This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json) Hash identifier: JJc12KHpLAMXkk1gqaSzIM6+p/YGbFBhEdkQXgsZNRk= Subject key identifier: B3:E6:7B:8B:7F:6F:47:AB:CD:63:67:56:85:37:86:AA:EB:20:3E:66 Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11 Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611 Certificate serial: 019AF50A3F153119065558137AC503C18555 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft Manifest number: 12F7 Signing time: Sat 06 Dec 2025 19:01:20 +0000 Manifest this update: Sat 06 Dec 2025 19:01:20 +0000 Manifest next update: Sun 07 Dec 2025 19:01:20 +0000 Files and hashes: 1: KkXU6YkVywPte3FQKPTwmXq43Jw.roa (hash: +grv15uxretevWYIDb50yFoisYnL85l43pH++WpX3xI=) 2: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: hBxuLbNpY3BBcnoVD57kA3TsQhC5uf70RVlUHq7/SZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:3f:15:31:19:06:55:58:13:7a:c5:03:c1:85:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611 Validity Not Before: Dec 6 19:01:20 2025 GMT Not After : Dec 7 19:01:20 2025 GMT Subject: CN=b3e67b8b7f6f47abcd636756853786aaeb203e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d2:83:65:fc:a6:61:6b:84:e4:6f:0c:99:03: 34:fd:3c:b4:1d:86:77:68:63:9d:24:e0:79:33:65: e9:4b:04:bf:04:14:71:54:44:b1:6e:12:37:ae:ba: 18:95:37:83:09:31:a3:75:9e:b5:b8:d8:c0:dd:8c: 4a:11:1f:eb:22:f9:cb:15:57:d1:ff:f0:fc:7e:84: be:0f:7a:b4:50:23:9d:58:ce:1b:49:39:be:e7:1c: 7e:4a:e6:10:4d:e5:39:c3:bd:34:15:ee:d0:b2:bd: 67:ff:d5:57:7e:f7:3e:97:e6:ca:73:68:29:32:7c: 21:7b:37:2a:7e:a7:11:03:44:c3:53:a3:c8:35:2c: 65:0a:06:b9:36:45:01:b2:b6:63:f3:63:94:ac:f0: 94:eb:61:86:12:7a:0e:2b:7b:60:ea:15:c6:13:77: c4:17:6f:51:ef:b2:4d:6a:12:6f:e6:f4:63:ff:63: ce:7d:76:e0:59:f8:59:a9:d9:41:a4:76:5f:f4:02: 7d:86:77:5c:a7:f7:a0:56:b8:9a:d7:99:f3:ff:fe: 34:e5:2d:af:c9:21:59:ed:9f:c6:a3:16:0c:c4:bd: 22:a6:cd:9c:e4:d2:b5:ee:2b:dd:54:54:f3:cb:4e: ce:f9:69:e4:bb:46:26:ae:24:ff:9b:d1:83:8a:ec: 7c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E6:7B:8B:7F:6F:47:AB:CD:63:67:56:85:37:86:AA:EB:20:3E:66 X509v3 Authority Key Identifier: keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:14:55:eb:46:fd:55:20:4c:26:87:59:00:d2:5d:58:4b:7b: 6a:53:25:2a:fd:72:dd:1e:1f:73:19:3d:08:85:13:c6:3c:03: 05:97:d2:04:b0:8e:f8:d5:f0:44:2d:b8:9d:40:bf:c0:9d:1c: 85:f3:60:f8:38:3e:f2:14:9c:60:12:84:ce:69:2e:ef:6e:69: 0b:e9:c8:d8:8e:7a:6a:c6:bb:98:29:47:f0:b4:f3:c2:13:12: e3:2e:b7:c9:5e:b9:17:99:ce:06:a6:86:06:26:aa:d2:c9:02: 2c:ce:5e:5f:11:7a:48:a1:d1:72:d9:d8:35:55:f6:78:43:9a: ff:a3:fa:8c:d9:a9:2e:06:c4:f2:5d:de:97:76:25:68:46:c9: 62:c3:9a:e6:99:28:2d:05:33:5f:0b:3c:d2:78:d5:2b:3f:54: d7:54:31:b4:3a:a7:6d:61:c8:a0:6a:bd:b3:3a:c7:9a:56:fc: b9:8e:6d:c6:fb:2f:16:30:26:c8:8e:42:0b:f9:7b:6e:33:a7: 30:b4:4d:9c:db:9c:c4:0c:ea:b2:ed:88:8d:db:c9:e6:8a:84: a3:ee:a4:8a:25:6a:03:1d:87:ff:94:88:6f:63:2f:b1:2b:ea: bf:ce:37:9c:e1:65:71:22:53:35:90:f5:90:aa:e6:62:00:f3: 46:98:e6:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cj8VMRkGVVgTesUDwYVVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YTk4N2M2Y2QwYTM2Zjk0ZGJlZjEwZWYyYTJjNjYwMjBh OTU2MTEwHhcNMjUxMjA2MTkwMTIwWhcNMjUxMjA3MTkwMTIwWjAzMTEwLwYDVQQD EyhiM2U2N2I4YjdmNmY0N2FiY2Q2MzY3NTY4NTM3ODZhYWViMjAzZTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNKDZfymYWuE5G8MmQM0/Ty0HYZ3 aGOdJOB5M2XpSwS/BBRxVESxbhI3rroYlTeDCTGjdZ61uNjA3YxKER/rIvnLFVfR //D8foS+D3q0UCOdWM4bSTm+5xx+SuYQTeU5w700Fe7Qsr1n/9VXfvc+l+bKc2gp MnwhezcqfqcRA0TDU6PINSxlCga5NkUBsrZj82OUrPCU62GGEnoOK3tg6hXGE3fE F29R77JNahJv5vRj/2POfXbgWfhZqdlBpHZf9AJ9hndcp/egVria15nz//405S2v ySFZ7Z/GoxYMxL0ips2c5NK17ivdVFTzy07O+Wnku0YmriT/m9GDiux8RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPme4t/b0erzWNnVoU3hqrrID5mMB8GA1UdIwQY MBaAFJiph8bNCjb5Tb7xDvKixmAgqVYRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUttSHhzMEtOdmxOdnZFTzhxTEdZQ0NwVmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hYjgzMDctNWY5Yy00OWM2LThhMGIt ZjNiNDU4MTlmMmIwLzEvbUttSHhzMEtOdmxOdnZFTzhxTEdZQ0NwVmhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hYjgzMDctNWY5Yy00OWM2LThhMGItZjNiNDU4MTlmMmIw LzEvbUttSHhzMEtOdmxOdnZFTzhxTEdZQ0NwVmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBRV60b9 VSBMJodZANJdWEt7alMlKv1y3R4fcxk9CIUTxjwDBZfSBLCO+NXwRC24nUC/wJ0c hfNg+Dg+8hScYBKEzmku725pC+nI2I56asa7mClH8LTzwhMS4y63yV65F5nOBqaG Biaq0skCLM5eXxF6SKHRctnYNVX2eEOa/6P6jNmpLgbE8l3el3YlaEbJYsOa5pko LQUzXws80njVKz9U11QxtDqnbWHIoGq9szrHmlb8uY5txvsvFjAmyI5CC/l7bjOn MLRNnNucxAzqsu2IjdvJ5oqEo+6kiiVqAx2H/5SIb2MvsSvqv843nOFlcSJTNZD1 kKrmYgDzRpjmkw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:57:09 2025 by rpki-client