This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft File: MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json) Hash identifier: uLf6q8f0YWaOucAO38v9wZD9xZo9w5BlXDBpp68f2Yw= Subject key identifier: 9B:09:4C:F9:F4:1B:7E:0F:10:94:B9:3B:40:7C:91:24:7B:FB:37:A0 Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90 Certificate issuer: /CN=327557cf22629d058a5114965b2f9df8ef4db690 Certificate serial: 019AF12E17B52C379437921122A57C1C74F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft Manifest number: 0E47 Signing time: Sat 06 Dec 2025 01:02:00 +0000 Manifest this update: Sat 06 Dec 2025 01:02:00 +0000 Manifest next update: Sun 07 Dec 2025 01:02:00 +0000 Files and hashes: 1: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: tYxybexryi/jv3tdRDkTUzYsIntJ+Nk+Z9M2BMjm670=) 2: hApSbA3jzy_s3iVNvrGjhLhy3rU.roa (hash: 1X2vbtL7wfNX8hGTI4KlZns0bkwGbPIYpWY571Ew9V0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:17:b5:2c:37:94:37:92:11:22:a5:7c:1c:74:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690 Validity Not Before: Dec 6 01:02:00 2025 GMT Not After : Dec 7 01:02:00 2025 GMT Subject: CN=9b094cf9f41b7e0f1094b93b407c91247bfb37a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ba:7c:9c:d3:07:5f:fa:fc:2d:d5:22:7d:ac: a5:20:36:db:22:09:0c:11:15:f3:29:e0:04:93:61: 2a:c2:3f:b4:30:0a:f7:12:5c:95:5e:42:8a:01:4d: a9:83:f4:9d:27:01:2f:67:01:a4:ce:2d:fa:0b:a8: 4e:e9:50:73:5b:b2:f4:f0:6b:1c:ac:82:54:4a:7a: ef:ec:cf:84:99:1d:2b:f2:2b:32:94:e9:28:ed:2a: 22:92:ad:cf:7c:08:aa:b7:7e:d2:78:e4:44:6d:28: 76:cc:28:66:00:38:0c:d4:d5:d8:80:1f:fb:67:74: f0:fc:fb:4c:16:ab:80:ae:ce:f8:cd:8c:bc:c8:14: a6:fb:c9:ba:5d:32:bd:0c:59:f5:7d:96:b0:29:8d: ce:88:e2:c7:fd:ac:bf:f7:42:80:33:4f:2f:67:c2: ca:5e:5e:6b:1e:cd:7b:d1:52:1e:10:8b:7b:67:09: ba:dc:e4:21:94:12:30:65:a6:08:e2:40:e3:5d:41: 3a:dd:56:6c:69:ad:88:af:63:fc:68:79:5e:e1:f5: 62:cb:cb:7e:ff:71:35:9d:d9:1a:e9:1e:46:8e:1e: b6:b6:af:86:4b:83:0b:a9:0a:55:b4:32:9b:bc:5d: c3:24:41:9a:3c:b2:60:4a:d0:c1:77:4c:81:53:48: d6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:09:4C:F9:F4:1B:7E:0F:10:94:B9:3B:40:7C:91:24:7B:FB:37:A0 X509v3 Authority Key Identifier: keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:af:0c:3b:5f:1f:dc:6b:9f:a8:4f:b9:25:af:e7:2b:2f:8b: 00:d6:e0:87:e8:ab:ae:1f:ce:5c:c5:5b:55:39:32:14:87:cb: cd:8d:7f:03:de:45:ec:ab:35:86:e7:cd:b4:a3:fc:52:6a:6e: 75:dd:a4:cb:68:31:2f:98:96:8d:19:5d:c0:dc:3c:59:9c:2f: 97:87:88:d5:a5:b5:ab:bc:8b:95:f7:89:12:b6:dd:f0:c9:ef: ea:48:c2:6a:87:e9:2f:66:77:ab:b7:38:07:29:0f:4d:a4:cc: 45:f1:57:d2:75:6c:8b:78:7c:4b:4c:d4:d9:73:58:a8:3c:63: 5f:90:ae:4f:d9:11:1d:d4:4c:6f:7e:90:57:88:8a:02:69:cb: 58:44:07:e2:5b:91:77:71:df:64:30:7a:bc:d4:7d:a7:b7:58: a0:83:d5:83:1b:22:8b:eb:61:e0:1b:d1:99:48:d1:57:df:8e: df:86:50:d5:03:b4:f6:09:1f:50:ad:ac:b3:39:27:ee:4f:90: f2:be:c6:b2:08:8f:ba:44:50:79:12:4e:7f:51:3e:2c:12:15: 8f:35:a6:84:63:86:00:a9:92:1c:47:66:23:14:84:34:b4:d0: c9:50:e5:cb:77:45:b8:d9:be:8f:41:d5:8d:6d:21:2e:1f:ee: 86:01:05:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLhe1LDeUN5IRIqV8HHT2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNzU1N2NmMjI2MjlkMDU4YTUxMTQ5NjViMmY5ZGY4ZWY0 ZGI2OTAwHhcNMjUxMjA2MDEwMjAwWhcNMjUxMjA3MDEwMjAwWjAzMTEwLwYDVQQD Eyg5YjA5NGNmOWY0MWI3ZTBmMTA5NGI5M2I0MDdjOTEyNDdiZmIzN2EwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bp8nNMHX/r8LdUifaylIDbbIgkM ERXzKeAEk2Eqwj+0MAr3ElyVXkKKAU2pg/SdJwEvZwGkzi36C6hO6VBzW7L08Gsc rIJUSnrv7M+EmR0r8isylOko7Soikq3PfAiqt37SeOREbSh2zChmADgM1NXYgB/7 Z3Tw/PtMFquArs74zYy8yBSm+8m6XTK9DFn1fZawKY3OiOLH/ay/90KAM08vZ8LK Xl5rHs170VIeEIt7Zwm63OQhlBIwZaYI4kDjXUE63VZsaa2Ir2P8aHle4fViy8t+ /3E1ndka6R5Gjh62tq+GS4MLqQpVtDKbvF3DJEGaPLJgStDBd0yBU0jWQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsJTPn0G34PEJS5O0B8kSR7+zegMB8GA1UdIwQY MBaAFDJ1V88iYp0FilEUllsvnfjvTbaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUt ZmQ3MjViODI1MjkxLzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85Y2ZmM2QtMTE2OC00MTFjLWEwNjUtZmQ3MjViODI1Mjkx LzEvTW5WWHp5SmluUVdLVVJTV1d5LWQtTzlOdHBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjq8MO18f 3GufqE+5Ja/nKy+LANbgh+irrh/OXMVbVTkyFIfLzY1/A95F7Ks1hufNtKP8Umpu dd2ky2gxL5iWjRldwNw8WZwvl4eI1aW1q7yLlfeJErbd8Mnv6kjCaofpL2Z3q7c4 BykPTaTMRfFX0nVsi3h8S0zU2XNYqDxjX5CuT9kRHdRMb36QV4iKAmnLWEQH4luR d3HfZDB6vNR9p7dYoIPVgxsii+th4BvRmUjRV9+O34ZQ1QO09gkfUK2sszkn7k+Q 8r7GsgiPukRQeRJOf1E+LBIVjzWmhGOGAKmSHEdmIxSENLTQyVDly3dFuNm+j0HV jW0hLh/uhgEFSg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:19:36 2025 by rpki-client