This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft File: Mns0IMJQE3legioq5Q043B04J5M.mft (raw, json) Hash identifier: CzeIdIcqSZK4Fu1RcHfQV3An+Bw9wQ16yhvOkT1cUs4= Subject key identifier: C6:7C:90:91:E5:9F:A4:AF:3D:42:87:CC:E6:C3:5C:33:74:E3:D0:92 Authority key identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93 Certificate issuer: /CN=327b3420c25013795e822a2ae50d38dc1d382793 Certificate serial: 019B4B1536A353E38EF43328B6F9C0BFE4E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 12:00:39 +0000 Manifest this update: Tue 23 Dec 2025 12:00:39 +0000 Manifest next update: Wed 24 Dec 2025 12:00:39 +0000 Files and hashes: 1: Mns0IMJQE3legioq5Q043B04J5M.crl (hash: EVV0CZOCBNgUiC6zLvRYLt+Off9L7KIyQINPat4ob7c=) 2: v9geoE7KmWCRnCztGaTkN5bSNF0.roa (hash: yJ1Hvyh5t82gNQ9PRDa/lCyqTlzjssbfVD5EEeI11lA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:15:36:a3:53:e3:8e:f4:33:28:b6:f9:c0:bf:e4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=327b3420c25013795e822a2ae50d38dc1d382793 Validity Not Before: Dec 23 12:00:39 2025 GMT Not After : Dec 24 12:00:39 2025 GMT Subject: CN=c67c9091e59fa4af3d4287cce6c35c3374e3d092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:31:ce:ed:4b:35:e9:b0:cf:e6:b1:a0:93:62: 50:67:d4:b2:7e:83:ce:fc:2d:07:1f:a5:3a:d6:bb: 16:5f:3f:51:b2:d1:0e:40:1f:1f:7a:df:a4:c6:6c: 53:ec:63:74:f5:30:78:be:be:8e:3d:3c:23:0e:92: aa:f9:35:71:16:ca:a9:b8:07:d4:fa:1c:a3:7a:96: f2:3f:c4:8c:62:42:71:ac:c0:98:8a:fc:44:76:4e: 70:9d:ee:79:11:b9:6b:8a:45:ec:d2:88:89:59:53: 53:d9:e8:80:45:7e:81:8d:f5:82:90:22:31:0a:50: e7:6c:7f:e6:45:b8:b9:69:0d:b7:0c:81:83:02:7e: 8e:11:98:b3:59:ec:39:90:0b:f4:ed:9c:36:23:cc: 1e:8d:80:2a:d0:b5:e7:65:01:0a:db:d2:39:1e:3d: e2:a1:e8:9b:9a:a2:b8:05:e2:4f:99:8f:b3:bb:1f: a7:33:cb:b5:87:a4:b7:e5:99:32:51:10:2a:c7:85: 64:1a:94:3e:ce:e9:73:fe:eb:2a:a6:21:60:61:61: 53:da:c3:d8:da:a1:11:5c:87:cb:39:08:39:bc:ba: ac:16:77:c4:7d:dc:3f:4a:2b:78:d8:90:5d:2b:50: 10:13:f2:aa:20:66:8e:7d:0d:c8:a1:a2:ed:fb:bc: 53:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:7C:90:91:E5:9F:A4:AF:3D:42:87:CC:E6:C3:5C:33:74:E3:D0:92 X509v3 Authority Key Identifier: keyid:32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:c3:fa:80:5e:ee:37:8c:69:c5:f4:e6:6f:2c:79:6f:d4:a4: a3:08:10:10:cd:f4:f6:e2:d8:e6:51:29:9a:63:29:99:9f:b0: e9:dd:3f:d1:7a:e9:6b:6d:ee:02:77:9b:0b:db:2f:e7:2b:59: 24:1d:98:5d:e4:1c:47:60:23:c8:c7:9c:9a:38:e9:f8:4a:30: 9f:3a:c0:63:00:36:96:61:26:98:ed:2f:98:d1:16:0b:c5:ae: ff:3e:34:9a:fe:cd:d9:20:a9:99:00:53:e3:c7:40:fe:ad:f7: 8e:25:18:65:7b:b8:e3:76:7b:ce:52:2f:a3:c9:f7:c2:e1:ef: e0:56:b3:5d:81:02:81:6a:53:ce:cf:94:31:52:22:d6:ce:b4: 38:bb:81:6c:0a:96:b4:30:18:94:40:c1:61:e3:b3:43:0c:80: d6:8d:c8:cc:f6:ce:e2:33:2e:8c:d6:30:5d:ae:c5:ae:00:70: 4a:d1:04:c8:64:cb:72:25:bd:16:6a:95:03:0e:41:36:17:74: 19:92:d4:1d:19:dd:67:4e:20:21:a5:bc:f9:4d:31:a0:b2:67: b9:2f:95:59:35:5e:01:54:e8:51:a5:f5:91:55:6d:8f:f0:17: 49:15:86:ce:45:ce:07:c8:99:fc:f1:a2:93:88:d3:b6:c5:d5: 66:81:01:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLFTajU+OO9DMotvnAv+TnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyN2IzNDIwYzI1MDEzNzk1ZTgyMmEyYWU1MGQzOGRjMWQz ODI3OTMwHhcNMjUxMjIzMTIwMDM5WhcNMjUxMjI0MTIwMDM5WjAzMTEwLwYDVQQD EyhjNjdjOTA5MWU1OWZhNGFmM2Q0Mjg3Y2NlNmMzNWMzMzc0ZTNkMDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTHO7Us16bDP5rGgk2JQZ9SyfoPO /C0HH6U61rsWXz9RstEOQB8fet+kxmxT7GN09TB4vr6OPTwjDpKq+TVxFsqpuAfU +hyjepbyP8SMYkJxrMCYivxEdk5wne55EblrikXs0oiJWVNT2eiARX6BjfWCkCIx ClDnbH/mRbi5aQ23DIGDAn6OEZizWew5kAv07Zw2I8wejYAq0LXnZQEK29I5Hj3i oeibmqK4BeJPmY+zux+nM8u1h6S35ZkyURAqx4VkGpQ+zulz/usqpiFgYWFT2sPY 2qERXIfLOQg5vLqsFnfEfdw/Sit42JBdK1AQE/KqIGaOfQ3IoaLt+7xT/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZ8kJHln6SvPUKHzObDXDN049CSMB8GA1UdIwQY MBaAFDJ7NCDCUBN5XoIqKuUNONwdOCeTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zNjMxZTAtNTZkNy00YzI5LTk1YzQt NjY4MmIwN2ZhOTQ3LzEvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zNjMxZTAtNTZkNy00YzI5LTk1YzQtNjY4MmIwN2ZhOTQ3 LzEvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3MP6gF7u N4xpxfTmbyx5b9SkowgQEM309uLY5lEpmmMpmZ+w6d0/0Xrpa23uAnebC9sv5ytZ JB2YXeQcR2AjyMecmjjp+EownzrAYwA2lmEmmO0vmNEWC8Wu/z40mv7N2SCpmQBT 48dA/q33jiUYZXu443Z7zlIvo8n3wuHv4FazXYECgWpTzs+UMVIi1s60OLuBbAqW tDAYlEDBYeOzQwyA1o3IzPbO4jMujNYwXa7FrgBwStEEyGTLciW9FmqVAw5BNhd0 GZLUHRndZ04gIaW8+U0xoLJnuS+VWTVeAVToUaX1kVVtj/AXSRWGzkXOB8iZ/PGi k4jTtsXVZoEB0w== -----END CERTIFICATE-----Generated at Tue Dec 23 21:53:00 2025 by rpki-client