This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft File: mnZNjTrnJbReDUgH9hLsPR8qP08.mft (raw, json) Hash identifier: a3qQLPLw+UGPTYSZ+AAiy+CFlphtzjwah4gv5bK5+CM= Subject key identifier: 80:EF:59:A0:9B:ED:22:89:D7:E0:86:DD:58:B9:82:87:80:53:15:2A Authority key identifier: 9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F Certificate issuer: /CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f Certificate serial: 019AF19B083530296EF1D7B74B718CF2B2B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 03:01:00 +0000 Manifest this update: Sat 06 Dec 2025 03:01:00 +0000 Manifest next update: Sun 07 Dec 2025 03:01:00 +0000 Files and hashes: 1: GX6PPZ2aZNuKqCQABtqOUWCcHRs.roa (hash: iBMcSS3f9LeIBBwiwQeNPCdp76Ute65WO/S9tw7lGK8=) 2: mnZNjTrnJbReDUgH9hLsPR8qP08.crl (hash: nW6tK91a0VtB+xjBa3t95Jo4hYh1sCCj5DrcLRt5AV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:08:35:30:29:6e:f1:d7:b7:4b:71:8c:f2:b2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a764d8d3ae725b45e0d4807f612ec3d1f2a3f4f Validity Not Before: Dec 6 03:01:00 2025 GMT Not After : Dec 7 03:01:00 2025 GMT Subject: CN=80ef59a09bed2289d7e086dd58b982878053152a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2b:cc:01:e1:50:5e:77:01:b3:bc:f8:32:2f: 6d:23:c9:e2:72:a1:7d:8e:e6:c4:de:35:cc:0e:b8: ba:d7:1e:bc:73:37:db:75:a7:9e:e6:d8:9a:37:cc: 03:fe:12:5b:87:76:dc:62:0a:6c:44:89:9f:01:93: 0a:56:60:18:f7:14:47:42:94:40:7b:47:61:3b:3c: 9d:a2:69:8f:c0:75:68:c1:7c:d2:63:e5:4d:eb:28: b6:22:6e:34:65:a6:fc:10:e4:b9:70:d5:db:d6:00: 8e:74:23:20:83:72:1b:72:02:43:28:6e:b8:ee:cc: d2:b1:66:fb:47:77:7c:24:72:36:d6:f5:89:80:50: f7:5b:16:bb:47:c4:53:15:80:0f:40:5a:61:79:67: 34:40:94:47:a3:a4:b0:15:84:61:ce:60:be:0b:d9: 05:cb:32:f0:13:40:f3:2d:43:58:df:d5:9b:f4:72: 14:5a:e9:35:2e:e1:73:07:2a:a8:65:73:ae:80:22: 39:a7:f0:18:5f:8e:35:1d:83:3e:d8:68:96:84:1d: 33:4a:43:c6:e3:7b:1c:5a:50:6f:90:47:59:3e:98: c5:04:80:7b:0f:97:a0:c4:5b:5f:0f:9f:af:6c:08: ba:18:4a:3e:bb:f4:66:d8:5a:aa:99:3c:e5:6d:d6: f6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:EF:59:A0:9B:ED:22:89:D7:E0:86:DD:58:B9:82:87:80:53:15:2A X509v3 Authority Key Identifier: keyid:9A:76:4D:8D:3A:E7:25:B4:5E:0D:48:07:F6:12:EC:3D:1F:2A:3F:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnZNjTrnJbReDUgH9hLsPR8qP08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/89afba-4fed-42ef-a751-f5ff9afc3266/1/mnZNjTrnJbReDUgH9hLsPR8qP08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:da:da:d1:68:74:1a:a4:a7:21:4f:39:65:fc:9c:ca:71:44: 5f:2e:e3:77:f5:e7:90:68:24:cd:0b:29:0a:bd:73:f6:0d:e3: 64:50:5b:a4:10:1c:36:b4:7d:0a:94:9c:1b:d6:af:29:4a:d0: 4d:e4:be:2d:de:38:0d:e0:2c:8b:32:0a:41:64:a0:39:f5:5f: 4f:71:22:27:41:7f:2b:c1:cd:1b:0d:a0:e6:d4:d0:f3:53:8b: 44:67:42:46:f0:a6:ad:c7:81:58:4c:55:3f:b4:a4:fe:3e:bf: bc:98:a9:84:3b:2b:11:c6:0b:60:b9:84:2a:6a:87:bf:fe:cd: 81:03:be:86:2b:c2:b0:7d:b9:05:16:a1:fb:3c:9d:c7:b6:c8: 02:82:46:69:f7:5e:bc:75:81:03:ca:69:98:49:f6:47:7e:1f: 7d:42:27:c6:62:ca:f6:51:56:05:2b:57:70:0b:dd:4d:5c:7c: 20:05:2a:ca:e0:24:a2:29:54:0b:1b:2a:5b:c5:dd:5c:c0:de: 24:0e:58:85:20:76:b3:80:6e:16:67:38:6b:26:4d:21:2e:9a: 97:95:b4:80:d5:d5:c2:75:c9:eb:12:e4:e3:fc:68:65:10:b8: 13:b0:cb:9b:9f:8c:14:c8:cc:33:28:67:28:3b:4a:31:a5:37: 4d:15:34:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmwg1MClu8de3S3GM8rKyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNzY0ZDhkM2FlNzI1YjQ1ZTBkNDgwN2Y2MTJlYzNkMWYy YTNmNGYwHhcNMjUxMjA2MDMwMTAwWhcNMjUxMjA3MDMwMTAwWjAzMTEwLwYDVQQD Eyg4MGVmNTlhMDliZWQyMjg5ZDdlMDg2ZGQ1OGI5ODI4NzgwNTMxNTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCvMAeFQXncBs7z4Mi9tI8nicqF9 jubE3jXMDri61x68czfbdaee5tiaN8wD/hJbh3bcYgpsRImfAZMKVmAY9xRHQpRA e0dhOzydommPwHVowXzSY+VN6yi2Im40Zab8EOS5cNXb1gCOdCMgg3IbcgJDKG64 7szSsWb7R3d8JHI21vWJgFD3Wxa7R8RTFYAPQFpheWc0QJRHo6SwFYRhzmC+C9kF yzLwE0DzLUNY39Wb9HIUWuk1LuFzByqoZXOugCI5p/AYX441HYM+2GiWhB0zSkPG 43scWlBvkEdZPpjFBIB7D5egxFtfD5+vbAi6GEo+u/Rm2FqqmTzlbdb2eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDvWaCb7SKJ1+CG3Vi5goeAUxUqMB8GA1UdIwQY MBaAFJp2TY065yW0Xg1IB/YS7D0fKj9PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW5aTmpUcm5KYlJlRFVnSDloTHNQUjhxUDA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84OWFmYmEtNGZlZC00MmVmLWE3NTEt ZjVmZjlhZmMzMjY2LzEvbW5aTmpUcm5KYlJlRFVnSDloTHNQUjhxUDA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC84OWFmYmEtNGZlZC00MmVmLWE3NTEtZjVmZjlhZmMzMjY2 LzEvbW5aTmpUcm5KYlJlRFVnSDloTHNQUjhxUDA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9ra0Wh0 GqSnIU85ZfycynFEXy7jd/XnkGgkzQspCr1z9g3jZFBbpBAcNrR9CpScG9avKUrQ TeS+Ld44DeAsizIKQWSgOfVfT3EiJ0F/K8HNGw2g5tTQ81OLRGdCRvCmrceBWExV P7Sk/j6/vJiphDsrEcYLYLmEKmqHv/7NgQO+hivCsH25BRah+zydx7bIAoJGafde vHWBA8ppmEn2R34ffUInxmLK9lFWBStXcAvdTVx8IAUqyuAkoilUCxsqW8XdXMDe JA5YhSB2s4BuFmc4ayZNIS6al5W0gNXVwnXJ6xLk4/xoZRC4E7DLm5+MFMjMMyhn KDtKMaU3TRU0dw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:03:10 2025 by rpki-client