This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft File: mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft (raw, json) Hash identifier: mG2k48gbxk3mLnVtHoZI0aq923MmwDrRdan4eDERD44= Subject key identifier: EC:31:DC:8A:C8:D7:05:8D:02:58:41:21:F4:14:E3:BD:7E:CD:CA:FD Authority key identifier: 9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8 Certificate issuer: /CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8 Certificate serial: 019B353257F6C0887D14670CB9BA15ADF95D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft Manifest number: 02BF Signing time: Fri 19 Dec 2025 06:00:50 +0000 Manifest this update: Fri 19 Dec 2025 06:00:50 +0000 Manifest next update: Sat 20 Dec 2025 06:00:50 +0000 Files and hashes: 1: W8iTYjU2Evc2p5yDOFlKPLpAZr0.roa (hash: +1HDTD3+F6qn6zfwt9WbeLBT9ppZuriPW/cOhjwp96g=) 2: mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl (hash: 0wLRGFCIKX3+lXYmOWl/tGPnixXwFL21AePwm7lLAV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 06:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:32:57:f6:c0:88:7d:14:67:0c:b9:ba:15:ad:f9:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8 Validity Not Before: Dec 19 06:00:50 2025 GMT Not After : Dec 20 06:00:50 2025 GMT Subject: CN=ec31dc8ac8d7058d02584121f414e3bd7ecdcafd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1a:70:fc:b0:33:a8:f4:9e:ab:5e:06:ca:1f: 39:eb:24:2b:bc:9b:4f:e8:92:ae:a0:61:a5:37:fa: 47:c6:8a:f3:1e:f1:5c:80:00:5a:c3:25:42:99:f8: ee:21:fb:a5:19:8a:9c:b2:cf:2c:e3:77:54:5f:c8: 14:a4:a3:59:8e:17:b7:c6:db:b7:ce:aa:df:3a:1d: 3c:55:f5:b5:cd:4b:4a:63:b6:5e:fd:0c:46:be:38: f9:d5:c0:eb:9b:d7:cd:9d:5f:12:4f:e1:06:1f:ad: 15:5f:b9:19:84:3f:ab:a5:9d:cd:ab:2c:d9:ff:a1: 2c:2e:6a:06:37:af:16:6b:9c:c6:14:85:c9:91:8f: b5:b4:ef:25:3e:b0:cd:38:46:f1:93:df:eb:3c:88: aa:cd:1a:02:8d:73:d9:38:ee:62:6b:4e:f5:cc:79: 61:9e:c9:bc:ca:61:68:be:02:ee:77:35:5c:c5:ee: 9a:e2:62:e9:23:75:20:67:9a:da:9a:c7:0c:58:64: 91:27:f7:ab:b1:e8:a5:eb:88:53:c7:6e:6a:07:90: e2:1a:b6:27:81:ca:8a:10:9b:ca:b9:0a:85:b0:96: 1c:0b:cc:ba:75:b2:d5:bc:3e:64:a3:bf:b7:78:97: 6d:df:b2:a8:6d:53:19:21:ce:81:29:10:b0:23:5f: 69:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:31:DC:8A:C8:D7:05:8D:02:58:41:21:F4:14:E3:BD:7E:CD:CA:FD X509v3 Authority Key Identifier: keyid:9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:fe:72:89:91:08:12:e8:94:fb:a8:2c:90:87:00:3b:87:34: 3a:4b:3f:4e:f0:22:90:54:61:4f:8f:2b:1a:d0:c2:66:3f:a9: 19:6e:73:d8:9f:5b:70:2b:a6:4a:27:49:03:9c:20:7b:df:9f: 88:64:20:aa:7b:bf:35:e9:c9:1f:79:60:b6:2f:0c:8b:a9:04: 0d:1c:a7:63:b7:82:06:0f:3d:09:9f:be:9d:c8:b5:db:60:a3: 6e:d1:dd:d4:e6:22:75:d2:bc:e2:29:00:f6:53:bd:3f:18:62: 1d:5b:22:fa:c4:99:e2:2c:5a:ad:90:d1:f5:21:a0:2b:5b:b1: 20:88:88:40:30:67:23:5c:b4:43:48:90:bc:7f:c2:4f:7b:07: e2:64:c6:37:9b:4d:2d:09:85:1f:db:41:7b:ad:02:61:6f:d2: 01:92:84:cf:2c:85:12:0f:cf:35:01:20:6a:64:0c:b2:bf:18: 14:be:15:22:4d:f8:0d:88:9e:38:6c:7f:da:60:e5:84:03:2e: f7:25:be:13:a4:e0:da:9d:12:08:a9:d3:d0:97:29:ae:3b:77: aa:85:8e:b2:98:4f:18:cb:1a:9a:48:42:98:d4:3e:9c:32:cb: 5a:45:cd:5f:74:cb:d0:e3:90:07:c0:58:03:e2:8d:d7:7d:39: 96:46:ae:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1Mlf2wIh9FGcMuboVrfldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNzAwNGZkYmMxZDllM2EzYzFlN2UwNjU5MWFjYTRiOTRi NmMyZjgwHhcNMjUxMjE5MDYwMDUwWhcNMjUxMjIwMDYwMDUwWjAzMTEwLwYDVQQD EyhlYzMxZGM4YWM4ZDcwNThkMDI1ODQxMjFmNDE0ZTNiZDdlY2RjYWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRpw/LAzqPSeq14Gyh856yQrvJtP 6JKuoGGlN/pHxorzHvFcgABawyVCmfjuIfulGYqcss8s43dUX8gUpKNZjhe3xtu3 zqrfOh08VfW1zUtKY7Ze/QxGvjj51cDrm9fNnV8ST+EGH60VX7kZhD+rpZ3NqyzZ /6EsLmoGN68Wa5zGFIXJkY+1tO8lPrDNOEbxk9/rPIiqzRoCjXPZOO5ia071zHlh nsm8ymFovgLudzVcxe6a4mLpI3UgZ5ramscMWGSRJ/erseil64hTx25qB5DiGrYn gcqKEJvKuQqFsJYcC8y6dbLVvD5ko7+3eJdt37KobVMZIc6BKRCwI19pwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwx3IrI1wWNAlhBIfQU471+zcr9MB8GA1UdIwQY MBaAFJpwBP28HZ46PB5+BlkaykuUtsL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW5BRV9id2Ruam84SG40R1dScktTNVMyd3ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mY2E4MWQtMzhhNS00YzMyLWIxNjMt YjdmYTM5M2RiMWQxLzEvbW5BRV9id2Ruam84SG40R1dScktTNVMyd3ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mY2E4MWQtMzhhNS00YzMyLWIxNjMtYjdmYTM5M2RiMWQx LzEvbW5BRV9id2Ruam84SG40R1dScktTNVMyd3ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYP5yiZEI EuiU+6gskIcAO4c0Oks/TvAikFRhT48rGtDCZj+pGW5z2J9bcCumSidJA5wge9+f iGQgqnu/NenJH3lgti8Mi6kEDRynY7eCBg89CZ++nci122CjbtHd1OYiddK84ikA 9lO9PxhiHVsi+sSZ4ixarZDR9SGgK1uxIIiIQDBnI1y0Q0iQvH/CT3sH4mTGN5tN LQmFH9tBe60CYW/SAZKEzyyFEg/PNQEgamQMsr8YFL4VIk34DYieOGx/2mDlhAMu 9yW+E6Tg2p0SCKnT0Jcprjt3qoWOsphPGMsamkhCmNQ+nDLLWkXNX3TL0OOQB8BY A+KN1305lkauyQ== -----END CERTIFICATE-----Generated at Fri Dec 19 10:42:07 2025 by rpki-client