This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft File: mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft (raw, json) Hash identifier: zXJb/rAxJe/NnjF/80/0p3qF2awHzKW/7lu5laxUbJs= Subject key identifier: 80:7F:8B:C6:3A:B6:09:47:84:62:37:4E:C1:E4:CE:CA:12:02:7B:C4 Authority key identifier: 9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1 Certificate issuer: /CN=9a7edeac0c6c20ea49d492990e4858541d190ff1 Certificate serial: 019B077E1DF0FA6E48BF4490B2D905E11B8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft Manifest number: 14AF Signing time: Wed 10 Dec 2025 09:01:04 +0000 Manifest this update: Wed 10 Dec 2025 09:01:04 +0000 Manifest next update: Thu 11 Dec 2025 09:01:04 +0000 Files and hashes: 1: 34VAKZ3gTB0K6y5Jn98OpVnf6K0.roa (hash: 0+PPWp0o1/rwBJiAmqaqRlxFY24T5j6RDdie2DfGC7Q=) 2: CqJnQHuWTrr1JOb1x2qlCn7qYBQ.roa (hash: raq5ehc6BfIUJsoK2h14SXHgtvt48xPVADOcv/2fuZ8=) 3: N1jgADyUTzZVwypKV4hmJUHKrXY.roa (hash: Qy4oSTgjweNPQS1JWknF5IN4kbJvVHFhsoiURw/KHeY=) 4: mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl (hash: 6rbcMXWbp0Ba82Jt092xrj9YEgAMvj8E/OU6H3ng5vs=) 5: n5tnQjmPsSAa7e0U_BISzqIEQuY.roa (hash: MzEMfBEyS0reuH82ojDXQdP0KgBQQ3sK4Mxn6oyxx3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:7e:1d:f0:fa:6e:48:bf:44:90:b2:d9:05:e1:1b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a7edeac0c6c20ea49d492990e4858541d190ff1 Validity Not Before: Dec 10 09:01:04 2025 GMT Not After : Dec 11 09:01:04 2025 GMT Subject: CN=807f8bc63ab609478462374ec1e4ceca12027bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fc:65:a8:4a:b6:d5:bf:2b:3d:23:fd:7c:ea: 91:65:de:a7:a2:45:cb:67:20:86:c6:08:bc:8b:e0: 71:a2:7b:51:61:06:02:ac:ab:a8:70:c4:2b:b0:ad: b3:37:2d:0b:04:5c:f3:0e:5b:85:12:33:a1:24:3a: 0e:17:7a:28:5d:0c:82:a8:5f:d1:60:fa:d4:c2:f6: a0:24:0a:af:b5:e9:f8:2d:04:b7:14:08:aa:e5:60: 73:79:4f:25:f9:25:5c:aa:5a:2d:00:4b:dd:2c:48: 41:26:b8:51:af:c2:0c:05:df:e5:31:f7:25:be:41: a4:4a:2d:96:2d:63:80:3e:27:a2:8e:55:e9:0e:5c: d7:ab:9d:45:a2:6c:fd:dc:51:53:a5:74:82:27:0b: 57:0b:3b:b2:77:61:3b:17:06:f0:d9:43:72:d7:ff: 7e:2f:b3:15:89:5e:99:e3:2b:37:09:f2:23:b2:76: 59:cd:07:db:d6:a2:c6:7b:fe:89:36:a2:d5:35:38: 5a:11:de:5b:42:ef:d9:7e:c8:05:fd:63:7f:fa:64: fd:fd:f8:f4:b2:ab:3d:ea:1b:47:21:89:ad:c3:7c: 9c:1a:ef:8b:48:04:dc:a3:43:40:78:53:e5:f6:db: 86:e0:86:f3:cb:3d:c3:1c:3f:a8:86:7e:09:2f:46: 44:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:7F:8B:C6:3A:B6:09:47:84:62:37:4E:C1:E4:CE:CA:12:02:7B:C4 X509v3 Authority Key Identifier: keyid:9A:7E:DE:AC:0C:6C:20:EA:49:D4:92:99:0E:48:58:54:1D:19:0F:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/5a8e04-dd07-435a-b1bf-adedcaa3d26e/1/mn7erAxsIOpJ1JKZDkhYVB0ZD_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ce:2a:b0:b4:43:1a:03:67:78:f5:49:0d:8c:b7:37:c7:00: 86:6d:a4:c1:5a:db:e2:89:79:a4:3e:33:3f:0c:61:83:75:66: 3e:b2:34:c6:14:b7:10:72:88:c8:8b:d7:c8:93:ef:6b:68:75: 16:4c:0d:6d:d8:d7:20:e8:9b:13:f5:15:fb:e8:32:e9:67:9e: 16:f5:0c:c2:cc:19:25:10:a9:69:7c:44:62:bf:8d:9d:26:c7: 26:27:be:8d:7c:44:23:51:af:46:49:3a:78:e5:6f:c2:0d:56: 0e:8e:26:65:40:da:d1:9f:7f:1c:4f:61:4d:e5:70:0e:6e:71: c4:a9:be:1a:5a:fb:94:0e:88:55:62:d2:df:4c:33:e0:90:5b: b4:f6:4b:ce:7f:46:31:fb:99:6d:6e:33:07:f5:87:0b:e7:09: 3a:63:0d:46:1d:01:3a:1e:7f:df:e9:6b:5f:e1:99:eb:e3:93: 9b:e5:90:e1:73:de:55:e7:35:57:cd:fd:c6:48:fb:00:ee:1c: 40:ff:22:cd:96:9f:99:12:cb:43:e5:e6:4c:a0:27:dc:96:c6: 7c:95:8d:bf:5a:ef:bf:eb:65:e8:a9:ad:f8:c2:b4:17:41:00: 66:ce:75:cc:bf:f0:d6:ee:82:de:54:d9:46:cb:6e:fe:3a:23: 94:16:39:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHfh3w+m5Iv0SQstkF4RuPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhN2VkZWFjMGM2YzIwZWE0OWQ0OTI5OTBlNDg1ODU0MWQx OTBmZjEwHhcNMjUxMjEwMDkwMTA0WhcNMjUxMjExMDkwMTA0WjAzMTEwLwYDVQQD Eyg4MDdmOGJjNjNhYjYwOTQ3ODQ2MjM3NGVjMWU0Y2VjYTEyMDI3YmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPxlqEq21b8rPSP9fOqRZd6nokXL ZyCGxgi8i+BxontRYQYCrKuocMQrsK2zNy0LBFzzDluFEjOhJDoOF3ooXQyCqF/R YPrUwvagJAqvten4LQS3FAiq5WBzeU8l+SVcqlotAEvdLEhBJrhRr8IMBd/lMfcl vkGkSi2WLWOAPieijlXpDlzXq51Fomz93FFTpXSCJwtXCzuyd2E7Fwbw2UNy1/9+ L7MViV6Z4ys3CfIjsnZZzQfb1qLGe/6JNqLVNThaEd5bQu/ZfsgF/WN/+mT9/fj0 sqs96htHIYmtw3ycGu+LSATco0NAeFPl9tuG4Ibzyz3DHD+ohn4JL0ZEAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIB/i8Y6tglHhGI3TsHkzsoSAnvEMB8GA1UdIwQY MBaAFJp+3qwMbCDqSdSSmQ5IWFQdGQ/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYt YWRlZGNhYTNkMjZlLzEvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My81YThlMDQtZGQwNy00MzVhLWIxYmYtYWRlZGNhYTNkMjZl LzEvbW43ZXJBeHNJT3BKMUpLWkRraFlWQjBaRF9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMc4qsLRD GgNnePVJDYy3N8cAhm2kwVrb4ol5pD4zPwxhg3VmPrI0xhS3EHKIyIvXyJPva2h1 FkwNbdjXIOibE/UV++gy6WeeFvUMwswZJRCpaXxEYr+NnSbHJie+jXxEI1GvRkk6 eOVvwg1WDo4mZUDa0Z9/HE9hTeVwDm5xxKm+Glr7lA6IVWLS30wz4JBbtPZLzn9G MfuZbW4zB/WHC+cJOmMNRh0BOh5/3+lrX+GZ6+OTm+WQ4XPeVec1V839xkj7AO4c QP8izZafmRLLQ+XmTKAn3JbGfJWNv1rvv+tl6Kmt+MK0F0EAZs51zL/w1u6C3lTZ Rstu/jojlBY5Jg== -----END CERTIFICATE-----Generated at Wed Dec 10 11:22:38 2025 by rpki-client