This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft File: PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft (raw, json) Hash identifier: 2HFSPPg+W/XWoIWIkpFL8i3WBMVChvrVbN/uMBawSuQ= Subject key identifier: 71:1D:56:DB:A7:FD:7A:D5:EB:F3:4B:5F:94:FF:C3:98:C2:60:1B:E7 Authority key identifier: 3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3 Certificate issuer: /CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3 Certificate serial: 019B1FF488E279B60EDD1B19818844309DD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft Manifest number: 092F Signing time: Mon 15 Dec 2025 03:01:18 +0000 Manifest this update: Mon 15 Dec 2025 03:01:18 +0000 Manifest next update: Tue 16 Dec 2025 03:01:18 +0000 Files and hashes: 1: PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl (hash: MHmXHAZjPp0DTRdvHBOOrIQzWCjfKB0qZjfZ3MsuqSA=) 2: WrzesfgAIkReChvkvHbeme9Obyo.roa (hash: sSRQkO+9/oNieGkByWGhrbGGDkaRr1cGKseQKtOM7es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:88:e2:79:b6:0e:dd:1b:19:81:88:44:30:9d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e43277b7ca79d0e9e07fc4a4b318041df415cb3 Validity Not Before: Dec 15 03:01:18 2025 GMT Not After : Dec 16 03:01:18 2025 GMT Subject: CN=711d56dba7fd7ad5ebf34b5f94ffc398c2601be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:03:ce:df:e5:fc:2a:3d:73:c2:bc:95:7f:62: 6b:68:ac:c5:fc:67:e1:26:de:de:6a:e6:a0:77:ea: 6f:dd:a5:88:4f:9b:fb:eb:e8:b6:4f:d5:70:7a:cb: fc:18:46:b0:11:cc:04:20:6d:22:61:48:6b:2f:12: 58:a1:3c:a3:14:66:ed:4b:ef:b1:a3:fb:1e:86:90: 1b:6a:71:53:ed:d3:74:5b:7a:47:ce:56:7a:69:ba: 7c:ca:69:c1:a3:5f:60:f2:01:1d:9a:ca:58:6b:d0: 36:ab:d2:2e:16:b1:f6:dd:b4:1c:31:3e:ae:2c:58: 76:1e:0c:5b:cc:a6:ff:da:99:ca:56:5d:0c:d4:f4: 51:bc:b8:42:3e:41:1e:d4:bd:69:24:f1:cc:5c:6e: 28:7f:39:ca:0d:9f:f7:08:6c:ed:9c:7a:5c:af:4e: 06:91:ac:24:7a:b8:a9:79:65:0b:f1:77:29:e0:d3: 9d:45:d4:17:f4:01:19:7d:a8:78:35:90:4a:c4:65: 56:87:53:6a:27:56:94:7d:59:01:0f:43:dd:23:89: 3a:de:a7:0d:65:f7:67:e8:18:1d:e7:4e:39:59:46: a2:78:98:83:6c:6d:af:87:74:93:c3:fc:c3:f4:ce: 9e:65:ce:bf:48:94:7d:03:2a:cf:57:b5:5a:ef:39: 8d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1D:56:DB:A7:FD:7A:D5:EB:F3:4B:5F:94:FF:C3:98:C2:60:1B:E7 X509v3 Authority Key Identifier: keyid:3E:43:27:7B:7C:A7:9D:0E:9E:07:FC:4A:4B:31:80:41:DF:41:5C:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PkMne3ynnQ6eB_xKSzGAQd9BXLM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/221945-a74e-4775-aea5-3cf2a4622fbc/1/PkMne3ynnQ6eB_xKSzGAQd9BXLM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:87:26:bc:7f:19:c4:8a:47:2b:08:4c:fb:bf:96:b6:10:45: 46:1f:be:d4:15:88:28:14:09:b9:2f:70:1e:dc:31:c0:31:8b: 57:8d:92:9e:b2:e7:83:88:df:62:e8:9d:b4:7c:ba:90:01:ee: 08:b8:df:2f:6b:b3:ce:b9:c7:4b:ab:55:92:2c:a2:8a:03:ed: 4b:da:a6:66:a4:a8:b4:a8:e4:26:93:4f:7c:0f:09:2b:cf:10: 01:21:eb:98:7e:03:0b:09:9b:26:fd:7f:13:e2:64:b4:bc:35: 8b:45:88:aa:63:8f:10:68:10:50:12:93:60:00:99:f2:c5:55: de:20:5b:e6:b2:ba:3a:a7:b4:d5:a6:6a:63:d4:45:81:58:cd: eb:99:b8:30:c6:26:d3:2c:bc:43:90:51:19:5b:7c:e3:5e:7a: 9e:89:e0:be:29:22:b8:a6:19:75:a2:66:8d:a4:17:6a:25:58: 0d:a3:63:1b:dc:7b:93:cd:8b:0c:de:bc:b9:be:e2:91:aa:db: a3:83:63:2f:52:92:09:0b:71:a8:02:fb:19:41:d2:0d:9b:cb: 4c:87:6e:4d:e1:d5:44:e7:3d:65:95:25:82:8e:c1:ea:2b:d3: 74:78:0b:d3:ad:7e:33:76:33:20:39:9b:4d:24:d3:12:a9:d3: dc:d9:6c:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9IjiebYO3RsZgYhEMJ3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNDMyNzdiN2NhNzlkMGU5ZTA3ZmM0YTRiMzE4MDQxZGY0 MTVjYjMwHhcNMjUxMjE1MDMwMTE4WhcNMjUxMjE2MDMwMTE4WjAzMTEwLwYDVQQD Eyg3MTFkNTZkYmE3ZmQ3YWQ1ZWJmMzRiNWY5NGZmYzM5OGMyNjAxYmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswPO3+X8Kj1zwryVf2JraKzF/Gfh Jt7eauagd+pv3aWIT5v76+i2T9Vwesv8GEawEcwEIG0iYUhrLxJYoTyjFGbtS++x o/sehpAbanFT7dN0W3pHzlZ6abp8ymnBo19g8gEdmspYa9A2q9IuFrH23bQcMT6u LFh2HgxbzKb/2pnKVl0M1PRRvLhCPkEe1L1pJPHMXG4ofznKDZ/3CGztnHpcr04G kawkeripeWUL8Xcp4NOdRdQX9AEZfah4NZBKxGVWh1NqJ1aUfVkBD0PdI4k63qcN Zfdn6Bgd5045WUaieJiDbG2vh3STw/zD9M6eZc6/SJR9AyrPV7Va7zmN6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEdVtun/XrV6/NLX5T/w5jCYBvnMB8GA1UdIwQY MBaAFD5DJ3t8p50Ongf8SksxgEHfQVyzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUt M2NmMmE0NjIyZmJjLzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yMjE5NDUtYTc0ZS00Nzc1LWFlYTUtM2NmMmE0NjIyZmJj LzEvUGtNbmUzeW5uUTZlQl94S1N6R0FRZDlCWExNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIcmvH8Z xIpHKwhM+7+WthBFRh++1BWIKBQJuS9wHtwxwDGLV42SnrLng4jfYuidtHy6kAHu CLjfL2uzzrnHS6tVkiyiigPtS9qmZqSotKjkJpNPfA8JK88QASHrmH4DCwmbJv1/ E+JktLw1i0WIqmOPEGgQUBKTYACZ8sVV3iBb5rK6Oqe01aZqY9RFgVjN65m4MMYm 0yy8Q5BRGVt84156nongvikiuKYZdaJmjaQXaiVYDaNjG9x7k82LDN68ub7ikarb o4NjL1KSCQtxqAL7GUHSDZvLTIduTeHVROc9ZZUlgo7B6ivTdHgL061+M3YzIDmb TSTTEqnT3Nls8Q== -----END CERTIFICATE-----Generated at Mon Dec 15 06:34:24 2025 by rpki-client