This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft File: rgMnvx57e_vdLyFMjvYpqink1m8.mft (raw, json) Hash identifier: Q0zcxYnE1kjCRWCl1n6ii8LZ/btJUb7YN917x3PPGds= Subject key identifier: 20:59:F3:FB:94:8C:5C:95:4C:17:BF:66:DD:2B:78:C1:B0:88:57:6A Authority key identifier: AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F Certificate issuer: /CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f Certificate serial: 019AF276DD67DCA7FADC894D4DF40A2E2DE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 07:01:07 +0000 Manifest this update: Sat 06 Dec 2025 07:01:07 +0000 Manifest next update: Sun 07 Dec 2025 07:01:07 +0000 Files and hashes: 1: D07K9M73JE_RghORuqvEImVGd0Q.roa (hash: kPt/ZOiMf9T1o4/zGBCvETiXAjwGaiEUsN/6gQ2oC8U=) 2: rgMnvx57e_vdLyFMjvYpqink1m8.crl (hash: X8FnDj0i8dSyFJxULF3AjadJJiJcqp6SDp/3F9N2szg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:dd:67:dc:a7:fa:dc:89:4d:4d:f4:0a:2e:2d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae0327bf1e7b7bfbdd2f214c8ef629aa29e4d66f Validity Not Before: Dec 6 07:01:07 2025 GMT Not After : Dec 7 07:01:07 2025 GMT Subject: CN=2059f3fb948c5c954c17bf66dd2b78c1b088576a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0a:77:26:af:67:cc:38:4f:33:f5:f3:a1:be: e1:85:ba:86:52:78:c2:8e:95:d7:ad:98:c8:18:b1: 58:94:9b:f7:21:b6:2d:ee:42:5e:2c:2b:61:22:33: 3c:66:ec:4a:c7:17:e3:04:e7:35:5a:92:eb:0b:1f: 26:4f:b5:8d:fc:1d:26:91:10:1d:a6:a0:b6:2f:62: 01:45:0e:bd:b3:58:77:d2:70:89:14:b8:d3:e9:55: bb:50:97:5c:67:ca:ca:7d:9c:d5:ba:71:00:9e:4a: 1e:b6:8b:70:79:42:9f:da:cb:97:04:66:da:e3:21: b5:ba:82:f6:d0:15:8c:10:f9:40:29:36:cf:e2:7c: 78:e2:19:4c:87:c4:f5:5d:eb:f0:45:17:a0:19:e4: be:39:4b:d7:04:1c:ad:1f:13:c5:84:47:53:28:59: 44:2f:30:64:6b:fa:d3:3e:a5:4a:54:1a:a3:e7:6e: f9:ff:14:56:a4:9f:bf:09:d0:1a:3d:f8:19:57:24: db:0d:21:ae:e8:68:a4:3f:69:18:57:cc:a1:92:a3: ac:d7:39:67:70:c1:a6:c8:d1:be:41:4e:2e:0e:ee: 9c:32:a2:c2:2f:f0:43:72:40:dc:9e:f8:0e:d0:b6: 1b:c0:c3:2d:da:11:a1:1a:1a:a7:ba:be:30:ca:34: 85:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:59:F3:FB:94:8C:5C:95:4C:17:BF:66:DD:2B:78:C1:B0:88:57:6A X509v3 Authority Key Identifier: keyid:AE:03:27:BF:1E:7B:7B:FB:DD:2F:21:4C:8E:F6:29:AA:29:E4:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgMnvx57e_vdLyFMjvYpqink1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f090be-422b-4f2a-864f-9fca29decda8/1/rgMnvx57e_vdLyFMjvYpqink1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:f3:6e:e5:59:c9:b7:65:05:5c:9d:38:93:15:7e:6a:32:e8: ce:62:3d:20:70:95:65:ee:df:13:b8:06:d3:e2:1d:d5:09:0e: 9d:c6:bc:12:75:5c:17:cd:51:c1:b1:73:98:66:8b:e3:56:f1: 44:3d:35:9c:17:55:db:7c:39:57:21:64:a5:e9:24:93:82:f7: 0e:ec:84:21:0d:08:eb:aa:65:e6:4f:9c:ca:78:4c:de:92:1c: c1:a4:38:47:c5:64:0b:5a:7c:4b:54:67:96:db:57:a0:f4:7a: 0c:15:23:3b:67:ce:bc:7b:90:1f:ac:24:30:84:c5:21:97:04: cc:d0:09:dd:b3:28:37:6c:45:3b:4b:99:77:ee:f2:5e:1a:44: 02:77:71:e1:5e:8b:47:9c:7f:0e:8c:6e:53:0c:35:96:14:7f: 70:29:ea:cf:83:29:62:b8:53:95:14:bb:1d:02:2b:de:23:b3: 48:32:49:fb:0c:25:2d:27:37:9b:91:3a:a0:58:2d:9c:67:75: 62:5b:16:d0:77:e2:00:49:4a:6b:a7:2c:8a:75:7b:34:37:da: 67:eb:ac:ee:71:fe:49:06:12:e3:3e:8d:14:a4:8e:f4:f6:92: d4:69:de:ed:bb:18:2e:03:0a:1a:4a:f9:cc:d5:7b:8c:77:9f: df:49:23:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydt1n3Kf63IlNTfQKLi3hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMDMyN2JmMWU3YjdiZmJkZDJmMjE0YzhlZjYyOWFhMjll NGQ2NmYwHhcNMjUxMjA2MDcwMTA3WhcNMjUxMjA3MDcwMTA3WjAzMTEwLwYDVQQD EygyMDU5ZjNmYjk0OGM1Yzk1NGMxN2JmNjZkZDJiNzhjMWIwODg1NzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugp3Jq9nzDhPM/Xzob7hhbqGUnjC jpXXrZjIGLFYlJv3IbYt7kJeLCthIjM8ZuxKxxfjBOc1WpLrCx8mT7WN/B0mkRAd pqC2L2IBRQ69s1h30nCJFLjT6VW7UJdcZ8rKfZzVunEAnkoetotweUKf2suXBGba 4yG1uoL20BWMEPlAKTbP4nx44hlMh8T1XevwRRegGeS+OUvXBBytHxPFhEdTKFlE LzBka/rTPqVKVBqj5275/xRWpJ+/CdAaPfgZVyTbDSGu6GikP2kYV8yhkqOs1zln cMGmyNG+QU4uDu6cMqLCL/BDckDcnvgO0LYbwMMt2hGhGhqnur4wyjSFzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBZ8/uUjFyVTBe/Zt0reMGwiFdqMB8GA1UdIwQY MBaAFK4DJ78ee3v73S8hTI72Kaop5NZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmdNbnZ4NTdlX3ZkTHlGTWp2WXBxaW5rMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mMDkwYmUtNDIyYi00ZjJhLTg2NGYt OWZjYTI5ZGVjZGE4LzEvcmdNbnZ4NTdlX3ZkTHlGTWp2WXBxaW5rMW04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9mMDkwYmUtNDIyYi00ZjJhLTg2NGYtOWZjYTI5ZGVjZGE4 LzEvcmdNbnZ4NTdlX3ZkTHlGTWp2WXBxaW5rMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfNu5VnJ t2UFXJ04kxV+ajLozmI9IHCVZe7fE7gG0+Id1QkOnca8EnVcF81RwbFzmGaL41bx RD01nBdV23w5VyFkpekkk4L3DuyEIQ0I66pl5k+cynhM3pIcwaQ4R8VkC1p8S1Rn lttXoPR6DBUjO2fOvHuQH6wkMITFIZcEzNAJ3bMoN2xFO0uZd+7yXhpEAndx4V6L R5x/DoxuUww1lhR/cCnqz4MpYrhTlRS7HQIr3iOzSDJJ+wwlLSc3m5E6oFgtnGd1 YlsW0HfiAElKa6csinV7NDfaZ+us7nH+SQYS4z6NFKSO9PaS1Gne7bsYLgMKGkr5 zNV7jHef30kjPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:12 2025 by rpki-client