This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft File: pmnxwhNwxE39EOKvaIyMTg6hKVU.mft (raw, json) Hash identifier: e4bysHE3vHlu1nsHsSJHzZb43pzexZVDNp0Q3YsFIKk= Subject key identifier: 06:E4:76:B1:25:E5:61:B0:44:BE:4D:FA:E5:44:CE:EC:B4:94:65:44 Authority key identifier: A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55 Certificate issuer: /CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955 Certificate serial: 019B27770A447D51AF54415CAC8FE38E3A17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft Manifest number: 0FC5 Signing time: Tue 16 Dec 2025 14:01:11 +0000 Manifest this update: Tue 16 Dec 2025 14:01:11 +0000 Manifest next update: Wed 17 Dec 2025 14:01:11 +0000 Files and hashes: 1: pmnxwhNwxE39EOKvaIyMTg6hKVU.crl (hash: 5mwnQ/uhTTd/e9N/WHmqSETvKkSdSOfxn3QU4Xp+Vik=) 2: vdy1MmzFMK60AlIdpOXD1htDYPg.roa (hash: 0u0pMl1wwd/at2uaTP4vwjKf36kzodMgLoxEXn0lwwY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:77:0a:44:7d:51:af:54:41:5c:ac:8f:e3:8e:3a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a669f1c21370c44dfd10e2af688c8c4e0ea12955 Validity Not Before: Dec 16 14:01:11 2025 GMT Not After : Dec 17 14:01:11 2025 GMT Subject: CN=06e476b125e561b044be4dfae544ceecb4946544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:34:83:16:c1:87:de:7a:9c:dd:52:01:9c:46: c3:c9:f0:62:df:d9:f0:77:b2:d5:38:80:90:de:e3: 42:1c:a6:e6:b7:0c:0c:95:bb:eb:f9:23:20:f4:2f: 99:8f:ec:c6:dc:65:90:dc:9f:0f:48:41:b5:c0:05: d3:67:f0:1d:1d:8c:32:9a:ab:3b:19:09:a7:00:ac: ce:a7:d5:44:c7:2c:59:d9:8c:45:0a:f5:b6:de:2c: 02:60:ea:bd:71:99:51:64:e1:bb:78:d7:ea:06:33: 5a:0f:53:45:31:25:eb:36:8a:fa:32:c9:a3:d1:d6: 92:4f:82:0b:2f:20:bb:2a:58:4d:aa:01:ed:34:85: c4:b0:f4:e7:a7:5c:5b:e0:97:60:6b:2e:e5:1b:86: 98:87:c7:d4:ca:ec:63:99:ac:6d:65:6a:b4:d4:49: 4b:49:df:a9:72:75:62:d7:8a:fc:70:6a:42:a2:37: 6b:6b:cc:86:58:44:a5:f8:7f:8b:86:1b:bd:2e:e0: da:a7:a1:9a:d8:4e:53:0e:a6:f0:83:76:4d:9b:88: 42:95:0b:f3:d8:05:39:ad:3e:61:83:7f:8a:47:98: ff:64:c3:70:34:c5:56:3c:4e:8e:3e:c6:79:01:1c: e2:0b:53:1d:ed:b6:a8:88:67:6a:0e:69:67:ba:38: 88:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E4:76:B1:25:E5:61:B0:44:BE:4D:FA:E5:44:CE:EC:B4:94:65:44 X509v3 Authority Key Identifier: keyid:A6:69:F1:C2:13:70:C4:4D:FD:10:E2:AF:68:8C:8C:4E:0E:A1:29:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmnxwhNwxE39EOKvaIyMTg6hKVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7b40c-414b-473a-b8c7-b7b1481625b1/1/pmnxwhNwxE39EOKvaIyMTg6hKVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:ce:76:58:fe:03:3d:5c:25:46:d9:73:da:f7:06:b9:20:b8: ca:7e:58:8f:5b:66:22:75:22:95:f2:04:c5:0e:08:0f:5e:79: 31:b6:58:ba:07:3a:ee:b6:89:a1:35:cd:e3:4e:c3:1a:e3:7a: 30:73:b8:c7:88:13:18:3f:bf:2e:65:ae:67:4f:0b:fa:03:4c: f6:cf:ce:a4:8f:a6:a2:b3:69:03:dc:89:89:f0:21:93:e8:f6: 58:f0:d6:e9:b4:25:92:82:c2:c4:ea:64:b6:20:65:36:1a:bd: b8:07:2e:4a:e8:72:f6:47:33:7c:0b:ae:31:8f:bc:9d:ac:5e: dc:46:ad:f3:df:b6:83:bb:8d:92:2e:89:2e:bc:14:00:e3:67: 3e:f7:ac:85:37:09:9a:17:42:ea:a3:a1:80:97:84:4d:e6:1b: f1:85:7c:1e:5d:d7:91:79:f3:18:de:af:51:20:ab:f5:26:0c: 5e:d2:bf:58:a3:a0:b8:c3:90:7b:ba:2d:44:b9:d4:2f:d7:5d: c3:01:b8:8f:8b:75:fc:fc:e3:6e:54:05:83:a1:2d:13:46:ac: e5:8c:bf:16:27:54:67:4b:9b:99:88:b3:a6:3d:92:06:0d:22: b6:8e:37:68:88:bd:b7:a0:5c:f9:44:a7:fc:2c:1c:36:54:b1: 05:48:5d:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsndwpEfVGvVEFcrI/jjjoXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2NjlmMWMyMTM3MGM0NGRmZDEwZTJhZjY4OGM4YzRlMGVh MTI5NTUwHhcNMjUxMjE2MTQwMTExWhcNMjUxMjE3MTQwMTExWjAzMTEwLwYDVQQD EygwNmU0NzZiMTI1ZTU2MWIwNDRiZTRkZmFlNTQ0Y2VlY2I0OTQ2NTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjSDFsGH3nqc3VIBnEbDyfBi39nw d7LVOICQ3uNCHKbmtwwMlbvr+SMg9C+Zj+zG3GWQ3J8PSEG1wAXTZ/AdHYwymqs7 GQmnAKzOp9VExyxZ2YxFCvW23iwCYOq9cZlRZOG7eNfqBjNaD1NFMSXrNor6Msmj 0daST4ILLyC7KlhNqgHtNIXEsPTnp1xb4Jdgay7lG4aYh8fUyuxjmaxtZWq01ElL Sd+pcnVi14r8cGpCojdra8yGWESl+H+Lhhu9LuDap6Ga2E5TDqbwg3ZNm4hClQvz 2AU5rT5hg3+KR5j/ZMNwNMVWPE6OPsZ5ARziC1Md7baoiGdqDmlnujiIbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAbkdrEl5WGwRL5N+uVEzuy0lGVEMB8GA1UdIwQY MBaAFKZp8cITcMRN/RDir2iMjE4OoSlVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lN2I0MGMtNDE0Yi00NzNhLWI4Yzct YjdiMTQ4MTYyNWIxLzEvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lN2I0MGMtNDE0Yi00NzNhLWI4YzctYjdiMTQ4MTYyNWIx LzEvcG1ueHdoTnd4RTM5RU9LdmFJeU1UZzZoS1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOs52WP4D PVwlRtlz2vcGuSC4yn5Yj1tmInUilfIExQ4ID155MbZYugc67raJoTXN407DGuN6 MHO4x4gTGD+/LmWuZ08L+gNM9s/OpI+morNpA9yJifAhk+j2WPDW6bQlkoLCxOpk tiBlNhq9uAcuSuhy9kczfAuuMY+8naxe3Eat89+2g7uNki6JLrwUAONnPveshTcJ mhdC6qOhgJeETeYb8YV8Hl3XkXnzGN6vUSCr9SYMXtK/WKOguMOQe7otRLnUL9dd wwG4j4t1/PzjblQFg6EtE0as5Yy/FidUZ0ubmYizpj2SBg0ito43aIi9t6Bc+USn /CwcNlSxBUhdEA== -----END CERTIFICATE-----Generated at Tue Dec 16 18:56:29 2025 by rpki-client