This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft File: pmnxwhNwxE39EOKvaIyMTg6hKVU.mft (raw, json) Hash identifier: Cjvc0O+Bcm0RkcBmPVvktfUP1w+Ljy0Jy/EecthpfSg= Subject key identifier: 68:51:EA:64:AD:80:92:E9:24:10:54:E2:15:AD:27:5F:19:ED:4C:AC Authority key identifier: A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55 Certificate issuer: /CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955 Certificate serial: 019B311EBB7EB28100F8E3232C1EFC3C4237 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft Manifest number: 0FCA Signing time: Thu 18 Dec 2025 11:00:56 +0000 Manifest this update: Thu 18 Dec 2025 11:00:56 +0000 Manifest next update: Fri 19 Dec 2025 11:00:56 +0000 Files and hashes: 1: pmnxwhNwxE39EOKvaIyMTg6hKVU.crl (hash: 5pe0T13z2mNm2Cu1pF2fsIXkr9meMRYThyGOEN7/5Mw=) 2: vdy1MmzFMK60AlIdpOXD1htDYPg.roa (hash: 0u0pMl1wwd/at2uaTP4vwjKf36kzodMgLoxEXn0lwwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1e:bb:7e:b2:81:00:f8:e3:23:2c:1e:fc:3c:42:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955 Validity Not Before: Dec 18 11:00:56 2025 GMT Not After : Dec 19 11:00:56 2025 GMT Subject: CN=6851ea64ad8092e9241054e215ad275f19ed4cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:00:41:5d:1c:18:fe:a2:40:8c:66:93:33:6c: 15:60:18:77:19:a6:08:9f:6d:02:8f:5e:f0:9c:af: 63:0e:4b:bb:68:2b:5c:71:27:8e:f0:1e:04:c4:50: cf:59:7b:57:df:7d:11:09:12:ec:05:16:d6:43:f5: 26:4a:99:67:9e:e9:2a:1c:38:8b:98:6c:09:25:61: 11:20:88:bc:62:01:7f:32:5e:91:cd:0d:e5:19:b0: af:44:49:8a:30:50:d8:8e:26:cf:bd:29:c2:c9:c0: 08:d0:b5:f6:04:78:38:47:e6:56:fe:5d:fc:16:f4: 57:af:5b:72:2c:e7:e3:ab:28:56:91:57:82:50:7f: a6:72:ac:eb:37:d9:d9:46:ed:5e:73:83:17:e2:ba: ae:aa:03:8a:30:5a:d8:e1:27:c2:5d:1d:56:24:10: 5b:2c:1c:1c:d2:95:3a:ba:aa:64:15:c0:06:44:1d: dc:58:20:05:fc:30:03:eb:96:27:26:52:e7:ee:2b: 31:88:b2:81:be:68:55:57:52:b5:b3:83:7f:97:cc: f0:86:73:b2:69:df:90:89:21:f3:a2:d9:01:1c:79: 80:b4:27:4d:1b:cc:e6:65:d0:9f:72:64:72:6b:94: 06:f8:64:7c:7c:8c:13:f0:7b:5a:77:d0:5c:f1:df: 5e:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:51:EA:64:AD:80:92:E9:24:10:54:E2:15:AD:27:5F:19:ED:4C:AC X509v3 Authority Key Identifier: keyid:A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:8f:cf:0e:20:61:4e:50:ad:b3:b4:8f:8c:4b:3f:49:39:21: 02:6b:47:00:ae:16:ef:c6:d2:e5:9d:e1:c8:85:41:a3:ff:38: a6:03:28:49:b5:9a:cc:cb:0c:c5:11:5b:13:9c:3f:21:c2:56: b2:50:cb:3a:57:83:0b:01:0d:7c:0e:92:7d:87:a8:d2:71:97: 65:26:c4:ac:12:ee:04:be:a1:5f:61:a4:3e:1e:a5:56:0d:1c: fa:30:c6:b0:3e:df:0d:bd:c2:a3:34:bf:64:8f:1d:af:fb:35: dd:72:85:66:11:85:71:10:ed:af:8e:e3:f1:8a:c7:0f:a5:bd: a7:5c:8a:b0:dc:03:77:42:22:10:68:26:74:68:3d:8d:55:cf: 99:7f:43:b0:14:74:45:d3:99:35:5f:4e:f9:6b:5d:7d:ac:4f: 16:f0:67:44:f5:14:40:3f:8f:7d:2f:59:15:f7:bf:ba:8c:59: ce:9a:64:7b:93:98:53:5f:9d:f3:25:58:f9:a2:37:9b:a3:24: 8a:2b:68:8d:e0:30:87:c8:4b:65:c5:ae:75:ca:13:b3:33:02: 27:7e:95:41:11:1f:5d:65:7c:b3:90:3c:21:cc:91:c0:19:2f: 67:3c:07:37:cf:ef:eb:14:dd:d6:d5:09:e7:34:98:a5:2c:61: e7:61:a3:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHrt+soEA+OMjLB78PEI3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NjlmMWMyMTM3MGM0NGRmZDEwZTJhZjY4OGM4YzRlMGVh MTI5NTUwHhcNMjUxMjE4MTEwMDU2WhcNMjUxMjE5MTEwMDU2WjAzMTEwLwYDVQQD Eyg2ODUxZWE2NGFkODA5MmU5MjQxMDU0ZTIxNWFkMjc1ZjE5ZWQ0Y2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArABBXRwY/qJAjGaTM2wVYBh3GaYI n20Cj17wnK9jDku7aCtccSeO8B4ExFDPWXtX330RCRLsBRbWQ/UmSplnnukqHDiL mGwJJWERIIi8YgF/Ml6RzQ3lGbCvREmKMFDYjibPvSnCycAI0LX2BHg4R+ZW/l38 FvRXr1tyLOfjqyhWkVeCUH+mcqzrN9nZRu1ec4MX4rquqgOKMFrY4SfCXR1WJBBb LBwc0pU6uqpkFcAGRB3cWCAF/DAD65YnJlLn7isxiLKBvmhVV1K1s4N/l8zwhnOy ad+QiSHzotkBHHmAtCdNG8zmZdCfcmRya5QG+GR8fIwT8Htad9Bc8d9eWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhR6mStgJLpJBBU4hWtJ18Z7UysMB8GA1UdIwQY MBaAFKZp8cITcMRN/RDir2iMjE4OoSlVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lN2I0MGMtNDE0Yi00NzNhLWI4Yzct YjdiMTQ4MTYyNWIxLzEvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lN2I0MGMtNDE0Yi00NzNhLWI4YzctYjdiMTQ4MTYyNWIx LzEvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjI/PDiBh TlCts7SPjEs/STkhAmtHAK4W78bS5Z3hyIVBo/84pgMoSbWazMsMxRFbE5w/IcJW slDLOleDCwENfA6SfYeo0nGXZSbErBLuBL6hX2GkPh6lVg0c+jDGsD7fDb3CozS/ ZI8dr/s13XKFZhGFcRDtr47j8YrHD6W9p1yKsNwDd0IiEGgmdGg9jVXPmX9DsBR0 RdOZNV9O+WtdfaxPFvBnRPUUQD+PfS9ZFfe/uoxZzppke5OYU1+d8yVY+aI3m6Mk iitojeAwh8hLZcWudcoTszMCJ36VQREfXWV8s5A8IcyRwBkvZzwHN8/v6xTd1tUJ 5zSYpSxh52GjXA== -----END CERTIFICATE-----Generated at Thu Dec 18 15:24:53 2025 by rpki-client