This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft File: pMK1k9mMCS_TCmAepdJEqr08sU0.mft (raw, json) Hash identifier: pJhuEDGkQztYi0CZAHQDKBjXS6K/jIT6jnW6QSThjnw= Subject key identifier: FD:06:71:8D:9B:49:31:30:09:CA:86:42:BF:8D:B9:2B:E7:72:1C:66 Authority key identifier: A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D Certificate issuer: /CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d Certificate serial: 019B35699D49F36CEB8FD029F42A83466595 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft Manifest number: 117F Signing time: Fri 19 Dec 2025 07:01:12 +0000 Manifest this update: Fri 19 Dec 2025 07:01:12 +0000 Manifest next update: Sat 20 Dec 2025 07:01:12 +0000 Files and hashes: 1: U7nNEW5XGU3Qw3Z5TlXa8n1A0Xo.roa (hash: El8KNdvpLmelwHnPspzpd+ZkXP2SnewzZSQOjMbCymQ=) 2: pMK1k9mMCS_TCmAepdJEqr08sU0.crl (hash: 8q6IrInxIl/lPdPAWmpl36kE6H7BUuKqM7dwndZ55RI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:9d:49:f3:6c:eb:8f:d0:29:f4:2a:83:46:65:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4c2b593d98c092fd30a601ea5d244aabd3cb14d Validity Not Before: Dec 19 07:01:12 2025 GMT Not After : Dec 20 07:01:12 2025 GMT Subject: CN=fd06718d9b49313009ca8642bf8db92be7721c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:a1:64:e5:5f:25:24:19:3c:67:32:2e:d4: e1:ed:50:33:5c:07:57:17:f2:28:80:d3:91:cb:af: 53:5f:34:0b:4b:f8:e6:f0:0f:32:87:f9:20:cc:f6: 04:31:f0:7b:bb:72:7a:91:78:24:d6:49:74:04:8f: ab:2b:7b:8c:48:1c:0f:f7:f7:57:2f:19:3a:23:ee: cc:8e:ef:f0:81:31:e8:4f:db:3e:4f:67:f9:6a:28: f4:b0:51:2e:93:d0:27:b3:f0:99:9e:a5:49:5b:d3: 8d:86:f6:0f:9d:75:25:ec:29:bb:ce:09:72:76:a6: bc:0a:03:2a:d0:ef:d1:f2:3e:a1:ff:78:53:db:58: ec:46:1a:c5:99:82:c9:15:e3:16:a1:90:18:0d:aa: 97:20:ad:5a:99:a0:0a:6a:92:06:66:bc:1e:cb:a7: 75:c9:42:ea:8f:45:0a:14:93:3c:1a:1f:a2:87:58: 89:fb:aa:b5:08:ae:fd:67:53:f6:96:c3:24:8f:d0: 9b:c2:26:c3:bb:a1:80:70:90:30:25:20:1a:18:4b: f8:5e:fe:9a:98:3b:9e:2d:4a:1b:1b:ed:a1:c8:c0: 66:44:52:35:1b:ad:f5:9e:ba:d6:96:56:d1:1d:c6: 29:c6:76:dd:cb:55:c7:d4:1e:4f:01:35:4b:fd:14: 58:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:06:71:8D:9B:49:31:30:09:CA:86:42:BF:8D:B9:2B:E7:72:1C:66 X509v3 Authority Key Identifier: keyid:A4:C2:B5:93:D9:8C:09:2F:D3:0A:60:1E:A5:D2:44:AA:BD:3C:B1:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pMK1k9mMCS_TCmAepdJEqr08sU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/9422b0-dc79-4c71-bfd8-fcf99470b985/1/pMK1k9mMCS_TCmAepdJEqr08sU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:08:39:d5:88:aa:50:2b:62:a6:f1:ac:15:a4:74:20:15:13: ff:61:54:4c:6f:97:c6:bf:bd:6b:e0:ac:74:78:09:0c:5c:ed: 5c:de:7a:36:b0:c7:f6:d5:ba:d5:e7:db:f9:0d:c3:01:99:98: 05:cf:85:a3:76:c9:81:92:ba:d7:94:9a:97:e0:95:19:0b:aa: c2:ac:24:83:77:86:80:77:bb:28:42:10:49:c6:37:5e:50:80: 9a:ea:e5:2e:98:b3:8b:15:55:f6:01:d5:eb:be:37:6d:ac:32: a6:2c:e2:39:ff:71:2b:e7:2a:89:03:7f:16:10:33:68:a9:88: b3:81:02:4e:09:52:a4:f1:21:b0:f3:08:8c:b4:e5:25:8f:18: 2b:da:27:56:98:24:c1:8a:10:7c:9c:d8:24:30:35:db:c2:9b: 50:4c:8f:63:ed:01:25:ab:87:3a:67:35:47:c3:b5:ef:e8:83: 9b:00:c6:03:c3:cf:b7:a0:17:be:1b:f5:50:b6:53:23:06:97: 3f:3e:35:1a:4c:0c:6d:11:ad:2a:1b:1f:bd:5b:93:2e:0a:29: 42:7a:8c:98:1d:40:b7:02:e5:59:da:b1:b5:8f:b0:97:ce:16: 9e:a8:93:ac:f6:68:b4:9f:45:39:ac:b5:a3:72:e2:da:1e:62: 73:28:09:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aZ1J82zrj9Ap9CqDRmWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YzJiNTkzZDk4YzA5MmZkMzBhNjAxZWE1ZDI0NGFhYmQz Y2IxNGQwHhcNMjUxMjE5MDcwMTEyWhcNMjUxMjIwMDcwMTEyWjAzMTEwLwYDVQQD EyhmZDA2NzE4ZDliNDkzMTMwMDljYTg2NDJiZjhkYjkyYmU3NzIxYzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2WhZOVfJSQZPGcyLtTh7VAzXAdX F/IogNORy69TXzQLS/jm8A8yh/kgzPYEMfB7u3J6kXgk1kl0BI+rK3uMSBwP9/dX Lxk6I+7Mju/wgTHoT9s+T2f5aij0sFEuk9Ans/CZnqVJW9ONhvYPnXUl7Cm7zgly dqa8CgMq0O/R8j6h/3hT21jsRhrFmYLJFeMWoZAYDaqXIK1amaAKapIGZrwey6d1 yULqj0UKFJM8Gh+ih1iJ+6q1CK79Z1P2lsMkj9CbwibDu6GAcJAwJSAaGEv4Xv6a mDueLUobG+2hyMBmRFI1G631nrrWllbRHcYpxnbdy1XH1B5PATVL/RRYzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0GcY2bSTEwCcqGQr+NuSvnchxmMB8GA1UdIwQY MBaAFKTCtZPZjAkv0wpgHqXSRKq9PLFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE1LMWs5bU1DU19UQ21BZXBkSkVxcjA4c1UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85NDIyYjAtZGM3OS00YzcxLWJmZDgt ZmNmOTk0NzBiOTg1LzEvcE1LMWs5bU1DU19UQ21BZXBkSkVxcjA4c1UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85NDIyYjAtZGM3OS00YzcxLWJmZDgtZmNmOTk0NzBiOTg1 LzEvcE1LMWs5bU1DU19UQ21BZXBkSkVxcjA4c1UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwg51Yiq UCtipvGsFaR0IBUT/2FUTG+Xxr+9a+CsdHgJDFztXN56NrDH9tW61efb+Q3DAZmY Bc+Fo3bJgZK615Sal+CVGQuqwqwkg3eGgHe7KEIQScY3XlCAmurlLpizixVV9gHV 6743bawypiziOf9xK+cqiQN/FhAzaKmIs4ECTglSpPEhsPMIjLTlJY8YK9onVpgk wYoQfJzYJDA128KbUEyPY+0BJauHOmc1R8O17+iDmwDGA8PPt6AXvhv1ULZTIwaX Pz41GkwMbRGtKhsfvVuTLgopQnqMmB1AtwLlWdqxtY+wl84WnqiTrPZotJ9FOay1 o3Li2h5icygJQA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:40:56 2025 by rpki-client