This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft File: MnBggp7MaE-ln4VaoKSEAbwX8tE.mft (raw, json) Hash identifier: +MNhOQzqqdBIpXMiu/tcCsm1H8btd05wwkN9WTbC+po= Subject key identifier: E1:83:1A:36:7A:29:9A:9F:BB:CA:81:A3:D8:07:8C:5F:D7:82:36:35 Authority key identifier: 32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1 Certificate issuer: /CN=327060829ecc684fa59f855aa0a48401bc17f2d1 Certificate serial: 019B46275C1AA78B1D1FC98131ABCC797844 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft Manifest number: 06F7 Signing time: Mon 22 Dec 2025 13:02:23 +0000 Manifest this update: Mon 22 Dec 2025 13:02:23 +0000 Manifest next update: Tue 23 Dec 2025 13:02:23 +0000 Files and hashes: 1: MnBggp7MaE-ln4VaoKSEAbwX8tE.crl (hash: /YEjMtFbTDyb20B4BwoJnD5p+YYqLyyXk8GuKWERN2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:02:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:5c:1a:a7:8b:1d:1f:c9:81:31:ab:cc:79:78:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=327060829ecc684fa59f855aa0a48401bc17f2d1 Validity Not Before: Dec 22 13:02:23 2025 GMT Not After : Dec 23 13:02:23 2025 GMT Subject: CN=e1831a367a299a9fbbca81a3d8078c5fd7823635 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:41:ce:c3:fe:1f:e7:3f:d9:1a:e2:f3:08:43: 7e:68:6d:10:2c:5a:a4:c0:1f:44:a2:93:b3:50:30: 55:3c:26:59:97:a1:41:10:c6:98:4e:9a:36:a2:72: 76:57:22:fd:a6:65:aa:e1:c5:84:07:4f:31:be:7f: b8:66:d2:06:76:0c:58:a8:fa:99:e0:74:19:8c:80: 84:e3:98:77:33:bc:ef:07:7b:28:c8:ab:c4:54:48: 04:fe:14:85:9b:f0:e4:3f:a7:ba:b3:1b:08:3c:66: e2:5d:b3:38:6d:09:71:b3:6b:1c:27:03:79:2c:84: a4:f0:f3:c5:af:58:76:a4:29:84:b1:f5:60:37:3f: 28:8f:88:b7:28:db:9d:4d:63:32:90:23:f8:72:81: d6:4f:a0:0b:d1:d0:fc:e2:57:35:66:9d:d0:ea:b2: 39:1b:9e:0d:dc:84:36:38:88:99:aa:ba:cd:99:3c: d6:d3:07:9d:aa:b1:0f:15:5d:bb:f6:4b:55:87:38: 06:c2:34:8b:7f:ff:b2:3c:c7:33:e6:91:8f:0a:02: 54:8d:99:14:13:88:59:33:49:8f:1b:a2:1a:03:39: 6d:73:1f:b4:bb:cf:2c:c5:22:86:5f:c0:26:9b:bd: 5c:d8:88:40:e3:7f:77:0a:95:9b:76:ef:dc:fc:7c: bb:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:83:1A:36:7A:29:9A:9F:BB:CA:81:A3:D8:07:8C:5F:D7:82:36:35 X509v3 Authority Key Identifier: keyid:32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:91:52:67:b5:97:5e:ed:1e:10:cd:d2:31:e5:93:dc:43:f0: 89:99:12:12:a8:af:96:9e:c0:18:57:e4:20:6f:35:f7:ac:fc: 90:48:05:e5:1a:ee:bd:46:59:2d:3a:57:ee:50:62:30:ae:93: 52:80:c8:43:73:bc:c9:d4:82:9d:fa:9b:51:46:b8:7d:11:20: 78:b7:b0:bd:dc:18:be:83:4c:1b:09:cc:ce:20:ad:f5:06:9f: a0:b5:4b:b9:3d:70:39:70:09:6a:bb:6a:5f:f5:e3:23:68:d8: b7:d9:0f:91:64:4e:c5:4c:91:55:84:00:4e:04:4c:f3:24:f8: 7e:ba:d8:88:8a:7a:f4:0e:a5:56:87:3a:8d:f5:0c:e8:9c:c5: d8:94:a2:c6:de:32:6a:a7:42:fb:7a:75:f3:43:29:6e:f3:48: 29:9c:10:5c:16:a8:a5:57:b9:b3:b7:63:63:4e:a5:28:fc:62: ba:7e:49:12:8f:b3:f0:ba:b5:c2:9f:69:5a:03:95:8a:e4:d9: 58:37:18:4f:55:3b:7f:2e:ad:9f:e1:c3:4f:19:2d:7f:94:71: ed:55:44:d3:8a:04:4e:e3:6d:c2:50:59:61:1b:86:2d:fa:e2: b8:13:02:87:14:90:34:1e:b6:93:5a:16:c2:09:bb:39:7d:74: b0:a0:4e:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJ1wap4sdH8mBMavMeXhEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNzA2MDgyOWVjYzY4NGZhNTlmODU1YWEwYTQ4NDAxYmMx N2YyZDEwHhcNMjUxMjIyMTMwMjIzWhcNMjUxMjIzMTMwMjIzWjAzMTEwLwYDVQQD EyhlMTgzMWEzNjdhMjk5YTlmYmJjYTgxYTNkODA3OGM1ZmQ3ODIzNjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UHOw/4f5z/ZGuLzCEN+aG0QLFqk wB9EopOzUDBVPCZZl6FBEMaYTpo2onJ2VyL9pmWq4cWEB08xvn+4ZtIGdgxYqPqZ 4HQZjICE45h3M7zvB3soyKvEVEgE/hSFm/DkP6e6sxsIPGbiXbM4bQlxs2scJwN5 LISk8PPFr1h2pCmEsfVgNz8oj4i3KNudTWMykCP4coHWT6AL0dD84lc1Zp3Q6rI5 G54N3IQ2OIiZqrrNmTzW0wedqrEPFV279ktVhzgGwjSLf/+yPMcz5pGPCgJUjZkU E4hZM0mPG6IaAzltcx+0u88sxSKGX8Amm71c2IhA4393CpWbdu/c/Hy7HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGDGjZ6KZqfu8qBo9gHjF/XgjY1MB8GA1UdIwQY MBaAFDJwYIKezGhPpZ+FWqCkhAG8F/LRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW5CZ2dwN01hRS1sbjRWYW9LU0VBYndYOHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMGFiMjMtNzQ1NS00ZWEwLWExZTMt MTMyNzYxYmVhYTEwLzEvTW5CZ2dwN01hRS1sbjRWYW9LU0VBYndYOHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9iMGFiMjMtNzQ1NS00ZWEwLWExZTMtMTMyNzYxYmVhYTEw LzEvTW5CZ2dwN01hRS1sbjRWYW9LU0VBYndYOHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpFSZ7WX Xu0eEM3SMeWT3EPwiZkSEqivlp7AGFfkIG8196z8kEgF5RruvUZZLTpX7lBiMK6T UoDIQ3O8ydSCnfqbUUa4fREgeLewvdwYvoNMGwnMziCt9QafoLVLuT1wOXAJartq X/XjI2jYt9kPkWROxUyRVYQATgRM8yT4frrYiIp69A6lVoc6jfUM6JzF2JSixt4y aqdC+3p180MpbvNIKZwQXBaopVe5s7djY06lKPxiun5JEo+z8Lq1wp9pWgOViuTZ WDcYT1U7fy6tn+HDTxktf5Rx7VVE04oETuNtwlBZYRuGLfriuBMChxSQNB62k1oW wgm7OX10sKBOWA== -----END CERTIFICATE-----Generated at Mon Dec 22 20:44:00 2025 by rpki-client