This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft File: MHLNXfcyOVerh8B_XN0VyR7_yNU.mft (raw, json) Hash identifier: fba0rGF65vQG8+36gdqdcaHdEBAauof1Oj4MrFWP4Og= Subject key identifier: B2:3E:14:60:91:18:F1:AC:98:29:28:A7:60:38:8C:FA:8C:7B:C0:56 Authority key identifier: 30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5 Certificate issuer: /CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5 Certificate serial: 019B71EB957FF46DDA1B21975B3AD8998A42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft Manifest number: 0496 Signing time: Wed 31 Dec 2025 01:00:22 +0000 Manifest this update: Wed 31 Dec 2025 01:00:22 +0000 Manifest next update: Thu 01 Jan 2026 01:00:22 +0000 Files and hashes: 1: 1-j19Lm_8LkOQ7sD4oDHLKYSPWic.roa (hash: AyGIDkmO70ikRHTGZ5Nr8McTMa0GSHdwM5XnVEHxeLU=) 2: 4K24stKfDp1H3GNlLGKVCADGEk8.roa (hash: UPReXxcNMcYoyQCbGFi6FE4Fmh9h/aMYNiw52x0SkBo=) 3: MHLNXfcyOVerh8B_XN0VyR7_yNU.crl (hash: Qm0YbhUNAQ+FloPOHbj0UI9aZZAstl4ymfwUK2NR+lo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 23:41:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:eb:95:7f:f4:6d:da:1b:21:97:5b:3a:d8:99:8a:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3072cd5df7323957ab87c07f5cdd15c91effc8d5 Validity Not Before: Dec 31 01:00:22 2025 GMT Not After : Jan 1 01:00:22 2026 GMT Subject: CN=b23e14609118f1ac982928a760388cfa8c7bc056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8d:40:de:33:b7:a5:3a:55:c3:a1:fb:28:c4: e7:0e:bd:e0:7a:8d:d5:e8:9d:db:a4:59:8d:89:cf: 9f:0c:d0:43:97:d6:d2:40:89:e0:71:b7:65:c8:d0: 44:7a:19:de:76:33:46:a4:c5:09:18:d8:2c:ba:ab: d5:7c:41:12:b0:de:4c:8e:0e:45:90:ef:ae:3d:a3: 52:dc:f1:9c:51:69:af:05:96:9c:ec:cf:3c:1f:61: ee:4f:76:f3:d2:0c:b4:62:98:aa:ad:56:69:74:ce: 2e:fb:f1:e5:08:e6:76:78:dc:e4:fa:8e:0c:8a:8b: 10:57:c2:47:e5:62:c9:e5:b9:7f:7f:6d:16:f1:e0: 1b:c6:01:cf:e6:97:d6:6d:be:bc:7e:bf:9e:57:6b: b5:0b:ae:ff:1c:8f:67:9c:20:fe:22:a2:6d:a6:46: 6b:e4:11:e2:7c:0f:9a:a4:41:f3:ed:a0:32:99:88: e3:b3:e7:5e:7c:4b:6e:b6:4f:5d:43:80:a7:26:e7: 68:b1:c8:2c:44:a0:c9:8f:59:77:82:50:8c:56:c3: 0b:4c:24:dc:b4:d4:8a:c2:a4:ac:91:8e:71:e5:2a: 8f:a1:a1:94:0c:a9:16:25:e1:ec:1a:25:b4:28:8f: 6a:89:cf:6a:6f:5f:67:1f:65:25:f8:21:2e:b8:21: 2d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:3E:14:60:91:18:F1:AC:98:29:28:A7:60:38:8C:FA:8C:7B:C0:56 X509v3 Authority Key Identifier: keyid:30:72:CD:5D:F7:32:39:57:AB:87:C0:7F:5C:DD:15:C9:1E:FF:C8:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHLNXfcyOVerh8B_XN0VyR7_yNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/33b186-ef42-4517-b32f-5e974377600c/1/MHLNXfcyOVerh8B_XN0VyR7_yNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:df:2f:75:05:66:c7:53:c7:fc:ad:a6:a2:4b:b7:2e:4b:9b: 6f:e5:b8:d6:e6:52:1a:16:4e:9c:94:58:8c:d8:df:fb:1f:34: 0c:db:52:05:a7:5e:8d:dd:24:bc:a4:39:41:21:49:82:9b:8c: f3:22:2c:22:b2:5d:57:15:c8:6c:14:89:22:59:ff:90:a0:59: 7d:23:25:8c:f1:c4:97:6b:ec:53:74:be:31:55:11:15:60:7b: 83:cd:52:16:6c:45:47:44:7a:1d:4d:72:df:aa:55:e7:a4:b4: 7b:ce:7f:14:c4:e3:32:10:b2:f8:ce:3d:ea:ce:6c:4c:df:2d: 72:e7:06:45:ab:e2:a5:47:ef:a0:33:e1:8a:d9:b2:d9:8d:3d: 20:6c:97:1e:a8:6a:66:f1:77:92:4f:ae:bd:08:0c:26:f4:03: 25:e9:b5:0d:79:85:06:2b:44:63:ef:e0:f8:3f:db:3e:f8:43: 62:9d:03:b9:30:8e:38:39:13:90:24:2d:f6:a7:0f:a7:25:1d: 11:c8:f1:44:b4:11:f2:54:cf:0a:3a:0d:fc:fb:24:f0:62:4b: 63:22:ea:24:67:d5:85:d4:eb:f4:ed:46:f6:6e:c5:a4:13:10: 25:b6:0b:33:06:f4:40:65:2f:bd:e1:97:46:ab:dd:8f:70:a6: 7e:12:e5:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtx65V/9G3aGyGXWzrYmYpCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwNzJjZDVkZjczMjM5NTdhYjg3YzA3ZjVjZGQxNWM5MWVm ZmM4ZDUwHhcNMjUxMjMxMDEwMDIyWhcNMjYwMTAxMDEwMDIyWjAzMTEwLwYDVQQD EyhiMjNlMTQ2MDkxMThmMWFjOTgyOTI4YTc2MDM4OGNmYThjN2JjMDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o1A3jO3pTpVw6H7KMTnDr3geo3V 6J3bpFmNic+fDNBDl9bSQIngcbdlyNBEehnedjNGpMUJGNgsuqvVfEESsN5Mjg5F kO+uPaNS3PGcUWmvBZac7M88H2HuT3bz0gy0YpiqrVZpdM4u+/HlCOZ2eNzk+o4M iosQV8JH5WLJ5bl/f20W8eAbxgHP5pfWbb68fr+eV2u1C67/HI9nnCD+IqJtpkZr 5BHifA+apEHz7aAymYjjs+defEtutk9dQ4CnJudoscgsRKDJj1l3glCMVsMLTCTc tNSKwqSskY5x5SqPoaGUDKkWJeHsGiW0KI9qic9qb19nH2Ul+CEuuCEtzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLI+FGCRGPGsmCkop2A4jPqMe8BWMB8GA1UdIwQY MBaAFDByzV33MjlXq4fAf1zdFcke/8jVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYt NWU5NzQzNzc2MDBjLzEvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8zM2IxODYtZWY0Mi00NTE3LWIzMmYtNWU5NzQzNzc2MDBj LzEvTUhMTlhmY3lPVmVyaDhCX1hOMFZ5UjdfeU5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMt8vdQVm x1PH/K2moku3Lkubb+W41uZSGhZOnJRYjNjf+x80DNtSBadejd0kvKQ5QSFJgpuM 8yIsIrJdVxXIbBSJIln/kKBZfSMljPHEl2vsU3S+MVURFWB7g81SFmxFR0R6HU1y 36pV56S0e85/FMTjMhCy+M496s5sTN8tcucGRavipUfvoDPhitmy2Y09IGyXHqhq ZvF3kk+uvQgMJvQDJem1DXmFBitEY+/g+D/bPvhDYp0DuTCOODkTkCQt9qcPpyUd EcjxRLQR8lTPCjoN/Psk8GJLYyLqJGfVhdTr9O1G9m7FpBMQJbYLMwb0QGUvveGX Rqvdj3CmfhLlJA== -----END CERTIFICATE-----Generated at Wed Dec 31 05:56:54 2025 by rpki-client