This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft File: MnBggp7MaE-ln4VaoKSEAbwX8tE.mft (raw, json) Hash identifier: w3E09YXnCJXYbwcpCtT3wtzmQdRVljoetTmpIYvSyZo= Subject key identifier: BC:46:31:0E:93:66:59:56:6E:15:B7:E2:BE:A2:5D:33:30:EE:5D:EC Authority key identifier: 32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1 Certificate issuer: /CN=327060829ecc684fa59f855aa0a48401bc17f2d1 Certificate serial: 019AF50AE4BE9274D41916854F073B4068B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft Manifest number: 06CD Signing time: Sat 06 Dec 2025 19:02:03 +0000 Manifest this update: Sat 06 Dec 2025 19:02:03 +0000 Manifest next update: Sun 07 Dec 2025 19:02:03 +0000 Files and hashes: 1: MnBggp7MaE-ln4VaoKSEAbwX8tE.crl (hash: aEfK+2a9nKYMPbzOymETIk5mzxaa1G8KdrJS6I9mKhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:e4:be:92:74:d4:19:16:85:4f:07:3b:40:68:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=327060829ecc684fa59f855aa0a48401bc17f2d1 Validity Not Before: Dec 6 19:02:03 2025 GMT Not After : Dec 7 19:02:03 2025 GMT Subject: CN=bc46310e936659566e15b7e2bea25d3330ee5dec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:df:69:b4:ef:a3:cf:04:12:97:ad:cf:68:2d: 73:5a:41:64:d9:05:c5:67:61:1c:a5:bb:bf:8d:4d: d6:d3:2d:3b:fe:f4:31:3b:b1:6a:31:88:4b:b4:a5: c2:81:3e:d8:cf:71:c7:b5:1c:e3:3f:64:4e:b3:b7: 53:7c:64:7c:85:a7:c9:18:d0:ec:ab:18:1f:98:26: 39:ae:0f:90:39:f2:d8:8d:bf:84:30:74:af:c1:36: 15:25:7a:5a:03:b3:bb:7e:8a:8b:31:42:ac:dd:95: f8:74:db:a9:7e:97:b4:b2:c4:75:a0:d2:83:32:37: b6:f7:e5:a3:e6:7c:9b:d0:0c:e7:d9:0c:47:d8:2c: 88:d6:94:02:ca:49:3e:aa:7d:4d:e2:83:73:4e:2a: 75:2e:47:69:aa:3f:bb:74:a0:e9:46:15:81:44:9e: 07:62:91:39:38:76:e2:86:f9:b1:8c:8a:2a:59:7b: 3e:17:46:82:be:65:92:d0:e2:96:22:25:db:b3:2f: 2a:ca:52:14:4e:d5:26:fd:5f:67:2b:b2:de:e0:a5: 21:94:c2:a2:34:e3:11:db:93:dc:81:ca:13:d7:a6: 0f:fb:94:3b:bd:72:c5:2f:b3:2e:7a:d0:1e:54:c1: bc:ce:79:90:64:e2:52:77:68:37:d0:48:31:87:45: f2:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:46:31:0E:93:66:59:56:6E:15:B7:E2:BE:A2:5D:33:30:EE:5D:EC X509v3 Authority Key Identifier: keyid:32:70:60:82:9E:CC:68:4F:A5:9F:85:5A:A0:A4:84:01:BC:17:F2:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnBggp7MaE-ln4VaoKSEAbwX8tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b0ab23-7455-4ea0-a1e3-132761beaa10/1/MnBggp7MaE-ln4VaoKSEAbwX8tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:2c:ae:22:25:85:6d:c2:b7:4e:5f:37:8f:24:4a:59:a4:c7: 1e:e3:7c:84:07:52:38:fc:3c:3f:4f:05:e4:06:18:1d:f3:23: 51:42:46:44:ca:6c:3a:8f:cb:7e:4c:93:05:2e:13:6d:4a:ab: 51:62:dc:5b:1d:06:69:c4:16:4f:10:60:83:91:3d:70:3a:4a: f1:77:45:7b:fa:b3:2c:86:9d:2b:f2:aa:81:1e:b5:40:d8:ed: bf:a4:e3:53:45:8f:17:f9:84:bf:ca:71:80:9a:24:55:28:53: 66:60:64:e1:41:18:c4:49:f1:51:7b:b8:db:62:45:bd:79:95: 8d:2a:0d:c1:5a:53:c8:4a:87:77:69:1f:55:aa:3d:fb:eb:6a: a9:cf:90:ff:af:0c:81:75:aa:c9:3d:a5:9b:75:0b:d5:b3:29: 8d:79:86:63:0a:13:5a:4e:08:00:f7:cd:e0:d3:f9:25:99:18: 09:58:16:9c:de:5d:1f:35:fb:ce:03:c0:73:53:d4:59:96:45: 1f:d8:c1:5b:c3:1b:72:db:1b:bb:2f:9c:71:45:89:ef:83:70: 54:2e:70:f5:04:3b:dc:92:3a:26:5d:2e:43:ea:c2:4d:86:3b: 00:a4:a3:83:1a:3f:b5:bb:0d:d4:72:80:45:a9:b4:b9:b7:7a: 53:cd:f4:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CuS+knTUGRaFTwc7QGizMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNzA2MDgyOWVjYzY4NGZhNTlmODU1YWEwYTQ4NDAxYmMx N2YyZDEwHhcNMjUxMjA2MTkwMjAzWhcNMjUxMjA3MTkwMjAzWjAzMTEwLwYDVQQD EyhiYzQ2MzEwZTkzNjY1OTU2NmUxNWI3ZTJiZWEyNWQzMzMwZWU1ZGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA199ptO+jzwQSl63PaC1zWkFk2QXF Z2Ecpbu/jU3W0y07/vQxO7FqMYhLtKXCgT7Yz3HHtRzjP2ROs7dTfGR8hafJGNDs qxgfmCY5rg+QOfLYjb+EMHSvwTYVJXpaA7O7foqLMUKs3ZX4dNupfpe0ssR1oNKD Mje29+Wj5nyb0Azn2QxH2CyI1pQCykk+qn1N4oNzTip1Lkdpqj+7dKDpRhWBRJ4H YpE5OHbihvmxjIoqWXs+F0aCvmWS0OKWIiXbsy8qylIUTtUm/V9nK7Le4KUhlMKi NOMR25PcgcoT16YP+5Q7vXLFL7MuetAeVMG8znmQZOJSd2g30Egxh0XybQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLxGMQ6TZllWbhW34r6iXTMw7l3sMB8GA1UdIwQY MBaAFDJwYIKezGhPpZ+FWqCkhAG8F/LRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW5CZ2dwN01hRS1sbjRWYW9LU0VBYndYOHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9iMGFiMjMtNzQ1NS00ZWEwLWExZTMt MTMyNzYxYmVhYTEwLzEvTW5CZ2dwN01hRS1sbjRWYW9LU0VBYndYOHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9iMGFiMjMtNzQ1NS00ZWEwLWExZTMtMTMyNzYxYmVhYTEw LzEvTW5CZ2dwN01hRS1sbjRWYW9LU0VBYndYOHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnSyuIiWF bcK3Tl83jyRKWaTHHuN8hAdSOPw8P08F5AYYHfMjUUJGRMpsOo/LfkyTBS4TbUqr UWLcWx0GacQWTxBgg5E9cDpK8XdFe/qzLIadK/KqgR61QNjtv6TjU0WPF/mEv8px gJokVShTZmBk4UEYxEnxUXu422JFvXmVjSoNwVpTyEqHd2kfVao9++tqqc+Q/68M gXWqyT2lm3UL1bMpjXmGYwoTWk4IAPfN4NP5JZkYCVgWnN5dHzX7zgPAc1PUWZZF H9jBW8Mbctsbuy+ccUWJ74NwVC5w9QQ73JI6Jl0uQ+rCTYY7AKSjgxo/tbsN1HKA Ram0ubd6U830hg== -----END CERTIFICATE-----Generated at Sun Dec 7 01:31:27 2025 by rpki-client