This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft File: mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft (raw, json) Hash identifier: 2S252oRc5EEbXmTUOMPcw0MfVf42F0sJQDw4nWluOoY= Subject key identifier: 4E:0C:33:68:3D:6C:F7:A0:AE:4C:D4:15:CA:94:D0:B8:48:DB:C1:7B Authority key identifier: 9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29 Certificate issuer: /CN=9a727aa6e687b492d212f451deb861ea01f17529 Certificate serial: 019AF5776273AFB057143AA69C6B56F7C956 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft Manifest number: 135B Signing time: Sat 06 Dec 2025 21:00:33 +0000 Manifest this update: Sat 06 Dec 2025 21:00:33 +0000 Manifest next update: Sun 07 Dec 2025 21:00:33 +0000 Files and hashes: 1: mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl (hash: xu3VaWyOJPzNn/KsH8AVaCgepdnMcZwxH76NEI7Gebc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:62:73:af:b0:57:14:3a:a6:9c:6b:56:f7:c9:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a727aa6e687b492d212f451deb861ea01f17529 Validity Not Before: Dec 6 21:00:33 2025 GMT Not After : Dec 7 21:00:33 2025 GMT Subject: CN=4e0c33683d6cf7a0ae4cd415ca94d0b848dbc17b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:1b:5d:3d:db:56:0b:b7:61:69:de:31:fe:26: fb:40:27:11:39:5a:4e:50:21:5c:1b:ac:95:17:5e: 90:01:45:24:b3:dd:c8:eb:77:32:9e:eb:de:51:ed: 06:16:38:b1:2b:a0:af:cd:0b:45:91:90:12:61:ce: a6:5a:e9:97:6c:0c:84:6a:a6:fd:31:ea:fe:63:6d: a5:57:da:e1:13:05:b7:1b:f4:b8:85:f9:26:81:98: 9b:90:9f:b1:d7:4c:48:5f:85:a8:85:f2:c9:ee:5c: 9b:cd:e3:67:98:a4:c5:cd:68:0d:07:38:41:92:51: 9c:ae:72:7c:67:6d:4c:d4:08:f5:7f:66:a0:e4:ff: c0:b1:85:76:10:4f:f8:e4:5d:4c:bf:c7:20:23:cd: b4:c8:57:51:9a:9d:ea:c2:5e:ef:a7:81:a8:ab:db: 76:d0:07:ff:94:2e:93:11:bf:9f:72:f1:3e:21:dd: 47:bb:6f:fe:c6:5d:4a:8b:d5:ca:fc:2a:19:b5:43: 9f:3e:d7:a7:1b:78:47:bb:97:5e:8f:a0:b0:77:8b: f5:36:95:cd:e3:58:8b:9a:c8:c9:27:4f:82:4d:34: 57:a0:6c:cd:dc:ef:3b:b3:a8:48:e8:2e:a5:79:a3: b3:e6:d8:95:e2:9b:f2:5a:9a:e3:47:b5:04:f9:3c: b1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:0C:33:68:3D:6C:F7:A0:AE:4C:D4:15:CA:94:D0:B8:48:DB:C1:7B X509v3 Authority Key Identifier: keyid:9A:72:7A:A6:E6:87:B4:92:D2:12:F4:51:DE:B8:61:EA:01:F1:75:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnJ6puaHtJLSEvRR3rhh6gHxdSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f366bf-8f55-4e7f-ae27-708218a66b8f/1/mnJ6puaHtJLSEvRR3rhh6gHxdSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:76:fe:20:e0:79:59:b7:df:ea:37:1b:44:39:33:74:61:33: 9c:66:c0:32:b5:08:78:7f:29:09:0c:3f:33:95:15:8b:63:98: c0:d9:56:81:ce:4b:cd:e5:6b:46:c0:b4:f1:0f:95:d6:28:26: ab:9d:2b:37:f1:1e:f0:32:6c:a4:e9:4e:78:74:af:b6:8f:b6: c6:40:ff:59:ba:c4:a8:1b:10:8a:76:4c:c2:bd:fc:57:65:b2: 41:ff:2d:51:9c:48:90:ae:0a:6e:95:02:73:33:ce:a9:1f:7e: c4:e0:83:23:e0:33:ff:50:f0:13:3f:e5:bc:2e:4a:aa:9c:64: a9:aa:fa:cc:b3:6f:09:5e:88:06:95:71:ff:39:4d:ec:f6:49: ea:d2:5d:3d:10:ad:0b:0c:d5:4f:fd:8c:f0:dc:dc:c5:4f:3c: 5e:d7:da:76:b8:e6:e2:1c:20:91:e3:7c:6d:0f:54:ef:ed:d8: 7b:6a:f6:4f:1e:3d:15:43:61:9c:d3:a2:7d:e5:96:4a:7f:d0: 2e:e0:5f:af:7f:b7:2c:11:da:21:a9:45:b0:ad:ae:e2:84:75: fa:0f:d5:9a:49:19:84:9b:f2:c9:09:f6:5c:29:1b:b0:a1:a9: 6d:4e:f5:fe:64:8b:a2:27:20:8c:90:c1:71:76:43:7a:dd:c7: cd:d1:91:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d2Jzr7BXFDqmnGtW98lWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNzI3YWE2ZTY4N2I0OTJkMjEyZjQ1MWRlYjg2MWVhMDFm MTc1MjkwHhcNMjUxMjA2MjEwMDMzWhcNMjUxMjA3MjEwMDMzWjAzMTEwLwYDVQQD Eyg0ZTBjMzM2ODNkNmNmN2EwYWU0Y2Q0MTVjYTk0ZDBiODQ4ZGJjMTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BtdPdtWC7dhad4x/ib7QCcROVpO UCFcG6yVF16QAUUks93I63cynuveUe0GFjixK6CvzQtFkZASYc6mWumXbAyEaqb9 Mer+Y22lV9rhEwW3G/S4hfkmgZibkJ+x10xIX4WohfLJ7lybzeNnmKTFzWgNBzhB klGcrnJ8Z21M1Aj1f2ag5P/AsYV2EE/45F1Mv8cgI820yFdRmp3qwl7vp4Goq9t2 0Af/lC6TEb+fcvE+Id1Hu2/+xl1Ki9XK/CoZtUOfPtenG3hHu5dej6Cwd4v1NpXN 41iLmsjJJ0+CTTRXoGzN3O87s6hI6C6leaOz5tiV4pvyWprjR7UE+TyxIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4MM2g9bPegrkzUFcqU0LhI28F7MB8GA1UdIwQY MBaAFJpyeqbmh7SS0hL0Ud64YeoB8XUpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW5KNnB1YUh0SkxTRXZSUjNyaGg2Z0h4ZFNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9mMzY2YmYtOGY1NS00ZTdmLWFlMjct NzA4MjE4YTY2YjhmLzEvbW5KNnB1YUh0SkxTRXZSUjNyaGg2Z0h4ZFNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9mMzY2YmYtOGY1NS00ZTdmLWFlMjctNzA4MjE4YTY2Yjhm LzEvbW5KNnB1YUh0SkxTRXZSUjNyaGg2Z0h4ZFNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXb+IOB5 Wbff6jcbRDkzdGEznGbAMrUIeH8pCQw/M5UVi2OYwNlWgc5LzeVrRsC08Q+V1igm q50rN/Ee8DJspOlOeHSvto+2xkD/WbrEqBsQinZMwr38V2WyQf8tUZxIkK4KbpUC czPOqR9+xOCDI+Az/1DwEz/lvC5Kqpxkqar6zLNvCV6IBpVx/zlN7PZJ6tJdPRCt CwzVT/2M8NzcxU88Xtfadrjm4hwgkeN8bQ9U7+3Ye2r2Tx49FUNhnNOifeWWSn/Q LuBfr3+3LBHaIalFsK2u4oR1+g/VmkkZhJvyyQn2XCkbsKGpbU71/mSLoicgjJDB cXZDet3HzdGRQQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:53:18 2025 by rpki-client