This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft File: MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json) Hash identifier: k7+H+T9cYXwtc8xVoUdSiS2vcwsAcl5LJmUuSG6Lyz0= Subject key identifier: 6F:9E:0E:62:98:0A:F7:90:07:55:4E:D6:87:7C:3A:E1:2F:1C:C8:65 Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90 Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690 Certificate serial: 019B12029DD167CE108CBECFC1C028D20BC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft Manifest number: 0E58 Signing time: Fri 12 Dec 2025 10:01:59 +0000 Manifest this update: Fri 12 Dec 2025 10:01:59 +0000 Manifest next update: Sat 13 Dec 2025 10:01:59 +0000 Files and hashes: 1: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: xHRc/FZXpSVKJfEho1Z5/cR6OUt+uCP3VhjhXJqhsGI=) 2: hApSbA3jzy_s3iVNvrGjhLhy3rU.roa (hash: 1X2vbtL7wfNX8hGTI4KlZns0bkwGbPIYpWY571Ew9V0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 10:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:02:9d:d1:67:ce:10:8c:be:cf:c1:c0:28:d2:0b:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690 Validity Not Before: Dec 12 10:01:59 2025 GMT Not After : Dec 13 10:01:59 2025 GMT Subject: CN=6f9e0e62980af79007554ed6877c3ae12f1cc865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5f:68:d7:0b:89:5e:d6:62:d7:ef:65:1a:c6: da:74:0f:67:89:82:68:02:86:73:4b:17:a6:47:c7: 33:78:69:67:f3:4e:f1:d7:dd:ba:55:36:de:17:de: 7f:ab:56:e9:a4:8b:05:0c:77:12:dc:62:eb:23:2a: 71:cd:b0:74:c3:e5:d3:5c:f9:01:cf:98:bf:34:26: b8:6f:c6:ed:a7:bf:63:fb:33:d0:80:c3:b1:49:51: cf:70:11:33:d9:ce:82:23:04:77:48:86:fe:21:61: 7a:1a:37:7e:2d:ad:92:76:88:f0:f1:ad:a4:f4:6d: dd:60:6b:cc:54:8e:dd:5c:a7:69:85:31:53:26:90: 37:97:38:36:7e:81:5a:21:26:61:18:5d:be:ec:87: 9e:87:b1:e6:14:d5:5d:10:a9:f9:b0:64:6b:6d:58: c3:ca:05:cc:b7:b6:71:d5:76:3a:49:d4:f4:f8:ad: d8:54:2e:ff:99:d7:61:eb:91:53:07:b0:29:de:5b: 29:c9:ae:18:da:05:49:1c:2f:66:dd:df:bc:6a:1e: 14:e9:42:99:00:6b:49:8d:45:4f:c1:7c:fd:d2:25: 0c:48:71:a1:99:6d:02:85:c7:5d:2b:62:c0:c1:cc: ac:9b:9c:7f:42:aa:7e:d7:2e:ce:b2:2f:93:72:d6: 75:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:9E:0E:62:98:0A:F7:90:07:55:4E:D6:87:7C:3A:E1:2F:1C:C8:65 X509v3 Authority Key Identifier: keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:a6:12:9b:bf:6a:3f:d9:df:2a:63:dc:f4:3a:64:94:2e:0d: de:24:f4:a9:23:8e:dd:8f:ce:37:1d:9b:3d:f7:83:27:80:41: 67:90:95:f7:b4:49:62:25:c5:18:64:c7:a9:17:cd:93:36:2b: fe:23:f2:f7:ae:33:4a:dd:4f:7d:f2:2b:62:58:6c:d0:ab:03: aa:50:83:d9:27:a8:4d:89:22:36:49:12:d5:48:0b:a3:a9:1a: 57:b1:49:85:49:1a:66:a2:89:f0:6f:10:e2:8c:f3:9c:7e:b1: d4:4b:2c:48:63:a5:2d:1b:25:42:bf:a5:2c:3b:74:7a:70:2e: fe:79:57:4d:a6:db:ba:3c:87:96:38:f2:46:41:0e:ef:a6:5e: e7:9a:30:a1:63:3a:0d:2b:55:a6:b8:4d:73:40:8d:10:08:23: eb:ac:c8:0f:42:4c:7a:76:e2:e8:ce:18:74:e3:95:de:d0:5e: 2c:2f:c9:c2:4d:7c:6c:e7:cf:67:29:e9:92:37:1f:0f:6f:79: 50:51:b6:0f:0b:6d:6f:e6:5c:b9:57:b7:fe:b5:31:02:83:7d: dc:44:0d:24:40:27:8f:0a:9e:68:78:b5:9f:c4:69:c6:38:2c: e5:64:f8:88:40:a5:8b:47:b6:2a:ab:d0:9c:e7:23:31:2a:66: 7d:5f:91:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsSAp3RZ84QjL7PwcAo0gvFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNzU1N2NmMjI2MjlkMDU4YTUxMTQ5NjViMmY5ZGY4ZWY0 ZGI2OTAwHhcNMjUxMjEyMTAwMTU5WhcNMjUxMjEzMTAwMTU5WjAzMTEwLwYDVQQD Eyg2ZjllMGU2Mjk4MGFmNzkwMDc1NTRlZDY4NzdjM2FlMTJmMWNjODY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l9o1wuJXtZi1+9lGsbadA9niYJo AoZzSxemR8czeGln807x1926VTbeF95/q1bppIsFDHcS3GLrIypxzbB0w+XTXPkB z5i/NCa4b8btp79j+zPQgMOxSVHPcBEz2c6CIwR3SIb+IWF6Gjd+La2Sdojw8a2k 9G3dYGvMVI7dXKdphTFTJpA3lzg2foFaISZhGF2+7Ieeh7HmFNVdEKn5sGRrbVjD ygXMt7Zx1XY6SdT0+K3YVC7/mddh65FTB7Ap3lspya4Y2gVJHC9m3d+8ah4U6UKZ AGtJjUVPwXz90iUMSHGhmW0ChcddK2LAwcysm5x/Qqp+1y7Osi+TctZ1YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+eDmKYCveQB1VO1od8OuEvHMhlMB8GA1UdIwQY MBaAFDJ1V88iYp0FilEUllsvnfjvTbaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUt ZmQ3MjViODI1MjkxLzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUtZmQ3MjViODI1Mjkx LzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4aYSm79q P9nfKmPc9DpklC4N3iT0qSOO3Y/ONx2bPfeDJ4BBZ5CV97RJYiXFGGTHqRfNkzYr /iPy964zSt1PffIrYlhs0KsDqlCD2SeoTYkiNkkS1UgLo6kaV7FJhUkaZqKJ8G8Q 4ozznH6x1EssSGOlLRslQr+lLDt0enAu/nlXTabbujyHljjyRkEO76Ze55owoWM6 DStVprhNc0CNEAgj66zID0JMenbi6M4YdOOV3tBeLC/Jwk18bOfPZynpkjcfD295 UFG2Dwttb+ZcuVe3/rUxAoN93EQNJEAnjwqeaHi1n8Rpxjgs5WT4iECli0e2KqvQ nOcjMSpmfV+RPA== -----END CERTIFICATE-----Generated at Fri Dec 12 19:30:18 2025 by rpki-client