This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft File: mnj9TUGkk4S99ufcPrvFAL9m2dU.mft (raw, json) Hash identifier: pS5DnRe+OrUD8Jp1GR3EZB1ePJisK32MIoRFOXV4nx8= Subject key identifier: 72:4A:F3:9F:12:0F:98:16:0B:62:FA:52:3B:AD:92:C8:2A:AD:F9:86 Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5 Certificate issuer: /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5 Certificate serial: 019B397DD50E8AB309E4B835C7492B48536C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft Manifest number: 1786 Signing time: Sat 20 Dec 2025 02:01:46 +0000 Manifest this update: Sat 20 Dec 2025 02:01:46 +0000 Manifest next update: Sun 21 Dec 2025 02:01:46 +0000 Files and hashes: 1: UxU055m6SYgLYJdY0EIHyH-buK4.roa (hash: L8Prey4FtmmkUZS9Fb3qw934vxOuIVmwZLaUrRs5uYI=) 2: g-ueJOZ8CrwpGCeGD3tl16S98d0.roa (hash: bDoSFJsdsspb9o+5HCKGnMJFTdCyV6X4FzTImtyv2cE=) 3: mnj9TUGkk4S99ufcPrvFAL9m2dU.crl (hash: f+8flEkeTdc+zMoz9eUsv9p7ltzu5ed1tkiVJ9A12+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:d5:0e:8a:b3:09:e4:b8:35:c7:49:2b:48:53:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5 Validity Not Before: Dec 20 02:01:46 2025 GMT Not After : Dec 21 02:01:46 2025 GMT Subject: CN=724af39f120f98160b62fa523bad92c82aadf986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:aa:5c:7d:ac:e1:60:2a:12:dd:25:26:4a:b9: 3b:58:e5:53:7c:01:d7:c1:e6:a9:16:72:e9:35:f1: 1f:31:4b:07:84:46:4a:db:a1:19:f2:2f:68:fe:76: 21:08:1e:89:f0:74:94:be:d3:03:d6:bf:1e:a5:26: 0b:03:84:58:30:2f:d0:dd:05:6c:12:f9:62:af:9f: 01:e0:b8:d5:39:08:c8:e8:cc:f7:06:52:98:1d:57: 2a:d4:d7:a6:82:d0:b2:81:5b:36:3b:ac:ba:0f:be: 96:a4:fb:93:34:19:86:75:3c:e6:16:50:13:22:13: 58:a9:de:a6:aa:30:36:d4:0e:79:eb:6d:d4:b4:ad: b9:89:40:5a:e6:3a:51:01:8e:46:68:14:4f:33:a7: 7b:93:50:77:b5:e4:1e:bd:a7:4d:28:0a:5d:35:8d: de:ac:c8:b2:de:74:28:35:8d:dd:d1:c4:9f:8b:f5: 7d:5f:fa:76:9f:bf:9e:5b:6b:ec:ba:0f:d4:41:74: 70:d7:8c:f0:fa:27:4b:50:e6:b2:18:6b:f6:19:14: 2d:9e:74:4a:5e:53:3c:6c:a6:88:18:e3:87:ad:0d: e3:82:29:3c:51:d9:59:38:ed:94:73:93:62:59:45: b4:6b:0b:4f:3d:0e:15:ca:37:d5:a0:95:7e:ae:9d: e1:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4A:F3:9F:12:0F:98:16:0B:62:FA:52:3B:AD:92:C8:2A:AD:F9:86 X509v3 Authority Key Identifier: keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:84:51:b9:35:28:c6:8e:10:69:ef:dd:b6:de:c1:1d:8f:10: 7d:a8:78:7d:6f:eb:ce:06:92:22:1e:ed:24:e3:18:fd:b5:66: 55:cd:e4:3c:35:10:dc:2c:25:6b:39:ab:90:9f:37:80:78:32: 3f:0b:57:31:71:a5:d1:a2:42:72:e1:58:cd:e6:93:55:1c:ad: a1:dd:ec:47:27:a8:ae:dd:c8:77:2a:3e:58:b0:4d:88:07:3f: 6f:8e:79:b9:f9:a9:fc:27:20:84:1a:80:e0:06:aa:8a:74:76: 55:bb:b5:c3:a6:f0:17:f4:17:ee:2d:ec:65:1d:6e:4d:eb:67: c9:8c:4c:4a:6a:fd:1e:39:3c:a2:3e:fa:3c:89:21:38:56:ff: 2b:16:be:50:3c:38:c3:67:9f:0f:73:86:c8:e0:c3:74:61:a4: 29:87:67:ad:07:e3:d7:80:72:f9:27:25:fd:48:15:d0:67:89: 77:95:78:96:00:0e:89:79:aa:e0:00:f8:cb:a3:73:f2:7b:b5: 2c:3a:bf:75:86:7e:a9:cf:17:ff:ee:18:20:71:27:31:29:21: 09:20:d2:e6:0d:57:9d:dd:90:e4:e6:7b:df:62:9f:92:e6:81: 17:ed:15:af:c6:55:70:2a:d1:58:2b:c8:33:6b:4f:92:75:93: 30:d8:41:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fdUOirMJ5Lg1x0krSFNsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNzhmZDRkNDFhNDkzODRiZGY2ZTdkYzNlYmJjNTAwYmY2 NmQ5ZDUwHhcNMjUxMjIwMDIwMTQ2WhcNMjUxMjIxMDIwMTQ2WjAzMTEwLwYDVQQD Eyg3MjRhZjM5ZjEyMGY5ODE2MGI2MmZhNTIzYmFkOTJjODJhYWRmOTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6pcfazhYCoS3SUmSrk7WOVTfAHX weapFnLpNfEfMUsHhEZK26EZ8i9o/nYhCB6J8HSUvtMD1r8epSYLA4RYMC/Q3QVs Evlir58B4LjVOQjI6Mz3BlKYHVcq1NemgtCygVs2O6y6D76WpPuTNBmGdTzmFlAT IhNYqd6mqjA21A55623UtK25iUBa5jpRAY5GaBRPM6d7k1B3teQevadNKApdNY3e rMiy3nQoNY3d0cSfi/V9X/p2n7+eW2vsug/UQXRw14zw+idLUOayGGv2GRQtnnRK XlM8bKaIGOOHrQ3jgik8UdlZOO2Uc5NiWUW0awtPPQ4VyjfVoJV+rp3huQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHJK858SD5gWC2L6UjutksgqrfmGMB8GA1UdIwQY MBaAFJp4/U1BpJOEvfbn3D67xQC/ZtnVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW5qOVRVR2trNFM5OXVmY1BydkZBTDltMmRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS81Y2I5OGMtZWUwOC00Yjk5LThiNGQt YzZmNDEwNjBjNWQ3LzEvbW5qOVRVR2trNFM5OXVmY1BydkZBTDltMmRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS81Y2I5OGMtZWUwOC00Yjk5LThiNGQtYzZmNDEwNjBjNWQ3 LzEvbW5qOVRVR2trNFM5OXVmY1BydkZBTDltMmRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYRRuTUo xo4Qae/dtt7BHY8Qfah4fW/rzgaSIh7tJOMY/bVmVc3kPDUQ3CwlazmrkJ83gHgy PwtXMXGl0aJCcuFYzeaTVRytod3sRyeort3Idyo+WLBNiAc/b455ufmp/CcghBqA 4AaqinR2Vbu1w6bwF/QX7i3sZR1uTetnyYxMSmr9Hjk8oj76PIkhOFb/Kxa+UDw4 w2efD3OGyODDdGGkKYdnrQfj14By+Scl/UgV0GeJd5V4lgAOiXmq4AD4y6Nz8nu1 LDq/dYZ+qc8X/+4YIHEnMSkhCSDS5g1Xnd2Q5OZ732KfkuaBF+0Vr8ZVcCrRWCvI M2tPknWTMNhBkA== -----END CERTIFICATE-----Generated at Sat Dec 20 11:01:39 2025 by rpki-client