This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft File: mnF-0dxIgETl4qsAdUM1WM_ejIU.mft (raw, json) Hash identifier: 9Df8plWrKW5CGvtaBmEnxF6T0NtRIe4TVrM5PpsGZPU= Subject key identifier: E7:39:A2:68:BD:61:5D:19:7E:E0:94:F1:74:51:12:8A:5D:C7:7F:54 Authority key identifier: 9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85 Certificate issuer: /CN=9a717ed1dc488044e5e2ab0075433558cfde8c85 Certificate serial: 019AF3895636BA4AF3F12B1A2DB22EE9C4BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft Manifest number: 064F Signing time: Sat 06 Dec 2025 12:00:55 +0000 Manifest this update: Sat 06 Dec 2025 12:00:55 +0000 Manifest next update: Sun 07 Dec 2025 12:00:55 +0000 Files and hashes: 1: 1-I5euRLEKsr7FF-4VskQLdu5Wm0.roa (hash: 4AXnB9gGffBa+5UGJwTlfxl3dTLBtwfWaDwofBbf+WY=) 2: MtoIhFzzjtMtI4g5kxOun27y3IM.roa (hash: DlZC6F8VIFuzmjWhSIX/LygNaAgpAHPicElZhEshqgM=) 3: mnF-0dxIgETl4qsAdUM1WM_ejIU.crl (hash: R1EtMvZ9bV9yYxbF3EZ1wZOAT+MD7Umtgs/8tW/rXOw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:56:36:ba:4a:f3:f1:2b:1a:2d:b2:2e:e9:c4:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a717ed1dc488044e5e2ab0075433558cfde8c85 Validity Not Before: Dec 6 12:00:55 2025 GMT Not After : Dec 7 12:00:55 2025 GMT Subject: CN=e739a268bd615d197ee094f17451128a5dc77f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:41:f1:1d:9a:d0:b8:0f:5a:ab:1c:a5:5a:34: e3:58:c8:46:fb:9e:94:86:7a:e8:e6:fe:3a:3d:fe: 05:f2:41:f4:df:5c:42:12:b1:e4:49:23:b8:7e:b2: 22:4b:1d:fd:9b:0d:a9:1f:ed:86:53:d2:c9:7c:c3: 0a:5d:7e:8c:8d:b4:45:a7:50:33:69:0b:53:13:7c: 9a:08:89:51:dd:1d:5c:20:cb:08:ca:c3:c6:47:38: 24:81:eb:3c:ce:a4:09:5d:79:01:39:15:f4:69:a4: c4:0c:99:63:26:95:e5:d4:49:50:44:98:58:8b:8a: 1c:b8:17:e0:e9:1b:b7:40:11:42:03:9b:10:4d:d9: 9b:6d:1f:6d:bf:27:ca:4f:5a:99:98:fe:75:11:45: db:61:4d:75:13:7a:31:38:dc:fe:87:b1:28:45:db: 4b:93:63:f0:26:9b:7b:2b:a8:61:9b:01:c2:29:3b: cf:fd:ac:74:21:5e:6a:c1:66:59:88:d9:4e:de:06: c8:d7:42:bf:16:ee:2e:31:88:60:c0:e2:6a:2e:e0: aa:69:11:df:6a:fc:e0:85:d3:2b:c1:00:8d:18:27: 52:62:41:57:c0:9f:1f:8f:fb:95:2a:91:ce:69:20: d3:04:6a:b9:89:30:9f:bd:8a:5e:38:fc:11:c1:a8: f7:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:39:A2:68:BD:61:5D:19:7E:E0:94:F1:74:51:12:8A:5D:C7:7F:54 X509v3 Authority Key Identifier: keyid:9A:71:7E:D1:DC:48:80:44:E5:E2:AB:00:75:43:35:58:CF:DE:8C:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnF-0dxIgETl4qsAdUM1WM_ejIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d261c1-d7f3-4fe8-abc6-1094391669ef/1/mnF-0dxIgETl4qsAdUM1WM_ejIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:c2:28:5a:7b:a5:3c:c7:82:a0:91:b0:6c:ff:2e:2b:78:e0: 52:ff:e4:f1:23:f3:ca:33:cd:ae:5e:0f:40:d5:1a:f1:76:69: b9:64:95:c0:bb:8d:1d:08:75:f3:8a:d7:b8:c2:11:78:98:4d: 95:35:e7:95:33:77:d9:8b:ff:cf:57:9f:a1:aa:a1:fa:b4:2c: b2:c0:e6:5e:25:68:0a:4e:15:76:ab:2b:70:9b:b9:76:cd:97: 36:14:b0:e6:42:94:b3:9a:0b:db:50:a7:2f:70:a1:e6:b2:c3: f5:e5:b8:e8:04:ab:ce:e7:de:b3:1f:b0:18:fd:f8:2d:74:77: 13:87:5c:60:cc:b2:47:2a:93:5f:3a:23:8f:e7:b2:35:22:c6: e4:4a:e2:ff:af:ca:a9:df:1a:fc:2c:cd:af:94:f6:92:5d:87: 75:bd:bc:54:09:05:1f:7f:3d:67:a4:e5:f4:6c:b9:6e:cf:d2: fb:37:f1:b5:c7:b8:61:a1:6f:0e:e3:95:8f:dc:72:79:81:36: 4b:fa:f0:43:b0:7a:60:fe:43:3b:c9:bb:d8:84:49:4c:d8:24: 8c:06:0a:20:00:52:9e:ca:80:72:bc:31:f2:df:ac:e7:af:ac: 6e:23:06:5e:7b:61:42:b0:12:81:77:a3:12:3d:9e:c4:96:4c: 5a:e8:00:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziVY2ukrz8SsaLbIu6cS7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNzE3ZWQxZGM0ODgwNDRlNWUyYWIwMDc1NDMzNTU4Y2Zk ZThjODUwHhcNMjUxMjA2MTIwMDU1WhcNMjUxMjA3MTIwMDU1WjAzMTEwLwYDVQQD EyhlNzM5YTI2OGJkNjE1ZDE5N2VlMDk0ZjE3NDUxMTI4YTVkYzc3ZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30HxHZrQuA9aqxylWjTjWMhG+56U hnro5v46Pf4F8kH031xCErHkSSO4frIiSx39mw2pH+2GU9LJfMMKXX6MjbRFp1Az aQtTE3yaCIlR3R1cIMsIysPGRzgkges8zqQJXXkBORX0aaTEDJljJpXl1ElQRJhY i4ocuBfg6Ru3QBFCA5sQTdmbbR9tvyfKT1qZmP51EUXbYU11E3oxONz+h7EoRdtL k2PwJpt7K6hhmwHCKTvP/ax0IV5qwWZZiNlO3gbI10K/Fu4uMYhgwOJqLuCqaRHf avzghdMrwQCNGCdSYkFXwJ8fj/uVKpHOaSDTBGq5iTCfvYpeOPwRwaj37QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOc5omi9YV0ZfuCU8XRREopdx39UMB8GA1UdIwQY MBaAFJpxftHcSIBE5eKrAHVDNVjP3oyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbW5GLTBkeElnRVRsNHFzQWRVTTFXTV9laklVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kMjYxYzEtZDdmMy00ZmU4LWFiYzYt MTA5NDM5MTY2OWVmLzEvbW5GLTBkeElnRVRsNHFzQWRVTTFXTV9laklVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kMjYxYzEtZDdmMy00ZmU4LWFiYzYtMTA5NDM5MTY2OWVm LzEvbW5GLTBkeElnRVRsNHFzQWRVTTFXTV9laklVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZsIoWnul PMeCoJGwbP8uK3jgUv/k8SPzyjPNrl4PQNUa8XZpuWSVwLuNHQh184rXuMIReJhN lTXnlTN32Yv/z1efoaqh+rQsssDmXiVoCk4VdqsrcJu5ds2XNhSw5kKUs5oL21Cn L3Ch5rLD9eW46ASrzufesx+wGP34LXR3E4dcYMyyRyqTXzojj+eyNSLG5Eri/6/K qd8a/CzNr5T2kl2Hdb28VAkFH389Z6Tl9Gy5bs/S+zfxtce4YaFvDuOVj9xyeYE2 S/rwQ7B6YP5DO8m72IRJTNgkjAYKIABSnsqAcrwx8t+s56+sbiMGXnthQrASgXej Ej2exJZMWugA1w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:53:16 2025 by rpki-client