This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft File: mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft (raw, json) Hash identifier: AjQz2QuSAsOBZmHMV4eC+STf2zdiytfitYEAIjoqwWQ= Subject key identifier: F2:AB:77:39:B9:A9:B9:13:95:78:BF:CB:2B:5E:0F:4B:CB:31:53:69 Authority key identifier: 9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1 Certificate issuer: /CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1 Certificate serial: 019B601D502A6255DA498A55F86A9E6DBC64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft Manifest number: 15C2 Signing time: Sat 27 Dec 2025 14:01:32 +0000 Manifest this update: Sat 27 Dec 2025 14:01:32 +0000 Manifest next update: Sun 28 Dec 2025 14:01:32 +0000 Files and hashes: 1: 0aA52a05uApLKY3CXNmnXhwKrks.roa (hash: MeSVjVqbWBXWuoo0WV7N+n6x9g24v2DXI6O3Ubp3bGI=) 2: mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl (hash: 1J7RzvL6o5TP1umdUl2mwGojrTsZtqg1Dj2mGzDMnr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 08:42:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:1d:50:2a:62:55:da:49:8a:55:f8:6a:9e:6d:bc:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1a08692f228da0c41b317c6fa7cc5c3bec51e1 Validity Not Before: Dec 27 14:01:32 2025 GMT Not After : Dec 28 14:01:32 2025 GMT Subject: CN=f2ab7739b9a9b9139578bfcb2b5e0f4bcb315369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ae:91:6f:b8:98:7b:63:4e:94:97:ff:fc:2d: 70:e9:00:3d:a3:06:3c:c4:6b:6d:31:e8:85:08:d6: 29:e4:78:15:15:5b:31:d6:e2:64:7f:07:33:30:2b: 71:9e:51:2a:bf:f4:14:75:d3:21:c9:4f:59:19:d7: 9f:47:09:e7:1d:fb:60:86:49:b8:d8:49:f4:33:7a: 13:1c:ac:8a:16:8f:64:f4:42:cb:45:ac:ff:53:22: 43:4a:4b:c1:b6:2a:fd:e7:10:0c:ec:84:5e:f5:50: e2:27:b1:ea:3e:e9:53:c4:58:37:d9:4a:69:d7:2a: 7f:13:2a:52:bd:d8:af:8b:61:42:d7:cb:32:a1:76: 24:da:4b:4a:bd:a8:ff:e2:63:ee:a2:22:6d:24:e0: 31:ff:23:9e:07:a9:2e:ba:8b:7f:ba:6e:34:9c:57: 13:70:c2:bc:83:02:b9:86:54:bb:27:a5:62:81:4e: ef:61:53:42:37:34:e1:31:64:28:49:28:6c:a9:cc: cb:d0:29:e2:ac:ba:45:64:a1:ab:f8:04:11:c5:29: 9e:e6:31:1b:09:01:76:78:82:fc:32:02:3e:a2:12: 4c:f3:7a:5a:2d:19:0a:0f:77:ae:2f:b5:ef:3e:74: 21:81:14:dc:96:4f:37:2f:3c:c6:49:eb:08:80:91: 8f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:AB:77:39:B9:A9:B9:13:95:78:BF:CB:2B:5E:0F:4B:CB:31:53:69 X509v3 Authority Key Identifier: keyid:9A:1A:08:69:2F:22:8D:A0:C4:1B:31:7C:6F:A7:CC:5C:3B:EC:51:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhoIaS8ijaDEGzF8b6fMXDvsUeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d0fad1-b8b1-4960-b67f-02edf08f7cf8/1/mhoIaS8ijaDEGzF8b6fMXDvsUeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:bd:7e:7a:06:2b:4b:a8:e3:a3:8d:30:ad:fe:88:5a:be:23: a1:0d:46:89:c7:a3:c3:1c:86:f9:4c:b6:26:d2:98:af:06:61: eb:aa:a3:0e:5c:35:8f:f2:e7:fb:25:7b:e9:cf:5e:bd:f9:51: 70:19:8e:91:08:a8:c4:44:8b:c8:bf:86:af:41:0f:9b:31:03: 95:03:e9:70:07:8f:d4:39:ba:1f:eb:f3:56:7c:07:44:d4:ec: 81:e0:36:b6:1d:21:38:8b:ec:b8:ba:b0:c9:57:63:6a:be:09: 42:3b:2f:e0:46:89:16:6b:71:c5:96:0b:13:ad:9a:8d:ae:da: 09:05:16:e6:91:b8:ad:ef:e8:c9:b9:4f:d5:96:08:e7:b6:f2: a1:ea:55:7d:e0:b3:01:96:00:37:dc:66:7c:55:1b:f4:ee:c8: 98:cd:36:e6:cc:7a:e0:cb:cb:68:6c:81:a5:f8:45:f4:5c:1d: 85:6f:8b:36:d9:01:cc:c4:ce:d9:7a:fa:31:7a:5f:6a:41:82: 78:76:b4:54:38:44:85:86:48:bc:8e:76:f6:24:f0:b3:b0:6d: 06:15:62:bf:5f:e0:fe:0f:fb:42:8c:83:85:76:58:70:98:59: 75:5f:97:8f:ba:96:da:65:07:e7:32:bc:58:62:58:3b:34:af: 29:ce:53:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgHVAqYlXaSYpV+GqebbxkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWEwODY5MmYyMjhkYTBjNDFiMzE3YzZmYTdjYzVjM2Jl YzUxZTEwHhcNMjUxMjI3MTQwMTMyWhcNMjUxMjI4MTQwMTMyWjAzMTEwLwYDVQQD EyhmMmFiNzczOWI5YTliOTEzOTU3OGJmY2IyYjVlMGY0YmNiMzE1MzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8a6Rb7iYe2NOlJf//C1w6QA9owY8 xGttMeiFCNYp5HgVFVsx1uJkfwczMCtxnlEqv/QUddMhyU9ZGdefRwnnHftghkm4 2En0M3oTHKyKFo9k9ELLRaz/UyJDSkvBtir95xAM7IRe9VDiJ7HqPulTxFg32Upp 1yp/EypSvdivi2FC18syoXYk2ktKvaj/4mPuoiJtJOAx/yOeB6kuuot/um40nFcT cMK8gwK5hlS7J6VigU7vYVNCNzThMWQoSShsqczL0CnirLpFZKGr+AQRxSme5jEb CQF2eIL8MgI+ohJM83paLRkKD3euL7XvPnQhgRTclk83LzzGSesIgJGPVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKrdzm5qbkTlXi/yyteD0vLMVNpMB8GA1UdIwQY MBaAFJoaCGkvIo2gxBsxfG+nzFw77FHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWhvSWFTOGlqYURFR3pGOGI2Zk1YRHZzVWVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kMGZhZDEtYjhiMS00OTYwLWI2N2Yt MDJlZGYwOGY3Y2Y4LzEvbWhvSWFTOGlqYURFR3pGOGI2Zk1YRHZzVWVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kMGZhZDEtYjhiMS00OTYwLWI2N2YtMDJlZGYwOGY3Y2Y4 LzEvbWhvSWFTOGlqYURFR3pGOGI2Zk1YRHZzVWVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwr1+egYr S6jjo40wrf6IWr4joQ1GicejwxyG+Uy2JtKYrwZh66qjDlw1j/Ln+yV76c9evflR cBmOkQioxESLyL+Gr0EPmzEDlQPpcAeP1Dm6H+vzVnwHRNTsgeA2th0hOIvsuLqw yVdjar4JQjsv4EaJFmtxxZYLE62aja7aCQUW5pG4re/oyblP1ZYI57byoepVfeCz AZYAN9xmfFUb9O7ImM025sx64MvLaGyBpfhF9FwdhW+LNtkBzMTO2Xr6MXpfakGC eHa0VDhEhYZIvI529iTws7BtBhViv1/g/g/7QoyDhXZYcJhZdV+Xj7qW2mUH5zK8 WGJYOzSvKc5Tfw== -----END CERTIFICATE-----Generated at Sat Dec 27 15:55:54 2025 by rpki-client