This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft File: MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft (raw, json) Hash identifier: v5oe4cGmum2uEIvu8V9F6nwTmdjRBoJf7wTFnVJqQFY= Subject key identifier: EE:70:B1:09:35:7E:0F:DC:BB:2B:7B:56:D7:E2:7F:32:F7:A5:74:C1 Authority key identifier: 32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91 Certificate issuer: /CN=327ce64ace02ccd330ceef98d05df0fb20317a91 Certificate serial: 019B194DB114390925BFC07C1ECAF3C32870 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft Manifest number: 1776 Signing time: Sat 13 Dec 2025 20:01:20 +0000 Manifest this update: Sat 13 Dec 2025 20:01:20 +0000 Manifest next update: Sun 14 Dec 2025 20:01:20 +0000 Files and hashes: 1: MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl (hash: cax3ONCrkGAzKip0Ib5TG1CMx6MiTelIN+CyeK96oRw=) 2: wPSm9MaczVOfJa8MmydVyNm05v8.roa (hash: EUTCJOzuqY4YxOtOde7m5gFxrTBwquCzBL62eKVTyyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:b1:14:39:09:25:bf:c0:7c:1e:ca:f3:c3:28:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=327ce64ace02ccd330ceef98d05df0fb20317a91 Validity Not Before: Dec 13 20:01:20 2025 GMT Not After : Dec 14 20:01:20 2025 GMT Subject: CN=ee70b109357e0fdcbb2b7b56d7e27f32f7a574c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:98:2e:5f:6d:48:a1:8c:35:4d:8c:c7:5d:57: b6:d3:78:c8:49:4b:a6:94:70:f1:ed:21:e8:8c:73: 37:41:b3:28:75:88:f1:a0:84:ed:39:7a:2e:bd:63: 35:01:4f:a7:cb:2c:09:34:4f:3e:c0:e2:37:f1:82: 36:2a:e0:75:c6:02:46:11:93:04:c6:a9:95:47:73: 44:b5:ac:1d:f9:eb:bc:15:14:47:d3:ad:ec:4e:9a: d3:74:3a:10:ce:b3:1a:a0:81:16:44:50:89:b4:2f: fb:b1:7a:34:70:19:14:f1:05:e4:21:ec:27:6a:91: 3a:7f:08:a0:79:c5:de:c8:e6:5b:52:4c:1e:2f:41: e0:ac:ed:2e:4f:0b:42:30:a5:fc:1b:69:1c:fc:33: 54:bd:45:37:27:e6:6f:19:e6:94:ae:b2:ff:08:b2: 3d:cf:d9:8b:a3:38:ad:1c:0b:01:c4:4d:ee:0d:a6: 8c:74:12:b7:85:46:17:4a:2b:99:1a:83:74:f1:6d: 04:30:63:3e:f7:15:2a:97:93:95:d1:c4:f8:7f:8a: ce:d3:d0:7f:27:9b:82:11:c5:bb:9d:5c:5f:b3:9b: c5:f2:83:92:34:d1:8b:47:38:72:c8:4a:21:75:cb: 7f:ae:b0:1b:ce:a5:42:e1:06:36:7b:fb:bf:d3:7e: 3a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:70:B1:09:35:7E:0F:DC:BB:2B:7B:56:D7:E2:7F:32:F7:A5:74:C1 X509v3 Authority Key Identifier: keyid:32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:f3:8b:9f:de:3b:87:53:8c:dc:73:b9:f0:87:b4:d8:4a:fc: 65:5b:50:4b:ff:15:2e:28:95:17:de:99:0a:ef:d8:fb:a3:08: ed:ff:a5:d5:08:dd:cf:b2:ef:df:07:21:02:02:20:43:f9:11: 5b:2a:2a:fa:69:d5:07:64:7f:42:50:ef:b3:7b:78:b9:52:99: 9d:5b:1f:87:7e:9b:2d:8e:6b:ac:32:3a:8c:44:a1:33:0c:31: 00:62:11:ea:ae:19:41:54:2e:ac:a7:40:6d:e7:df:bc:e2:76: 43:50:c9:5b:66:2a:d7:06:28:3b:89:d2:1e:2b:ad:2f:a9:95: 79:ea:f3:80:a1:81:a9:3c:14:48:55:2b:9b:6a:62:7d:e2:bf: 2e:85:73:25:56:fb:8c:38:d4:2e:e5:4b:60:7e:f3:c6:21:49: a2:f8:8e:bb:e2:a3:5f:34:53:32:c9:7f:35:fe:e5:11:1e:af: b9:01:48:66:a7:ad:8f:68:23:49:d9:8b:04:a1:e7:d0:9b:38: 45:6d:ab:42:de:40:e3:92:12:4e:fb:85:61:d4:51:64:50:67: 0a:79:a7:d2:09:27:02:58:29:f0:d8:98:08:77:69:08:56:e1: 06:47:7f:9f:cb:2b:df:ed:37:3d:9c:ad:aa:2d:7c:91:e8:a6: 21:62:50:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTbEUOQklv8B8HsrzwyhwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyN2NlNjRhY2UwMmNjZDMzMGNlZWY5OGQwNWRmMGZiMjAz MTdhOTEwHhcNMjUxMjEzMjAwMTIwWhcNMjUxMjE0MjAwMTIwWjAzMTEwLwYDVQQD EyhlZTcwYjEwOTM1N2UwZmRjYmIyYjdiNTZkN2UyN2YzMmY3YTU3NGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ZguX21IoYw1TYzHXVe203jISUum lHDx7SHojHM3QbModYjxoITtOXouvWM1AU+nyywJNE8+wOI38YI2KuB1xgJGEZME xqmVR3NEtawd+eu8FRRH063sTprTdDoQzrMaoIEWRFCJtC/7sXo0cBkU8QXkIewn apE6fwigecXeyOZbUkweL0HgrO0uTwtCMKX8G2kc/DNUvUU3J+ZvGeaUrrL/CLI9 z9mLozitHAsBxE3uDaaMdBK3hUYXSiuZGoN08W0EMGM+9xUql5OV0cT4f4rO09B/ J5uCEcW7nVxfs5vF8oOSNNGLRzhyyEohdct/rrAbzqVC4QY2e/u/0346IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5wsQk1fg/cuyt7VtfifzL3pXTBMB8GA1UdIwQY MBaAFDJ85krOAszTMM7vmNBd8PsgMXqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW56bVNzNEN6Tk13enUtWTBGM3cteUF4ZXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS85ZGU1ZGEtMmRiMi00ZTA2LTg1NjMt YTNkOWQ2MTRmMTk3LzEvTW56bVNzNEN6Tk13enUtWTBGM3cteUF4ZXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS85ZGU1ZGEtMmRiMi00ZTA2LTg1NjMtYTNkOWQ2MTRmMTk3 LzEvTW56bVNzNEN6Tk13enUtWTBGM3cteUF4ZXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApfOLn947 h1OM3HO58Ie02Er8ZVtQS/8VLiiVF96ZCu/Y+6MI7f+l1Qjdz7Lv3wchAgIgQ/kR Wyoq+mnVB2R/QlDvs3t4uVKZnVsfh36bLY5rrDI6jEShMwwxAGIR6q4ZQVQurKdA beffvOJ2Q1DJW2Yq1wYoO4nSHiutL6mVeerzgKGBqTwUSFUrm2pifeK/LoVzJVb7 jDjULuVLYH7zxiFJoviOu+KjXzRTMsl/Nf7lER6vuQFIZqetj2gjSdmLBKHn0Js4 RW2rQt5A45ISTvuFYdRRZFBnCnmn0gknAlgp8NiYCHdpCFbhBkd/n8sr3+03PZyt qi18keimIWJQ4w== -----END CERTIFICATE-----Generated at Sun Dec 14 01:05:48 2025 by rpki-client