This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft File: Mn2iLLkBOLBQg37c8ew2pauMQqw.mft (raw, json) Hash identifier: DnnvsSLMs4nTMKbuePyeSNbrw7HE/XKdRcPd1A68QGo= Subject key identifier: D7:4C:3A:0E:03:B4:6C:30:72:A1:14:98:8D:D9:C5:02:2C:C7:9B:1B Authority key identifier: 32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC Certificate issuer: /CN=327da22cb90138b050837edcf1ec36a5ab8c42ac Certificate serial: 019B390F5952B7D24D0F46759E420DF3C3CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft Manifest number: 13E5 Signing time: Sat 20 Dec 2025 00:01:05 +0000 Manifest this update: Sat 20 Dec 2025 00:01:05 +0000 Manifest next update: Sun 21 Dec 2025 00:01:05 +0000 Files and hashes: 1: Mn2iLLkBOLBQg37c8ew2pauMQqw.crl (hash: ELHNxl4bmJCtVLpPwe96hllJd0uvyXwz7XEHGfxNFpI=) 2: Ws-3to11mYQT65QlLPSv_a64Aow.roa (hash: bLLs3zCR6QgpvfFD4PT4W3Xh5DmPnAizoHMgUfONgYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:59:52:b7:d2:4d:0f:46:75:9e:42:0d:f3:c3:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=327da22cb90138b050837edcf1ec36a5ab8c42ac Validity Not Before: Dec 20 00:01:05 2025 GMT Not After : Dec 21 00:01:05 2025 GMT Subject: CN=d74c3a0e03b46c3072a114988dd9c5022cc79b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:41:d9:57:ce:35:8a:db:78:e0:3d:6f:f1:61: 5c:0e:88:ed:ea:14:07:81:ba:a7:fa:73:2e:b6:8b: e6:9b:19:a8:d7:43:02:53:f7:89:89:59:9d:b7:54: 93:32:82:b1:4b:5e:f3:00:ec:81:7b:b7:fd:de:63: 94:e9:9e:94:71:95:c3:68:a9:21:17:75:e4:2a:d7: c1:68:09:e9:e0:f8:96:93:79:2b:4a:82:84:c8:64: a7:db:97:01:71:9d:c0:18:e0:50:17:3b:5c:cb:ab: 86:d4:f9:96:fd:12:90:9c:96:b5:e2:2d:0f:04:ff: 15:23:84:7d:60:b4:aa:e5:9a:9f:b6:5a:20:b7:eb: 59:bd:aa:dc:8c:66:60:43:2e:99:59:e9:fa:0e:f3: 87:1e:fd:29:04:4f:0d:e1:3f:db:cf:4c:09:ba:6f: d4:84:50:68:8c:5a:6c:d7:d1:06:ca:cd:99:b7:1a: 01:03:ef:2f:b4:0d:c1:7b:ee:d5:be:81:73:f3:40: d0:b6:a0:fc:77:d4:ec:7e:fd:5e:8e:32:5b:64:52: 5f:08:57:7b:5e:bd:b6:b9:bc:57:48:b2:78:f2:50: 56:94:b0:67:21:6f:b0:77:b7:1f:73:7d:fc:e4:8b: 64:33:37:7a:e3:ea:da:89:83:b9:0c:27:c5:e4:ee: 12:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4C:3A:0E:03:B4:6C:30:72:A1:14:98:8D:D9:C5:02:2C:C7:9B:1B X509v3 Authority Key Identifier: keyid:32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:6c:47:0b:cb:84:16:c4:d9:28:fe:dc:78:1b:03:d0:01:7d: 00:fe:54:87:e4:63:7d:82:bb:8f:e3:31:96:d0:41:9b:af:fc: 49:4e:fe:44:91:15:96:67:67:2d:5b:30:42:3d:89:e6:65:ee: 4e:53:77:f4:81:e5:c4:4a:2c:30:2c:f5:cd:3e:11:17:1c:aa: 6e:27:22:4a:98:56:6a:5c:fa:c1:d2:86:bc:9f:8c:ad:ae:41: eb:bd:69:8b:6c:21:e8:5a:6f:ab:f7:1c:d4:4e:27:71:84:ba: df:61:81:e7:e8:55:66:86:bf:58:30:82:fd:86:78:fc:a4:c7: c5:ba:45:fa:5a:55:a2:43:a5:60:a3:5b:6f:b1:d7:dd:27:d6: 68:47:ef:b2:bc:37:cb:ad:03:e1:f9:a3:d5:fd:33:b2:d4:9b: 95:4e:2c:36:af:5e:4d:14:da:4a:07:10:70:38:4c:04:66:17: b9:b4:f8:e1:52:96:79:bc:c7:43:e9:d1:8c:79:08:4d:f3:98: 2e:af:e1:c4:31:64:69:fb:91:c0:eb:52:0b:1f:ee:ae:e9:c6: 04:e8:ce:f6:6d:a0:77:6f:1b:c0:2a:84:92:6c:d4:86:6c:4f: a9:f3:2f:db:e3:74:1d:c8:c2:9a:26:55:7a:ec:e3:ee:0b:3c: f1:ca:9e:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D1lSt9JND0Z1nkIN88PLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyN2RhMjJjYjkwMTM4YjA1MDgzN2VkY2YxZWMzNmE1YWI4 YzQyYWMwHhcNMjUxMjIwMDAwMTA1WhcNMjUxMjIxMDAwMTA1WjAzMTEwLwYDVQQD EyhkNzRjM2EwZTAzYjQ2YzMwNzJhMTE0OTg4ZGQ5YzUwMjJjYzc5YjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7kHZV841itt44D1v8WFcDojt6hQH gbqn+nMutovmmxmo10MCU/eJiVmdt1STMoKxS17zAOyBe7f93mOU6Z6UcZXDaKkh F3XkKtfBaAnp4PiWk3krSoKEyGSn25cBcZ3AGOBQFztcy6uG1PmW/RKQnJa14i0P BP8VI4R9YLSq5Zqftlogt+tZvarcjGZgQy6ZWen6DvOHHv0pBE8N4T/bz0wJum/U hFBojFps19EGys2ZtxoBA+8vtA3Be+7VvoFz80DQtqD8d9Tsfv1ejjJbZFJfCFd7 Xr22ubxXSLJ48lBWlLBnIW+wd7cfc3385ItkMzd64+raiYO5DCfF5O4SmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdMOg4DtGwwcqEUmI3ZxQIsx5sbMB8GA1UdIwQY MBaAFDJ9oiy5ATiwUIN+3PHsNqWrjEKsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW4yaUxMa0JPTEJRZzM3YzhldzJwYXVNUXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83MDA4ZmMtYWNjNC00ZWY1LThmYjkt OTA3OTVmYjM5MjhjLzEvTW4yaUxMa0JPTEJRZzM3YzhldzJwYXVNUXF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC83MDA4ZmMtYWNjNC00ZWY1LThmYjktOTA3OTVmYjM5Mjhj LzEvTW4yaUxMa0JPTEJRZzM3YzhldzJwYXVNUXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGxHC8uE FsTZKP7ceBsD0AF9AP5Uh+RjfYK7j+MxltBBm6/8SU7+RJEVlmdnLVswQj2J5mXu TlN39IHlxEosMCz1zT4RFxyqbiciSphWalz6wdKGvJ+Mra5B671pi2wh6Fpvq/cc 1E4ncYS632GB5+hVZoa/WDCC/YZ4/KTHxbpF+lpVokOlYKNbb7HX3SfWaEfvsrw3 y60D4fmj1f0zstSblU4sNq9eTRTaSgcQcDhMBGYXubT44VKWebzHQ+nRjHkITfOY Lq/hxDFkafuRwOtSCx/urunGBOjO9m2gd28bwCqEkmzUhmxPqfMv2+N0HcjCmiZV euzj7gs88cqesg== -----END CERTIFICATE-----Generated at Sat Dec 20 06:52:22 2025 by rpki-client