This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft File: mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft (raw, json) Hash identifier: vJWtmvL973/nMrbn+mxq9rBNxAXvI0UTKfht3t4i+dQ= Subject key identifier: B2:73:81:D0:A8:8A:1F:D0:A0:B8:73:B5:2F:D9:CE:56:73:39:D3:65 Authority key identifier: 9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8 Certificate issuer: /CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8 Certificate serial: 019AF19B8E0B9709CF3EDFFEA6D57017A566 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft Manifest number: 029C Signing time: Sat 06 Dec 2025 03:01:34 +0000 Manifest this update: Sat 06 Dec 2025 03:01:34 +0000 Manifest next update: Sun 07 Dec 2025 03:01:34 +0000 Files and hashes: 1: W8iTYjU2Evc2p5yDOFlKPLpAZr0.roa (hash: +1HDTD3+F6qn6zfwt9WbeLBT9ppZuriPW/cOhjwp96g=) 2: mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl (hash: ldHnYKV7Oht2iuP7nq2fSvVXBb6+TR7tGSAJGWOiQmc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:8e:0b:97:09:cf:3e:df:fe:a6:d5:70:17:a5:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a7004fdbc1d9e3a3c1e7e06591aca4b94b6c2f8 Validity Not Before: Dec 6 03:01:34 2025 GMT Not After : Dec 7 03:01:34 2025 GMT Subject: CN=b27381d0a88a1fd0a0b873b52fd9ce567339d365 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7d:63:e6:e5:2b:c8:1c:ba:84:20:a2:fd:92: 87:e2:91:66:7c:24:d9:28:bf:e0:e7:63:b7:ff:89: 29:c1:ac:ae:3c:50:2c:38:18:00:96:ad:26:0c:0e: 6e:df:af:4f:79:cf:f0:ac:92:98:31:dc:f4:15:b6: 1b:e7:c1:c5:bc:58:a0:49:10:fd:71:32:10:78:1b: 3f:35:7b:3b:0c:d3:cb:79:57:e0:0a:45:f3:4d:8b: 54:a4:53:73:e0:7f:ef:04:94:0e:b1:b0:ec:b8:09: 4c:5e:63:7f:77:21:82:c6:24:25:67:23:29:16:c1: d9:5d:95:b0:2a:45:45:5b:74:44:75:be:72:a2:fc: b9:c5:2c:ad:b5:a7:c6:91:ca:8f:92:1f:e6:b4:de: 37:fb:e2:8c:c4:78:45:72:89:75:ea:36:96:a9:c2: 84:ae:46:f6:86:c8:81:eb:e7:9e:67:a8:69:e1:31: 1b:a4:84:fe:03:ef:fc:44:89:69:3c:3f:27:22:b1: a7:24:3a:4e:61:94:93:03:89:ee:2a:ac:32:90:a5: db:c9:ff:b0:2e:dd:0e:77:10:28:c0:9d:80:c1:87: fa:42:f4:c8:79:fe:47:93:21:bd:b1:8d:8c:c8:56: 7c:3f:37:48:e5:f4:4c:a9:80:1d:d3:62:60:af:52: b2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:73:81:D0:A8:8A:1F:D0:A0:B8:73:B5:2F:D9:CE:56:73:39:D3:65 X509v3 Authority Key Identifier: keyid:9A:70:04:FD:BC:1D:9E:3A:3C:1E:7E:06:59:1A:CA:4B:94:B6:C2:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/fca81d-38a5-4c32-b163-b7fa393db1d1/1/mnAE_bwdnjo8Hn4GWRrKS5S2wvg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0c:c6:6c:55:a5:89:2b:7d:49:43:91:1f:91:67:e0:ef:4e: ac:69:cc:13:99:b0:7e:0a:62:b5:43:a6:1a:c8:59:db:d0:1a: 9e:89:cf:7d:3a:2f:4a:93:35:c7:88:b0:80:c5:5b:52:87:5a: 5e:b6:94:3f:ed:a4:56:3b:68:06:52:09:ef:10:99:25:ba:e8: 2d:2d:94:8a:30:65:58:84:0f:73:3d:5f:ce:c1:bb:4b:aa:87: 8b:dc:88:9b:a7:b8:7b:3e:1f:35:09:8a:05:be:1c:6a:c7:2c: ab:64:e7:2a:c9:0a:14:6c:cd:8a:93:be:5f:9c:fc:45:12:3e: 7f:38:11:07:e8:20:77:d2:a9:52:ff:4d:1a:06:c6:29:ae:db: 9d:4a:87:cf:d6:7b:60:a5:0d:60:5d:e8:32:df:b0:0a:ed:48: cf:d5:d4:65:62:58:35:c3:75:27:80:f5:ef:89:e2:ee:15:3a: 14:90:0b:38:a9:bd:33:4f:60:8f:ef:9a:57:81:9f:2e:d9:c3: aa:48:f7:c1:0b:b7:37:cb:a0:a9:6e:24:a5:46:c5:a9:61:47: c3:d3:ab:8f:f9:a0:e1:a3:17:1e:b9:3e:f6:c7:af:57:36:93: 48:23:59:3f:2a:2c:36:4f:cb:44:b4:c1:f4:ca:8f:91:f3:27: 07:ef:9a:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm44LlwnPPt/+ptVwF6VmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNzAwNGZkYmMxZDllM2EzYzFlN2UwNjU5MWFjYTRiOTRi NmMyZjgwHhcNMjUxMjA2MDMwMTM0WhcNMjUxMjA3MDMwMTM0WjAzMTEwLwYDVQQD EyhiMjczODFkMGE4OGExZmQwYTBiODczYjUyZmQ5Y2U1NjczMzlkMzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX1j5uUryBy6hCCi/ZKH4pFmfCTZ KL/g52O3/4kpwayuPFAsOBgAlq0mDA5u369Pec/wrJKYMdz0FbYb58HFvFigSRD9 cTIQeBs/NXs7DNPLeVfgCkXzTYtUpFNz4H/vBJQOsbDsuAlMXmN/dyGCxiQlZyMp FsHZXZWwKkVFW3REdb5yovy5xSyttafGkcqPkh/mtN43++KMxHhFcol16jaWqcKE rkb2hsiB6+eeZ6hp4TEbpIT+A+/8RIlpPD8nIrGnJDpOYZSTA4nuKqwykKXbyf+w Lt0OdxAowJ2AwYf6QvTIef5HkyG9sY2MyFZ8PzdI5fRMqYAd02Jgr1KyoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJzgdCoih/QoLhztS/ZzlZzOdNlMB8GA1UdIwQY MBaAFJpwBP28HZ46PB5+BlkaykuUtsL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW5BRV9id2Ruam84SG40R1dScktTNVMyd3ZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mY2E4MWQtMzhhNS00YzMyLWIxNjMt YjdmYTM5M2RiMWQxLzEvbW5BRV9id2Ruam84SG40R1dScktTNVMyd3ZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mY2E4MWQtMzhhNS00YzMyLWIxNjMtYjdmYTM5M2RiMWQx LzEvbW5BRV9id2Ruam84SG40R1dScktTNVMyd3ZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwzGbFWl iSt9SUORH5Fn4O9OrGnME5mwfgpitUOmGshZ29AanonPfTovSpM1x4iwgMVbUoda XraUP+2kVjtoBlIJ7xCZJbroLS2UijBlWIQPcz1fzsG7S6qHi9yIm6e4ez4fNQmK Bb4cascsq2TnKskKFGzNipO+X5z8RRI+fzgRB+ggd9KpUv9NGgbGKa7bnUqHz9Z7 YKUNYF3oMt+wCu1Iz9XUZWJYNcN1J4D174ni7hU6FJALOKm9M09gj++aV4GfLtnD qkj3wQu3N8ugqW4kpUbFqWFHw9Orj/mg4aMXHrk+9sevVzaTSCNZPyosNk/LRLTB 9MqPkfMnB++a+Q== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:27 2025 by rpki-client