This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft File: M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json) Hash identifier: HXHZaGNf8G8epppM/9O5kbvZxmg3MJ/C7xz2fm6LCdw= Subject key identifier: 28:EB:EF:0A:53:C8:0A:01:6A:0C:27:88:3C:CB:96:7B:24:D7:F0:C0 Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e Certificate serial: 019B1270491515E2F50C95CA5C59D16D0DCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft Manifest number: 16C9 Signing time: Fri 12 Dec 2025 12:01:47 +0000 Manifest this update: Fri 12 Dec 2025 12:01:47 +0000 Manifest next update: Sat 13 Dec 2025 12:01:47 +0000 Files and hashes: 1: JMceSfi0AqXXn3Vf_3TI3F7NzUY.roa (hash: pe6susqm7TY0tacMrKbk21inj2AOVSm8thD8J6ZV9Xk=) 2: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: vxhSAMsYgJ7Vyi/5ACLHQJdJwQRG1/DuofD0HFwL4vc=) 3: bK9CgrejwLSheO3uUPc3gSoXEuM.roa (hash: yazAgCwjNcsZSgaF8ULBtVRMqRXfNnLvbpG2BCIQgcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:12:70:49:15:15:e2:f5:0c:95:ca:5c:59:d1:6d:0d:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e Validity Not Before: Dec 12 12:01:47 2025 GMT Not After : Dec 13 12:01:47 2025 GMT Subject: CN=28ebef0a53c80a016a0c27883ccb967b24d7f0c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1c:0a:73:35:a9:c4:d9:11:13:7d:8f:54:1a: c8:76:d3:ef:6b:d3:38:f0:fb:d4:72:48:d3:66:1c: d8:da:4e:3e:7f:fb:97:e3:57:8a:92:63:4e:e7:fc: c2:02:58:8b:64:3a:ee:bd:91:30:f0:76:df:03:55: 3a:8c:a7:fb:8c:15:eb:cb:ac:6a:ca:5f:bf:50:77: b2:1d:ec:e5:f7:0b:11:c7:5e:8c:50:22:fc:4a:05: 2f:03:4d:3b:fd:a1:84:43:a3:b8:32:3e:06:da:04: 9e:c1:21:6f:63:fb:f1:2e:40:d3:f1:a1:b9:19:58: 21:ec:28:88:0f:e3:b2:83:68:48:0d:76:35:45:ce: 79:f9:48:fd:51:2f:27:2b:b0:58:fb:41:d8:1c:d8: 5d:fb:f1:fb:14:93:64:ff:89:34:90:92:55:f7:dc: 71:27:1e:5a:11:d7:ca:8a:41:ad:31:de:27:3d:f7: 55:b8:a3:f9:8f:fb:da:51:50:97:38:67:c4:4b:4d: 58:c2:b5:a0:b0:6d:4a:66:7e:2b:a1:23:a9:b3:3c: bd:29:c5:10:03:56:57:7a:54:19:fa:2a:1a:79:44: cf:4f:27:9d:24:12:22:5a:c1:bc:dc:d3:2c:39:01: dc:71:30:90:72:ff:f7:72:b2:17:2b:da:bd:57:07: 29:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EB:EF:0A:53:C8:0A:01:6A:0C:27:88:3C:CB:96:7B:24:D7:F0:C0 X509v3 Authority Key Identifier: keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:02:17:92:4e:a4:3f:f3:ea:aa:24:05:e3:ba:7c:0b:d0:cc: f3:e0:f3:06:22:a3:56:e0:42:4f:5f:86:96:bf:bf:0a:33:5a: f9:27:a8:fd:63:0c:f1:67:10:1b:81:f5:64:4f:aa:fa:b3:e0: 92:42:f2:35:8a:34:0e:00:db:38:96:72:d4:10:13:65:a1:03: ca:b8:9f:52:00:3f:42:6a:64:a6:2a:38:af:f4:a8:cb:a5:7d: fa:8f:0c:96:36:30:34:49:27:69:e6:a9:1c:c0:1a:fc:f6:51: 90:16:13:54:ca:b2:20:0e:fd:fb:31:8c:18:0f:0f:7a:76:48: 91:66:98:8b:d1:b8:f6:77:71:bf:48:d8:28:cc:66:0a:fd:72: f4:0b:96:fd:b0:e6:70:8d:ca:26:8f:7a:a6:29:69:68:b4:2f: 39:ae:3b:7d:cd:f6:22:85:9f:7c:80:57:31:40:13:ad:3a:2f: d2:8e:a2:80:0b:96:9a:42:7d:62:f2:73:56:c0:cb:6b:37:c9: a9:ea:e1:41:d3:de:9d:0f:65:f4:7b:01:03:54:46:8f:5a:ad: 5c:25:06:14:81:a4:5f:eb:3c:90:a0:f2:41:87:bd:74:94:bd: 39:a2:37:25:de:9b:16:e8:9c:1c:50:ad:4e:e3:1e:0e:66:24: b0:cd:92:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsScEkVFeL1DJXKXFnRbQ3PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzODllMGI4YTJmZjgyYTIzYjQ4ZGQ2ZTZlNzYxNzZiNGNk MzgzMmUwHhcNMjUxMjEyMTIwMTQ3WhcNMjUxMjEzMTIwMTQ3WjAzMTEwLwYDVQQD EygyOGViZWYwYTUzYzgwYTAxNmEwYzI3ODgzY2NiOTY3YjI0ZDdmMGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhwKczWpxNkRE32PVBrIdtPva9M4 8PvUckjTZhzY2k4+f/uX41eKkmNO5/zCAliLZDruvZEw8HbfA1U6jKf7jBXry6xq yl+/UHeyHezl9wsRx16MUCL8SgUvA007/aGEQ6O4Mj4G2gSewSFvY/vxLkDT8aG5 GVgh7CiID+Oyg2hIDXY1Rc55+Uj9US8nK7BY+0HYHNhd+/H7FJNk/4k0kJJV99xx Jx5aEdfKikGtMd4nPfdVuKP5j/vaUVCXOGfES01YwrWgsG1KZn4roSOpszy9KcUQ A1ZXelQZ+ioaeUTPTyedJBIiWsG83NMsOQHccTCQcv/3crIXK9q9VwcpxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjr7wpTyAoBagwniDzLlnsk1/DAMB8GA1UdIwQY MBaAFDOJ4Lii/4KiO0jdbm52F2tM04MuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgt MjMzN2E4MWIxZjc4LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS83YTQ0MDItZjNmNS00ZjNhLTk4YTgtMjMzN2E4MWIxZjc4 LzEvTTRuZ3VLTF9ncUk3U04xdWJuWVhhMHpUZ3k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXAIXkk6k P/PqqiQF47p8C9DM8+DzBiKjVuBCT1+Glr+/CjNa+Seo/WMM8WcQG4H1ZE+q+rPg kkLyNYo0DgDbOJZy1BATZaEDyrifUgA/Qmpkpio4r/Soy6V9+o8MljYwNEknaeap HMAa/PZRkBYTVMqyIA79+zGMGA8PenZIkWaYi9G49ndxv0jYKMxmCv1y9AuW/bDm cI3KJo96pilpaLQvOa47fc32IoWffIBXMUATrTov0o6igAuWmkJ9YvJzVsDLazfJ qerhQdPenQ9l9HsBA1RGj1qtXCUGFIGkX+s8kKDyQYe9dJS9OaI3Jd6bFuicHFCt TuMeDmYksM2ScQ== -----END CERTIFICATE-----Generated at Fri Dec 12 17:53:37 2025 by rpki-client