This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: S5/u8n/IqRok6lS2I0BZwlPQcfiNxHLri81WbgSLvVU= Subject key identifier: C4:8C:AE:9F:2D:8B:23:A8:B8:18:14:D8:C9:44:8A:A9:D9:39:B5:B3 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019B1314225DB1DBAA44B4FE717B033018D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 178B Signing time: Fri 12 Dec 2025 15:00:45 +0000 Manifest this update: Fri 12 Dec 2025 15:00:45 +0000 Manifest next update: Sat 13 Dec 2025 15:00:45 +0000 Files and hashes: 1: 3xGVSc_p5dXZsjTjmDrPRPF-GQ4.roa (hash: 4UVd3ifNRlf9XqdwKXxRMAnZJE++WGkvCW0VWsS8y5s=) 2: 98F0ZRor4OUtYmZXNw0GKGX-nAM.roa (hash: 6flqTQWBrUkvuFChAUWn2ljnQUYrkULVtmr6AZSdXDE=) 3: AXI0xi2qyLNJTikoPIbIYoXGSqM.roa (hash: J6dTdi70cC+Xgn0MoRDsaTnvDGyEQm26GOPrxZ/rg18=) 4: CQxWaB1OicMMrqXCoQ0fopCoxdU.roa (hash: WjfHWnkqbfHKaqxUShNyRq++rhQwjg3tNVjy17YQNc4=) 5: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: 4WxPaAt2ITZtWvLo880jO+TJPm2+TdEgUFr7N7HcuAQ=) 6: Fu5puXi31mF44yAqLLOREudBdx8.roa (hash: EMVvFm7Cz6Rus7+EIIREeW1t+m4c2GaLdfO+T3Vrwg8=) 7: GopMrpyToOz7hTEn02tSlWTChNc.roa (hash: PWyNZm9NNDQb4vDrYexwTILfoeBvuqO0/ZesnD+rBMg=) 8: JrrOFQjL67j7mWEbcUz8WZG31Ew.roa (hash: 2u7Ou9E9W3oEo5TDyLt4nvLFCeCCzeGxkS9x6ETgAe4=) 9: Zla6xxqlwjD5HGAN16Pzo29Tijg.roa (hash: XT7/Z4sfo6kElFtdLFq3BhRYhs4vxj89ZfDzgHu8Ge4=) 10: hnMtsx259zWb5DPTAskFt19vieA.roa (hash: IS/K0LmABWhq/hUi5ijfbnkS8QGQcUBWRW0f7gTisD4=) 11: wVujwwkylQneB17xiByWRppWqO0.roa (hash: gPw9UPGpfv7HTEVh40kJURB2PMVElzmf4UiOzzHfQg0=) 12: ydOhopDpEgxJrzwZy5o2ywKpW8w.roa (hash: cGNA9jtDwM6OD4vlqV4K4uD26uy/JQnhTPG3oY/YMmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:14:22:5d:b1:db:aa:44:b4:fe:71:7b:03:30:18:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Dec 12 15:00:45 2025 GMT Not After : Dec 13 15:00:45 2025 GMT Subject: CN=c48cae9f2d8b23a8b81814d8c9448aa9d939b5b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:08:af:ee:01:18:51:b3:b4:f5:54:57:82:5e: f4:0a:96:ac:e9:06:af:da:96:6e:9f:a0:75:79:c3: 31:19:a8:f4:40:3c:7c:d6:1d:9b:78:5c:01:8a:8d: b1:fc:9b:65:63:56:7c:22:32:d3:b3:3e:4b:43:0c: 9e:1d:9b:02:5b:3e:15:a5:e4:86:5a:ab:6d:3a:ed: 52:33:b1:49:0e:10:2a:cb:18:d9:78:0a:1b:b6:93: 2f:76:40:03:39:6c:da:5d:25:23:b9:06:64:58:34: 84:16:fd:ee:f4:7d:76:02:0c:6b:03:56:4e:15:92: a4:32:3d:7c:24:d8:6d:0a:97:63:df:d9:db:87:57: 56:83:6f:90:38:60:c5:a6:bc:cb:37:03:34:7b:96: 6e:b6:1c:9b:92:d3:c5:90:ae:82:c4:86:65:5d:f2: cc:e3:4e:42:28:d1:22:36:d4:dd:42:f9:a9:87:75: a5:2e:9b:e8:53:da:b4:53:86:61:9a:29:25:f3:82: ea:c5:ab:f2:be:a6:fe:82:19:6b:72:bb:c1:ec:55: b4:67:24:01:59:77:b4:f7:3a:99:3e:2d:fe:34:4f: 05:2e:1b:bf:2d:f2:09:f6:13:95:da:12:19:e9:f0: 4f:7e:54:2e:fd:f6:42:51:86:2f:1b:fa:cf:7a:22: 31:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8C:AE:9F:2D:8B:23:A8:B8:18:14:D8:C9:44:8A:A9:D9:39:B5:B3 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:39:9b:47:e9:fd:21:86:2c:0f:42:01:59:f5:80:6e:cc:da: 2f:00:ff:6f:bb:0d:5b:cd:8a:1a:67:17:dd:34:89:14:39:d4: e1:f3:20:de:79:19:d3:cd:02:55:e4:6a:77:c8:be:48:98:9b: 29:3e:02:4a:79:1e:91:c3:9f:20:3b:41:aa:e4:95:96:3a:8e: c0:e1:75:c4:24:22:d4:90:93:0f:e5:5a:af:4f:6a:0c:b1:30: 28:42:47:37:2d:15:11:66:12:03:f3:f7:00:fd:a0:7d:db:19: ad:f3:75:a0:31:b3:90:e5:5a:97:7b:df:44:ab:f7:16:87:a9: b1:de:46:5b:85:20:eb:b8:86:b3:39:d4:b4:3e:62:ee:43:df: 4c:64:0b:6b:a4:c8:3b:c4:2d:32:c5:17:f8:0a:f9:67:5c:98: e0:9b:2b:5e:d2:e5:37:28:1d:37:0d:a6:26:a2:f1:94:5b:71: 69:9a:08:57:00:3a:0c:16:aa:c9:10:8f:b7:10:f2:01:0e:de: 36:3f:dc:0d:01:f6:03:e4:cd:4c:61:dd:9f:76:01:6a:85:3c: 36:85:46:65:72:7b:82:5b:c7:dc:e4:86:4a:a6:24:d2:1e:2e: 0a:dd:71:87:c0:8a:db:76:93:cb:63:d0:a5:8a:ff:3c:0e:8b: 66:80:9f:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsTFCJdsduqRLT+cXsDMBjXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjUxMjEyMTUwMDQ1WhcNMjUxMjEzMTUwMDQ1WjAzMTEwLwYDVQQD EyhjNDhjYWU5ZjJkOGIyM2E4YjgxODE0ZDhjOTQ0OGFhOWQ5MzliNWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Aiv7gEYUbO09VRXgl70Cpas6Qav 2pZun6B1ecMxGaj0QDx81h2beFwBio2x/JtlY1Z8IjLTsz5LQwyeHZsCWz4VpeSG WqttOu1SM7FJDhAqyxjZeAobtpMvdkADOWzaXSUjuQZkWDSEFv3u9H12AgxrA1ZO FZKkMj18JNhtCpdj39nbh1dWg2+QOGDFprzLNwM0e5ZuthybktPFkK6CxIZlXfLM 405CKNEiNtTdQvmph3WlLpvoU9q0U4Zhmikl84Lqxavyvqb+ghlrcrvB7FW0ZyQB WXe09zqZPi3+NE8FLhu/LfIJ9hOV2hIZ6fBPflQu/fZCUYYvG/rPeiIxSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSMrp8tiyOouBgU2MlEiqnZObWzMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzmbR+n9 IYYsD0IBWfWAbszaLwD/b7sNW82KGmcX3TSJFDnU4fMg3nkZ080CVeRqd8i+SJib KT4CSnkekcOfIDtBquSVljqOwOF1xCQi1JCTD+Var09qDLEwKEJHNy0VEWYSA/P3 AP2gfdsZrfN1oDGzkOVal3vfRKv3Foepsd5GW4Ug67iGsznUtD5i7kPfTGQLa6TI O8QtMsUX+Ar5Z1yY4JsrXtLlNygdNw2mJqLxlFtxaZoIVwA6DBaqyRCPtxDyAQ7e Nj/cDQH2A+TNTGHdn3YBaoU8NoVGZXJ7glvH3OSGSqYk0h4uCt1xh8CK23aTy2PQ pYr/PA6LZoCfHA== -----END CERTIFICATE-----Generated at Fri Dec 12 17:10:00 2025 by rpki-client