This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft File: MNimSQPPohc3l0nxi3_c6h2rbbQ.mft (raw, json) Hash identifier: 3CQk9ChAESiVgy0d7ToVY4urNDK+X8w7YcEZjS0wbZU= Subject key identifier: 8A:F5:52:EC:76:47:82:2B:2C:31:8B:96:4F:C2:30:A3:CF:78:B8:A0 Authority key identifier: 30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4 Certificate issuer: /CN=30d8a64903cfa217379749f18b7fdcea1dab6db4 Certificate serial: 019B24E3C21DC1EB8B06A46536015EE6F011 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft Manifest number: 1782 Signing time: Tue 16 Dec 2025 02:01:04 +0000 Manifest this update: Tue 16 Dec 2025 02:01:04 +0000 Manifest next update: Wed 17 Dec 2025 02:01:04 +0000 Files and hashes: 1: 7tqusxSTTaYm-d1rbKcHDAtiZgc.asa (hash: FgdctiKXNvuhER2znKHVl/Vbm4e2Gpoibumq/oj9JPU=) 2: CqIfBd5YIIh4t0c6bt4NkpiXtoI.roa (hash: vcWmbcMAYQNlXeSuizcIlnlvUxtUyI3AmiP87aetGSc=) 3: MNimSQPPohc3l0nxi3_c6h2rbbQ.crl (hash: u1bz7ay6+5fa5tH23OtuWRfSY4EAYaOZQgoi0e05X8A=) 4: inI6eQZGlQ6HdC8cwcXFzO9o8Pw.roa (hash: muPjFa2s2ADU7hfNJnnupf4kCRBhE43KBzR4OF0fCoE=) 5: q373nxjkgYoatUUnQ4t03LHPP7I.roa (hash: uM8UOVBmhuPT8FIqg0Hi1bXmnpOXQYRW3BE2uJZF/Ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:c2:1d:c1:eb:8b:06:a4:65:36:01:5e:e6:f0:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d8a64903cfa217379749f18b7fdcea1dab6db4 Validity Not Before: Dec 16 02:01:04 2025 GMT Not After : Dec 17 02:01:04 2025 GMT Subject: CN=8af552ec7647822b2c318b964fc230a3cf78b8a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:20:86:5f:0e:93:7d:4b:3a:1a:35:62:03:3e: cd:fd:83:56:75:1e:cf:36:e9:fc:28:10:35:8c:1a: 09:40:ef:bd:0b:7e:bb:13:fb:a3:2f:a4:60:b8:03: 25:07:6c:ee:08:1c:73:8c:55:1a:50:2a:8a:9b:8a: 71:bb:73:ba:11:bb:96:48:0c:07:8d:a9:b1:28:91: a1:b4:81:e1:6a:54:dd:a4:66:b7:78:9b:ac:82:63: 0d:aa:00:76:60:bc:b8:ff:94:f9:6d:4b:65:bd:90: b5:4a:4d:f0:52:fe:6e:6d:38:e9:e4:ce:29:f4:51: 53:a2:a0:52:a7:1a:c3:62:ee:70:04:da:5f:65:cf: cb:40:39:1c:bb:7c:6c:ee:7e:32:49:9a:fa:8b:8c: 1d:7c:d9:ce:5e:60:57:98:af:80:3d:65:fd:ed:df: 1b:48:c9:f5:c1:42:31:52:7e:3f:8c:1a:df:a3:3e: ac:b0:56:6c:e6:41:90:c0:88:2e:d0:53:9c:3a:7b: a7:af:fa:0c:6c:55:78:a9:69:0d:07:35:a6:bc:d2: 00:9a:c4:fd:1c:b4:71:0d:2e:70:3f:48:d4:ef:ce: 70:32:a8:be:ae:fd:80:25:63:a2:95:fe:2e:15:a3: 4d:13:d6:91:14:04:2f:b0:5d:b3:88:9e:27:17:8a: 4f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F5:52:EC:76:47:82:2B:2C:31:8B:96:4F:C2:30:A3:CF:78:B8:A0 X509v3 Authority Key Identifier: keyid:30:D8:A6:49:03:CF:A2:17:37:97:49:F1:8B:7F:DC:EA:1D:AB:6D:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNimSQPPohc3l0nxi3_c6h2rbbQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b7a249-1552-4f10-b008-1f66faab4ab5/1/MNimSQPPohc3l0nxi3_c6h2rbbQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:f2:a0:e6:f9:47:8e:e8:88:ea:00:34:a7:d9:e3:cc:3a:cb: f5:ed:80:c3:4a:95:f5:f5:a5:65:12:14:65:5f:02:cd:47:52: 34:48:cf:1c:a0:00:4e:2d:df:4a:74:77:72:eb:0a:71:15:db: 77:e9:f9:8f:cf:5d:73:ac:79:73:87:75:ec:31:2f:25:7f:3b: 97:11:ec:5f:1b:ad:11:f9:35:f2:f5:72:cb:cf:4c:a5:bf:66: 01:4d:32:0a:62:5c:17:b3:24:8f:ba:ca:09:c3:45:8d:fe:0d: 91:ef:85:c5:df:9c:c5:ab:ce:39:a6:2c:52:11:9b:45:94:11: 95:1e:82:6e:54:38:46:3b:0b:c4:95:79:a6:fb:b6:2f:b5:91: cb:51:f2:34:87:26:5d:29:7d:c2:61:d8:87:7a:e9:2c:29:9b: 30:fd:03:06:20:07:d7:01:fa:9a:0f:09:84:9d:d7:c3:c3:ba: e3:e4:9c:96:e8:d6:2e:fc:7a:1f:92:e1:60:a2:42:b0:06:d4: 1c:9d:03:ab:ec:0e:9e:7b:2b:26:87:e1:28:91:e2:49:38:9b: 4e:d1:9d:f8:64:84:9a:e4:e1:84:23:d6:21:45:f8:97:5d:38: ed:a1:64:c9:82:59:1f:65:46:1a:b2:e7:d5:1b:22:d2:2a:bd: 52:7d:18:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk48IdweuLBqRlNgFe5vARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZDhhNjQ5MDNjZmEyMTczNzk3NDlmMThiN2ZkY2VhMWRh YjZkYjQwHhcNMjUxMjE2MDIwMTA0WhcNMjUxMjE3MDIwMTA0WjAzMTEwLwYDVQQD Eyg4YWY1NTJlYzc2NDc4MjJiMmMzMThiOTY0ZmMyMzBhM2NmNzhiOGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyCGXw6TfUs6GjViAz7N/YNWdR7P Nun8KBA1jBoJQO+9C367E/ujL6RguAMlB2zuCBxzjFUaUCqKm4pxu3O6EbuWSAwH jamxKJGhtIHhalTdpGa3eJusgmMNqgB2YLy4/5T5bUtlvZC1Sk3wUv5ubTjp5M4p 9FFToqBSpxrDYu5wBNpfZc/LQDkcu3xs7n4ySZr6i4wdfNnOXmBXmK+APWX97d8b SMn1wUIxUn4/jBrfoz6ssFZs5kGQwIgu0FOcOnunr/oMbFV4qWkNBzWmvNIAmsT9 HLRxDS5wP0jU785wMqi+rv2AJWOilf4uFaNNE9aRFAQvsF2ziJ4nF4pPlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIr1Uux2R4IrLDGLlk/CMKPPeLigMB8GA1UdIwQY MBaAFDDYpkkDz6IXN5dJ8Yt/3Oodq220MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgt MWY2NmZhYWI0YWI1LzEvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9iN2EyNDktMTU1Mi00ZjEwLWIwMDgtMWY2NmZhYWI0YWI1 LzEvTU5pbVNRUFBvaGMzbDBueGkzX2M2aDJyYmJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuPKg5vlH juiI6gA0p9njzDrL9e2Aw0qV9fWlZRIUZV8CzUdSNEjPHKAATi3fSnR3cusKcRXb d+n5j89dc6x5c4d17DEvJX87lxHsXxutEfk18vVyy89Mpb9mAU0yCmJcF7Mkj7rK CcNFjf4Nke+Fxd+cxavOOaYsUhGbRZQRlR6CblQ4RjsLxJV5pvu2L7WRy1HyNIcm XSl9wmHYh3rpLCmbMP0DBiAH1wH6mg8JhJ3Xw8O64+SclujWLvx6H5LhYKJCsAbU HJ0Dq+wOnnsrJofhKJHiSTibTtGd+GSEmuThhCPWIUX4l1047aFkyYJZH2VGGrLn 1Rsi0iq9Un0Yzg== -----END CERTIFICATE-----Generated at Tue Dec 16 12:50:09 2025 by rpki-client