This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft File: cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json) Hash identifier: DhW0j+fwzixL/N2k7KcYCtnX+5/0Bf+JAxYJwdBynG4= Subject key identifier: 18:37:75:51:63:A8:48:16:24:BE:F2:2E:93:C7:60:F8:B3:A5:4C:50 Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36 Certificate issuer: /CN=70c9d06c51add6829063f1b67b175d0c0001e736 Certificate serial: 019B4A0422D66D83E99C0E09E5932F150E92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 07:02:23 +0000 Manifest this update: Tue 23 Dec 2025 07:02:23 +0000 Manifest next update: Wed 24 Dec 2025 07:02:23 +0000 Files and hashes: 1: 5giw-glAqkb4ga3tho0-9kOiFpQ.roa (hash: wPSRGEewfNLQ9tlgNj7BpPtVBQPthONm5g14lvlKftQ=) 2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: uK4mz/n7AsAY/YaPDXnZ76bBhda5zqARvww/jUjZpl8=) 3: lO9ygzFEh6vlzFwa5Ivf2tcAutc.roa (hash: 0P+81vJocBAhACHTKyLTeE5L1N5kiVqd+TGA07c8eWU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:04:22:d6:6d:83:e9:9c:0e:09:e5:93:2f:15:0e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736 Validity Not Before: Dec 23 07:02:23 2025 GMT Not After : Dec 24 07:02:23 2025 GMT Subject: CN=1837755163a8481624bef22e93c760f8b3a54c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:26:f7:50:65:fd:97:47:9b:78:87:23:7e:a1: f4:eb:02:73:53:8f:a2:f7:ea:2e:bd:27:e0:73:e6: 62:3d:42:a8:e9:54:3f:76:8a:de:40:5c:98:b9:21: 85:3b:8f:81:3a:68:19:2d:5e:e4:49:78:37:b0:b6: ef:58:5d:66:66:fd:cd:3b:22:be:e4:ef:15:a1:6b: 50:6c:c9:02:cb:7c:a5:da:17:cf:f1:6c:e3:b9:85: 81:18:fc:42:0e:f7:d8:b6:b4:8e:95:e7:4c:44:bd: 08:b9:ea:32:60:74:f1:26:a8:d6:95:de:c8:86:eb: ac:35:ca:dc:d0:eb:0a:4a:35:5b:67:ca:4b:c2:cb: 35:37:8b:ac:15:e9:dc:05:47:7a:c8:21:7f:d5:d2: 7c:e4:42:73:d2:69:d1:58:7c:25:9e:72:97:e3:b8: 8c:cf:52:62:a5:99:51:90:6a:28:b4:03:90:93:78: 18:14:51:fd:5c:88:ec:49:c8:df:60:0c:66:58:60: ee:38:ca:af:b6:ab:e3:0c:61:60:0d:95:fb:5e:6d: bb:43:90:07:0d:68:89:f6:91:ad:d2:4c:30:79:f6: e7:8f:b8:ae:81:4d:99:a9:ed:c3:c8:59:01:a0:e8: b7:97:ff:77:83:2e:cf:a4:9e:7d:0c:78:84:15:c3: c0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:37:75:51:63:A8:48:16:24:BE:F2:2E:93:C7:60:F8:B3:A5:4C:50 X509v3 Authority Key Identifier: keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:f2:80:cd:cc:7c:d9:8a:5d:13:b2:0a:d0:2c:2b:0a:d8:e6: 67:74:17:1d:2c:fb:7f:38:07:5e:0f:15:00:5c:4f:08:76:3b: a5:53:6a:2f:37:96:59:bc:47:b2:98:9c:a6:b2:31:48:94:1f: 07:05:83:80:2f:72:cb:80:e1:4c:64:49:30:bc:7b:15:69:cd: 2e:bb:f8:1d:20:c2:9e:d2:95:17:0c:fa:8b:99:bb:65:1c:5c: 4c:89:f1:a3:4d:a8:14:e1:b4:47:65:ab:47:c0:2b:4c:28:09: 50:c2:2f:39:fc:c2:fb:11:56:1b:95:66:c9:ea:6c:b0:e4:a5: ff:8c:13:fa:39:3b:6b:94:a1:32:d5:33:ac:8a:3f:3e:28:b8: 86:06:bd:40:6c:02:f1:c0:f0:0b:eb:10:26:f9:40:1b:bb:65: a3:71:02:c6:c1:3d:a3:3d:72:76:b8:17:10:e8:37:9e:ce:ad: ca:38:70:a8:19:43:ed:e9:ed:52:61:8c:26:b5:7b:22:da:4e: 5e:eb:ff:19:7d:98:bd:ae:4a:75:0b:7f:db:55:1d:35:53:64: f7:c2:bf:1e:c4:6e:b4:d9:75:95:ad:aa:ce:f4:e8:31:07:c2: e3:2d:43:e1:b2:cb:e9:f5:3e:ab:c7:a8:ec:c4:44:d6:ca:0e: 4c:9a:d0:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKBCLWbYPpnA4J5ZMvFQ6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYzlkMDZjNTFhZGQ2ODI5MDYzZjFiNjdiMTc1ZDBjMDAw MWU3MzYwHhcNMjUxMjIzMDcwMjIzWhcNMjUxMjI0MDcwMjIzWjAzMTEwLwYDVQQD EygxODM3NzU1MTYzYTg0ODE2MjRiZWYyMmU5M2M3NjBmOGIzYTU0YzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSb3UGX9l0ebeIcjfqH06wJzU4+i 9+ouvSfgc+ZiPUKo6VQ/doreQFyYuSGFO4+BOmgZLV7kSXg3sLbvWF1mZv3NOyK+ 5O8VoWtQbMkCy3yl2hfP8WzjuYWBGPxCDvfYtrSOledMRL0IueoyYHTxJqjWld7I huusNcrc0OsKSjVbZ8pLwss1N4usFencBUd6yCF/1dJ85EJz0mnRWHwlnnKX47iM z1JipZlRkGootAOQk3gYFFH9XIjsScjfYAxmWGDuOMqvtqvjDGFgDZX7Xm27Q5AH DWiJ9pGt0kwwefbnj7iugU2Zqe3DyFkBoOi3l/93gy7PpJ59DHiEFcPAtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBg3dVFjqEgWJL7yLpPHYPizpUxQMB8GA1UdIwQY MBaAFHDJ0GxRrdaCkGPxtnsXXQwAAec2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yOGRkMzAtZWMwOC00ZGM4LWExZDEt NWQzYTg2NDk0Nzc1LzEvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8yOGRkMzAtZWMwOC00ZGM4LWExZDEtNWQzYTg2NDk0Nzc1 LzEvY01uUWJGR3Qxb0tRWV9HMmV4ZGREQUFCNXpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfPKAzcx8 2YpdE7IK0CwrCtjmZ3QXHSz7fzgHXg8VAFxPCHY7pVNqLzeWWbxHspicprIxSJQf BwWDgC9yy4DhTGRJMLx7FWnNLrv4HSDCntKVFwz6i5m7ZRxcTInxo02oFOG0R2Wr R8ArTCgJUMIvOfzC+xFWG5VmyepssOSl/4wT+jk7a5ShMtUzrIo/Pii4hga9QGwC 8cDwC+sQJvlAG7tlo3ECxsE9oz1ydrgXEOg3ns6tyjhwqBlD7entUmGMJrV7ItpO Xuv/GX2Yva5KdQt/21UdNVNk98K/HsRutNl1la2qzvToMQfC4y1D4bLL6fU+q8eo 7MRE1soOTJrQ3g== -----END CERTIFICATE-----Generated at Tue Dec 23 09:19:05 2025 by rpki-client