This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft File: mnZNjTrnJbReDUgH9hLsPR8qP08.mft (raw, json) Hash identifier: YXEy3KQ6M7DpLSz90LPOgtWLcZ8aDyPLC988ZdQOP3Y= Subject key identifier: 3D:71:DD:27:A5:B6:FA:60:2A:61:73:F8:17:C2:28:0A:54:E2:AB:8B Authority key identifier: 9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F Certificate issuer: /CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f Certificate serial: 019B35328117FA4AFF54E326B8E46BCB3829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 06:01:00 +0000 Manifest this update: Fri 19 Dec 2025 06:01:00 +0000 Manifest next update: Sat 20 Dec 2025 06:01:00 +0000 Files and hashes: 1: GX6PPZ2aZNuKqCQABtqOUWCcHRs.roa (hash: iBMcSS3f9LeIBBwiwQeNPCdp76Ute65WO/S9tw7lGK8=) 2: mnZNjTrnJbReDUgH9hLsPR8qP08.crl (hash: ACHhpe7xpW6ngMIlSzRDi+MpAUQn/3/GUg2HGw2ngK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:81:17:fa:4a:ff:54:e3:26:b8:e4:6b:cb:38:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f Validity Not Before: Dec 19 06:01:00 2025 GMT Not After : Dec 20 06:01:00 2025 GMT Subject: CN=3d71dd27a5b6fa602a6173f817c2280a54e2ab8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:df:f8:1b:c8:4e:35:80:16:40:ff:ea:b2:d8: 18:ab:26:92:2e:74:d4:84:b4:f3:b8:69:ca:28:f2: 45:e1:8b:83:03:45:e9:05:b7:58:46:d7:62:63:dc: c4:96:ce:78:22:cf:c9:bc:d5:96:6b:0d:15:be:f6: d3:ce:7f:0f:b2:11:eb:65:82:89:ec:ef:a0:73:d9: 25:21:bf:a5:88:e1:32:9f:a5:d5:06:7f:11:c0:0e: 45:f1:51:99:98:27:b6:c6:0c:d6:95:02:d1:e9:86: a5:b6:eb:47:7f:28:9d:22:6f:d3:44:1f:ed:11:db: 3c:aa:b5:81:e6:63:81:13:42:c6:ba:25:ba:f2:18: 01:3f:5e:2f:fc:ad:ad:b1:a3:03:32:05:02:b4:bd: 99:6c:d2:4b:94:f1:7c:3a:23:12:41:64:02:2a:b9: 0b:c4:95:5f:2f:71:eb:18:d3:e2:e4:15:f9:95:e1: e2:71:30:59:07:65:d3:ae:c7:43:2c:6e:70:2c:11: 7d:17:7a:d0:eb:a1:50:36:4f:d3:19:25:c0:3c:61: fb:9e:0d:35:dd:67:01:ad:fa:88:7a:e6:55:83:7e: 2e:9b:c1:8c:44:56:08:22:2b:e9:66:c0:f7:2a:dc: f4:aa:3f:43:bf:89:d7:c2:55:08:96:8c:f1:d7:4b: 5e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:71:DD:27:A5:B6:FA:60:2A:61:73:F8:17:C2:28:0A:54:E2:AB:8B X509v3 Authority Key Identifier: keyid:9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3f:66:96:fb:fb:52:a2:fb:29:57:56:77:7e:74:82:f0:b0: d0:cc:18:44:77:df:75:3c:47:96:26:79:1c:f6:d4:f5:f9:ae: fd:0c:b5:59:87:07:f1:75:8e:92:d2:c8:f0:ec:11:66:30:76: 73:d6:78:72:3b:5d:26:e0:d7:aa:43:8e:9f:61:11:8d:eb:72: 49:9c:41:aa:aa:ff:d2:f6:6e:64:91:53:06:07:1e:c3:1e:a0: b9:fb:c6:0f:f0:d7:dd:69:65:fc:f6:7f:38:80:c4:b0:51:a2: 12:78:b9:24:1f:0f:e8:b0:95:5f:cd:70:58:ca:7c:ba:c1:59: 95:e8:96:ae:43:f2:0e:44:a7:e2:32:b8:23:7f:b8:52:98:7c: 3c:e2:fc:75:0f:f2:c7:40:54:27:c5:a2:ed:10:da:29:ce:5b: 7b:68:79:c2:1d:15:e1:2b:48:eb:01:3c:9b:47:6a:d6:c1:9e: f5:e7:86:c5:75:e0:5d:52:c5:e0:f3:3a:9a:ca:81:e6:6c:18: f7:65:4e:0a:ed:e3:b5:66:fe:6c:3c:48:b3:15:20:3e:ab:8c: 60:9e:6e:ac:e6:f2:07:03:27:16:ac:78:0b:52:9b:2d:b8:9e: be:de:55:f9:ae:07:57:9d:ca:48:bf:9b:39:f6:b0:04:e4:72: a0:69:7f:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MoEX+kr/VOMmuORryzgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNzY0ZDhkM2FlNzI1YjQ1ZTBkNDgwN2Y2MTJlYzNkMWYy YTNmNGYwHhcNMjUxMjE5MDYwMTAwWhcNMjUxMjIwMDYwMTAwWjAzMTEwLwYDVQQD EygzZDcxZGQyN2E1YjZmYTYwMmE2MTczZjgxN2MyMjgwYTU0ZTJhYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d/4G8hONYAWQP/qstgYqyaSLnTU hLTzuGnKKPJF4YuDA0XpBbdYRtdiY9zEls54Is/JvNWWaw0VvvbTzn8PshHrZYKJ 7O+gc9klIb+liOEyn6XVBn8RwA5F8VGZmCe2xgzWlQLR6YaltutHfyidIm/TRB/t Eds8qrWB5mOBE0LGuiW68hgBP14v/K2tsaMDMgUCtL2ZbNJLlPF8OiMSQWQCKrkL xJVfL3HrGNPi5BX5leHicTBZB2XTrsdDLG5wLBF9F3rQ66FQNk/TGSXAPGH7ng01 3WcBrfqIeuZVg34um8GMRFYIIivpZsD3Ktz0qj9Dv4nXwlUIlozx10teAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1x3SeltvpgKmFz+BfCKApU4quLMB8GA1UdIwQY MBaAFJp2TY065yW0Xg1IB/YS7D0fKj9PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW5aTmpUcm5KYlJlRFVnSDloTHNQUjhxUDA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OWFmYmEtNGZlZC00MmVmLWE3NTEt ZjVmZjlhZmMzMjY2LzEvbW5aTmpUcm5KYlJlRFVnSDloTHNQUjhxUDA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC84OWFmYmEtNGZlZC00MmVmLWE3NTEtZjVmZjlhZmMzMjY2 LzEvbW5aTmpUcm5KYlJlRFVnSDloTHNQUjhxUDA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmz9mlvv7 UqL7KVdWd350gvCw0MwYRHffdTxHliZ5HPbU9fmu/Qy1WYcH8XWOktLI8OwRZjB2 c9Z4cjtdJuDXqkOOn2ERjetySZxBqqr/0vZuZJFTBgcewx6gufvGD/DX3Wll/PZ/ OIDEsFGiEni5JB8P6LCVX81wWMp8usFZleiWrkPyDkSn4jK4I3+4Uph8POL8dQ/y x0BUJ8Wi7RDaKc5be2h5wh0V4StI6wE8m0dq1sGe9eeGxXXgXVLF4PM6msqB5mwY 92VOCu3jtWb+bDxIsxUgPquMYJ5urObyBwMnFqx4C1KbLbievt5V+a4HV53KSL+b OfawBORyoGl/7w== -----END CERTIFICATE-----Generated at Fri Dec 19 15:59:15 2025 by rpki-client