7c:b4:1e:ab:5c:9c:a9:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98752d18667dbff8422f97e1e3890e99381d09d4 Validity Not Before: Dec 21 14:01:06 2025 GMT Not After : Dec 22 14:01:06 2025 GMT Subject: CN=1ba367a52705fba92363a05f1cf9b71420e39135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b8:66:a8:25:f8:32:eb:39:ad:fc:5f:a4:a9: b5:15:df:18:02:78:a4:c8:f9:1b:6e:42:ab:6d:e3: 04:07:a3:06:2a:fd:47:11:c0:53:93:b6:30:3b:60: d8:92:0e:1d:a7:fd:cf:28:cf:2e:b4:d9:5c:0f:d3: 42:4a:84:c2:99:2e:70:ae:e2:09:d0:d3:4c:8d:be: db:ab:c9:67:52:7f:a7:5c:d7:7a:06:86:f1:99:01: 90:33:ea:8c:8f:4b:5d:55:c5:12:3d:9c:4f:ef:14: 95:a8:63:f2:dd:3d:98:19:e6:42:e8:ab:9c:f1:3a: 6f:21:7d:3f:a2:cf:04:40:5c:8b:c1:dd:50:8e:2d: fd:b4:d7:e7:cc:12:06:90:b5:76:d0:58:c1:27:bc: 35:7b:c3:d4:45:7b:58:dd:4f:a0:30:80:38:ba:4a: 31:c9:ce:fe:ca:e3:e6:05:57:d8:0e:a5:c0:21:d9: 17:75:0b:46:16:75:90:24:06:54:61:ae:91:58:8c: a3:65:a7:ad:87:24:38:e7:87:52:96:eb:86:ad:ef: 02:76:76:57:e1:2e:49:10:49:e0:cd:02:64:6a:51: f5:78:7b:3a:91:eb:9c:a6:a5:9f:9b:ce:45:38:d3: 0d:d8:2e:80:c5:89:b4:52:97:8e:b9:ae:04:a7:58: 2c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A3:67:A5:27:05:FB:A9:23:63:A0:5F:1C:F9:B7:14:20:E3:91:35 X509v3 Authority Key Identifier: keyid:98:75:2D:18:66:7D:BF:F8:42:2F:97:E1:E3:89:0E:99:38:1D:09:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bdc9d1-e59e-4d1e-ba85-190afa2c1361/1/mHUtGGZ9v_hCL5fh44kOmTgdCdQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:50:e8:6f:8c:3f:01:f4:ef:c0:ab:c3:29:63:29:d2:d9:9b: 17:81:41:33:8d:09:ac:ff:d2:c1:4d:3b:ec:29:bc:be:a3:0d: cc:4d:11:06:09:06:df:48:8b:c9:2c:3c:cb:d6:21:df:72:78: f7:83:8e:d7:dd:37:92:db:c7:85:09:38:88:7d:23:0e:39:cc: e9:ec:d7:0a:91:16:c5:39:7a:ff:6e:23:48:05:a2:58:9a:6c: 71:7c:fd:c6:38:a6:57:a0:f0:f7:cb:51:35:bb:25:b8:4d:ec: 2f:84:6f:ce:af:d3:d0:0f:e0:93:fe:92:b2:23:fd:ab:83:83: eb:a0:99:96:62:26:d5:3a:88:e8:42:5f:c1:97:f3:93:30:84: 4b:fb:ac:96:99:c7:f7:fe:bb:45:41:a7:49:3f:6d:2f:06:be: ec:ae:04:21:e5:c3:f6:20:8c:11:ad:5b:35:04:ab:76:5f:a0: d3:ca:7d:4e:c5:fb:d2:12:5a:89:3c:83:4c:bf:04:22:7f:23: 79:b9:15:6b:d4:fd:13:f6:75:72:93:c3:4c:5f:66:5a:8d:cd: 49:d9:5e:db:76:ed:f8:70:0d:7f:30:bd:af:de:b4:00:02:71: 55:70:ef:8f:30:d2:08:5b:ab:ad:38:80:16:21:53:9d:dd:6b: a9:f4:41:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNsPCiR4Ouny0HqtcnKnfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NzUyZDE4NjY3ZGJmZjg0MjJmOTdlMWUzODkwZTk5Mzgx ZDA5ZDQwHhcNMjUxMjIxMTQwMTA2WhcNMjUxMjIyMTQwMTA2WjAzMTEwLwYDVQQD EygxYmEzNjdhNTI3MDVmYmE5MjM2M2EwNWYxY2Y5YjcxNDIwZTM5MTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbhmqCX4Mus5rfxfpKm1Fd8YAnik yPkbbkKrbeMEB6MGKv1HEcBTk7YwO2DYkg4dp/3PKM8utNlcD9NCSoTCmS5wruIJ 0NNMjb7bq8lnUn+nXNd6BobxmQGQM+qMj0tdVcUSPZxP7xSVqGPy3T2YGeZC6Kuc 8TpvIX0/os8EQFyLwd1Qji39tNfnzBIGkLV20FjBJ7w1e8PURXtY3U+gMIA4ukox yc7+yuPmBVfYDqXAIdkXdQtGFnWQJAZUYa6RWIyjZaethyQ454dSluuGre8CdnZX 4S5JEEngzQJkalH1eHs6keucpqWfm85FONMN2C6AxYm0UpeOua4Ep1gsjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBujZ6UnBfupI2OgXxz5txQg45E1MB8GA1UdIwQY MBaAFJh1LRhmfb/4Qi+X4eOJDpk4HQnUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUhVdEdHWjl2X2hDTDVmaDQ0a09tVGdkQ2RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iZGM5ZDEtZTU5ZS00ZDFlLWJhODUt MTkwYWZhMmMxMzYxLzEvbUhVdEdHWjl2X2hDTDVmaDQ0a09tVGdkQ2RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9iZGM5ZDEtZTU5ZS00ZDFlLWJhODUtMTkwYWZhMmMxMzYx LzEvbUhVdEdHWjl2X2hDTDVmaDQ0a09tVGdkQ2RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn1Dob4w/ AfTvwKvDKWMp0tmbF4FBM40JrP/SwU077Cm8vqMNzE0RBgkG30iLySw8y9Yh33J4 94OO1903ktvHhQk4iH0jDjnM6ezXCpEWxTl6/24jSAWiWJpscXz9xjimV6Dw98tR NbsluE3sL4Rvzq/T0A/gk/6SsiP9q4OD66CZlmIm1TqI6EJfwZfzkzCES/uslpnH 9/67RUGnST9tLwa+7K4EIeXD9iCMEa1bNQSrdl+g08p9TsX70hJaiTyDTL8EIn8j ebkVa9T9E/Z1cpPDTF9mWo3NSdle23bt+HANfzC9r960AAJxVXDvjzDSCFurrTiA FiFTnd1rqfRBjw== -----END CERTIFICATE-----Generated at Sun Dec 21 20:55:24 2025 by rpki-client