This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft File: EX-Mmn_H8TZY1ir76285iC2lEcw.mft (raw, json) Hash identifier: 2+mNnJ3pp1b7PSF/0ku1GmRhsJB0HljKRZwoOCZsDzI= Subject key identifier: 5F:D9:CF:D6:65:EE:CF:D8:05:7F:76:BE:13:96:99:53:FB:7A:DA:02 Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC Certificate issuer: /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc Certificate serial: 019B41A4C1EEECCB31BB42EA05B8F0997E4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 16:01:15 +0000 Manifest this update: Sun 21 Dec 2025 16:01:15 +0000 Manifest next update: Mon 22 Dec 2025 16:01:15 +0000 Files and hashes: 1: EX-Mmn_H8TZY1ir76285iC2lEcw.crl (hash: ufmyZ24Fo4BDuS9dsHC5ubRwis2GFRIvkGgoF4a06q0=) 2: ibWU2hc-15QgZKi7MldaZ8Rm5_8.roa (hash: bP6Dry9UHojDKjvZz2pROS6WfkRMKw8CNymma91NgNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:a4:c1:ee:ec:cb:31:bb:42:ea:05:b8:f0:99:7e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc Validity Not Before: Dec 21 16:01:15 2025 GMT Not After : Dec 22 16:01:15 2025 GMT Subject: CN=5fd9cfd665eecfd8057f76be13969953fb7ada02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:54:d3:5a:b3:8b:1d:50:69:3c:ea:d1:80: 64:bf:d6:97:5e:94:1a:f7:d3:96:97:18:4e:df:fb: 48:38:ca:13:2b:e7:52:f5:b5:26:46:c1:a6:dd:f8: fb:03:f7:d1:6c:01:98:22:1d:47:d5:e0:78:a7:cc: a0:88:59:e4:79:2c:80:1f:71:56:c7:9f:63:33:c8: 43:5d:57:03:bf:28:3b:5a:d5:18:a2:e4:7a:9a:87: 16:0e:be:89:a5:c0:fa:ae:4d:3f:21:41:ab:f6:33: 20:4d:c5:84:66:47:8b:26:50:c7:53:c7:b8:21:bd: e8:26:ea:de:e7:0e:5a:5a:2e:e4:b4:ae:b1:35:02: d0:63:69:d6:01:2f:c6:ec:a6:69:b6:5e:ce:b7:76: e3:0b:30:2d:00:5d:f8:12:74:ed:2c:dc:b3:83:e5: 8d:a7:4c:57:b0:2f:38:5f:ec:3f:48:2b:c7:96:51: 29:54:c2:60:07:ff:0c:cd:a9:f2:83:38:29:73:a4: 59:2f:a7:e2:37:61:49:e4:75:7f:7e:7c:4d:0a:b7: 3f:83:2e:13:e9:ac:51:fa:bb:af:9d:80:10:03:10: 39:cf:33:b7:29:14:08:ba:77:00:d0:e9:0f:0e:01: 68:5a:4c:73:88:22:0c:16:50:40:b8:81:56:10:a8: dc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D9:CF:D6:65:EE:CF:D8:05:7F:76:BE:13:96:99:53:FB:7A:DA:02 X509v3 Authority Key Identifier: keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:a3:04:4c:8f:53:a4:fb:88:e5:2a:f4:01:2a:28:36:e9:e7: 2f:cd:8d:cc:7b:7e:69:fa:19:ba:50:df:11:28:f9:63:7c:74: 32:b4:f2:93:a2:f7:d9:88:f4:69:2e:7a:af:5f:c0:6a:d5:85: 97:d8:75:c2:85:12:6a:71:d5:db:c2:8a:33:01:f9:3d:74:49: 0b:06:24:15:22:54:2e:b7:d4:07:ac:bb:3c:ae:5f:4d:81:98: ac:9b:e5:04:95:1d:61:42:44:89:10:18:aa:4c:da:45:75:a5: b4:bb:d9:31:7f:82:88:eb:b6:ad:49:ec:35:7d:f7:fa:57:ba: cd:47:0b:ed:64:26:62:de:39:bc:d1:6e:ed:20:35:13:7c:ee: 50:b3:3e:66:cc:bf:5a:a5:2d:9a:cc:7f:fb:cb:b7:0f:72:26: b0:83:74:4e:4e:8c:f1:28:cb:bf:e6:e2:35:7f:fb:81:8f:77: ad:29:e9:51:ea:24:9a:9e:c1:47:0d:d3:5f:c4:32:8b:7c:07: 46:88:26:38:7e:7e:bf:70:d7:df:25:4e:84:38:87:06:09:0a: 87:4e:1a:72:ef:c3:bd:85:76:f1:26:70:88:2d:4a:eb:3d:13: 51:52:8a:20:45:11:bf:e3:67:cf:92:28:79:8b:0f:bb:f7:ce: 4c:fa:83:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBpMHu7Msxu0LqBbjwmX5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y4YzlhN2ZjN2YxMzY1OGQ2MmFmYmViNmYzOTg4MmRh NTExY2MwHhcNMjUxMjIxMTYwMTE1WhcNMjUxMjIyMTYwMTE1WjAzMTEwLwYDVQQD Eyg1ZmQ5Y2ZkNjY1ZWVjZmQ4MDU3Zjc2YmUxMzk2OTk1M2ZiN2FkYTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugZU01qzix1QaTzq0YBkv9aXXpQa 99OWlxhO3/tIOMoTK+dS9bUmRsGm3fj7A/fRbAGYIh1H1eB4p8ygiFnkeSyAH3FW x59jM8hDXVcDvyg7WtUYouR6mocWDr6JpcD6rk0/IUGr9jMgTcWEZkeLJlDHU8e4 Ib3oJure5w5aWi7ktK6xNQLQY2nWAS/G7KZptl7Ot3bjCzAtAF34EnTtLNyzg+WN p0xXsC84X+w/SCvHllEpVMJgB/8Mzanygzgpc6RZL6fiN2FJ5HV/fnxNCrc/gy4T 6axR+ruvnYAQAxA5zzO3KRQIuncA0OkPDgFoWkxziCIMFlBAuIFWEKjcfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/Zz9Zl7s/YBX92vhOWmVP7etoCMB8GA1UdIwQY MBaAFBF/jJp/x/E2WNYq++tvOYgtpRHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xMjJiMmQtNWQ4Ny00NzhjLTg1MjIt ODlkNjZhYzcyZTAyLzEvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xMjJiMmQtNWQ4Ny00NzhjLTg1MjItODlkNjZhYzcyZTAy LzEvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKMETI9T pPuI5Sr0ASooNunnL82NzHt+afoZulDfESj5Y3x0MrTyk6L32Yj0aS56r1/AatWF l9h1woUSanHV28KKMwH5PXRJCwYkFSJULrfUB6y7PK5fTYGYrJvlBJUdYUJEiRAY qkzaRXWltLvZMX+CiOu2rUnsNX33+le6zUcL7WQmYt45vNFu7SA1E3zuULM+Zsy/ WqUtmsx/+8u3D3ImsIN0Tk6M8SjLv+biNX/7gY93rSnpUeokmp7BRw3TX8Qyi3wH RogmOH5+v3DX3yVOhDiHBgkKh04acu/DvYV28SZwiC1K6z0TUVKKIEURv+Nnz5Io eYsPu/fOTPqD8Q== -----END CERTIFICATE-----Generated at Sun Dec 21 22:38:48 2025 by rpki-client