This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft File: mnF-0dxIgETl4qsAdUM1WM_ejIU.mft (raw, json) Hash identifier: 7WxvJ3d9ExLDT7Cdjq4p5XCQlKPyYHXEaycE2WIJGpQ= Subject key identifier: 3A:80:85:F9:32:7B:F7:5C:25:1C:83:FB:49:A3:62:E3:50:9A:4A:94 Authority key identifier: 9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85 Certificate issuer: /CN=9a717ed1dc488044e5e2ab0075433558cfde8c85 Certificate serial: 019B35326394A7E2832E1D85807500AB7366 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft Manifest number: 0671 Signing time: Fri 19 Dec 2025 06:00:53 +0000 Manifest this update: Fri 19 Dec 2025 06:00:53 +0000 Manifest next update: Sat 20 Dec 2025 06:00:53 +0000 Files and hashes: 1: 1-I5euRLEKsr7FF-4VskQLdu5Wm0.roa (hash: 4AXnB9gGffBa+5UGJwTlfxl3dTLBtwfWaDwofBbf+WY=) 2: MtoIhFzzjtMtI4g5kxOun27y3IM.roa (hash: DlZC6F8VIFuzmjWhSIX/LygNaAgpAHPicElZhEshqgM=) 3: mnF-0dxIgETl4qsAdUM1WM_ejIU.crl (hash: wrtrMo7HuL9N2aMu8ManuVoGhY8XCrqa64I+DQgYdrc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:63:94:a7:e2:83:2e:1d:85:80:75:00:ab:73:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a717ed1dc488044e5e2ab0075433558cfde8c85 Validity Not Before: Dec 19 06:00:53 2025 GMT Not After : Dec 20 06:00:53 2025 GMT Subject: CN=3a8085f9327bf75c251c83fb49a362e3509a4a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:55:8e:2b:1d:42:4e:7d:7f:ac:51:aa:52:d5: e4:4c:56:5f:87:41:63:69:c1:d1:ea:d8:31:e9:9a: 40:f2:36:22:eb:ed:25:9d:a6:fa:90:7f:34:76:14: 54:5e:70:06:f5:d1:10:ea:6e:45:39:aa:8b:46:c1: f4:6c:f1:4d:7e:e6:9a:f7:d4:60:f7:2e:47:04:28: 37:7a:69:3d:57:a9:72:35:0e:e8:f2:82:36:3a:e5: 2a:05:d4:2b:d6:87:4f:fe:7c:7f:4b:4c:71:70:e3: aa:38:d5:e9:24:58:77:a6:7d:f2:b3:53:d0:ff:59: 2e:1c:24:6c:c9:c5:46:3b:7a:ce:57:fd:26:b4:86: fe:22:d5:82:49:b6:15:12:9b:b3:05:b6:99:3c:c2: 05:4d:30:61:75:20:c8:db:55:db:93:f3:7b:d8:dc: d3:1a:04:2f:37:30:a8:c8:18:d8:95:22:77:f0:dc: ea:b9:d2:08:75:4a:e3:67:02:4e:e7:ed:b9:22:eb: 87:16:d4:9f:26:ed:4d:b4:63:6e:93:f8:93:f3:86: 4c:a9:41:80:57:ea:d9:0a:4b:a1:8b:2a:86:a6:ff: 03:72:a2:9c:51:89:e2:8f:3c:a9:71:92:60:69:a4: 7d:81:ca:1e:98:1a:cb:2f:9c:1c:10:60:1d:3d:e3: 7d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:80:85:F9:32:7B:F7:5C:25:1C:83:FB:49:A3:62:E3:50:9A:4A:94 X509v3 Authority Key Identifier: keyid:9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:25:1e:10:0d:d0:d5:97:1b:70:0b:e0:65:b0:dd:4c:4d:27: 1a:12:e5:d9:25:1c:09:9c:e5:0b:bc:2f:37:7a:86:e0:98:0e: 3a:e2:1e:b7:d5:c0:e9:a8:02:c7:b8:17:27:5d:be:84:0c:3c: 4f:96:82:20:1f:17:c6:70:48:b0:81:af:f1:9c:fa:7c:03:15: bf:d2:0b:9b:b4:57:89:2c:55:cd:9c:56:72:a1:37:d8:ef:f4: bd:f9:a4:67:67:2b:97:ab:a6:a5:a4:d0:1c:d0:cd:cf:1d:43: be:f4:9d:62:97:bc:1d:ee:15:06:62:5b:4b:64:33:8c:23:ce: f2:0d:18:65:05:67:dd:51:47:23:21:db:be:b9:e8:69:88:f6: 9e:2a:c4:31:60:bb:9a:ad:73:d8:d8:19:6a:9d:04:ba:f9:9b: 79:da:4f:36:ec:57:16:0f:d5:16:af:25:8c:dc:e4:22:82:8a: a4:50:a0:ee:73:70:f7:3b:60:55:0b:28:89:2b:70:c7:5b:91: 21:18:ad:b8:79:62:15:01:b2:95:86:1b:71:fc:04:59:89:f5: 0c:12:e6:72:7f:83:06:1b:64:ee:ac:8f:bc:ad:5e:43:e7:a3: ad:ae:ef:6d:c2:17:9a:e2:81:4c:43:30:c1:b8:21:e8:d2:73: d1:1e:53:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1MmOUp+KDLh2FgHUAq3NmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNzE3ZWQxZGM0ODgwNDRlNWUyYWIwMDc1NDMzNTU4Y2Zk ZThjODUwHhcNMjUxMjE5MDYwMDUzWhcNMjUxMjIwMDYwMDUzWjAzMTEwLwYDVQQD EygzYTgwODVmOTMyN2JmNzVjMjUxYzgzZmI0OWEzNjJlMzUwOWE0YTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1WOKx1CTn1/rFGqUtXkTFZfh0Fj acHR6tgx6ZpA8jYi6+0lnab6kH80dhRUXnAG9dEQ6m5FOaqLRsH0bPFNfuaa99Rg 9y5HBCg3emk9V6lyNQ7o8oI2OuUqBdQr1odP/nx/S0xxcOOqONXpJFh3pn3ys1PQ /1kuHCRsycVGO3rOV/0mtIb+ItWCSbYVEpuzBbaZPMIFTTBhdSDI21Xbk/N72NzT GgQvNzCoyBjYlSJ38NzqudIIdUrjZwJO5+25IuuHFtSfJu1NtGNuk/iT84ZMqUGA V+rZCkuhiyqGpv8DcqKcUYnijzypcZJgaaR9gcoemBrLL5wcEGAdPeN9JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqAhfkye/dcJRyD+0mjYuNQmkqUMB8GA1UdIwQY MBaAFJpxftHcSIBE5eKrAHVDNVjP3oyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW5GLTBkeElnRVRsNHFzQWRVTTFXTV9laklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kMjYxYzEtZDdmMy00ZmU4LWFiYzYt MTA5NDM5MTY2OWVmLzEvbW5GLTBkeElnRVRsNHFzQWRVTTFXTV9laklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kMjYxYzEtZDdmMy00ZmU4LWFiYzYtMTA5NDM5MTY2OWVm LzEvbW5GLTBkeElnRVRsNHFzQWRVTTFXTV9laklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiUeEA3Q 1ZcbcAvgZbDdTE0nGhLl2SUcCZzlC7wvN3qG4JgOOuIet9XA6agCx7gXJ12+hAw8 T5aCIB8XxnBIsIGv8Zz6fAMVv9ILm7RXiSxVzZxWcqE32O/0vfmkZ2crl6umpaTQ HNDNzx1DvvSdYpe8He4VBmJbS2QzjCPO8g0YZQVn3VFHIyHbvrnoaYj2nirEMWC7 mq1z2NgZap0EuvmbedpPNuxXFg/VFq8ljNzkIoKKpFCg7nNw9ztgVQsoiStwx1uR IRituHliFQGylYYbcfwEWYn1DBLmcn+DBhtk7qyPvK1eQ+ejra7vbcIXmuKBTEMw wbgh6NJz0R5Tww== -----END CERTIFICATE-----Generated at Fri Dec 19 15:58:58 2025 by rpki-client