This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft File: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft (raw, json) Hash identifier: lHvaAT+QgPh7wZus2soZgkegx/Ob3XjcYxiMiAqnigc= Subject key identifier: 20:F1:3D:DD:3B:B9:81:AF:31:93:C3:6D:B2:07:3E:42:D5:29:B5:40 Authority key identifier: A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A Certificate issuer: /CN=a4c9f067007684facca9be8ce02da4676c09972a Certificate serial: 019B390FE8B8F5460A3F6AC3AC58A59AD970 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft Manifest number: 07BD Signing time: Sat 20 Dec 2025 00:01:42 +0000 Manifest this update: Sat 20 Dec 2025 00:01:42 +0000 Manifest next update: Sun 21 Dec 2025 00:01:42 +0000 Files and hashes: 1: pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl (hash: YF/hV0xvWpDYgsq2gnBxq+V29DlVshCyMc8/Gw1Ulik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 00:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:0f:e8:b8:f5:46:0a:3f:6a:c3:ac:58:a5:9a:d9:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4c9f067007684facca9be8ce02da4676c09972a Validity Not Before: Dec 20 00:01:42 2025 GMT Not After : Dec 21 00:01:42 2025 GMT Subject: CN=20f13ddd3bb981af3193c36db2073e42d529b540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ca:ea:14:70:20:80:aa:0a:07:f3:75:c1:9b: 45:81:49:d5:30:67:ba:18:13:8c:02:1b:f7:6d:38: f9:e9:41:77:97:63:ca:81:3c:69:66:06:b3:45:7b: c5:10:32:b9:6b:b9:59:4d:77:df:86:2b:ba:46:52: 35:8c:7f:d5:3b:ab:2a:d6:ec:ec:e5:e8:85:32:36: 05:55:74:44:5c:e1:ed:ba:67:76:0a:7e:0a:87:d0: d4:10:66:aa:d5:8f:f8:32:d9:b9:ea:3e:55:07:ad: b7:5a:fe:26:56:29:74:db:3b:34:bd:20:77:db:a8: 9f:85:9f:5d:28:40:ee:de:9e:71:46:e0:a4:5b:46: 90:c0:34:86:79:f1:d2:81:2a:8d:d4:87:b7:a7:d0: 78:dd:f5:d3:ec:cf:ea:81:e9:7d:48:df:83:0b:45: 19:f4:1c:38:1a:77:d8:f6:0b:35:e1:7a:99:03:cc: 04:9b:96:b6:b9:93:65:e1:fe:f7:bd:5d:c5:16:5a: d5:ec:62:8a:d1:8c:13:f5:f0:cc:27:23:3a:91:85: 39:53:37:c4:9e:94:3a:9c:c5:64:88:d4:46:41:65: 69:06:da:d5:85:c3:04:3a:be:da:3b:30:1d:65:fb: 06:10:37:72:8c:13:3b:59:c1:bf:d9:1f:34:81:7f: 86:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:F1:3D:DD:3B:B9:81:AF:31:93:C3:6D:B2:07:3E:42:D5:29:B5:40 X509v3 Authority Key Identifier: keyid:A4:C9:F0:67:00:76:84:FA:CC:A9:BE:8C:E0:2D:A4:67:6C:09:97:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/cf1d83-19fa-40c4-8543-511aaceb8900/1/pMnwZwB2hPrMqb6M4C2kZ2wJlyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:4b:e7:46:bc:9e:9b:29:c9:a1:22:4b:1a:7d:c0:e7:ee:3a: 37:a6:bd:5f:74:e1:de:a0:d2:5d:06:66:d8:80:0a:92:35:78: c8:14:e4:dc:bc:d0:b6:cf:dd:66:34:e9:ea:e2:ea:f4:a5:68: 55:1e:5b:a7:52:cc:f8:5a:bc:a4:d4:0c:9e:87:a9:1d:a6:e2: 94:99:80:fa:51:90:70:6c:03:d4:0a:69:f3:27:dc:72:8a:a9: 6b:56:8f:7f:80:f1:c3:d8:55:13:89:70:b4:b7:98:2e:9a:e4: 56:4f:7f:e3:70:ea:24:37:8f:ed:f0:f3:78:88:47:e5:11:43: c2:bb:b2:85:e3:b7:9c:22:fe:d7:ed:e6:7a:e0:3d:81:32:13: 51:f2:94:e2:63:bc:18:b8:5e:5f:e7:c8:f6:85:55:63:cb:7a: 1e:c9:24:86:03:b5:13:8b:ec:7f:0f:ca:aa:46:32:f5:74:7d: c1:1e:05:70:96:73:a7:1f:22:e0:75:1f:77:c6:ae:fd:73:f5: 1d:05:53:1b:63:db:c6:e6:14:c0:4f:e8:8c:ac:ed:72:6a:54: 65:f2:d3:f5:e4:2d:35:80:ab:81:d4:98:a8:90:41:35:7f:2a: 1e:56:2d:54:0c:0f:dd:34:5d:98:22:6a:5d:72:f7:8f:1b:f6: c8:87:6f:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5D+i49UYKP2rDrFilmtlwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YzlmMDY3MDA3Njg0ZmFjY2E5YmU4Y2UwMmRhNDY3NmMw OTk3MmEwHhcNMjUxMjIwMDAwMTQyWhcNMjUxMjIxMDAwMTQyWjAzMTEwLwYDVQQD EygyMGYxM2RkZDNiYjk4MWFmMzE5M2MzNmRiMjA3M2U0MmQ1MjliNTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusrqFHAggKoKB/N1wZtFgUnVMGe6 GBOMAhv3bTj56UF3l2PKgTxpZgazRXvFEDK5a7lZTXffhiu6RlI1jH/VO6sq1uzs 5eiFMjYFVXREXOHtumd2Cn4Kh9DUEGaq1Y/4Mtm56j5VB623Wv4mVil02zs0vSB3 26ifhZ9dKEDu3p5xRuCkW0aQwDSGefHSgSqN1Ie3p9B43fXT7M/qgel9SN+DC0UZ 9Bw4GnfY9gs14XqZA8wEm5a2uZNl4f73vV3FFlrV7GKK0YwT9fDMJyM6kYU5UzfE npQ6nMVkiNRGQWVpBtrVhcMEOr7aOzAdZfsGEDdyjBM7WcG/2R80gX+GDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDxPd07uYGvMZPDbbIHPkLVKbVAMB8GA1UdIwQY MBaAFKTJ8GcAdoT6zKm+jOAtpGdsCZcqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE1ud1p3QjJoUHJNcWI2TTRDMmtaMndKbHlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9jZjFkODMtMTlmYS00MGM0LTg1NDMt NTExYWFjZWI4OTAwLzEvcE1ud1p3QjJoUHJNcWI2TTRDMmtaMndKbHlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9jZjFkODMtMTlmYS00MGM0LTg1NDMtNTExYWFjZWI4OTAw LzEvcE1ud1p3QjJoUHJNcWI2TTRDMmtaMndKbHlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK0vnRrye mynJoSJLGn3A5+46N6a9X3Th3qDSXQZm2IAKkjV4yBTk3LzQts/dZjTp6uLq9KVo VR5bp1LM+Fq8pNQMnoepHabilJmA+lGQcGwD1App8yfccoqpa1aPf4Dxw9hVE4lw tLeYLprkVk9/43DqJDeP7fDzeIhH5RFDwruyheO3nCL+1+3meuA9gTITUfKU4mO8 GLheX+fI9oVVY8t6HskkhgO1E4vsfw/KqkYy9XR9wR4FcJZzpx8i4HUfd8au/XP1 HQVTG2PbxuYUwE/ojKztcmpUZfLT9eQtNYCrgdSYqJBBNX8qHlYtVAwP3TRdmCJq XXL3jxv2yIdvbg== -----END CERTIFICATE-----Generated at Sat Dec 20 04:56:17 2025 by rpki-client