This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft File: mnVMcdYssjlI2RGe2ncv3jjme2c.mft (raw, json) Hash identifier: Lh3wmsupEy3/wTF7jcL3A1CN25y0glxv27mvfGEzLS8= Subject key identifier: EF:5A:1F:42:D5:7C:14:C3:AF:33:35:78:84:F3:96:54:41:57:7A:B6 Authority key identifier: 9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67 Certificate issuer: /CN=9a754c71d62cb23948d9119eda772fde38e67b67 Certificate serial: 019B454A625FDC41CA62A3908D87E218A0B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 09:01:01 +0000 Manifest this update: Mon 22 Dec 2025 09:01:01 +0000 Manifest next update: Tue 23 Dec 2025 09:01:01 +0000 Files and hashes: 1: GdhJf3HoY_u0PeGVqS4KptbEqf4.roa (hash: xtcOOYTemNKZRvBhp2Ch+jc7TYfVbK+JDVCRBNQIEfY=) 2: mnVMcdYssjlI2RGe2ncv3jjme2c.crl (hash: 4xZdnYmh/B/8QX9aLGLMvNQq18EPgH+CgzA+F9UYR3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:62:5f:dc:41:ca:62:a3:90:8d:87:e2:18:a0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a754c71d62cb23948d9119eda772fde38e67b67 Validity Not Before: Dec 22 09:01:01 2025 GMT Not After : Dec 23 09:01:01 2025 GMT Subject: CN=ef5a1f42d57c14c3af33357884f3965441577ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:1d:02:45:ee:3c:9b:32:9f:67:54:3f:e2: 05:74:9e:09:5a:50:7a:8b:02:18:e5:1d:ba:96:b5: 8e:cd:27:b2:72:6a:eb:04:77:b8:79:ae:ea:b2:97: 38:93:f1:5a:11:f1:2d:af:39:92:fd:18:8d:ea:b6: a2:45:9d:d7:ce:f0:ae:87:5a:61:79:79:97:30:fb: 2c:58:a3:2e:31:38:d5:cb:46:8d:46:08:50:b2:6b: 38:82:b5:bc:a0:b5:d6:cd:c5:d2:5c:f3:6f:a5:87: f4:c0:39:e9:9b:12:90:da:89:e2:b1:27:9d:9a:3b: ad:79:f3:a0:15:73:12:41:d1:f8:c2:fd:12:73:e9: 09:b9:66:03:f2:ce:68:54:1c:4b:fa:3d:5d:94:16: dc:2d:65:10:cb:f2:3c:61:b6:1d:72:82:d1:b9:04: e2:52:f0:1a:9a:9a:3a:2a:da:e8:64:19:b3:66:91: 27:84:de:5c:12:23:c0:ec:13:6b:d3:db:8f:e1:c2: d1:7f:13:c4:d6:8e:74:1a:20:63:38:21:14:53:b7: d4:a1:6f:07:93:a6:1e:5d:6f:89:0c:4e:38:fc:a9: 75:40:59:bb:bf:a3:6e:8c:39:6d:1d:48:f4:87:f9: 96:e0:aa:75:32:45:16:9b:d8:d6:e0:bd:ee:c8:91: b4:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5A:1F:42:D5:7C:14:C3:AF:33:35:78:84:F3:96:54:41:57:7A:B6 X509v3 Authority Key Identifier: keyid:9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e5:ad:a1:4d:7f:a7:4a:a1:b9:9c:b6:58:30:03:4e:c8:42: 8c:f9:0c:38:a3:fb:9d:d0:c2:15:ac:cf:cc:60:80:69:e5:ae: 86:ad:d8:9a:5d:83:92:14:fe:d4:d4:6e:44:ed:7a:d3:27:39: 18:d1:33:d4:be:a7:83:1a:49:e1:29:4d:1c:e4:69:ea:73:f3: c3:6c:2b:9e:86:db:a4:10:43:73:6b:9a:7d:c2:32:d0:c4:5b: 2f:d5:8b:64:ab:38:ab:46:99:42:6f:a1:2d:b5:47:1e:85:7b: 4e:a2:cb:38:e2:86:29:e8:64:45:a1:a2:b7:de:9f:36:92:85: b9:59:6d:4a:b3:05:bc:2d:ba:ac:3e:28:7f:db:d7:1d:ec:ea: f9:ec:df:90:d8:5c:fd:af:85:32:16:a3:a1:40:0f:f6:74:7c: d6:90:27:2a:56:2c:13:1c:f8:0d:7f:b2:e0:3d:95:00:8a:d3: 4f:64:66:a4:13:82:58:e2:da:62:fd:f4:8c:65:a8:0f:fb:4a: 3c:5f:46:0c:b9:72:f6:9e:fc:de:21:41:d5:b7:65:54:a4:71: 21:c1:ea:0f:76:f6:1b:56:fe:92:55:7a:07:17:e9:bd:97:d7: 10:07:ee:82:8a:78:7f:90:47:b3:da:e7:7f:05:86:79:f1:46: 5c:46:5f:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSmJf3EHKYqOQjYfiGKCxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNzU0YzcxZDYyY2IyMzk0OGQ5MTE5ZWRhNzcyZmRlMzhl NjdiNjcwHhcNMjUxMjIyMDkwMTAxWhcNMjUxMjIzMDkwMTAxWjAzMTEwLwYDVQQD EyhlZjVhMWY0MmQ1N2MxNGMzYWYzMzM1Nzg4NGYzOTY1NDQxNTc3YWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDcdAkXuPJsyn2dUP+IFdJ4JWlB6 iwIY5R26lrWOzSeycmrrBHe4ea7qspc4k/FaEfEtrzmS/RiN6raiRZ3XzvCuh1ph eXmXMPssWKMuMTjVy0aNRghQsms4grW8oLXWzcXSXPNvpYf0wDnpmxKQ2onisSed mjutefOgFXMSQdH4wv0Sc+kJuWYD8s5oVBxL+j1dlBbcLWUQy/I8YbYdcoLRuQTi UvAampo6KtroZBmzZpEnhN5cEiPA7BNr09uP4cLRfxPE1o50GiBjOCEUU7fUoW8H k6YeXW+JDE44/Kl1QFm7v6NujDltHUj0h/mW4Kp1MkUWm9jW4L3uyJG0lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO9aH0LVfBTDrzM1eITzllRBV3q2MB8GA1UdIwQY MBaAFJp1THHWLLI5SNkRntp3L9445ntnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW5WTWNkWXNzamxJMlJHZTJuY3YzamptZTJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80ZDJlNjctNWFjMi00MjdkLThiN2It ZDI1YTlkZjE1OTI1LzEvbW5WTWNkWXNzamxJMlJHZTJuY3YzamptZTJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS80ZDJlNjctNWFjMi00MjdkLThiN2ItZDI1YTlkZjE1OTI1 LzEvbW5WTWNkWXNzamxJMlJHZTJuY3YzamptZTJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOWtoU1/ p0qhuZy2WDADTshCjPkMOKP7ndDCFazPzGCAaeWuhq3Yml2DkhT+1NRuRO160yc5 GNEz1L6ngxpJ4SlNHORp6nPzw2wrnobbpBBDc2uafcIy0MRbL9WLZKs4q0aZQm+h LbVHHoV7TqLLOOKGKehkRaGit96fNpKFuVltSrMFvC26rD4of9vXHezq+ezfkNhc /a+FMhajoUAP9nR81pAnKlYsExz4DX+y4D2VAIrTT2RmpBOCWOLaYv30jGWoD/tK PF9GDLly9p783iFB1bdlVKRxIcHqD3b2G1b+klV6BxfpvZfXEAfugop4f5BHs9rn fwWGefFGXEZf1A== -----END CERTIFICATE-----Generated at Mon Dec 22 11:36:04 2025 by rpki-client