This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft File: MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft (raw, json) Hash identifier: Ba6U0FGdoO3Fb4TzO3CY5IBZPt8dJXs8IwRKHCefSKo= Subject key identifier: 93:1D:F6:6A:E5:8C:F3:3F:C9:F0:7E:2B:A0:AF:77:F5:DF:81:2F:70 Authority key identifier: 32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91 Certificate issuer: /CN=327ce64ace02ccd330ceef98d05df0fb20317a91 Certificate serial: 019B47A67D69CBC239220E5206547B78038D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft Manifest number: 178E Signing time: Mon 22 Dec 2025 20:00:51 +0000 Manifest this update: Mon 22 Dec 2025 20:00:51 +0000 Manifest next update: Tue 23 Dec 2025 20:00:51 +0000 Files and hashes: 1: MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl (hash: +VvKhwalEI72wKhUNGelI8uSAb6S1wXSjirhhVbDQEo=) 2: wPSm9MaczVOfJa8MmydVyNm05v8.roa (hash: EUTCJOzuqY4YxOtOde7m5gFxrTBwquCzBL62eKVTyyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 20:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:a6:7d:69:cb:c2:39:22:0e:52:06:54:7b:78:03:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=327ce64ace02ccd330ceef98d05df0fb20317a91 Validity Not Before: Dec 22 20:00:51 2025 GMT Not After : Dec 23 20:00:51 2025 GMT Subject: CN=931df66ae58cf33fc9f07e2ba0af77f5df812f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:eb:33:39:ce:ae:90:39:7b:7f:cf:2f:c9: 49:28:95:60:13:41:2a:5e:0d:bb:b7:ed:21:11:76: 9c:eb:b9:0e:b7:97:9b:94:06:05:80:ca:fb:4a:8f: 32:b7:e7:ed:0e:bc:fd:28:7c:2a:48:e9:ad:fe:c5: ba:cd:d1:49:ce:48:99:02:18:10:29:33:3b:ca:42: f1:95:4f:39:cc:e3:54:ca:2b:2f:e4:f8:9f:d2:99: 75:19:14:ef:cd:b5:64:85:16:38:a6:b0:c1:4d:4f: ab:8a:8c:74:79:9a:e9:f3:e6:90:45:a1:00:25:41: 34:68:9f:12:da:0e:17:cf:c8:26:5e:28:9b:2e:25: c4:e5:88:b9:cf:90:40:50:51:c8:bc:1b:6a:c1:40: da:c6:03:f9:e3:ed:8b:7b:f7:31:7a:1b:f0:e8:ee: 24:49:76:49:13:91:8a:06:49:b3:f8:42:e4:70:a8: 5b:aa:27:fe:d4:05:f6:06:1f:5f:40:c6:70:bf:b8: 86:68:c9:7b:68:f7:5e:4c:0b:07:9e:95:f0:7b:36: 13:6b:c3:bc:60:a0:7c:ad:7a:21:f4:21:f6:55:37: 01:3d:33:7c:12:33:51:70:de:f1:83:5e:9b:af:60: 8c:4b:2d:a2:06:8d:f6:a4:81:da:de:29:a6:04:25: f0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:1D:F6:6A:E5:8C:F3:3F:C9:F0:7E:2B:A0:AF:77:F5:DF:81:2F:70 X509v3 Authority Key Identifier: keyid:32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:94:f8:87:98:f2:aa:62:57:b7:a3:2f:fa:23:e5:f6:a7:35: 19:77:3c:b0:64:fb:40:fb:b1:2f:9b:05:4d:a6:19:b4:10:f3: 3e:37:a9:de:30:79:e4:2d:f4:96:f2:ff:36:c9:33:16:2f:5e: 44:68:1b:43:6b:dc:81:65:41:e6:6f:87:f9:94:40:9f:35:a2: 50:0a:22:c2:bd:e0:f6:c9:b3:c4:54:15:50:ae:a1:1a:5d:d2: 01:20:d2:8d:66:fa:20:ad:5a:3c:6d:93:83:e1:d5:a2:91:15: 30:8b:9f:08:77:08:47:8b:38:2b:ff:43:29:d2:a8:fd:f6:15: fb:da:25:0a:f2:50:4e:45:38:fe:9d:50:29:9a:0b:db:9b:af: 80:7a:ac:7c:b7:67:cd:2a:1d:92:55:f8:f5:4b:be:5a:5f:c4: ba:b0:84:99:de:90:58:5b:bb:7b:e1:60:19:cb:f9:39:3c:d3: 50:64:d1:79:81:7e:c8:fa:44:c7:ca:21:4f:22:5b:34:28:06: f9:7c:d4:b9:0e:a4:81:ad:e0:3c:6f:68:1c:54:bc:ce:00:5b: 66:18:88:fb:ae:76:e6:b1:6a:a8:9f:5e:53:6f:14:65:a3:a2: 96:b3:5b:bc:4c:5c:72:bf:54:1b:a8:ce:28:81:e4:4c:0e:88: e6:f2:8b:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHpn1py8I5Ig5SBlR7eAONMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyN2NlNjRhY2UwMmNjZDMzMGNlZWY5OGQwNWRmMGZiMjAz MTdhOTEwHhcNMjUxMjIyMjAwMDUxWhcNMjUxMjIzMjAwMDUxWjAzMTEwLwYDVQQD Eyg5MzFkZjY2YWU1OGNmMzNmYzlmMDdlMmJhMGFmNzdmNWRmODEyZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVTrMznOrpA5e3/PL8lJKJVgE0Eq Xg27t+0hEXac67kOt5eblAYFgMr7So8yt+ftDrz9KHwqSOmt/sW6zdFJzkiZAhgQ KTM7ykLxlU85zONUyisv5Pif0pl1GRTvzbVkhRY4prDBTU+riox0eZrp8+aQRaEA JUE0aJ8S2g4Xz8gmXiibLiXE5Yi5z5BAUFHIvBtqwUDaxgP54+2Le/cxehvw6O4k SXZJE5GKBkmz+ELkcKhbqif+1AX2Bh9fQMZwv7iGaMl7aPdeTAsHnpXwezYTa8O8 YKB8rXoh9CH2VTcBPTN8EjNRcN7xg16br2CMSy2iBo32pIHa3immBCXwyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJMd9mrljPM/yfB+K6Cvd/XfgS9wMB8GA1UdIwQY MBaAFDJ85krOAszTMM7vmNBd8PsgMXqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW56bVNzNEN6Tk13enUtWTBGM3cteUF4ZXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS85ZGU1ZGEtMmRiMi00ZTA2LTg1NjMt YTNkOWQ2MTRmMTk3LzEvTW56bVNzNEN6Tk13enUtWTBGM3cteUF4ZXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS85ZGU1ZGEtMmRiMi00ZTA2LTg1NjMtYTNkOWQ2MTRmMTk3 LzEvTW56bVNzNEN6Tk13enUtWTBGM3cteUF4ZXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZT4h5jy qmJXt6Mv+iPl9qc1GXc8sGT7QPuxL5sFTaYZtBDzPjep3jB55C30lvL/NskzFi9e RGgbQ2vcgWVB5m+H+ZRAnzWiUAoiwr3g9smzxFQVUK6hGl3SASDSjWb6IK1aPG2T g+HVopEVMIufCHcIR4s4K/9DKdKo/fYV+9olCvJQTkU4/p1QKZoL25uvgHqsfLdn zSodklX49Uu+Wl/EurCEmd6QWFu7e+FgGcv5OTzTUGTReYF+yPpEx8ohTyJbNCgG +XzUuQ6kga3gPG9oHFS8zgBbZhiI+6525rFqqJ9eU28UZaOilrNbvExccr9UG6jO KIHkTA6I5vKLeA== -----END CERTIFICATE-----Generated at Tue Dec 23 02:04:33 2025 by rpki-client