This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
File: mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft (raw, json)
Hash identifier: 4ilFJRtTdo0lwTUZaW6JLIUKwY5URvb9W5mE/LsXYnE=
Subject key identifier: 0B:86:BC:5F:F7:9F:13:AF:87:41:92:92:A8:B1:18:66:2A:D5:38:4F
Authority key identifier: 98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
Certificate issuer: /CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Certificate serial: 019AF509C30B7158FB17B29AD33F95B6CC61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
Manifest number: 0B2C
Signing time: Sat 06 Dec 2025 19:00:48 +0000
Manifest this update: Sat 06 Dec 2025 19:00:48 +0000
Manifest next update: Sun 07 Dec 2025 19:00:48 +0000
Files and hashes: 1: 30qNUm4LVV2JzJAozjpjCljWLl8.roa (hash: xrG/y+AM3EYc5/EtWlaqcCc/K9J1cl96ejgIPJZYD9U=)
2: Z6_bYbvmyerAM_VgnIaDcW67oTI.roa (hash: QWDvfYg2hEe0SCxsF7DniMhJuC7NKbaUI8wFEj7S2ns=)
3: mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl (hash: ml2PURW0KqASydBeKnQ0xMNJwFIMuFI/T9ANs0E1f+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f5:09:c3:0b:71:58:fb:17:b2:9a:d3:3f:95:b6:cc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98c9c3189bec1379311bd1353fa9749a68dd992d
Validity
Not Before: Dec 6 19:00:48 2025 GMT
Not After : Dec 7 19:00:48 2025 GMT
Subject: CN=0b86bc5ff79f13af87419292a8b118662ad5384f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:bb:17:f3:4c:3e:fa:69:34:62:b2:71:78:
9d:04:a2:0e:b1:3a:47:64:dd:8c:30:27:a2:5a:11:
35:1d:42:43:08:f1:04:08:ec:6c:c6:6f:c2:32:f8:
e4:a6:2c:ab:9d:69:63:44:31:36:1f:30:46:8a:6c:
06:8c:06:19:f8:65:5a:f9:dc:df:2d:a0:85:a8:82:
a3:b7:23:1a:9e:b3:5e:78:69:82:45:9b:f3:bf:e3:
55:1e:b7:d0:ce:e8:97:10:5d:97:a0:2f:57:6a:1b:
8a:69:22:f4:e8:7c:ba:b7:c2:a1:ef:77:a3:3e:4a:
6c:90:36:6d:73:39:e8:bd:cb:9a:8b:cf:16:bc:27:
3b:f1:04:9c:b9:a8:92:81:a8:38:e9:26:16:c2:44:
45:20:59:dd:c1:de:89:24:ae:53:29:7e:ad:2b:de:
5e:71:75:f1:e4:77:df:13:3c:3f:33:78:a0:2a:e8:
68:ab:37:fc:4d:e0:fc:fc:9c:93:4e:f9:74:b0:99:
39:d4:a4:f1:34:6d:d6:0b:70:5c:4c:ee:8e:41:0d:
df:3e:00:2d:69:b5:19:8a:47:64:73:05:a6:72:3f:
01:82:bc:b9:d2:1c:62:fe:48:60:5f:28:45:2c:08:
30:66:d6:2f:f6:31:5c:7c:59:8e:c4:07:59:2d:1f:
24:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:86:BC:5F:F7:9F:13:AF:87:41:92:92:A8:B1:18:66:2A:D5:38:4F
X509v3 Authority Key Identifier:
keyid:98:C9:C3:18:9B:EC:13:79:31:1B:D1:35:3F:A9:74:9A:68:DD:99:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mMnDGJvsE3kxG9E1P6l0mmjdmS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/70139d-1e75-40b5-916a-9c816a40490e/1/mMnDGJvsE3kxG9E1P6l0mmjdmS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:df:c2:45:94:ae:33:d6:de:30:08:d5:9c:ba:1a:6a:00:ca:
e1:f2:57:b5:aa:03:71:89:c5:c7:03:26:4b:8b:a3:6d:7c:03:
2e:99:16:d1:7c:f0:ca:bf:f3:3f:35:0a:13:51:a0:22:2c:d0:
c2:71:46:47:e3:86:9f:9c:72:4b:f3:f0:89:fb:bd:34:e1:36:
d6:c3:75:0c:bd:b1:9f:aa:00:55:c7:6d:47:1c:12:58:a7:4a:
a8:ac:8e:ba:c0:c8:2f:a3:60:9a:ba:4d:d5:e6:b0:82:9c:73:
ce:c0:e6:3c:8c:68:40:09:bd:6f:9d:d1:60:ce:8a:53:0d:fe:
fb:bc:34:d5:31:e0:b8:75:52:50:0c:35:fa:e0:66:dd:62:4f:
7e:a3:34:05:9e:d1:f7:d3:a4:5a:b5:5a:17:44:b7:62:09:82:
18:b2:2c:75:1f:30:8d:c4:a1:15:f2:ed:d4:f8:82:e0:09:2f:
63:cf:25:51:e6:35:98:55:08:57:0e:45:e4:5e:36:d8:1e:09:
e3:e9:26:58:1c:a3:4d:90:1c:cf:d1:11:62:fd:4a:a3:0f:64:
94:0b:31:c2:cf:5d:2a:71:30:18:ac:e8:a5:0e:77:fb:6c:df:
1d:be:28:22:30:6b:9d:6f:c3:22:82:f3:42:40:1e:fc:4c:8e:
6b:d8:91:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZr1CcMLcVj7F7Ka0z+VtsxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4YzljMzE4OWJlYzEzNzkzMTFiZDEzNTNmYTk3NDlhNjhk
ZDk5MmQwHhcNMjUxMjA2MTkwMDQ4WhcNMjUxMjA3MTkwMDQ4WjAzMTEwLwYDVQQD
EygwYjg2YmM1ZmY3OWYxM2FmODc0MTkyOTJhOGIxMTg2NjJhZDUzODRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFy7F/NMPvppNGKycXidBKIOsTpH
ZN2MMCeiWhE1HUJDCPEECOxsxm/CMvjkpiyrnWljRDE2HzBGimwGjAYZ+GVa+dzf
LaCFqIKjtyManrNeeGmCRZvzv+NVHrfQzuiXEF2XoC9XahuKaSL06Hy6t8Kh73ej
PkpskDZtcznovcuai88WvCc78QScuaiSgag46SYWwkRFIFndwd6JJK5TKX6tK95e
cXXx5HffEzw/M3igKuhoqzf8TeD8/JyTTvl0sJk51KTxNG3WC3BcTO6OQQ3fPgAt
abUZikdkcwWmcj8Bgry50hxi/khgXyhFLAgwZtYv9jFcfFmOxAdZLR8kwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuGvF/3nxOvh0GSkqixGGYq1ThPMB8GA1UdIwQY
MBaAFJjJwxib7BN5MRvRNT+pdJpo3ZktMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83MDEzOWQtMWU3NS00MGI1LTkxNmEt
OWM4MTZhNDA0OTBlLzEvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83MDEzOWQtMWU3NS00MGI1LTkxNmEtOWM4MTZhNDA0OTBl
LzEvbU1uREdKdnNFM2t4RzlFMVA2bDBtbWpkbVMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABd/CRZSu
M9beMAjVnLoaagDK4fJXtaoDcYnFxwMmS4ujbXwDLpkW0Xzwyr/zPzUKE1GgIizQ
wnFGR+OGn5xyS/Pwifu9NOE21sN1DL2xn6oAVcdtRxwSWKdKqKyOusDIL6NgmrpN
1eawgpxzzsDmPIxoQAm9b53RYM6KUw3++7w01THguHVSUAw1+uBm3WJPfqM0BZ7R
99OkWrVaF0S3YgmCGLIsdR8wjcShFfLt1PiC4AkvY88lUeY1mFUIVw5F5F422B4J
4+kmWByjTZAcz9ERYv1Kow9klAsxws9dKnEwGKzopQ53+2zfHb4oIjBrnW/DIoLz
QkAe/EyOa9iR9A==
-----END CERTIFICATE-----
Generated at Sun Dec 7 00:18:22 2025 by rpki-client