This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft File: mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json) Hash identifier: UMaSCv7e7JSlngn6IegwliljYSB7ieZy+XZs5bnyZxE= Subject key identifier: 20:E2:26:F8:BF:73:96:19:3B:BD:19:DA:CA:A6:50:02:71:A9:38:83 Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d Certificate serial: 019B5B640FE7F18F48D822BB981D25552BAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft Manifest number: 0B61 Signing time: Fri 26 Dec 2025 16:00:42 +0000 Manifest this update: Fri 26 Dec 2025 16:00:42 +0000 Manifest next update: Sat 27 Dec 2025 16:00:42 +0000 Files and hashes: 1: 30qNUm4LVV2JzJAozjpjCljWLl8.roa (hash: xrG/y+AM3EYc5/EtWlaqcCc/K9J1cl96ejgIPJZYD9U=) 2: Z6_bYbvmyerAM_VgnIaDcW67oTI.roa (hash: QWDvfYg2hEe0SCxsF7DniMhJuC7NKbaUI8wFEj7S2ns=) 3: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: zmOoYmisVZnfynVvO62VcplTgJP+0FiSnG5uhElj79U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:64:0f:e7:f1:8f:48:d8:22:bb:98:1d:25:55:2b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d Validity Not Before: Dec 26 16:00:42 2025 GMT Not After : Dec 27 16:00:42 2025 GMT Subject: CN=20e226f8bf7396193bbd19dacaa6500271a93883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:91:41:37:22:5d:2f:de:8e:44:61:45:c5:a3: e9:d7:9f:22:a5:41:b5:68:ca:13:d6:9b:69:74:0f: 72:28:c1:56:3e:bd:6b:da:34:1a:d5:e6:a9:ed:51: 0b:b5:d8:e9:cf:b1:2f:f7:97:86:6a:01:90:d3:e5: 0a:4d:c0:1e:22:a0:37:2c:2c:50:80:85:93:41:a3: cf:51:ad:1b:90:7b:c7:f1:f4:a8:3f:78:ff:af:50: b6:4c:20:25:76:d8:7e:d9:44:0c:e9:39:3e:0d:bd: 38:de:49:9f:4a:70:0b:1a:d8:65:a1:08:e6:3a:98: a0:d4:99:77:21:73:2f:7d:e3:78:14:1f:78:c9:27: 40:b2:14:83:00:09:5c:3c:30:10:47:f4:df:74:6a: b8:c4:9e:52:83:d9:63:3b:0e:b5:28:b9:eb:b0:da: 88:e5:7d:c7:2b:f8:94:5f:c6:65:14:75:d6:11:0e: f1:39:18:6b:e0:c5:44:15:8d:15:4e:d9:78:09:80: 80:b4:e4:13:ed:e0:5e:c9:5d:ce:65:4d:77:78:1e: 90:fb:d2:c6:03:68:a9:23:cb:14:e0:f1:11:2a:a7: 98:ad:db:c8:c1:9c:81:27:32:f9:b7:e8:90:9e:93: a2:d9:6a:3a:3f:36:0a:cc:43:49:5e:bd:d5:f6:60: b6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E2:26:F8:BF:73:96:19:3B:BD:19:DA:CA:A6:50:02:71:A9:38:83 X509v3 Authority Key Identifier: keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:02:7e:2f:cb:15:07:f6:80:c4:51:50:65:47:ae:1c:bd:16: 09:9d:27:d0:98:9e:f3:84:36:e5:cb:b1:25:2a:df:68:2b:20: 15:bc:0c:ae:53:9f:e4:59:5f:03:46:2f:12:43:55:59:cd:b1: 19:d2:8b:91:2a:99:79:a1:af:ad:75:db:56:c2:e5:f8:2a:68: ca:92:5c:34:16:ec:82:d8:ea:16:08:a3:b3:9f:fc:4a:b3:4e: d8:a0:9e:98:34:0c:37:ca:59:ef:7b:77:5d:ba:64:83:a7:d9: 79:5b:63:51:86:5e:6f:16:ac:74:b6:54:c4:5b:e9:75:13:f3: bd:bc:ed:d9:01:a8:86:5b:2b:83:35:cf:d1:96:5e:de:a5:04: 99:06:98:8f:ba:92:fb:b3:33:40:c4:c0:79:7a:dc:b4:d6:bd: fd:ec:39:1f:63:0c:a2:b0:ff:fd:54:7d:55:0a:25:a0:84:8e: 70:22:5a:e5:31:53:dd:a9:2b:a6:a1:09:60:91:21:95:ae:04: 7e:8c:03:19:0d:9c:de:a0:90:bf:d1:fc:01:c4:0d:ff:46:8d: cb:11:96:d3:b6:7e:5f:1c:1c:9e:7c:1f:a4:d3:82:cc:3f:91: 3a:e5:95:28:af:cb:e3:1a:02:d1:70:54:18:e6:6b:3f:ee:fd: fd:96:6f:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtbZA/n8Y9I2CK7mB0lVSutMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YzljMzE4OWJlYzEzNzkzMTFiZDEzNTNmYTk3NDlhNjhk ZDk5MmQwHhcNMjUxMjI2MTYwMDQyWhcNMjUxMjI3MTYwMDQyWjAzMTEwLwYDVQQD EygyMGUyMjZmOGJmNzM5NjE5M2JiZDE5ZGFjYWE2NTAwMjcxYTkzODgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35FBNyJdL96ORGFFxaPp158ipUG1 aMoT1ptpdA9yKMFWPr1r2jQa1eap7VELtdjpz7Ev95eGagGQ0+UKTcAeIqA3LCxQ gIWTQaPPUa0bkHvH8fSoP3j/r1C2TCAldth+2UQM6Tk+Db043kmfSnALGthloQjm Opig1Jl3IXMvfeN4FB94ySdAshSDAAlcPDAQR/TfdGq4xJ5Sg9ljOw61KLnrsNqI 5X3HK/iUX8ZlFHXWEQ7xORhr4MVEFY0VTtl4CYCAtOQT7eBeyV3OZU13eB6Q+9LG A2ipI8sU4PERKqeYrdvIwZyBJzL5t+iQnpOi2Wo6PzYKzENJXr3V9mC2TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDiJvi/c5YZO70Z2sqmUAJxqTiDMB8GA1UdIwQY MBaAFJjJwxib7BN5MRvRNT+pdJpo3ZktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83MDEzOWQtMWU3NS00MGI1LTkxNmEt OWM4MTZhNDA0OTBlLzEvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83MDEzOWQtMWU3NS00MGI1LTkxNmEtOWM4MTZhNDA0OTBl LzEvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIAJ+L8sV B/aAxFFQZUeuHL0WCZ0n0Jie84Q25cuxJSrfaCsgFbwMrlOf5FlfA0YvEkNVWc2x GdKLkSqZeaGvrXXbVsLl+CpoypJcNBbsgtjqFgijs5/8SrNO2KCemDQMN8pZ73t3 Xbpkg6fZeVtjUYZebxasdLZUxFvpdRPzvbzt2QGohlsrgzXP0ZZe3qUEmQaYj7qS +7MzQMTAeXrctNa9/ew5H2MMorD//VR9VQoloISOcCJa5TFT3akrpqEJYJEhla4E fowDGQ2c3qCQv9H8AcQN/0aNyxGW07Z+XxwcnnwfpNOCzD+ROuWVKK/L4xoC0XBU GOZrP+79/ZZvaw== -----END CERTIFICATE-----Generated at Fri Dec 26 23:11:37 2025 by rpki-client