This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft File: mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json) Hash identifier: iC7V6EhI4rSVFxTgmmVFwyuJMK4l33JMNk8bKiI0T+w= Subject key identifier: B2:1D:7A:13:47:F4:DD:7C:8F:D6:A1:1E:64:11:5A:8B:FA:56:E3:34 Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d Certificate serial: 019B34C45AC3E63D1621860EA95961A3773E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft Manifest number: 0B4D Signing time: Fri 19 Dec 2025 04:00:42 +0000 Manifest this update: Fri 19 Dec 2025 04:00:42 +0000 Manifest next update: Sat 20 Dec 2025 04:00:42 +0000 Files and hashes: 1: 30qNUm4LVV2JzJAozjpjCljWLl8.roa (hash: xrG/y+AM3EYc5/EtWlaqcCc/K9J1cl96ejgIPJZYD9U=) 2: Z6_bYbvmyerAM_VgnIaDcW67oTI.roa (hash: QWDvfYg2hEe0SCxsF7DniMhJuC7NKbaUI8wFEj7S2ns=) 3: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: LVOgMEwKhl+4gryNc2uzZ2yGfoiiBeRnuU5Lqzt4w+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:5a:c3:e6:3d:16:21:86:0e:a9:59:61:a3:77:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d Validity Not Before: Dec 19 04:00:42 2025 GMT Not After : Dec 20 04:00:42 2025 GMT Subject: CN=b21d7a1347f4dd7c8fd6a11e64115a8bfa56e334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:b7:c8:39:50:68:75:f3:80:2a:4c:4d:96: 42:10:11:8d:cf:fe:4a:58:cb:ea:63:9b:b2:5d:05: 3c:65:eb:45:87:26:78:28:29:46:fa:f0:bf:e9:8d: 15:af:e7:fa:a1:c1:fa:17:69:b7:d3:dc:9a:ea:e1: 61:ad:a7:41:8b:ee:d6:ec:3d:5f:e9:39:89:2e:e8: c2:ac:ef:55:7d:50:78:04:97:98:34:e0:67:17:b6: 95:f8:8e:a5:e9:bd:2e:64:9c:06:f1:41:60:93:37: cd:12:3d:be:90:15:c3:4d:73:e7:fa:f5:c3:2a:8b: 4b:f7:48:4e:08:21:ca:41:0f:26:87:ac:55:bc:b5: f3:ac:84:c2:d3:ad:fb:d6:d6:34:7d:8b:94:2c:ad: bf:ce:77:7d:eb:34:3d:46:a0:44:64:66:d7:a7:ae: 92:8a:49:51:7a:b7:0e:64:c3:bd:3d:79:4c:9b:a0: ba:c9:88:35:05:6b:a8:2d:6a:71:7e:d6:a7:64:e3: 42:39:79:40:81:4c:2f:a7:b9:56:8f:11:6c:7f:3c: 19:0b:e8:5c:07:bd:b8:ba:c5:fc:4a:de:a6:10:b4: e9:43:e0:22:9d:4e:eb:d4:f0:c9:f9:29:9a:d2:73: da:e0:5a:ea:e9:bb:b2:7f:54:86:bb:18:33:11:c3: ff:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1D:7A:13:47:F4:DD:7C:8F:D6:A1:1E:64:11:5A:8B:FA:56:E3:34 X509v3 Authority Key Identifier: keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:f9:ce:28:1c:a3:a5:a7:91:0c:50:d6:60:9d:51:58:87:6d: 14:0f:fb:46:ca:c2:44:07:f5:71:01:46:68:6c:57:0d:34:99: 0c:a1:04:b6:e2:9a:2b:7c:e1:93:51:c3:00:24:a5:fe:0c:c5: 89:9e:21:e5:49:66:4a:74:e8:e3:31:00:86:f6:3e:57:2b:08: 93:af:c4:b4:f9:12:85:31:e7:64:f6:c6:4f:11:13:d9:0d:c7: 8f:d0:5f:55:7d:de:05:cb:c7:53:45:27:48:fc:ba:92:36:86: 70:f4:05:26:59:8a:7a:5c:e7:9a:2f:a3:8b:b8:4c:ee:d7:51: be:4f:a1:e8:6f:e4:84:2d:2a:9f:e8:79:15:f5:ec:6d:29:ad: c0:77:46:57:ec:db:c8:e3:66:d7:f4:21:3e:6f:8a:75:47:83: 36:2f:1d:64:cb:64:54:a7:5a:e1:0e:a2:d6:8b:59:99:50:e5: 12:bf:2a:04:0c:1b:3a:9c:71:ed:47:10:91:31:43:92:3d:60: 2f:f0:49:f5:3e:98:df:69:80:03:fd:a6:17:50:2d:17:4a:7c: 1e:16:32:83:4a:e7:aa:5f:3e:7e:ae:2d:2e:6a:2f:d9:94:4a: bd:43:3c:7a:ca:6d:1e:bd:4c:16:13:af:47:bd:bc:50:19:9a: b6:1d:77:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xFrD5j0WIYYOqVlho3c+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YzljMzE4OWJlYzEzNzkzMTFiZDEzNTNmYTk3NDlhNjhk ZDk5MmQwHhcNMjUxMjE5MDQwMDQyWhcNMjUxMjIwMDQwMDQyWjAzMTEwLwYDVQQD EyhiMjFkN2ExMzQ3ZjRkZDdjOGZkNmExMWU2NDExNWE4YmZhNTZlMzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzy3yDlQaHXzgCpMTZZCEBGNz/5K WMvqY5uyXQU8ZetFhyZ4KClG+vC/6Y0Vr+f6ocH6F2m309ya6uFhradBi+7W7D1f 6TmJLujCrO9VfVB4BJeYNOBnF7aV+I6l6b0uZJwG8UFgkzfNEj2+kBXDTXPn+vXD KotL90hOCCHKQQ8mh6xVvLXzrITC06371tY0fYuULK2/znd96zQ9RqBEZGbXp66S iklRercOZMO9PXlMm6C6yYg1BWuoLWpxftanZONCOXlAgUwvp7lWjxFsfzwZC+hc B724usX8St6mELTpQ+AinU7r1PDJ+Sma0nPa4Frq6buyf1SGuxgzEcP/oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIdehNH9N18j9ahHmQRWov6VuM0MB8GA1UdIwQY MBaAFJjJwxib7BN5MRvRNT+pdJpo3ZktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83MDEzOWQtMWU3NS00MGI1LTkxNmEt OWM4MTZhNDA0OTBlLzEvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83MDEzOWQtMWU3NS00MGI1LTkxNmEtOWM4MTZhNDA0OTBl LzEvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvnOKByj paeRDFDWYJ1RWIdtFA/7RsrCRAf1cQFGaGxXDTSZDKEEtuKaK3zhk1HDACSl/gzF iZ4h5UlmSnTo4zEAhvY+VysIk6/EtPkShTHnZPbGTxET2Q3Hj9BfVX3eBcvHU0Un SPy6kjaGcPQFJlmKelznmi+ji7hM7tdRvk+h6G/khC0qn+h5FfXsbSmtwHdGV+zb yONm1/QhPm+KdUeDNi8dZMtkVKda4Q6i1otZmVDlEr8qBAwbOpxx7UcQkTFDkj1g L/BJ9T6Y32mAA/2mF1AtF0p8HhYyg0rnql8+fq4tLmov2ZRKvUM8esptHr1MFhOv R728UBmath13YA== -----END CERTIFICATE-----Generated at Fri Dec 19 10:25:36 2025 by rpki-client