This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft File: mnVMcdYssjlI2RGe2ncv3jjme2c.mft (raw, json) Hash identifier: ncZ59TDQMwuUeS/ZPsTioigOvcBhFZjPO5LBvOb/H1o= Subject key identifier: CC:9E:AD:60:90:BB:3D:39:77:70:DB:53:42:F3:79:98:E4:C0:90:40 Authority key identifier: 9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67 Certificate issuer: /CN=9a754c71d62cb23948d9119eda772fde38e67b67 Certificate serial: 019B1ACDC9F788BBD73D0C09DFA98F259B00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft Manifest number: 1776 Signing time: Sun 14 Dec 2025 03:00:52 +0000 Manifest this update: Sun 14 Dec 2025 03:00:52 +0000 Manifest next update: Mon 15 Dec 2025 03:00:52 +0000 Files and hashes: 1: GdhJf3HoY_u0PeGVqS4KptbEqf4.roa (hash: xtcOOYTemNKZRvBhp2Ch+jc7TYfVbK+JDVCRBNQIEfY=) 2: mnVMcdYssjlI2RGe2ncv3jjme2c.crl (hash: d8yANHKi7pjTOfxkrKjIMZx8vxE0/DmpkWzSaBk6WaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1a:cd:c9:f7:88:bb:d7:3d:0c:09:df:a9:8f:25:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a754c71d62cb23948d9119eda772fde38e67b67 Validity Not Before: Dec 14 03:00:52 2025 GMT Not After : Dec 15 03:00:52 2025 GMT Subject: CN=cc9ead6090bb3d397770db5342f37998e4c09040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7b:31:ea:52:cd:fb:ca:05:ac:e3:b3:05:4e: 6d:dd:98:3f:29:3d:0d:7b:5b:aa:1e:53:8c:a3:34: 9d:fc:88:bc:e9:3a:42:b2:de:1a:02:a1:dd:39:f4: ac:0a:99:e3:62:7a:8e:4a:51:63:d9:be:9f:7b:2a: 83:24:23:9a:5d:4e:0a:40:9a:5e:f7:2e:d6:7a:6f: c4:a0:fd:15:f1:f1:95:8d:56:9d:67:6f:f0:60:28: a2:d7:ee:e3:a5:14:ac:2f:c3:ba:5a:0c:aa:2d:04: 9e:bc:7d:ba:16:5a:6f:4c:a3:57:ea:ac:ac:bc:f0: 42:e1:a9:0c:57:a5:17:ec:24:6c:48:33:6e:91:f0: fe:15:30:b9:45:0c:6f:c5:2f:00:f5:92:95:9b:67: 19:b4:eb:7c:32:11:82:36:e7:4d:b5:12:86:cd:a0: 4f:cd:0b:85:1b:0c:c5:23:34:17:e0:a5:e0:90:75: 3e:9c:2e:fb:b0:57:76:f0:11:86:56:14:53:74:f4: 0b:4b:f5:81:fe:28:c2:da:68:49:de:bf:f4:9a:8e: 52:d7:7c:e4:9e:bc:29:47:66:3f:47:37:74:6c:11: d8:c5:0c:a4:4b:31:ce:9c:a1:b5:e9:05:d5:d6:be: 40:f5:c8:9a:9c:c7:b9:6c:e0:b9:7e:1a:2a:02:dd: b0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9E:AD:60:90:BB:3D:39:77:70:DB:53:42:F3:79:98:E4:C0:90:40 X509v3 Authority Key Identifier: keyid:9A:75:4C:71:D6:2C:B2:39:48:D9:11:9E:DA:77:2F:DE:38:E6:7B:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnVMcdYssjlI2RGe2ncv3jjme2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d2e67-5ac2-427d-8b7b-d25a9df15925/1/mnVMcdYssjlI2RGe2ncv3jjme2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:45:35:20:16:a3:5d:93:f6:a9:5a:7b:2b:44:8c:bf:5f:98: 61:e3:6d:1c:2d:07:28:e3:33:d5:58:27:8f:d2:a2:c6:01:29: 27:eb:92:8a:64:6c:71:3e:78:17:74:ee:69:89:c9:5d:2a:d5: e0:76:95:26:8f:be:d1:55:da:e3:c5:78:0f:d2:be:82:92:9e: b6:66:65:ea:84:e2:87:97:f9:75:f6:49:02:62:ce:1a:3a:f3: 30:aa:d8:32:c4:78:a7:13:00:9d:21:1f:4b:b9:48:3a:55:96: e9:46:9b:7a:18:ec:00:ad:ca:9b:5c:04:df:8a:c0:05:5d:4a: c7:0a:1b:e4:56:dc:21:cd:25:fb:f0:5c:d1:97:21:66:06:f9: 8a:e8:05:0e:b6:07:98:f3:1f:d1:b0:df:cc:11:6a:1b:e5:4a: e1:44:bc:4e:3a:c3:3e:b6:3a:5c:5a:ed:33:3a:34:0b:bd:ae: c3:63:e6:50:52:03:1a:a1:7b:4d:8e:d2:52:5c:3b:d8:47:2c: e4:9b:4f:90:7b:65:5b:f0:06:99:f7:23:4e:0e:9f:da:a9:ee: 6d:a6:2b:10:d3:80:5f:25:38:0d:14:fd:60:b9:e0:e6:5f:e5: 99:23:c7:4a:0c:a3:77:00:3c:37:4e:44:ac:ac:54:78:fc:75: 16:64:d0:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsazcn3iLvXPQwJ36mPJZsAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNzU0YzcxZDYyY2IyMzk0OGQ5MTE5ZWRhNzcyZmRlMzhl NjdiNjcwHhcNMjUxMjE0MDMwMDUyWhcNMjUxMjE1MDMwMDUyWjAzMTEwLwYDVQQD EyhjYzllYWQ2MDkwYmIzZDM5Nzc3MGRiNTM0MmYzNzk5OGU0YzA5MDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXsx6lLN+8oFrOOzBU5t3Zg/KT0N e1uqHlOMozSd/Ii86TpCst4aAqHdOfSsCpnjYnqOSlFj2b6feyqDJCOaXU4KQJpe 9y7Wem/EoP0V8fGVjVadZ2/wYCii1+7jpRSsL8O6WgyqLQSevH26FlpvTKNX6qys vPBC4akMV6UX7CRsSDNukfD+FTC5RQxvxS8A9ZKVm2cZtOt8MhGCNudNtRKGzaBP zQuFGwzFIzQX4KXgkHU+nC77sFd28BGGVhRTdPQLS/WB/ijC2mhJ3r/0mo5S13zk nrwpR2Y/Rzd0bBHYxQykSzHOnKG16QXV1r5A9cianMe5bOC5fhoqAt2wCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyerWCQuz05d3DbU0LzeZjkwJBAMB8GA1UdIwQY MBaAFJp1THHWLLI5SNkRntp3L9445ntnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW5WTWNkWXNzamxJMlJHZTJuY3YzamptZTJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80ZDJlNjctNWFjMi00MjdkLThiN2It ZDI1YTlkZjE1OTI1LzEvbW5WTWNkWXNzamxJMlJHZTJuY3YzamptZTJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS80ZDJlNjctNWFjMi00MjdkLThiN2ItZDI1YTlkZjE1OTI1 LzEvbW5WTWNkWXNzamxJMlJHZTJuY3YzamptZTJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATEU1IBaj XZP2qVp7K0SMv1+YYeNtHC0HKOMz1Vgnj9KixgEpJ+uSimRscT54F3TuaYnJXSrV 4HaVJo++0VXa48V4D9K+gpKetmZl6oTih5f5dfZJAmLOGjrzMKrYMsR4pxMAnSEf S7lIOlWW6UabehjsAK3Km1wE34rABV1Kxwob5FbcIc0l+/Bc0ZchZgb5iugFDrYH mPMf0bDfzBFqG+VK4US8TjrDPrY6XFrtMzo0C72uw2PmUFIDGqF7TY7SUlw72Ecs 5JtPkHtlW/AGmfcjTg6f2qnubaYrENOAXyU4DRT9YLng5l/lmSPHSgyjdwA8N05E rKxUePx1FmTQ/Q== -----END CERTIFICATE-----Generated at Sun Dec 14 07:44:01 2025 by rpki-client