This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft File: MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft (raw, json) Hash identifier: NDitAaCJ/cYM9GFdM9itPE96gmJXRUopjEy9kHSIxZQ= Subject key identifier: 9F:50:21:30:BE:F3:C0:36:DE:0E:0C:E6:12:36:4D:B6:56:6E:30:5C Authority key identifier: 32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91 Certificate issuer: /CN=327ce64ace02ccd330ceef98d05df0fb20317a91 Certificate serial: 019B3DFEE8A797EF77D8FB2E56C2E6D16A54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft Manifest number: 1789 Signing time: Sat 20 Dec 2025 23:01:14 +0000 Manifest this update: Sat 20 Dec 2025 23:01:14 +0000 Manifest next update: Sun 21 Dec 2025 23:01:14 +0000 Files and hashes: 1: MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl (hash: 05C4QZnyj51+y3m7AfTaLDFmnZHxmhiFK4t4rcX73aE=) 2: wPSm9MaczVOfJa8MmydVyNm05v8.roa (hash: EUTCJOzuqY4YxOtOde7m5gFxrTBwquCzBL62eKVTyyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:e8:a7:97:ef:77:d8:fb:2e:56:c2:e6:d1:6a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=327ce64ace02ccd330ceef98d05df0fb20317a91 Validity Not Before: Dec 20 23:01:14 2025 GMT Not After : Dec 21 23:01:14 2025 GMT Subject: CN=9f502130bef3c036de0e0ce612364db6566e305c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c7:7a:68:cf:b9:81:8d:00:e6:aa:e2:a4:a8: a0:aa:84:e2:85:3d:dd:da:09:c0:93:76:a1:6f:62: 04:3e:7c:bc:6b:63:c7:b6:2e:8e:1d:57:15:23:d8: 6a:2b:f6:dc:7a:a6:5f:0c:62:17:bc:6b:51:19:d9: b3:2c:89:09:e9:0a:dd:16:33:07:49:39:22:ca:fc: 5e:7e:b5:6d:ed:44:76:1a:f1:be:11:a5:54:f6:b7: 66:5b:e9:32:f2:e4:17:d3:7b:48:67:e0:9c:55:9b: fe:dc:95:cd:33:f2:42:91:27:c5:49:23:94:de:27: 60:d5:82:1b:ba:75:7c:97:48:9b:f4:61:07:63:47: f3:b7:22:eb:31:7f:03:03:e1:7b:59:f0:ea:a8:9c: 77:8a:b5:f6:4d:95:6c:13:54:48:e4:76:69:b9:5a: a8:13:ac:26:f3:be:8a:a4:28:6b:01:fc:99:ee:ce: ac:67:3e:63:9a:91:05:6d:6b:a3:85:4f:a4:a0:80: 4a:09:fe:25:30:81:97:e2:01:89:5b:6c:42:60:5b: 94:e0:4c:65:93:05:69:1b:b9:c7:8b:66:c4:6a:cd: ed:b0:7e:be:eb:7a:e7:c2:fd:e0:de:ae:c9:68:f9: 24:e0:3f:2b:f6:47:40:13:2a:10:52:84:ed:ea:94: 53:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:50:21:30:BE:F3:C0:36:DE:0E:0C:E6:12:36:4D:B6:56:6E:30:5C X509v3 Authority Key Identifier: keyid:32:7C:E6:4A:CE:02:CC:D3:30:CE:EF:98:D0:5D:F0:FB:20:31:7A:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnzmSs4CzNMwzu-Y0F3w-yAxepE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9de5da-2db2-4e06-8563-a3d9d614f197/1/MnzmSs4CzNMwzu-Y0F3w-yAxepE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:7a:d4:c8:03:e4:a8:0b:0e:15:13:e8:43:56:07:cb:8d:15: ba:2b:13:44:0e:f3:f9:c9:3d:b6:79:ce:d1:14:4d:3d:d9:9a: da:ef:f3:68:20:14:5f:93:4b:81:bf:26:48:a7:9f:7e:7c:24: c1:3d:d3:04:0f:f2:0d:dc:1b:47:f0:fa:70:e6:5c:7f:62:5f: 28:f2:f4:c2:e2:ac:b2:89:80:ea:68:c5:49:2b:dc:90:bf:5a: b2:7a:db:e5:72:80:bd:2e:ff:32:e4:e7:0b:a0:81:b7:6d:2a: 03:b0:f5:27:cc:38:c2:89:1f:5c:47:21:29:8e:8f:80:c0:35: 8f:2c:eb:27:86:1a:62:96:37:6f:d3:1a:72:e1:fa:fd:19:9c: e7:49:98:98:46:a7:ac:df:c8:84:99:8e:9d:ce:73:02:60:2d: 7e:13:3f:82:b5:a4:0a:b9:bd:2c:ce:d4:3c:d0:6d:44:a2:7f: b1:a7:70:cd:73:4e:29:f8:32:86:4e:18:aa:52:e9:3c:78:9a: 48:f0:f7:20:5d:ef:4b:97:1c:20:50:d1:05:fa:3d:17:3d:b2: e3:a4:c8:77:94:78:62:75:03:85:7f:8e:7b:5b:c5:6f:22:5a: 6f:2f:8f:3e:f9:fc:f5:9f:34:4e:db:85:29:39:fc:e6:6c:cb: 8e:48:62:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/uinl+932PsuVsLm0WpUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyN2NlNjRhY2UwMmNjZDMzMGNlZWY5OGQwNWRmMGZiMjAz MTdhOTEwHhcNMjUxMjIwMjMwMTE0WhcNMjUxMjIxMjMwMTE0WjAzMTEwLwYDVQQD Eyg5ZjUwMjEzMGJlZjNjMDM2ZGUwZTBjZTYxMjM2NGRiNjU2NmUzMDVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMd6aM+5gY0A5qripKigqoTihT3d 2gnAk3ahb2IEPny8a2PHti6OHVcVI9hqK/bceqZfDGIXvGtRGdmzLIkJ6QrdFjMH STkiyvxefrVt7UR2GvG+EaVU9rdmW+ky8uQX03tIZ+CcVZv+3JXNM/JCkSfFSSOU 3idg1YIbunV8l0ib9GEHY0fztyLrMX8DA+F7WfDqqJx3irX2TZVsE1RI5HZpuVqo E6wm876KpChrAfyZ7s6sZz5jmpEFbWujhU+koIBKCf4lMIGX4gGJW2xCYFuU4Exl kwVpG7nHi2bEas3tsH6+63rnwv3g3q7JaPkk4D8r9kdAEyoQUoTt6pRTmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ9QITC+88A23g4M5hI2TbZWbjBcMB8GA1UdIwQY MBaAFDJ85krOAszTMM7vmNBd8PsgMXqRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW56bVNzNEN6Tk13enUtWTBGM3cteUF4ZXBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS85ZGU1ZGEtMmRiMi00ZTA2LTg1NjMt YTNkOWQ2MTRmMTk3LzEvTW56bVNzNEN6Tk13enUtWTBGM3cteUF4ZXBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS85ZGU1ZGEtMmRiMi00ZTA2LTg1NjMtYTNkOWQ2MTRmMTk3 LzEvTW56bVNzNEN6Tk13enUtWTBGM3cteUF4ZXBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3rUyAPk qAsOFRPoQ1YHy40VuisTRA7z+ck9tnnO0RRNPdma2u/zaCAUX5NLgb8mSKeffnwk wT3TBA/yDdwbR/D6cOZcf2JfKPL0wuKssomA6mjFSSvckL9asnrb5XKAvS7/MuTn C6CBt20qA7D1J8w4wokfXEchKY6PgMA1jyzrJ4YaYpY3b9MacuH6/Rmc50mYmEan rN/IhJmOnc5zAmAtfhM/grWkCrm9LM7UPNBtRKJ/sadwzXNOKfgyhk4YqlLpPHia SPD3IF3vS5ccIFDRBfo9Fz2y46TId5R4YnUDhX+Oe1vFbyJaby+PPvn89Z80TtuF KTn85mzLjkhiAA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:21:27 2025 by rpki-client