This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.mft File: MN-QKoFpKFoeCclwPGOg89St7kg.mft (raw, json) Hash identifier: 9VpqknAjuaxsR32cTsHX23hcqOHeBFzYBbbKZCatYVE= Subject key identifier: A8:CB:46:6B:D7:BD:A7:50:56:EB:6B:22:0C:39:DA:C7:09:0B:3A:13 Authority key identifier: 30:DF:90:2A:81:69:28:5A:1E:09:C9:70:3C:63:A0:F3:D4:AD:EE:48 Certificate issuer: /CN=30df902a8169285a1e09c9703c63a0f3d4adee48 Certificate serial: 019B619D52953EA946D1E1019535AFFAF805 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MN-QKoFpKFoeCclwPGOg89St7kg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.mft Manifest number: 07E7 Signing time: Sat 27 Dec 2025 21:00:58 +0000 Manifest this update: Sat 27 Dec 2025 21:00:58 +0000 Manifest next update: Sun 28 Dec 2025 21:00:58 +0000 Files and hashes: 1: MN-QKoFpKFoeCclwPGOg89St7kg.crl (hash: pzt9UgQIaogXjDteI+u8erpQ9wyFMGPuo1KLiOfj1vU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.mft rsync://rpki.ripe.net/repository/DEFAULT/MN-QKoFpKFoeCclwPGOg89St7kg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 21:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:9d:52:95:3e:a9:46:d1:e1:01:95:35:af:fa:f8:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30df902a8169285a1e09c9703c63a0f3d4adee48 Validity Not Before: Dec 27 21:00:58 2025 GMT Not After : Dec 28 21:00:58 2025 GMT Subject: CN=a8cb466bd7bda75056eb6b220c39dac7090b3a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:98:cb:35:92:8c:d8:b5:39:79:cb:dc:56: a8:38:f7:e2:b2:2c:90:5c:8f:d9:d1:34:d7:45:9a: e6:72:de:92:9f:86:36:12:9e:4a:3b:12:d0:13:1b: 4c:8c:ce:9d:08:0f:69:0c:0e:0f:dd:12:26:16:29: 59:89:8a:9c:12:8f:e4:dd:8d:d0:6b:b8:89:1b:27: 2a:7a:91:95:6e:98:21:7d:d3:8d:50:f0:a3:b0:be: 3c:bb:e4:b5:b7:0d:40:56:48:7f:63:0b:b3:30:fd: a6:f8:3a:70:64:5f:08:6b:c3:4f:79:ba:ab:aa:b4: ef:db:df:49:60:b9:16:b0:f8:06:88:13:e9:1c:9b: 97:c4:56:d2:71:f0:89:db:97:3d:2d:f2:66:87:fd: 27:d2:30:99:0e:48:66:95:27:16:61:98:40:c9:9e: ae:5b:89:e3:bc:ca:29:ba:5a:ce:3d:32:56:bf:19: 5e:68:5a:2b:13:fb:35:be:75:98:70:e1:36:4c:df: 2f:df:b0:ae:3d:4d:a0:81:c1:0f:3d:56:21:fb:18: fb:93:6f:b3:ca:e6:c6:57:e9:de:9a:a3:6a:b9:87: 0c:b5:c8:81:ef:77:54:28:17:04:cc:0f:74:e3:e1: 30:5f:9b:78:71:2e:1c:c4:2b:7e:bd:82:db:81:7c: 1a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CB:46:6B:D7:BD:A7:50:56:EB:6B:22:0C:39:DA:C7:09:0B:3A:13 X509v3 Authority Key Identifier: keyid:30:DF:90:2A:81:69:28:5A:1E:09:C9:70:3C:63:A0:F3:D4:AD:EE:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MN-QKoFpKFoeCclwPGOg89St7kg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ba7a80-5d54-4e24-99f9-e2994534495a/1/MN-QKoFpKFoeCclwPGOg89St7kg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:4f:94:f0:62:d4:eb:5f:e7:10:8b:d3:b1:11:c5:9b:e8:1f: 04:bc:0e:92:8c:c0:f9:be:c6:92:fb:a3:da:71:5d:0c:79:56: 08:91:71:04:c5:de:a8:71:0a:1a:dc:39:63:a5:4b:dc:46:65: 4f:df:e8:33:31:a4:14:9b:fb:84:fe:4a:fb:3d:87:b7:79:f7: 90:01:4d:c9:53:27:0c:c7:72:ad:a6:93:09:51:a9:0f:a8:1b: d0:7d:85:88:d3:43:87:b3:d9:7f:88:dd:56:30:d8:be:c4:a5: 48:cc:b9:5c:c2:c7:45:6e:fb:44:98:76:a5:d6:c7:5f:64:33: b5:35:5f:6c:0e:11:72:bc:cc:3e:42:d5:b6:08:85:8b:37:8e: a3:db:c6:f5:74:b2:c2:c8:8b:db:d7:78:2c:d2:35:2c:a9:03: 89:96:9b:e3:8d:48:82:df:9d:9b:2e:21:0d:a8:c7:b4:76:05: a3:4d:a4:32:91:2d:fe:7c:39:19:ea:c6:27:63:a4:17:a8:99: 21:7e:bb:1b:09:58:c9:1a:e1:7c:1d:70:22:5b:ba:78:f3:ef: 97:76:26:29:59:5b:22:20:1f:f4:9c:6b:21:ce:72:11:4b:ad: b7:f5:11:0c:b7:71:9a:01:34:46:35:de:bd:33:08:af:61:d6: 57:4f:68:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthnVKVPqlG0eEBlTWv+vgFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZGY5MDJhODE2OTI4NWExZTA5Yzk3MDNjNjNhMGYzZDRh ZGVlNDgwHhcNMjUxMjI3MjEwMDU4WhcNMjUxMjI4MjEwMDU4WjAzMTEwLwYDVQQD EyhhOGNiNDY2YmQ3YmRhNzUwNTZlYjZiMjIwYzM5ZGFjNzA5MGIzYTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwOYyzWSjNi1OXnL3FaoOPfisiyQ XI/Z0TTXRZrmct6Sn4Y2Ep5KOxLQExtMjM6dCA9pDA4P3RImFilZiYqcEo/k3Y3Q a7iJGycqepGVbpghfdONUPCjsL48u+S1tw1AVkh/YwuzMP2m+DpwZF8Ia8NPebqr qrTv299JYLkWsPgGiBPpHJuXxFbScfCJ25c9LfJmh/0n0jCZDkhmlScWYZhAyZ6u W4njvMopulrOPTJWvxleaForE/s1vnWYcOE2TN8v37CuPU2ggcEPPVYh+xj7k2+z yubGV+nemqNquYcMtciB73dUKBcEzA904+EwX5t4cS4cxCt+vYLbgXwauQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjLRmvXvadQVutrIgw52scJCzoTMB8GA1UdIwQY MBaAFDDfkCqBaShaHgnJcDxjoPPUre5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU4tUUtvRnBLRm9lQ2Nsd1BHT2c4OVN0N2tnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iYTdhODAtNWQ1NC00ZTI0LTk5Zjkt ZTI5OTQ1MzQ0OTVhLzEvTU4tUUtvRnBLRm9lQ2Nsd1BHT2c4OVN0N2tnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9iYTdhODAtNWQ1NC00ZTI0LTk5ZjktZTI5OTQ1MzQ0OTVh LzEvTU4tUUtvRnBLRm9lQ2Nsd1BHT2c4OVN0N2tnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVk+U8GLU 61/nEIvTsRHFm+gfBLwOkozA+b7Gkvuj2nFdDHlWCJFxBMXeqHEKGtw5Y6VL3EZl T9/oMzGkFJv7hP5K+z2Ht3n3kAFNyVMnDMdyraaTCVGpD6gb0H2FiNNDh7PZf4jd VjDYvsSlSMy5XMLHRW77RJh2pdbHX2QztTVfbA4RcrzMPkLVtgiFizeOo9vG9XSy wsiL29d4LNI1LKkDiZab441Igt+dmy4hDajHtHYFo02kMpEt/nw5GerGJ2OkF6iZ IX67GwlYyRrhfB1wIlu6ePPvl3YmKVlbIiAf9JxrIc5yEUutt/URDLdxmgE0RjXe vTMIr2HWV09oAA== -----END CERTIFICATE-----Generated at Sun Dec 28 05:49:54 2025 by rpki-client