This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft File: mnRIG4fez2ODfiaXRiyeRHANS90.mft (raw, json) Hash identifier: BfZcCYPkF0NUkDELC/C9VXhJZ/AXYZrsv8F6/ACqWF0= Subject key identifier: C3:5E:9F:08:B1:B1:F3:8D:8B:4C:D9:07:2F:DF:A3:56:D1:3B:81:85 Authority key identifier: 9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD Certificate issuer: /CN=9a74481b87decf63837e2697462c9e44700d4bdd Certificate serial: 019B4FCE15AFE760E09CE17F794D29E60E4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft Manifest number: 074A Signing time: Wed 24 Dec 2025 10:01:04 +0000 Manifest this update: Wed 24 Dec 2025 10:01:04 +0000 Manifest next update: Thu 25 Dec 2025 10:01:04 +0000 Files and hashes: 1: CK4siPWBYfHEvMudVxcsDQPxAR4.roa (hash: YhDnpIVqIiFTzSv32iL9GB9Nu0H7+HMcl1R+Eah/CyM=) 2: mnRIG4fez2ODfiaXRiyeRHANS90.crl (hash: dfBwcsZdkGebWVf0a6o0vSbMdMFbfhRZFNEUTcU7nTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:ce:15:af:e7:60:e0:9c:e1:7f:79:4d:29:e6:0e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a74481b87decf63837e2697462c9e44700d4bdd Validity Not Before: Dec 24 10:01:04 2025 GMT Not After : Dec 25 10:01:04 2025 GMT Subject: CN=c35e9f08b1b1f38d8b4cd9072fdfa356d13b8185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:6f:c5:44:06:f3:e6:65:2a:e8:22:41:9d:30: fe:fd:dc:d1:c5:b2:d6:4b:39:41:0f:e5:21:ab:70: 0f:16:52:67:59:64:74:9d:a6:1c:d0:d5:00:80:38: f8:88:de:d1:6a:d1:b2:e5:b9:a0:92:de:09:24:6f: 70:49:8e:37:5a:76:13:17:eb:aa:63:88:33:7e:89: 3c:a9:6e:78:0d:27:41:9a:f6:1f:a5:f9:a2:3e:ce: 6a:ef:45:bf:9f:45:4f:f0:75:6d:39:9d:16:37:a2: d2:6b:8c:fa:3b:ab:f9:95:2b:88:ae:f5:19:83:dc: 47:2a:ef:ab:ef:6d:58:0b:bf:ea:50:db:ad:a8:8d: 90:47:a7:ed:f1:a5:67:23:1a:e0:da:6c:01:eb:2c: b8:5b:da:58:4b:2e:5f:81:16:7d:a5:a5:1d:a1:b2: 93:34:d1:05:b4:09:f6:3b:6a:79:58:8c:ea:4b:c5: 88:f8:46:ef:a9:4d:e3:2a:21:ca:7f:48:0a:fc:91: 64:79:76:ab:02:4a:10:28:34:92:41:c3:1a:8c:ff: 62:48:e0:1a:28:67:25:a3:15:d7:7c:55:53:b0:49: 08:2e:f3:41:cd:0f:ae:8e:2e:bb:bb:18:e5:5b:59: 2b:88:df:87:1b:7c:17:e0:37:11:08:4f:4a:44:82: cd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5E:9F:08:B1:B1:F3:8D:8B:4C:D9:07:2F:DF:A3:56:D1:3B:81:85 X509v3 Authority Key Identifier: keyid:9A:74:48:1B:87:DE:CF:63:83:7E:26:97:46:2C:9E:44:70:0D:4B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnRIG4fez2ODfiaXRiyeRHANS90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/df79c1-b802-4419-8ec0-cf447009e349/1/mnRIG4fez2ODfiaXRiyeRHANS90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:7e:ce:07:4a:1b:48:18:63:80:2f:77:cd:6a:bc:a8:3f:cf: 68:89:92:e4:e5:4a:d0:4a:5a:6e:9a:20:78:bd:d7:c9:88:67: fb:f8:96:15:26:ca:b5:1f:ab:d8:c5:83:35:ae:da:16:a2:c4: 8d:45:4f:3e:ee:aa:93:ae:08:04:ec:65:6d:40:5e:ed:3f:8f: 35:e6:8d:d8:02:9e:65:cd:8b:66:ee:b9:4a:00:95:05:eb:a5: 86:10:72:87:d6:2c:5c:dd:42:c0:26:fa:10:dd:e8:aa:c8:d2: a8:f2:fd:61:d2:ff:91:e5:1b:e2:03:84:7d:3d:de:7a:54:19: d8:cc:64:1f:50:5a:6f:56:b1:b9:ac:33:fd:b6:cf:c8:0c:93: 70:e1:40:cd:5e:59:77:1c:b0:ad:ec:96:90:fb:41:61:b7:4b: 58:8f:cc:53:4f:1b:96:30:b8:fa:84:0a:fc:97:90:a3:b2:be: 7a:9a:77:2f:d1:7f:fc:46:d1:d9:8a:9f:01:e3:3e:de:13:9b: 99:c4:db:39:cb:74:3f:2d:51:91:26:ec:a4:00:93:37:cf:b6: de:95:64:82:53:17:4a:3d:27:c7:42:c6:94:32:7c:ef:6f:65: 92:b9:5d:f2:e6:a2:b0:b8:1c:0a:58:b9:28:68:1d:8c:ae:27: 80:59:d3:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzhWv52DgnOF/eU0p5g5KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNzQ0ODFiODdkZWNmNjM4MzdlMjY5NzQ2MmM5ZTQ0NzAw ZDRiZGQwHhcNMjUxMjI0MTAwMTA0WhcNMjUxMjI1MTAwMTA0WjAzMTEwLwYDVQQD EyhjMzVlOWYwOGIxYjFmMzhkOGI0Y2Q5MDcyZmRmYTM1NmQxM2I4MTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+W/FRAbz5mUq6CJBnTD+/dzRxbLW SzlBD+Uhq3APFlJnWWR0naYc0NUAgDj4iN7RatGy5bmgkt4JJG9wSY43WnYTF+uq Y4gzfok8qW54DSdBmvYfpfmiPs5q70W/n0VP8HVtOZ0WN6LSa4z6O6v5lSuIrvUZ g9xHKu+r721YC7/qUNutqI2QR6ft8aVnIxrg2mwB6yy4W9pYSy5fgRZ9paUdobKT NNEFtAn2O2p5WIzqS8WI+EbvqU3jKiHKf0gK/JFkeXarAkoQKDSSQcMajP9iSOAa KGcloxXXfFVTsEkILvNBzQ+uji67uxjlW1kriN+HG3wX4DcRCE9KRILNIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNenwixsfONi0zZBy/fo1bRO4GFMB8GA1UdIwQY MBaAFJp0SBuH3s9jg34ml0YsnkRwDUvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW5SSUc0ZmV6Mk9EZmlhWFJpeWVSSEFOUzkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9kZjc5YzEtYjgwMi00NDE5LThlYzAt Y2Y0NDcwMDllMzQ5LzEvbW5SSUc0ZmV6Mk9EZmlhWFJpeWVSSEFOUzkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9kZjc5YzEtYjgwMi00NDE5LThlYzAtY2Y0NDcwMDllMzQ5 LzEvbW5SSUc0ZmV6Mk9EZmlhWFJpeWVSSEFOUzkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARn7OB0ob SBhjgC93zWq8qD/PaImS5OVK0EpabpogeL3XyYhn+/iWFSbKtR+r2MWDNa7aFqLE jUVPPu6qk64IBOxlbUBe7T+PNeaN2AKeZc2LZu65SgCVBeulhhByh9YsXN1CwCb6 EN3oqsjSqPL9YdL/keUb4gOEfT3eelQZ2MxkH1Bab1axuawz/bbPyAyTcOFAzV5Z dxywreyWkPtBYbdLWI/MU08bljC4+oQK/JeQo7K+epp3L9F//EbR2YqfAeM+3hOb mcTbOct0Py1RkSbspACTN8+23pVkglMXSj0nx0LGlDJ8729lkrld8uaisLgcCli5 KGgdjK4ngFnTgA== -----END CERTIFICATE-----Generated at Wed Dec 24 17:00:28 2025 by rpki-client