This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft File: MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json) Hash identifier: aw2OOk397RuWvgQINSKG0Lqt1m3/a7z2seCn8PppvO8= Subject key identifier: 6D:42:0A:A6:7D:08:53:6A:4F:3F:14:F3:D3:33:63:03:34:3D:65:46 Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90 Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690 Certificate serial: 019B6AD7AD47B027BA2EDDA1BE8D67D5FC17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft Manifest number: 0E86 Signing time: Mon 29 Dec 2025 16:01:17 +0000 Manifest this update: Mon 29 Dec 2025 16:01:17 +0000 Manifest next update: Tue 30 Dec 2025 16:01:17 +0000 Files and hashes: 1: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: egd/tfKWiTGNwqdGR+W3Y7TVYgyC7yJTGJ17fqW6ptY=) 2: hApSbA3jzy_s3iVNvrGjhLhy3rU.roa (hash: 1X2vbtL7wfNX8hGTI4KlZns0bkwGbPIYpWY571Ew9V0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d7:ad:47:b0:27:ba:2e:dd:a1:be:8d:67:d5:fc:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690 Validity Not Before: Dec 29 16:01:17 2025 GMT Not After : Dec 30 16:01:17 2025 GMT Subject: CN=6d420aa67d08536a4f3f14f3d3336303343d6546 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:69:9f:20:63:e3:15:a7:8b:bd:f6:66:7b:d7: 22:7b:32:d0:ba:c6:01:db:ea:40:5a:d3:2d:30:bd: 15:aa:58:fa:31:e5:65:bb:dc:05:f4:96:73:74:f3: c7:cc:dd:63:82:2f:2a:cc:f3:c6:71:52:e7:34:f8: 5f:f1:ff:11:84:a1:f1:f9:d7:d4:80:b9:63:ce:66: 9b:76:fd:aa:65:ae:3c:70:dd:0f:60:3d:92:30:36: ec:b9:8b:39:b4:e3:9d:72:77:73:65:d4:50:b8:81: 36:15:f6:e2:8b:53:e3:34:b1:99:03:83:f7:0e:c7: 68:61:e7:22:67:24:45:cc:9b:1d:2c:8b:c8:af:e2: 61:64:cc:2d:d9:09:0c:1a:dc:2f:f7:27:ff:e8:72: 0d:40:f7:e1:78:12:a9:42:ac:02:8c:91:0b:63:fb: a4:c3:50:15:81:af:3c:e5:8a:01:25:be:d1:cf:61: 7e:82:51:7d:26:12:dd:90:93:d8:35:5f:38:e7:ef: 92:dc:64:e7:ca:d7:59:b3:e5:0a:b0:8a:9e:4d:33: d9:52:f1:8d:bf:52:96:ff:b3:63:17:ba:96:8b:b2: 58:59:e3:29:f3:9e:dd:f2:3f:25:a2:26:79:a5:46: 7d:02:4c:94:e8:dc:63:f4:21:e1:d6:fa:68:d0:e8: 87:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:42:0A:A6:7D:08:53:6A:4F:3F:14:F3:D3:33:63:03:34:3D:65:46 X509v3 Authority Key Identifier: keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:70:ef:8b:51:48:df:72:9a:a5:77:68:0f:e3:1e:66:ee:18: fd:48:8c:27:52:b5:af:93:ac:76:03:a6:63:e8:78:74:77:ab: ac:1d:31:87:53:90:d4:ba:fc:f7:23:42:3c:14:b6:fc:ca:39: c3:22:8d:34:be:a9:c2:63:71:86:84:c2:3c:d8:b1:49:ef:01: 7b:80:96:4b:ba:f6:d1:52:62:da:60:4c:ec:49:a3:fa:ff:b0: 47:0a:b6:77:6e:4a:e3:61:df:19:0e:7f:cc:ab:9c:1d:2d:fa: 58:f5:c8:fb:6b:10:a7:7f:22:94:86:94:c3:f5:4f:ab:bd:ad: b6:ba:b6:ba:1d:93:4c:42:95:c2:2f:53:4e:9d:ee:2f:bd:d7: 88:fa:b0:92:0d:68:d7:eb:e3:cf:f2:7f:58:6d:07:e1:ab:27: f7:ba:a8:ac:11:73:7d:8c:44:a0:b6:fe:c2:9e:d3:7e:79:13: 14:b6:f4:fc:f5:7a:a8:06:ea:d6:95:d0:7d:4e:b8:df:5f:c9: 3c:b8:5f:fe:46:53:84:0c:80:f1:6f:d8:36:dd:2a:bd:74:11: b4:f9:cd:b8:c1:b5:5d:0e:2a:15:c3:77:90:4e:c0:14:df:7a: df:52:f2:12:77:4e:0a:60:8d:16:c9:77:3f:d7:71:06:52:b2: 66:bc:33:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq161HsCe6Lt2hvo1n1fwXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNzU1N2NmMjI2MjlkMDU4YTUxMTQ5NjViMmY5ZGY4ZWY0 ZGI2OTAwHhcNMjUxMjI5MTYwMTE3WhcNMjUxMjMwMTYwMTE3WjAzMTEwLwYDVQQD Eyg2ZDQyMGFhNjdkMDg1MzZhNGYzZjE0ZjNkMzMzNjMwMzM0M2Q2NTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6mmfIGPjFaeLvfZme9ciezLQusYB 2+pAWtMtML0Vqlj6MeVlu9wF9JZzdPPHzN1jgi8qzPPGcVLnNPhf8f8RhKHx+dfU gLljzmabdv2qZa48cN0PYD2SMDbsuYs5tOOdcndzZdRQuIE2Ffbii1PjNLGZA4P3 DsdoYeciZyRFzJsdLIvIr+JhZMwt2QkMGtwv9yf/6HINQPfheBKpQqwCjJELY/uk w1AVga885YoBJb7Rz2F+glF9JhLdkJPYNV845++S3GTnytdZs+UKsIqeTTPZUvGN v1KW/7NjF7qWi7JYWeMp857d8j8loiZ5pUZ9AkyU6Nxj9CHh1vpo0OiH3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1CCqZ9CFNqTz8U89MzYwM0PWVGMB8GA1UdIwQY MBaAFDJ1V88iYp0FilEUllsvnfjvTbaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUt ZmQ3MjViODI1MjkxLzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUtZmQ3MjViODI1Mjkx LzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnDvi1FI 33KapXdoD+MeZu4Y/UiMJ1K1r5OsdgOmY+h4dHerrB0xh1OQ1Lr89yNCPBS2/Mo5 wyKNNL6pwmNxhoTCPNixSe8Be4CWS7r20VJi2mBM7Emj+v+wRwq2d25K42HfGQ5/ zKucHS36WPXI+2sQp38ilIaUw/VPq72ttrq2uh2TTEKVwi9TTp3uL73XiPqwkg1o 1+vjz/J/WG0H4asn97qorBFzfYxEoLb+wp7TfnkTFLb0/PV6qAbq1pXQfU6431/J PLhf/kZThAyA8W/YNt0qvXQRtPnNuMG1XQ4qFcN3kE7AFN9631LyEndOCmCNFsl3 P9dxBlKyZrwzSA== -----END CERTIFICATE-----Generated at Mon Dec 29 18:01:16 2025 by rpki-client