This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: bUPrJwZZxa6+H53f3hFmpckGFHL4HvjKjIxYEumX65g= Subject key identifier: CE:2C:92:26:D5:3F:17:E6:B6:E7:30:87:9C:C7:3E:99:B0:AE:33:51 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019AF42E0B9603D044EF846150CFD588A0D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 177B Signing time: Sat 06 Dec 2025 15:00:49 +0000 Manifest this update: Sat 06 Dec 2025 15:00:49 +0000 Manifest next update: Sun 07 Dec 2025 15:00:49 +0000 Files and hashes: 1: 3xGVSc_p5dXZsjTjmDrPRPF-GQ4.roa (hash: 4UVd3ifNRlf9XqdwKXxRMAnZJE++WGkvCW0VWsS8y5s=) 2: 98F0ZRor4OUtYmZXNw0GKGX-nAM.roa (hash: 6flqTQWBrUkvuFChAUWn2ljnQUYrkULVtmr6AZSdXDE=) 3: AXI0xi2qyLNJTikoPIbIYoXGSqM.roa (hash: J6dTdi70cC+Xgn0MoRDsaTnvDGyEQm26GOPrxZ/rg18=) 4: CQxWaB1OicMMrqXCoQ0fopCoxdU.roa (hash: WjfHWnkqbfHKaqxUShNyRq++rhQwjg3tNVjy17YQNc4=) 5: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: rBsdwa8aq5Qx+xd0xxpEfcK8yFM1mZQV/UYg0SXVaYI=) 6: Fu5puXi31mF44yAqLLOREudBdx8.roa (hash: EMVvFm7Cz6Rus7+EIIREeW1t+m4c2GaLdfO+T3Vrwg8=) 7: GopMrpyToOz7hTEn02tSlWTChNc.roa (hash: PWyNZm9NNDQb4vDrYexwTILfoeBvuqO0/ZesnD+rBMg=) 8: JrrOFQjL67j7mWEbcUz8WZG31Ew.roa (hash: 2u7Ou9E9W3oEo5TDyLt4nvLFCeCCzeGxkS9x6ETgAe4=) 9: Zla6xxqlwjD5HGAN16Pzo29Tijg.roa (hash: XT7/Z4sfo6kElFtdLFq3BhRYhs4vxj89ZfDzgHu8Ge4=) 10: hnMtsx259zWb5DPTAskFt19vieA.roa (hash: IS/K0LmABWhq/hUi5ijfbnkS8QGQcUBWRW0f7gTisD4=) 11: wVujwwkylQneB17xiByWRppWqO0.roa (hash: gPw9UPGpfv7HTEVh40kJURB2PMVElzmf4UiOzzHfQg0=) 12: ydOhopDpEgxJrzwZy5o2ywKpW8w.roa (hash: cGNA9jtDwM6OD4vlqV4K4uD26uy/JQnhTPG3oY/YMmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:0b:96:03:d0:44:ef:84:61:50:cf:d5:88:a0:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Dec 6 15:00:49 2025 GMT Not After : Dec 7 15:00:49 2025 GMT Subject: CN=ce2c9226d53f17e6b6e730879cc73e99b0ae3351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bf:6f:6f:44:b6:97:f3:2e:e0:9b:18:61:fb: 92:a0:14:e9:dc:b3:81:9c:d8:1f:61:5a:c1:9f:be: 2c:d8:ab:f3:c4:29:de:63:03:ee:49:cd:04:34:41: 44:10:34:e7:1b:06:da:31:1c:4b:1f:ee:6f:f2:ad: 4a:ff:93:69:91:28:e1:48:08:dc:a0:0b:f4:9f:ab: 00:7d:ed:02:6a:a9:72:bf:c3:3e:f6:98:86:44:b2: 72:4d:cb:d2:7d:e3:63:d9:c1:d7:1e:a1:28:d9:be: 66:d8:29:6f:a5:70:64:85:ce:97:01:ed:ea:05:d9: a0:18:86:21:02:27:50:f4:61:5f:c7:37:34:ee:4d: 45:be:b3:39:4e:ec:0a:40:a2:90:16:15:f7:1f:5d: 08:65:e2:21:86:66:a9:0f:c8:10:22:0c:ca:43:df: 0a:37:10:0f:62:2b:73:a4:4c:67:46:63:f4:37:6d: 48:a3:c9:a3:27:26:f7:48:a0:cd:c3:7d:d2:d9:15: f0:c6:a2:2d:83:43:61:b1:cb:9e:f1:5c:21:ce:86: 80:ef:d2:39:ac:33:53:3f:bc:eb:02:09:47:4a:6c: 48:96:27:e2:66:9e:5e:9c:54:17:3c:ce:c7:46:59: 9d:9f:54:b7:15:0a:c1:e7:27:77:a8:9f:22:e8:a6: 3f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:2C:92:26:D5:3F:17:E6:B6:E7:30:87:9C:C7:3E:99:B0:AE:33:51 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9f:35:96:c5:d9:bb:bf:c2:43:ec:68:47:a9:6a:41:d5:c3: e4:c1:e7:0a:d6:1f:61:3c:7a:01:f1:95:51:21:1c:af:2f:23: 23:11:83:49:3f:d0:fa:ca:72:04:c9:a8:dd:1b:55:05:97:6b: c0:71:a6:0c:78:77:6c:10:1f:39:80:8b:b6:e5:bb:7a:3c:ea: 3a:28:59:4e:6c:5b:79:32:ce:ce:e0:f5:62:31:b7:88:20:6c: 31:94:4c:a0:17:b9:3f:3d:fe:7c:08:ee:ab:cf:74:10:20:6a: 19:db:27:25:6f:85:ec:37:0f:a5:b4:07:24:f3:b0:3a:4c:32: b6:da:4f:54:e3:1b:cf:3f:12:13:fb:36:28:a0:59:49:3b:75: 92:cc:5c:f4:40:37:22:9f:e1:c4:d3:c5:81:64:f0:a3:9b:5c: 75:27:c7:af:91:4b:83:c6:67:c9:e5:a5:7e:f8:f0:ee:77:d2: 0e:f4:ae:f4:45:09:98:03:fc:7b:d9:bb:1f:e1:6b:ec:de:b9: a0:5b:f9:67:d6:1f:0b:62:15:60:2d:15:b5:1f:6c:5b:91:09: 43:08:1a:89:5c:48:16:eb:8b:83:a8:93:11:fc:32:c0:a1:22: 32:5c:f2:76:ce:6a:22:bb:d4:3f:c8:fe:d0:fa:ed:98:1e:30: 1e:ba:65:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LguWA9BE74RhUM/ViKDUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjUxMjA2MTUwMDQ5WhcNMjUxMjA3MTUwMDQ5WjAzMTEwLwYDVQQD EyhjZTJjOTIyNmQ1M2YxN2U2YjZlNzMwODc5Y2M3M2U5OWIwYWUzMzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b9vb0S2l/Mu4JsYYfuSoBTp3LOB nNgfYVrBn74s2KvzxCneYwPuSc0ENEFEEDTnGwbaMRxLH+5v8q1K/5NpkSjhSAjc oAv0n6sAfe0Caqlyv8M+9piGRLJyTcvSfeNj2cHXHqEo2b5m2ClvpXBkhc6XAe3q BdmgGIYhAidQ9GFfxzc07k1FvrM5TuwKQKKQFhX3H10IZeIhhmapD8gQIgzKQ98K NxAPYitzpExnRmP0N21Io8mjJyb3SKDNw33S2RXwxqItg0Nhscue8VwhzoaA79I5 rDNTP7zrAglHSmxIlifiZp5enFQXPM7HRlmdn1S3FQrB5yd3qJ8i6KY/MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4skibVPxfmtucwh5zHPpmwrjNRMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO581lsXZ u7/CQ+xoR6lqQdXD5MHnCtYfYTx6AfGVUSEcry8jIxGDST/Q+spyBMmo3RtVBZdr wHGmDHh3bBAfOYCLtuW7ejzqOihZTmxbeTLOzuD1YjG3iCBsMZRMoBe5Pz3+fAju q890ECBqGdsnJW+F7DcPpbQHJPOwOkwyttpPVOMbzz8SE/s2KKBZSTt1ksxc9EA3 Ip/hxNPFgWTwo5tcdSfHr5FLg8ZnyeWlfvjw7nfSDvSu9EUJmAP8e9m7H+Fr7N65 oFv5Z9YfC2IVYC0VtR9sW5EJQwgaiVxIFuuLg6iTEfwywKEiMlzyds5qIrvUP8j+ 0PrtmB4wHrplHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:43:36 2025 by rpki-client