This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft File: MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft (raw, json) Hash identifier: xjIdyT/DArIZbLd1GsNh2buuL+6k0H53apKcGUxrfo4= Subject key identifier: 2B:2D:DC:99:6E:2B:6C:A5:F8:13:1D:00:96:8F:E5:CC:35:0E:84:24 Authority key identifier: 30:A2:42:CF:6C:15:29:AA:A0:69:33:67:E4:4C:84:A0:7D:8B:0C:9F Certificate issuer: /CN=30a242cf6c1529aaa0693367e44c84a07d8b0c9f Certificate serial: 019AF50BA2B99AB24F4F76B5EED190A3260D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft Manifest number: 0AEA Signing time: Sat 06 Dec 2025 19:02:51 +0000 Manifest this update: Sat 06 Dec 2025 19:02:51 +0000 Manifest next update: Sun 07 Dec 2025 19:02:51 +0000 Files and hashes: 1: MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl (hash: cAfaml6fYUEHuo2V5QJohkNBDsefmQHEcgOLntUzuqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0b:a2:b9:9a:b2:4f:4f:76:b5:ee:d1:90:a3:26:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a242cf6c1529aaa0693367e44c84a07d8b0c9f Validity Not Before: Dec 6 19:02:51 2025 GMT Not After : Dec 7 19:02:51 2025 GMT Subject: CN=2b2ddc996e2b6ca5f8131d00968fe5cc350e8424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:53:0f:48:3e:25:cd:5f:0b:d3:0e:26:02: df:a9:aa:2f:2d:29:a9:6f:91:42:9f:7f:04:c5:f6: 88:da:1a:ff:7b:bb:87:3a:0e:e1:81:2c:21:e4:e9: a1:02:32:51:bf:9d:31:a0:81:61:e9:4d:6c:5b:99: 40:79:72:10:42:13:f8:d9:f8:e9:68:2e:fa:4f:2d: d6:13:3c:2c:1d:83:76:4f:eb:49:46:39:e9:95:59: 5d:11:6d:92:1e:9d:a3:69:d2:c7:87:35:b3:36:a4: 67:49:34:f8:d2:2a:fd:0b:cd:9e:78:a1:f8:90:fb: ae:ac:c7:dd:df:9e:a5:d3:36:75:3b:24:2f:1f:59: 54:b3:f1:52:59:59:c7:10:4a:49:9e:63:bc:87:24: 98:cd:33:53:0a:6c:33:bc:8f:f7:ad:d4:b0:83:70: 08:66:2e:e2:cc:46:39:b8:80:9b:bc:54:3a:72:7c: 40:e9:7f:5f:75:77:cc:d2:63:de:7e:4c:f3:71:96: 6d:eb:cc:4c:1a:b2:a1:f6:33:3f:17:53:41:51:7f: ef:8d:1d:78:17:ad:23:4e:f1:54:bc:35:a2:77:ce: fc:f5:f7:cb:a8:1c:96:55:25:c1:a6:c8:49:1b:ec: 0e:2d:f9:ca:94:42:a2:c7:e5:ef:c0:1b:d7:55:5c: 5f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2D:DC:99:6E:2B:6C:A5:F8:13:1D:00:96:8F:E5:CC:35:0E:84:24 X509v3 Authority Key Identifier: keyid:30:A2:42:CF:6C:15:29:AA:A0:69:33:67:E4:4C:84:A0:7D:8B:0C:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/17cd86-7fbb-408f-a28c-fa2676fe38fd/1/MKJCz2wVKaqgaTNn5EyEoH2LDJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:de:8e:ad:da:f0:64:d8:35:24:db:4a:d3:fb:aa:bb:72:56: 02:2c:01:eb:2c:ee:ba:d6:c7:84:e7:40:ef:28:d0:f1:4f:93: 2a:c3:75:e2:fb:76:9f:1b:20:c8:1c:a2:91:3a:dc:ed:3e:18: 13:c6:b5:1a:18:dc:19:58:1d:9a:ab:9d:37:7c:ca:e8:ba:38: 06:17:d9:5c:b1:20:66:5b:fe:23:88:fb:2c:55:e1:27:1a:5e: ce:e6:c6:fc:a0:8c:26:f5:2c:7a:25:0f:22:05:1c:61:27:51: 2b:63:29:b2:fb:45:84:f6:dc:3a:a4:d6:39:f2:f9:cf:e0:ce: 2f:1a:63:b2:db:11:4b:d3:aa:67:3d:92:79:3c:61:8b:50:18: d9:25:74:91:c5:dc:42:02:01:36:8f:89:25:98:5c:a6:fe:40: 1c:2b:be:0c:54:9d:9f:fb:56:f7:93:45:95:74:c2:57:19:78: 07:e0:eb:46:b0:73:37:10:9a:4c:65:97:9b:27:99:df:f1:e0: 19:11:94:11:6c:23:a4:08:ec:7c:6b:c1:da:f5:e7:fc:6f:17: 57:f4:d7:04:d8:9c:48:5e:1c:22:7c:63:a8:4a:d6:42:6c:04: 92:a4:26:74:4e:e3:45:6c:df:47:58:97:7f:c9:1b:09:7c:ee: 7e:ba:bd:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1C6K5mrJPT3a17tGQoyYNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYTI0MmNmNmMxNTI5YWFhMDY5MzM2N2U0NGM4NGEwN2Q4 YjBjOWYwHhcNMjUxMjA2MTkwMjUxWhcNMjUxMjA3MTkwMjUxWjAzMTEwLwYDVQQD EygyYjJkZGM5OTZlMmI2Y2E1ZjgxMzFkMDA5NjhmZTVjYzM1MGU4NDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVtTD0g+Jc1fC9MOJgLfqaovLSmp b5FCn38ExfaI2hr/e7uHOg7hgSwh5OmhAjJRv50xoIFh6U1sW5lAeXIQQhP42fjp aC76Ty3WEzwsHYN2T+tJRjnplVldEW2SHp2jadLHhzWzNqRnSTT40ir9C82eeKH4 kPuurMfd356l0zZ1OyQvH1lUs/FSWVnHEEpJnmO8hySYzTNTCmwzvI/3rdSwg3AI Zi7izEY5uICbvFQ6cnxA6X9fdXfM0mPefkzzcZZt68xMGrKh9jM/F1NBUX/vjR14 F60jTvFUvDWid8789ffLqByWVSXBpshJG+wOLfnKlEKix+XvwBvXVVxf+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCst3JluK2yl+BMdAJaP5cw1DoQkMB8GA1UdIwQY MBaAFDCiQs9sFSmqoGkzZ+RMhKB9iwyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtKQ3oyd1ZLYXFnYVRObjVFeUVvSDJMREo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xN2NkODYtN2ZiYi00MDhmLWEyOGMt ZmEyNjc2ZmUzOGZkLzEvTUtKQ3oyd1ZLYXFnYVRObjVFeUVvSDJMREo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xN2NkODYtN2ZiYi00MDhmLWEyOGMtZmEyNjc2ZmUzOGZk LzEvTUtKQ3oyd1ZLYXFnYVRObjVFeUVvSDJMREo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAht6Ordrw ZNg1JNtK0/uqu3JWAiwB6yzuutbHhOdA7yjQ8U+TKsN14vt2nxsgyByikTrc7T4Y E8a1GhjcGVgdmqudN3zK6Lo4BhfZXLEgZlv+I4j7LFXhJxpezubG/KCMJvUseiUP IgUcYSdRK2MpsvtFhPbcOqTWOfL5z+DOLxpjstsRS9OqZz2SeTxhi1AY2SV0kcXc QgIBNo+JJZhcpv5AHCu+DFSdn/tW95NFlXTCVxl4B+DrRrBzNxCaTGWXmyeZ3/Hg GRGUEWwjpAjsfGvB2vXn/G8XV/TXBNicSF4cInxjqErWQmwEkqQmdE7jRWzfR1iX f8kbCXzufrq9dg== -----END CERTIFICATE-----Generated at Sun Dec 7 03:42:44 2025 by rpki-client