This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft File: Mn2iLLkBOLBQg37c8ew2pauMQqw.mft (raw, json) Hash identifier: dyvKQzED12T+8ZyriAP4X67G51Kv2o73LCqTVf6nH2M= Subject key identifier: 56:0D:D9:25:D9:5E:6E:77:50:4B:F3:CC:DC:05:21:49:79:C5:75:E0 Authority key identifier: 32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC Certificate issuer: /CN=327da22cb90138b050837edcf1ec36a5ab8c42ac Certificate serial: 019B2D7883381E839C3376406334240E613B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft Manifest number: 13DF Signing time: Wed 17 Dec 2025 18:00:31 +0000 Manifest this update: Wed 17 Dec 2025 18:00:31 +0000 Manifest next update: Thu 18 Dec 2025 18:00:31 +0000 Files and hashes: 1: Mn2iLLkBOLBQg37c8ew2pauMQqw.crl (hash: lJXTcwRx8qWOvod37hC6u9ZRD2f5IarBWCcNibmDrQg=) 2: Ws-3to11mYQT65QlLPSv_a64Aow.roa (hash: bLLs3zCR6QgpvfFD4PT4W3Xh5DmPnAizoHMgUfONgYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:78:83:38:1e:83:9c:33:76:40:63:34:24:0e:61:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=327da22cb90138b050837edcf1ec36a5ab8c42ac Validity Not Before: Dec 17 18:00:31 2025 GMT Not After : Dec 18 18:00:31 2025 GMT Subject: CN=560dd925d95e6e77504bf3ccdc05214979c575e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4a:ed:ca:70:1a:0d:70:d9:46:90:1d:b9:77: 20:5a:e7:e0:ca:c4:f2:34:53:fc:28:98:c4:b8:ef: 3e:e7:63:ba:3d:a2:fb:5e:a8:7c:c4:f3:87:1e:0a: 0b:1d:62:72:ad:28:0f:ef:bf:ed:af:2a:ba:3f:33: 42:8b:f9:d9:08:5e:44:22:81:09:6e:52:a2:6c:81: e5:5b:90:78:fe:93:e9:b7:bf:fc:98:9b:6e:77:a0: 31:d1:c3:1a:c7:58:5b:ba:61:e2:fd:c2:a4:f8:f5: 5f:05:57:07:cd:6c:a4:d0:83:bd:8c:44:23:c8:72: 94:ef:ae:1c:77:57:d4:dd:21:da:59:50:80:9f:a4: bb:31:89:36:2c:0a:2d:c3:f7:82:a5:12:d4:65:be: c9:a8:e2:3a:85:d8:b0:5b:5a:6a:97:56:27:ea:2c: fe:1f:1b:45:71:78:cf:65:c5:dc:a9:3f:2d:1f:eb: 04:7c:21:a5:0a:5c:ee:6b:28:87:92:50:98:ff:68: 82:55:81:9e:07:03:85:05:f3:31:c6:46:b2:61:05: 23:ea:6b:2a:32:46:e9:b0:47:b8:53:c5:2f:a9:1e: c9:5d:81:f7:75:2a:4d:ff:02:f2:40:fc:a0:15:b5: 35:40:53:c8:69:f0:6b:e0:0a:73:a3:0e:d4:9e:05: 85:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0D:D9:25:D9:5E:6E:77:50:4B:F3:CC:DC:05:21:49:79:C5:75:E0 X509v3 Authority Key Identifier: keyid:32:7D:A2:2C:B9:01:38:B0:50:83:7E:DC:F1:EC:36:A5:AB:8C:42:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mn2iLLkBOLBQg37c8ew2pauMQqw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/7008fc-acc4-4ef5-8fb9-90795fb3928c/1/Mn2iLLkBOLBQg37c8ew2pauMQqw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:85:a6:4f:4c:40:b1:25:5a:82:6d:48:38:03:0c:3b:ac:07: 87:8c:6b:8f:8b:f0:61:07:29:da:c0:c1:e8:36:55:bc:24:9e: 77:bc:89:8b:95:e0:e4:ae:39:75:7a:67:55:a9:61:e5:7e:40: 63:9e:72:75:b8:49:31:cb:d9:b5:6d:6d:07:10:5d:a6:ab:86: d6:f3:b4:46:4f:b4:3c:8e:09:69:82:00:f5:ba:37:38:c1:5a: e7:c3:77:47:16:e8:4e:a1:57:07:26:e7:e4:d7:08:65:e3:7b: a0:de:6c:c4:ae:95:28:88:fd:3a:1d:e7:e1:2c:bb:77:89:ea: c8:8c:54:02:8e:3b:2c:eb:65:dc:cc:c4:11:cd:ad:75:e9:e2: d6:73:fe:8b:fd:7e:f7:0e:d7:af:e7:57:e0:7b:fd:eb:8f:81: 91:84:7e:8a:42:96:fa:18:48:97:e6:34:c3:db:df:f7:be:2a: 3b:1f:84:df:82:69:45:ea:a9:03:0a:68:f2:f4:13:e9:13:e1: 58:a8:d1:a5:49:15:4a:6a:0c:d8:85:b2:38:09:a6:02:00:17: 81:a7:87:2a:8e:49:26:8e:a1:57:a0:fb:ec:46:19:fd:c9:1d: b6:ff:1a:9a:05:bc:9a:77:b1:ad:4e:20:ec:2e:f2:78:70:33: 12:f7:4d:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteIM4HoOcM3ZAYzQkDmE7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyN2RhMjJjYjkwMTM4YjA1MDgzN2VkY2YxZWMzNmE1YWI4 YzQyYWMwHhcNMjUxMjE3MTgwMDMxWhcNMjUxMjE4MTgwMDMxWjAzMTEwLwYDVQQD Eyg1NjBkZDkyNWQ5NWU2ZTc3NTA0YmYzY2NkYzA1MjE0OTc5YzU3NWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0rtynAaDXDZRpAduXcgWufgysTy NFP8KJjEuO8+52O6PaL7Xqh8xPOHHgoLHWJyrSgP77/tryq6PzNCi/nZCF5EIoEJ blKibIHlW5B4/pPpt7/8mJtud6Ax0cMax1hbumHi/cKk+PVfBVcHzWyk0IO9jEQj yHKU764cd1fU3SHaWVCAn6S7MYk2LAotw/eCpRLUZb7JqOI6hdiwW1pql1Yn6iz+ HxtFcXjPZcXcqT8tH+sEfCGlClzuayiHklCY/2iCVYGeBwOFBfMxxkayYQUj6msq MkbpsEe4U8UvqR7JXYH3dSpN/wLyQPygFbU1QFPIafBr4Apzow7UngWFawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYN2SXZXm53UEvzzNwFIUl5xXXgMB8GA1UdIwQY MBaAFDJ9oiy5ATiwUIN+3PHsNqWrjEKsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW4yaUxMa0JPTEJRZzM3YzhldzJwYXVNUXF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC83MDA4ZmMtYWNjNC00ZWY1LThmYjkt OTA3OTVmYjM5MjhjLzEvTW4yaUxMa0JPTEJRZzM3YzhldzJwYXVNUXF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC83MDA4ZmMtYWNjNC00ZWY1LThmYjktOTA3OTVmYjM5Mjhj LzEvTW4yaUxMa0JPTEJRZzM3YzhldzJwYXVNUXF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa4WmT0xA sSVagm1IOAMMO6wHh4xrj4vwYQcp2sDB6DZVvCSed7yJi5Xg5K45dXpnValh5X5A Y55ydbhJMcvZtW1tBxBdpquG1vO0Rk+0PI4JaYIA9bo3OMFa58N3RxboTqFXBybn 5NcIZeN7oN5sxK6VKIj9Oh3n4Sy7d4nqyIxUAo47LOtl3MzEEc2tdeni1nP+i/1+ 9w7Xr+dX4Hv964+BkYR+ikKW+hhIl+Y0w9vf974qOx+E34JpReqpAwpo8vQT6RPh WKjRpUkVSmoM2IWyOAmmAgAXgaeHKo5JJo6hV6D77EYZ/ckdtv8amgW8mnexrU4g 7C7yeHAzEvdNnA== -----END CERTIFICATE-----Generated at Wed Dec 17 20:12:56 2025 by rpki-client