This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft File: mInX-DdYfC8jMrsJs-GtmZPXlyw.mft (raw, json) Hash identifier: DWgxSBEczbFzSXQnmlKXW3dyhqSqj53f/0LXd6vRWdg= Subject key identifier: D7:76:93:B7:F3:E9:4E:BA:8E:3B:D2:6C:37:A3:B7:15:D8:F0:F7:AD Authority key identifier: 98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C Certificate issuer: /CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c Certificate serial: 019B194D8D9AE35C2211FCAAF5078B40A714 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft Manifest number: 1707 Signing time: Sat 13 Dec 2025 20:01:11 +0000 Manifest this update: Sat 13 Dec 2025 20:01:11 +0000 Manifest next update: Sun 14 Dec 2025 20:01:11 +0000 Files and hashes: 1: mInX-DdYfC8jMrsJs-GtmZPXlyw.crl (hash: tQRJFkWpO/762ti+d5eqJSmH5omhTBSyrnzeim1q2+4=) 2: zpGvhyYRAmjs5EUuaL_qNrktFtE.roa (hash: 24VotJmvmJDfDZLcY9ERb5W8a78zlapyR9WGVJQ5ABc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:8d:9a:e3:5c:22:11:fc:aa:f5:07:8b:40:a7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c Validity Not Before: Dec 13 20:01:11 2025 GMT Not After : Dec 14 20:01:11 2025 GMT Subject: CN=d77693b7f3e94eba8e3bd26c37a3b715d8f0f7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a8:f5:4a:16:11:56:ff:0d:a5:39:6e:74:92: d2:33:c5:63:8b:6d:df:e1:7e:64:35:18:33:06:51: 83:d8:0c:62:de:64:a8:b9:0c:10:14:d5:99:9d:d7: ae:f6:d0:17:51:d6:15:bd:cd:fb:b8:cd:56:f9:ad: 54:91:d5:a6:5c:8e:e0:48:69:04:62:e8:18:03:7d: 64:e1:a8:72:28:f8:22:96:17:f4:8d:59:62:bc:59: 28:b6:b2:01:5b:04:3d:d7:74:0f:52:f9:57:ac:e0: 0a:f5:df:81:b5:07:f6:fa:84:5e:01:43:d2:6c:d1: 24:00:0b:d4:56:7b:a6:c9:45:e0:d4:15:61:f6:37: d1:8a:3d:dc:05:68:7e:2c:8e:67:68:8a:20:e9:11: 18:14:24:d6:46:fa:bf:32:5c:d9:bb:a2:c4:b5:ea: 91:16:ae:6a:fc:8b:e0:c6:a8:41:02:b3:d5:5e:b2: 7c:36:47:3b:1b:1f:cd:38:dd:f7:9f:4c:c6:f9:c5: e9:08:06:d4:3c:f5:6f:fb:a8:bf:ed:dc:70:7a:a0: 1c:c9:94:3b:78:95:72:01:00:28:99:74:19:a4:2f: 45:09:a9:8e:7c:14:d3:2f:7c:d7:e7:36:33:49:cf: ff:e8:01:43:36:ab:d7:64:d2:b2:33:d4:04:d9:bb: f6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:76:93:B7:F3:E9:4E:BA:8E:3B:D2:6C:37:A3:B7:15:D8:F0:F7:AD X509v3 Authority Key Identifier: keyid:98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:b1:8b:8a:3c:81:e1:31:7f:15:10:4d:35:1a:8d:43:d8:88: d0:8b:1a:8b:44:e0:83:4f:01:bc:a1:fb:6a:92:07:08:b8:49: 8b:81:66:13:75:10:11:6c:ab:ad:7f:98:20:c3:86:f1:e5:c6: 09:db:1b:95:80:8e:d8:2b:05:90:be:5c:39:59:2e:5c:9d:3f: 2f:9c:fb:d8:f8:16:63:8c:aa:f5:56:ca:0e:db:0f:14:26:98: 1f:81:c0:66:b9:2c:04:24:5a:10:e5:16:c3:52:c0:51:6b:1d: 75:bb:d7:a1:ab:2f:fb:df:0b:a1:3a:fc:2f:e0:07:f3:90:6a: 8a:da:4e:bf:0c:f2:55:72:07:f6:c7:91:1f:f1:16:22:64:62: 68:a2:5a:16:b1:c8:e6:61:40:ee:d9:aa:df:4c:14:6d:9e:31: 29:10:2c:78:3e:97:b0:09:53:6b:1c:38:19:c5:0f:75:60:2e: 89:f7:ec:0c:3d:49:6a:d2:0e:4f:04:e9:78:21:96:25:f5:b6: 00:2d:3b:ca:b8:d2:d9:27:fc:f2:fa:58:44:bf:73:63:3b:68: 6b:7e:98:90:ff:69:40:7c:39:61:16:0c:d4:14:ef:bb:2e:4c: 3c:ef:f2:71:11:12:5e:e0:e9:33:df:13:98:8d:a1:12:d1:fb: 60:f7:50:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTY2a41wiEfyq9QeLQKcUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ODlkN2Y4Mzc1ODdjMmYyMzMyYmIwOWIzZTFhZDk5OTNk Nzk3MmMwHhcNMjUxMjEzMjAwMTExWhcNMjUxMjE0MjAwMTExWjAzMTEwLwYDVQQD EyhkNzc2OTNiN2YzZTk0ZWJhOGUzYmQyNmMzN2EzYjcxNWQ4ZjBmN2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaj1ShYRVv8NpTludJLSM8Vji23f 4X5kNRgzBlGD2Axi3mSouQwQFNWZndeu9tAXUdYVvc37uM1W+a1UkdWmXI7gSGkE YugYA31k4ahyKPgilhf0jVlivFkotrIBWwQ913QPUvlXrOAK9d+BtQf2+oReAUPS bNEkAAvUVnumyUXg1BVh9jfRij3cBWh+LI5naIog6REYFCTWRvq/MlzZu6LEteqR Fq5q/IvgxqhBArPVXrJ8Nkc7Gx/NON33n0zG+cXpCAbUPPVv+6i/7dxweqAcyZQ7 eJVyAQAomXQZpC9FCamOfBTTL3zX5zYzSc//6AFDNqvXZNKyM9QE2bv2qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNd2k7fz6U66jjvSbDejtxXY8PetMB8GA1UdIwQY MBaAFJiJ1/g3WHwvIzK7CbPhrZmT15csMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUluWC1EZFlmQzhqTXJzSnMtR3RtWlBYbHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8yYTY5YmMtMDVhMC00NmYwLWI0MjMt MjIyYjAzMTE0MTkzLzEvbUluWC1EZFlmQzhqTXJzSnMtR3RtWlBYbHl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8yYTY5YmMtMDVhMC00NmYwLWI0MjMtMjIyYjAzMTE0MTkz LzEvbUluWC1EZFlmQzhqTXJzSnMtR3RtWlBYbHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbGLijyB 4TF/FRBNNRqNQ9iI0Isai0Tgg08BvKH7apIHCLhJi4FmE3UQEWyrrX+YIMOG8eXG CdsblYCO2CsFkL5cOVkuXJ0/L5z72PgWY4yq9VbKDtsPFCaYH4HAZrksBCRaEOUW w1LAUWsddbvXoasv+98LoTr8L+AH85BqitpOvwzyVXIH9seRH/EWImRiaKJaFrHI 5mFA7tmq30wUbZ4xKRAseD6XsAlTaxw4GcUPdWAuiffsDD1JatIOTwTpeCGWJfW2 AC07yrjS2Sf88vpYRL9zYztoa36YkP9pQHw5YRYM1BTvuy5MPO/ycRESXuDpM98T mI2hEtH7YPdQBw== -----END CERTIFICATE-----Generated at Sun Dec 14 01:04:29 2025 by rpki-client