This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft File: mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json) Hash identifier: 5cmwha3GpscH1WxUwBynSIjCXygBzLF3vpPAgVGfkqo= Subject key identifier: A8:3E:BC:AC:A9:5C:86:E2:D3:45:3B:A0:1B:EB:2C:39:44:10:EF:77 Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d Certificate serial: 019B4249214BF3330E0B32DABBC19490E279 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft Manifest number: 0B54 Signing time: Sun 21 Dec 2025 19:00:47 +0000 Manifest this update: Sun 21 Dec 2025 19:00:47 +0000 Manifest next update: Mon 22 Dec 2025 19:00:47 +0000 Files and hashes: 1: 30qNUm4LVV2JzJAozjpjCljWLl8.roa (hash: xrG/y+AM3EYc5/EtWlaqcCc/K9J1cl96ejgIPJZYD9U=) 2: Z6_bYbvmyerAM_VgnIaDcW67oTI.roa (hash: QWDvfYg2hEe0SCxsF7DniMhJuC7NKbaUI8wFEj7S2ns=) 3: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: /97QnUwb5fuGafxBKXq0e0FbPk1m8YxLuMbreSIzyGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:49:21:4b:f3:33:0e:0b:32:da:bb:c1:94:90:e2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d Validity Not Before: Dec 21 19:00:47 2025 GMT Not After : Dec 22 19:00:47 2025 GMT Subject: CN=a83ebcaca95c86e2d3453ba01beb2c394410ef77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:10:cf:96:cd:e6:7c:d5:40:93:05:ed:33:46: d8:27:ca:2a:41:d2:9e:a2:7c:85:0a:ed:75:e9:43: 3f:9a:51:54:76:ea:a9:6b:70:91:3f:6f:19:cb:f2: d2:15:3b:8a:d2:6a:81:be:c2:55:5b:b7:b4:4c:94: 46:cf:3b:13:97:d7:79:0b:10:64:51:cb:7e:36:78: b5:47:6a:03:ae:40:67:6b:b8:4b:6e:d5:71:65:23: ff:33:d2:7e:c8:71:88:56:cb:fb:04:a3:84:df:1a: ee:25:df:23:24:de:d8:d2:77:c0:ef:7f:27:b3:53: 79:8c:bf:a0:81:83:d4:7d:1e:c2:8c:b0:00:77:5d: 88:15:b5:ef:da:07:9e:da:30:22:c1:55:58:cd:f4: 17:75:3a:74:c7:bc:18:6b:03:51:d8:4f:b3:d0:3b: bd:0d:9a:17:33:33:a3:66:5b:fc:3d:89:43:5f:e7: 06:78:a3:11:b9:1c:86:e3:3c:01:cf:c7:62:9a:67: 53:9e:ee:f3:6c:2d:5d:2c:31:7a:c1:50:98:91:ae: 38:e9:0b:09:de:f5:c7:4a:f4:b2:82:e2:40:e6:97: 23:eb:b5:aa:e6:17:a4:fd:f9:bc:06:ae:e0:51:40: 6f:3c:63:a8:18:19:0e:f9:1b:d5:21:14:ab:03:47: 2e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:3E:BC:AC:A9:5C:86:E2:D3:45:3B:A0:1B:EB:2C:39:44:10:EF:77 X509v3 Authority Key Identifier: keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:70:c8:76:b5:35:ef:4b:ec:1f:58:9f:0a:14:65:b4:14:7c: fa:c7:41:80:38:bc:f7:6e:36:a0:03:0f:fd:e5:76:d2:1f:1c: e2:8e:dd:95:8f:7f:d5:a9:67:a3:bc:48:f5:3e:80:a1:2d:86: e6:96:ca:f9:ee:c8:0b:0b:6f:a6:98:86:5c:01:43:00:ad:d2: ca:2a:4a:ee:f0:18:96:0e:c0:01:1a:1a:ea:71:27:d9:4e:ce: 72:be:64:c3:41:ed:a0:48:eb:4e:1e:3a:0f:ad:1a:6a:2e:e0: 0e:35:d4:0d:79:6f:c2:8e:a9:53:cc:94:55:c7:0b:bb:0e:38: 20:89:8f:1a:58:d0:20:45:3c:59:5d:ff:e2:da:fd:a9:06:06: c5:b0:88:16:5b:77:a4:34:d1:2a:b6:d3:eb:91:04:31:66:96: f5:51:f1:c6:c2:6e:54:bb:a8:75:f9:f4:a2:00:a2:8c:36:49: 53:de:40:4e:cd:7b:da:21:92:d7:42:06:38:3c:12:58:33:ad: 08:7d:49:02:ba:de:d4:cf:ea:f4:50:40:7c:30:1c:cf:39:fa: dc:2a:c6:a9:3b:fb:ea:8b:29:9f:f3:20:89:20:23:8f:d8:09: 98:64:e2:a5:35:87:1b:9e:7e:c8:c8:51:7b:6a:ff:83:5a:b6: 47:54:5b:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSSFL8zMOCzLau8GUkOJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YzljMzE4OWJlYzEzNzkzMTFiZDEzNTNmYTk3NDlhNjhk ZDk5MmQwHhcNMjUxMjIxMTkwMDQ3WhcNMjUxMjIyMTkwMDQ3WjAzMTEwLwYDVQQD EyhhODNlYmNhY2E5NWM4NmUyZDM0NTNiYTAxYmViMmMzOTQ0MTBlZjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhDPls3mfNVAkwXtM0bYJ8oqQdKe onyFCu116UM/mlFUduqpa3CRP28Zy/LSFTuK0mqBvsJVW7e0TJRGzzsTl9d5CxBk Uct+Nni1R2oDrkBna7hLbtVxZSP/M9J+yHGIVsv7BKOE3xruJd8jJN7Y0nfA738n s1N5jL+ggYPUfR7CjLAAd12IFbXv2gee2jAiwVVYzfQXdTp0x7wYawNR2E+z0Du9 DZoXMzOjZlv8PYlDX+cGeKMRuRyG4zwBz8dimmdTnu7zbC1dLDF6wVCYka446QsJ 3vXHSvSyguJA5pcj67Wq5hek/fm8Bq7gUUBvPGOoGBkO+RvVIRSrA0cudQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKg+vKypXIbi00U7oBvrLDlEEO93MB8GA1UdIwQY MBaAFJjJwxib7BN5MRvRNT+pdJpo3ZktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83MDEzOWQtMWU3NS00MGI1LTkxNmEt OWM4MTZhNDA0OTBlLzEvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83MDEzOWQtMWU3NS00MGI1LTkxNmEtOWM4MTZhNDA0OTBl LzEvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADnDIdrU1 70vsH1ifChRltBR8+sdBgDi89242oAMP/eV20h8c4o7dlY9/1alno7xI9T6AoS2G 5pbK+e7ICwtvppiGXAFDAK3SyipK7vAYlg7AARoa6nEn2U7Ocr5kw0HtoEjrTh46 D60aai7gDjXUDXlvwo6pU8yUVccLuw44IImPGljQIEU8WV3/4tr9qQYGxbCIFlt3 pDTRKrbT65EEMWaW9VHxxsJuVLuodfn0ogCijDZJU95ATs172iGS10IGODwSWDOt CH1JArre1M/q9FBAfDAczzn63CrGqTv76ospn/MgiSAjj9gJmGTipTWHG55+yMhR e2r/g1q2R1Rb2A== -----END CERTIFICATE-----Generated at Mon Dec 22 02:32:59 2025 by rpki-client