This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft File: MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft (raw, json) Hash identifier: 49jcjUe2QoHC2Ex08nzb7Lrf1Kau/HDfQ5LXxZ/fAIg= Subject key identifier: B7:E6:8D:C2:28:D8:20:DD:38:51:9C:A1:B1:1F:50:2A:7E:0E:C2:CB Authority key identifier: 30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75 Certificate issuer: /CN=30d5e2022ea82ec77f92dddb776618cd6c057575 Certificate serial: 019AF5AF0C273DBA6BEA17D6E2CF014AB6AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft Manifest number: 048E Signing time: Sat 06 Dec 2025 22:01:21 +0000 Manifest this update: Sat 06 Dec 2025 22:01:21 +0000 Manifest next update: Sun 07 Dec 2025 22:01:21 +0000 Files and hashes: 1: MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl (hash: mkuWAPshhLM314mZ0U+QG57aVy6w7ULECZBnKAQZIM8=) 2: skW6mTRnrJBXYcxt-Zc6z3gEdho.roa (hash: KM4A5R/ZQTLCtfP46l0wZ8+sKSHnCIdUTaB+eFvF1Eg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:0c:27:3d:ba:6b:ea:17:d6:e2:cf:01:4a:b6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d5e2022ea82ec77f92dddb776618cd6c057575 Validity Not Before: Dec 6 22:01:21 2025 GMT Not After : Dec 7 22:01:21 2025 GMT Subject: CN=b7e68dc228d820dd38519ca1b11f502a7e0ec2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4d:93:8f:41:23:c7:69:a2:fe:56:b7:86:74: 86:de:33:a4:63:c6:7f:47:84:f0:02:96:1e:85:65: 3a:84:52:9b:bd:53:62:9d:6a:5f:e7:82:f8:5f:16: a0:fd:50:7b:f2:2a:36:8c:93:75:93:c4:0d:39:57: bc:76:7f:3a:0b:bf:a6:67:c5:cd:a8:f9:3f:66:8f: 58:01:55:fc:89:bf:2b:8b:5e:31:f4:31:8e:94:ec: e7:08:35:f3:6d:17:2a:29:3a:21:8e:fc:23:8f:53: 37:e4:6a:d6:d9:0c:92:cd:9e:a4:f5:41:cc:dd:04: 35:0f:fe:33:5b:dc:19:d2:c1:23:3a:8e:5e:3f:59: 48:6b:1e:c6:b8:a7:30:66:5c:74:b6:86:88:e7:d2: 59:0a:d3:0a:31:32:47:c5:7b:81:50:38:50:21:ab: 1e:45:7c:95:41:91:6f:ee:4c:98:f5:48:3f:7f:87: 99:e5:d2:67:6c:d2:17:1a:71:d9:c6:ce:f2:e3:eb: a0:40:ce:78:db:56:a7:c2:4d:33:b4:d6:12:19:10: ff:83:80:86:ef:84:5b:8a:5f:6b:a1:33:19:ed:f3: 06:93:c3:8e:d1:45:00:ca:36:d6:ae:ca:cf:d7:78: a1:63:21:84:1c:27:f0:45:81:0e:01:03:5b:12:8c: b3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E6:8D:C2:28:D8:20:DD:38:51:9C:A1:B1:1F:50:2A:7E:0E:C2:CB X509v3 Authority Key Identifier: keyid:30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8c:6e:ee:62:a5:55:41:e6:ae:7d:73:63:5a:02:0c:4c:0f: b7:4a:0d:60:75:aa:76:cb:8c:f1:9e:ca:b3:02:93:e3:42:e6: 31:28:50:c5:2b:97:46:d0:a9:1f:f4:d8:20:55:4f:22:dc:ab: 7f:76:2d:d4:17:66:15:d0:69:f6:bb:da:0e:cb:ee:d0:9e:e8: 40:77:80:13:53:3e:c5:c4:52:28:32:8e:db:07:6b:71:d2:59: 17:6d:80:e8:8c:5c:e2:e2:8b:1f:29:64:c6:86:13:71:9c:d3: 3a:dc:ac:1b:b7:77:fc:30:c5:81:9a:67:c3:5c:cd:27:8c:3e: 1e:ce:55:71:b8:a0:11:84:0e:68:17:dc:5d:ec:c0:51:61:c4: 60:38:58:dd:97:0b:72:77:27:eb:20:a7:97:4f:29:8c:42:62: 8f:53:a3:11:58:99:61:ec:b4:87:2f:98:02:ea:b4:ee:6a:88: 74:3e:ef:0e:d7:57:d3:7a:f5:ee:39:35:c9:02:88:43:c6:6e: 80:c8:f4:39:de:8f:88:53:86:2b:6c:ec:3f:13:2d:67:28:2e: a2:cf:7c:d0:09:b1:b0:15:d1:cc:f8:11:c0:32:2c:d8:4f:74: a9:2b:6f:49:c2:65:bb:b2:ff:73:4c:11:ad:57:2d:a8:f9:3e: 3b:30:9a:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rwwnPbpr6hfW4s8BSrasMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZDVlMjAyMmVhODJlYzc3ZjkyZGRkYjc3NjYxOGNkNmMw NTc1NzUwHhcNMjUxMjA2MjIwMTIxWhcNMjUxMjA3MjIwMTIxWjAzMTEwLwYDVQQD EyhiN2U2OGRjMjI4ZDgyMGRkMzg1MTljYTFiMTFmNTAyYTdlMGVjMmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik2Tj0Ejx2mi/la3hnSG3jOkY8Z/ R4TwApYehWU6hFKbvVNinWpf54L4Xxag/VB78io2jJN1k8QNOVe8dn86C7+mZ8XN qPk/Zo9YAVX8ib8ri14x9DGOlOznCDXzbRcqKTohjvwjj1M35GrW2QySzZ6k9UHM 3QQ1D/4zW9wZ0sEjOo5eP1lIax7GuKcwZlx0toaI59JZCtMKMTJHxXuBUDhQIase RXyVQZFv7kyY9Ug/f4eZ5dJnbNIXGnHZxs7y4+ugQM5421anwk0ztNYSGRD/g4CG 74Rbil9roTMZ7fMGk8OO0UUAyjbWrsrP13ihYyGEHCfwRYEOAQNbEoyzTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfmjcIo2CDdOFGcobEfUCp+DsLLMB8GA1UdIwQY MBaAFDDV4gIuqC7Hf5Ld23dmGM1sBXV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU5YaUFpNm9Mc2Rfa3QzYmQyWVl6V3dGZFhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mN2NhNGEtY2E3My00N2Y4LTlmZDct OWIyZjUxYjgwYTk4LzEvTU5YaUFpNm9Mc2Rfa3QzYmQyWVl6V3dGZFhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mN2NhNGEtY2E3My00N2Y4LTlmZDctOWIyZjUxYjgwYTk4 LzEvTU5YaUFpNm9Mc2Rfa3QzYmQyWVl6V3dGZFhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIxu7mKl VUHmrn1zY1oCDEwPt0oNYHWqdsuM8Z7KswKT40LmMShQxSuXRtCpH/TYIFVPItyr f3Yt1BdmFdBp9rvaDsvu0J7oQHeAE1M+xcRSKDKO2wdrcdJZF22A6Ixc4uKLHylk xoYTcZzTOtysG7d3/DDFgZpnw1zNJ4w+Hs5VcbigEYQOaBfcXezAUWHEYDhY3ZcL cncn6yCnl08pjEJij1OjEViZYey0hy+YAuq07mqIdD7vDtdX03r17jk1yQKIQ8Zu gMj0Od6PiFOGK2zsPxMtZyguos980AmxsBXRzPgRwDIs2E90qStvScJlu7L/c0wR rVctqPk+OzCaoA== -----END CERTIFICATE-----Generated at Sun Dec 7 00:51:26 2025 by rpki-client