This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft File: MNWOQMbZHzcp5X4zRNMItZkv5G4.mft (raw, json) Hash identifier: RHZM4gn4gWj5D2fUWIDLI2sYQ7qM91NSeThDrhWmxgM= Subject key identifier: A5:A7:34:E4:03:77:59:0E:3E:E6:D2:BE:97:06:62:0A:4C:3B:29:B8 Authority key identifier: 30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E Certificate issuer: /CN=30d58e40c6d91f3729e57e3344d308b5992fe46e Certificate serial: 019AF1D18411602EB9421106ADEBDD2529FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft Manifest number: 0C5A Signing time: Sat 06 Dec 2025 04:00:31 +0000 Manifest this update: Sat 06 Dec 2025 04:00:31 +0000 Manifest next update: Sun 07 Dec 2025 04:00:31 +0000 Files and hashes: 1: AEr7526r87jMmzyFU6AhzO2yzJs.roa (hash: FaU9GigNrTflXT80XzjmUalvFoH7j0+xf5GqgvZ8viI=) 2: BhR4gh6niMuAg5TJ32ur0BjKaqs.roa (hash: Zv2rwkQ5zJHX1INCUgBx9oQ77dKwpoY1KIJrtlNZemo=) 3: MNWOQMbZHzcp5X4zRNMItZkv5G4.crl (hash: YnfIEelU+eoMwiuexnlQ8zptsdQsF3/O4q2zlWbtKk8=) 4: RJMA_6CErPsb2WgfyOY8q7SE2Xw.roa (hash: rLvL5r3qJKV7IPp00VA8CfU8H3FqWwBRZyYhz2cuvnI=) 5: Xp6Av0k8Jw85tGpea19kV0rC7zU.roa (hash: HoTKGzCgPJaXTFRgn8HDd9Uw/rl7lFS8MklAEJByUKE=) 6: uaxf2AGptn0k5nSChIQ5U9I-OzM.roa (hash: bH20ytgUK7nqS56x69xVlTEkEDFzbypHFv+jFwf5Z1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:84:11:60:2e:b9:42:11:06:ad:eb:dd:25:29:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d58e40c6d91f3729e57e3344d308b5992fe46e Validity Not Before: Dec 6 04:00:31 2025 GMT Not After : Dec 7 04:00:31 2025 GMT Subject: CN=a5a734e40377590e3ee6d2be9706620a4c3b29b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:87:a8:fd:20:9e:db:b2:2d:c1:e3:67:f1:60: 0c:bc:00:88:c2:ce:cb:f9:4c:d5:49:1a:7a:da:fb: 80:c2:9e:c5:68:83:06:df:56:b1:44:a2:6e:9e:4f: 87:13:a8:bb:a1:a9:50:95:ce:d2:12:7c:a0:be:7c: 9e:18:cc:db:ff:23:80:1c:7d:30:00:e9:94:0f:ff: 6d:5a:14:85:45:55:5d:f7:fc:3d:ff:ef:27:e3:5d: 8e:a2:f6:bf:b0:2b:79:73:0b:96:6f:c5:fe:97:f7: 9a:57:19:a2:68:cb:59:ed:74:15:24:fa:16:46:14: bf:8c:74:7c:10:02:fe:4d:33:dc:ae:83:2d:29:55: 25:17:81:34:71:c7:cb:e3:1c:b7:67:6e:35:88:59: 9c:47:78:4d:c6:ed:84:c4:86:ab:41:fd:06:b4:52: 44:04:4c:b6:0c:39:6d:42:86:3f:c2:7a:d3:9e:33: 83:4d:d5:63:4a:a4:f9:7d:1a:40:8f:91:f9:60:e0: b3:48:4c:e3:80:1b:d3:fe:77:01:c8:a0:a2:bc:c2: 96:30:36:85:1f:66:f8:da:d6:0f:9e:0f:db:3f:c2: f3:33:8a:58:52:a2:c9:a0:b4:db:e9:e7:e1:85:15: 46:b1:a2:b4:6b:d3:1c:35:68:6b:8f:62:f7:7a:cd: 18:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A7:34:E4:03:77:59:0E:3E:E6:D2:BE:97:06:62:0A:4C:3B:29:B8 X509v3 Authority Key Identifier: keyid:30:D5:8E:40:C6:D9:1F:37:29:E5:7E:33:44:D3:08:B5:99:2F:E4:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNWOQMbZHzcp5X4zRNMItZkv5G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/625a30-3a6b-4661-840a-f82b70d8a0a7/1/MNWOQMbZHzcp5X4zRNMItZkv5G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:74:60:f5:fd:36:ac:9c:86:a9:5e:86:41:9c:97:37:48:ec: 9b:9b:08:14:72:0e:35:56:3b:4a:d1:73:2b:b8:fc:da:48:eb: 24:f6:e4:23:29:dd:18:e1:7d:57:d9:92:3f:f1:8e:86:70:d6: 55:e0:9a:8b:fd:68:b2:74:79:e9:3d:89:5e:f3:78:4b:b3:a5: c0:64:ef:23:9e:fe:38:38:76:bb:fc:d3:3b:31:e0:12:70:4d: 6c:69:23:df:3f:ba:0a:89:ae:0d:36:46:85:6d:26:7d:ba:3e: 04:2a:18:7e:e5:48:2a:52:cb:74:e0:5a:f0:d7:87:5c:27:88: 4b:16:d3:93:d1:65:17:39:6c:24:c3:a4:2e:18:62:78:ed:b2: 0f:b0:20:f9:43:9f:93:f1:7e:7f:05:68:c8:2e:f0:8b:9a:79: 33:0d:b1:e4:dc:0c:e6:56:29:8f:ae:c8:3d:65:9e:d2:07:f7: 31:51:e4:ac:07:51:e2:86:31:fe:d6:7d:0a:b1:ee:80:50:e5: bb:45:a4:0e:72:7f:9d:5f:18:48:66:61:7f:98:4e:63:c7:34: 48:78:3c:43:b6:eb:03:96:22:e4:70:39:68:9f:8c:25:21:dc: 0d:e9:4d:91:d7:a4:f6:dc:78:97:96:e7:13:56:30:cd:0c:0d: 7f:e1:9f:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YQRYC65QhEGrevdJSn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZDU4ZTQwYzZkOTFmMzcyOWU1N2UzMzQ0ZDMwOGI1OTky ZmU0NmUwHhcNMjUxMjA2MDQwMDMxWhcNMjUxMjA3MDQwMDMxWjAzMTEwLwYDVQQD EyhhNWE3MzRlNDAzNzc1OTBlM2VlNmQyYmU5NzA2NjIwYTRjM2IyOWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoeo/SCe27ItweNn8WAMvACIws7L +UzVSRp62vuAwp7FaIMG31axRKJunk+HE6i7oalQlc7SEnygvnyeGMzb/yOAHH0w AOmUD/9tWhSFRVVd9/w9/+8n412Oova/sCt5cwuWb8X+l/eaVxmiaMtZ7XQVJPoW RhS/jHR8EAL+TTPcroMtKVUlF4E0ccfL4xy3Z241iFmcR3hNxu2ExIarQf0GtFJE BEy2DDltQoY/wnrTnjODTdVjSqT5fRpAj5H5YOCzSEzjgBvT/ncByKCivMKWMDaF H2b42tYPng/bP8LzM4pYUqLJoLTb6efhhRVGsaK0a9McNWhrj2L3es0Y+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWnNOQDd1kOPubSvpcGYgpMOym4MB8GA1UdIwQY MBaAFDDVjkDG2R83KeV+M0TTCLWZL+RuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82MjVhMzAtM2E2Yi00NjYxLTg0MGEt ZjgyYjcwZDhhMGE3LzEvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy82MjVhMzAtM2E2Yi00NjYxLTg0MGEtZjgyYjcwZDhhMGE3 LzEvTU5XT1FNYlpIemNwNVg0elJOTUl0Wmt2NUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHRg9f02 rJyGqV6GQZyXN0jsm5sIFHIONVY7StFzK7j82kjrJPbkIyndGOF9V9mSP/GOhnDW VeCai/1osnR56T2JXvN4S7OlwGTvI57+ODh2u/zTOzHgEnBNbGkj3z+6ComuDTZG hW0mfbo+BCoYfuVIKlLLdOBa8NeHXCeISxbTk9FlFzlsJMOkLhhieO2yD7Ag+UOf k/F+fwVoyC7wi5p5Mw2x5NwM5lYpj67IPWWe0gf3MVHkrAdR4oYx/tZ9CrHugFDl u0WkDnJ/nV8YSGZhf5hOY8c0SHg8Q7brA5Yi5HA5aJ+MJSHcDelNkdek9tx4l5bn E1YwzQwNf+GfMA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:53:54 2025 by rpki-client