This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft File: MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json) Hash identifier: 4RF5gMBZy4StOmCP0GHlZtAXBmRMAL2ZruDXmiJ2MLI= Subject key identifier: 02:57:CC:1B:69:B8:BF:4C:2F:0D:9C:1D:E2:30:9D:22:2C:93:17:D4 Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e Certificate serial: 019B3CEBFA8E4B744D519EF64DDFC39529FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft Manifest number: 0BE7 Signing time: Sat 20 Dec 2025 18:00:56 +0000 Manifest this update: Sat 20 Dec 2025 18:00:56 +0000 Manifest next update: Sun 21 Dec 2025 18:00:56 +0000 Files and hashes: 1: Ly1MWymIvXOCybb36lr4yOkjsU8.roa (hash: VpBFbk8tqcALSJaD09pM7y3kJlzVLbs+HEbBlDB9T94=) 2: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: xn0sOIisIsQnY5FFqWnNe8KOw28Naf7546Yv0R8zymU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:fa:8e:4b:74:4d:51:9e:f6:4d:df:c3:95:29:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e Validity Not Before: Dec 20 18:00:56 2025 GMT Not After : Dec 21 18:00:56 2025 GMT Subject: CN=0257cc1b69b8bf4c2f0d9c1de2309d222c9317d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1c:d2:df:3f:86:d7:20:fb:8f:6e:84:48:da: 6d:47:d0:5e:a9:84:59:3d:b0:59:0a:12:2b:d1:3c: 6a:8c:53:a7:b2:49:7b:85:a7:a1:32:5d:30:8f:8b: b4:3f:e6:39:37:1c:fe:55:93:cf:fe:b6:ad:de:a2: dc:00:2f:66:66:78:fd:85:74:83:ec:5b:9c:25:8f: 91:c3:70:12:c8:f3:d7:6f:9d:33:4d:f8:b8:4d:dc: a3:77:1b:f0:57:3a:71:18:df:db:e4:ab:d2:4f:d4: 9c:91:f9:ac:b2:9d:05:e3:66:da:42:2c:ff:a4:40: 9a:09:24:85:83:4b:47:7d:83:af:6a:a3:55:d0:c0: db:e8:fc:97:ff:2a:70:70:85:4f:c6:45:cd:56:48: 63:11:86:0d:fb:32:83:04:9c:1e:07:5c:31:99:79: 84:70:c8:9c:86:ef:6a:d0:f1:33:f6:2c:92:43:8c: 45:66:c1:96:ff:05:8d:9e:e3:2b:5d:12:0b:57:8c: d4:93:2e:96:e4:b4:ec:c5:0e:b1:15:de:5f:39:66: e3:39:3b:08:d0:3d:b4:36:1d:68:49:79:b2:2a:a5: ca:ec:4e:ec:55:b0:ab:be:2a:b6:66:87:f0:ff:7c: 59:6f:1b:0c:47:d5:c8:f2:07:d3:ce:45:07:43:44: 64:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:57:CC:1B:69:B8:BF:4C:2F:0D:9C:1D:E2:30:9D:22:2C:93:17:D4 X509v3 Authority Key Identifier: keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:27:d4:6e:a6:12:5b:a3:6b:a1:3f:f4:0d:1d:e2:4d:c7:e4: 5a:f7:c9:64:43:90:49:d6:8d:c9:4f:e2:30:85:b4:01:ee:7b: 18:80:4d:73:94:0c:c2:25:73:b9:ab:9c:cc:3c:39:f3:fe:78: 4c:3f:71:4c:3a:31:c2:e2:95:90:43:5d:f6:6c:76:ae:d5:d3: e4:f1:34:52:92:dc:27:9b:8e:d2:80:98:6d:46:7e:71:ab:89: 4a:fc:21:e2:3c:45:72:98:bb:53:13:52:b3:30:17:68:9f:4d: 7d:d1:ad:f0:00:32:98:e9:6f:3e:e8:d1:ea:91:c2:df:45:c3: 6d:fb:8a:62:2a:77:57:8d:a9:1f:37:fd:21:3e:05:e2:13:c8: 18:ff:db:80:2d:f4:85:09:97:15:e9:d9:8d:8e:0d:ff:89:5e: fc:3c:fd:4a:67:c4:b6:ef:2e:b4:89:7f:25:d4:e4:7c:11:39: 39:17:cc:98:ef:32:2e:b7:14:b3:17:4c:88:5a:b1:f8:50:c1: 77:e7:79:2b:1b:d9:a4:ef:95:df:e9:0f:de:29:79:31:3c:32: e6:35:9d:eb:68:b2:92:0c:37:2b:4b:e9:ae:cd:c0:ee:af:15: 70:10:36:44:94:85:ac:0c:e2:9a:3f:c7:e7:ce:e3:e6:cf:45: 4a:1a:2f:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86/qOS3RNUZ72Td/DlSn6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2EwMzk1MDJkNDZhNmI5OTA5MTEwY2UyYWIxMzk2ODc3 YmQwOGUwHhcNMjUxMjIwMTgwMDU2WhcNMjUxMjIxMTgwMDU2WjAzMTEwLwYDVQQD EygwMjU3Y2MxYjY5YjhiZjRjMmYwZDljMWRlMjMwOWQyMjJjOTMxN2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohzS3z+G1yD7j26ESNptR9BeqYRZ PbBZChIr0TxqjFOnskl7haehMl0wj4u0P+Y5Nxz+VZPP/rat3qLcAC9mZnj9hXSD 7FucJY+Rw3ASyPPXb50zTfi4TdyjdxvwVzpxGN/b5KvST9Sckfmssp0F42baQiz/ pECaCSSFg0tHfYOvaqNV0MDb6PyX/ypwcIVPxkXNVkhjEYYN+zKDBJweB1wxmXmE cMichu9q0PEz9iySQ4xFZsGW/wWNnuMrXRILV4zUky6W5LTsxQ6xFd5fOWbjOTsI 0D20Nh1oSXmyKqXK7E7sVbCrviq2Zofw/3xZbxsMR9XI8gfTzkUHQ0RklQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJXzBtpuL9MLw2cHeIwnSIskxfUMB8GA1UdIwQY MBaAFDB6A5UC1GprmQkRDOKrE5aHe9COMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhvRGxRTFVhbXVaQ1JFTTRxc1Rsb2Q3MEk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kNTEyMTEtZDBiYi00YTU3LTkzOTAt Y2UyYTQ5NmZlZTg2LzEvTUhvRGxRTFVhbXVaQ1JFTTRxc1Rsb2Q3MEk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kNTEyMTEtZDBiYi00YTU3LTkzOTAtY2UyYTQ5NmZlZTg2 LzEvTUhvRGxRTFVhbXVaQ1JFTTRxc1Rsb2Q3MEk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASifUbqYS W6NroT/0DR3iTcfkWvfJZEOQSdaNyU/iMIW0Ae57GIBNc5QMwiVzuauczDw58/54 TD9xTDoxwuKVkENd9mx2rtXT5PE0UpLcJ5uO0oCYbUZ+cauJSvwh4jxFcpi7UxNS szAXaJ9NfdGt8AAymOlvPujR6pHC30XDbfuKYip3V42pHzf9IT4F4hPIGP/bgC30 hQmXFenZjY4N/4le/Dz9SmfEtu8utIl/JdTkfBE5ORfMmO8yLrcUsxdMiFqx+FDB d+d5KxvZpO+V3+kP3il5MTwy5jWd62iykgw3K0vprs3A7q8VcBA2RJSFrAzimj/H 587j5s9FShovTQ== -----END CERTIFICATE-----Generated at Sun Dec 21 03:24:31 2025 by rpki-client