This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft File: EX-Mmn_H8TZY1ir76285iC2lEcw.mft (raw, json) Hash identifier: dIrkFre6WZmEKS6EzKrKVQ+v62LsmvMRht1bJHsdrQ8= Subject key identifier: 3D:10:BD:21:D3:83:72:42:65:6A:51:9A:00:8B:B6:D4:8B:28:5E:0D Authority key identifier: 11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC Certificate issuer: /CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc Certificate serial: 019AF4651613D3FB67E06D72DDE918BF2AC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 16:00:56 +0000 Manifest this update: Sat 06 Dec 2025 16:00:56 +0000 Manifest next update: Sun 07 Dec 2025 16:00:56 +0000 Files and hashes: 1: EX-Mmn_H8TZY1ir76285iC2lEcw.crl (hash: kZKGp2+6jsqJmMIizP4GvCnLEoraBBMG/1mV1QGeT7E=) 2: ibWU2hc-15QgZKi7MldaZ8Rm5_8.roa (hash: bP6Dry9UHojDKjvZz2pROS6WfkRMKw8CNymma91NgNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:16:13:d3:fb:67:e0:6d:72:dd:e9:18:bf:2a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f8c9a7fc7f13658d62afbeb6f39882da511cc Validity Not Before: Dec 6 16:00:56 2025 GMT Not After : Dec 7 16:00:56 2025 GMT Subject: CN=3d10bd21d3837242656a519a008bb6d48b285e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:2e:3a:31:4b:b6:ce:13:b3:c3:68:26:3b:90: bb:9d:8b:76:c0:02:b1:72:6b:a4:84:24:16:61:11: 8c:73:c7:29:66:70:68:d2:37:79:0f:a0:69:54:97: af:5a:ec:e2:18:d5:7f:9d:13:44:30:36:fc:cb:ed: b1:ca:cf:17:a5:d8:f4:d9:15:24:fc:8a:0b:86:05: b5:ee:5a:87:f6:07:4a:52:fe:ab:0d:b8:e2:2a:66: ad:b1:c0:a1:b3:ec:d9:f6:08:42:e1:af:f7:b9:b9: 3c:07:6f:15:49:13:3b:b3:30:c6:31:77:e8:51:81: a0:5f:4e:93:4a:99:83:ad:4c:c5:53:3a:c4:68:23: 98:86:0d:ec:42:26:da:10:d1:36:84:5e:da:25:34: de:b4:cd:d0:51:6d:24:df:3c:86:b5:34:12:09:d9: 8d:e2:8b:1f:97:79:59:86:0d:6c:35:e2:91:42:83: cb:e1:bf:72:b2:cc:6d:34:9b:f4:66:3f:c2:3f:a5: ba:ff:60:fe:3d:4f:6a:3c:07:06:aa:f1:f0:62:d5: b6:89:b6:a7:98:4d:31:1a:aa:72:04:d4:61:37:2f: ad:f7:0a:4d:18:fd:c2:87:a6:63:bd:87:4a:32:3a: f7:7b:18:05:da:c7:cc:b8:06:d7:92:b6:aa:aa:16: d5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:10:BD:21:D3:83:72:42:65:6A:51:9A:00:8B:B6:D4:8B:28:5E:0D X509v3 Authority Key Identifier: keyid:11:7F:8C:9A:7F:C7:F1:36:58:D6:2A:FB:EB:6F:39:88:2D:A5:11:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-Mmn_H8TZY1ir76285iC2lEcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/EX-Mmn_H8TZY1ir76285iC2lEcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:62:d5:44:7d:a4:6b:ef:3a:db:b8:ed:b6:f9:f7:df:d2:a6: d8:c1:5e:11:16:80:c9:90:e3:5d:e8:2a:21:6c:80:d5:64:d8: ba:6b:5f:87:9c:d7:88:a4:35:3e:51:fe:c9:c8:14:22:e4:ba: 15:49:0e:35:12:e0:6c:b6:1d:3c:66:c1:d0:ee:9c:49:74:00: 1d:00:cd:9a:b8:14:df:42:5a:c1:f5:e9:eb:9a:62:23:a8:55: 7c:95:56:5d:35:b2:6b:d6:aa:c7:ea:6b:ba:c8:33:b0:fc:a5: c5:28:52:bb:bb:6e:4a:f0:fd:39:dc:28:57:51:dd:25:52:d1: fb:c4:a5:1a:8f:a6:e7:41:33:75:f2:d3:c0:35:f2:bd:1f:b9: 70:95:2c:f9:67:30:60:72:18:a3:8a:f9:3f:bb:fe:1f:cf:ef: ce:20:97:3d:3a:5f:21:4b:d5:6d:a6:03:fd:dc:2d:8d:4a:12: 96:20:c7:58:17:94:53:b8:20:aa:46:f1:ff:de:bc:35:e1:f2: 1d:94:fe:8e:6f:5f:f4:be:4a:ae:1f:1a:11:f8:b1:93:fc:bb: ab:81:2a:3f:9e:b7:f5:ee:27:1d:69:22:fe:dd:c7:9e:f7:2c: aa:48:1a:29:71:66:49:28:1f:d4:65:df:eb:e2:59:bf:11:c8: 80:9c:71:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZRYT0/tn4G1y3ekYvyrCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y4YzlhN2ZjN2YxMzY1OGQ2MmFmYmViNmYzOTg4MmRh NTExY2MwHhcNMjUxMjA2MTYwMDU2WhcNMjUxMjA3MTYwMDU2WjAzMTEwLwYDVQQD EygzZDEwYmQyMWQzODM3MjQyNjU2YTUxOWEwMDhiYjZkNDhiMjg1ZTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAii46MUu2zhOzw2gmO5C7nYt2wAKx cmukhCQWYRGMc8cpZnBo0jd5D6BpVJevWuziGNV/nRNEMDb8y+2xys8Xpdj02RUk /IoLhgW17lqH9gdKUv6rDbjiKmatscChs+zZ9ghC4a/3ubk8B28VSRM7szDGMXfo UYGgX06TSpmDrUzFUzrEaCOYhg3sQibaENE2hF7aJTTetM3QUW0k3zyGtTQSCdmN 4osfl3lZhg1sNeKRQoPL4b9yssxtNJv0Zj/CP6W6/2D+PU9qPAcGqvHwYtW2iban mE0xGqpyBNRhNy+t9wpNGP3Ch6ZjvYdKMjr3exgF2sfMuAbXkraqqhbVTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0QvSHTg3JCZWpRmgCLttSLKF4NMB8GA1UdIwQY MBaAFBF/jJp/x/E2WNYq++tvOYgtpRHMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xMjJiMmQtNWQ4Ny00NzhjLTg1MjIt ODlkNjZhYzcyZTAyLzEvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xMjJiMmQtNWQ4Ny00NzhjLTg1MjItODlkNjZhYzcyZTAy LzEvRVgtTW1uX0g4VFpZMWlyNzYyODVpQzJsRWN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcWLVRH2k a+8627jttvn339Km2MFeERaAyZDjXegqIWyA1WTYumtfh5zXiKQ1PlH+ycgUIuS6 FUkONRLgbLYdPGbB0O6cSXQAHQDNmrgU30JawfXp65piI6hVfJVWXTWya9aqx+pr usgzsPylxShSu7tuSvD9OdwoV1HdJVLR+8SlGo+m50EzdfLTwDXyvR+5cJUs+Wcw YHIYo4r5P7v+H8/vziCXPTpfIUvVbaYD/dwtjUoSliDHWBeUU7ggqkbx/968NeHy HZT+jm9f9L5Krh8aEfixk/y7q4EqP5639e4nHWki/t3HnvcsqkgaKXFmSSgf1GXf 6+JZvxHIgJxxQg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:34:03 2025 by rpki-client