This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft File: Mk73breQdOacczAs5MLgr0f0Uwc.mft (raw, json) Hash identifier: MLqeaczVmQEMBCz+CqyYLP1dHgdtXiniT4l+wM/b5NQ= Subject key identifier: 07:05:C5:ED:91:D0:20:1E:C6:4F:64:98:28:AA:8E:B8:85:CD:92:04 Authority key identifier: 32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07 Certificate issuer: /CN=324ef76eb79074e69c73302ce4c2e0af47f45307 Certificate serial: 019B2B1CEBCA179EBE6D7426196FC6FDB343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft Manifest number: 05C8 Signing time: Wed 17 Dec 2025 07:01:14 +0000 Manifest this update: Wed 17 Dec 2025 07:01:14 +0000 Manifest next update: Thu 18 Dec 2025 07:01:14 +0000 Files and hashes: 1: I9UkQ41YeX1efTDwQLbD_CMYPDQ.roa (hash: iSNpeYLJZVe6ucEI95ka4RakvFZqRgRE032Te/mBPRQ=) 2: Mk73breQdOacczAs5MLgr0f0Uwc.crl (hash: OhtSi/rvT/1fzZNPtdXPJw7kRvna61JEetlHrXXSQfo=) 3: x8qUgYPzT7g1nXs61F1j3vP06ZA.roa (hash: /RVMiuVCMeWyNuJCZhsV4JVmBiQgFuEHvbUPa8p74t4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:eb:ca:17:9e:be:6d:74:26:19:6f:c6:fd:b3:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324ef76eb79074e69c73302ce4c2e0af47f45307 Validity Not Before: Dec 17 07:01:14 2025 GMT Not After : Dec 18 07:01:14 2025 GMT Subject: CN=0705c5ed91d0201ec64f649828aa8eb885cd9204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:90:eb:4d:c6:c6:07:65:d5:19:10:bf:02:a9: e0:3b:16:76:57:5c:c6:0c:78:31:06:53:8a:82:d9: f9:c7:1e:7d:41:89:2e:8d:e8:2f:e6:44:7a:ad:a9: 98:90:d8:e9:be:4d:01:97:bd:c5:03:7c:85:cd:e7: 44:59:63:2d:35:6a:89:b4:44:e7:ad:11:49:e3:83: d6:42:5f:81:16:08:25:98:27:c4:ae:1e:42:81:eb: e3:ae:39:b6:62:fe:16:2e:23:e2:59:18:1a:89:7e: 2f:9a:a5:d9:dc:9b:e3:d2:85:70:60:59:42:e0:64: b4:cb:1f:a7:3c:fd:39:02:a5:1e:66:b0:23:04:9c: cf:55:5a:6b:1d:a5:85:60:2b:a6:44:cb:d9:7f:60: ea:0b:af:95:a3:81:f2:c6:22:f3:a6:7f:e6:a4:64: 7b:57:7c:c2:e6:b1:0e:45:9d:f9:a3:01:ee:43:11: 55:1f:ad:80:b9:d0:7e:c6:4c:cc:6a:42:cb:48:4d: c9:d9:48:96:e8:c5:ab:29:e6:89:36:27:e7:20:84: 1d:35:1a:42:ae:ae:bc:1e:7b:43:ee:be:c2:83:20: c8:9e:ca:27:a4:7c:75:e7:09:b5:33:12:cb:a8:27: ab:1d:2b:7f:ef:cc:89:ab:d4:8f:a6:29:98:ba:d4: 15:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:05:C5:ED:91:D0:20:1E:C6:4F:64:98:28:AA:8E:B8:85:CD:92:04 X509v3 Authority Key Identifier: keyid:32:4E:F7:6E:B7:90:74:E6:9C:73:30:2C:E4:C2:E0:AF:47:F4:53:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mk73breQdOacczAs5MLgr0f0Uwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d4b542-6392-43d0-a8c2-2cadcf6658ca/1/Mk73breQdOacczAs5MLgr0f0Uwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:d1:6c:0c:29:1c:ab:d0:fe:cc:8e:11:fb:67:f3:9d:a1:49: fe:b6:ea:95:cb:b2:46:87:3b:48:63:89:97:06:17:3d:be:aa: dd:d4:e3:d0:34:f4:02:4c:b2:20:4e:99:23:2d:95:45:94:3f: 67:d4:3c:3a:43:e3:d6:d5:9c:2d:7e:19:e6:39:cb:2a:01:9c: 0f:f3:6d:2d:a2:7e:7b:2e:aa:07:fe:dd:93:2a:4e:9f:95:35: 1e:4c:2f:97:b8:8e:8e:f8:8b:bc:01:6e:7f:ff:b8:b3:89:74: cd:35:4e:e9:3e:e3:7c:0b:0c:65:f5:f5:b5:6a:55:ce:67:8e: da:27:ce:58:b6:28:c3:26:d9:4f:b4:48:a4:d5:c0:5e:21:a9: f1:04:d0:84:95:a3:82:65:8c:26:0e:8d:38:51:08:81:19:a1: 66:6b:2d:81:19:28:ae:39:09:20:e8:9e:58:a0:5a:ed:c1:70: 90:b7:37:ee:8a:82:08:65:9a:d5:5c:a6:06:79:e2:c8:b3:29: 87:dd:f0:84:43:71:fd:7e:e4:c6:0c:c4:87:14:19:de:31:24: 0c:38:45:40:99:a9:91:16:9e:59:ae:29:45:f9:b4:ee:ee:43: 72:a3:5e:6f:c3:28:59:09:ff:81:09:b0:ce:f2:cf:55:bd:9a: cb:ae:0a:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHOvKF56+bXQmGW/G/bNDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNGVmNzZlYjc5MDc0ZTY5YzczMzAyY2U0YzJlMGFmNDdm NDUzMDcwHhcNMjUxMjE3MDcwMTE0WhcNMjUxMjE4MDcwMTE0WjAzMTEwLwYDVQQD EygwNzA1YzVlZDkxZDAyMDFlYzY0ZjY0OTgyOGFhOGViODg1Y2Q5MjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopDrTcbGB2XVGRC/AqngOxZ2V1zG DHgxBlOKgtn5xx59QYkujegv5kR6ramYkNjpvk0Bl73FA3yFzedEWWMtNWqJtETn rRFJ44PWQl+BFgglmCfErh5Cgevjrjm2Yv4WLiPiWRgaiX4vmqXZ3Jvj0oVwYFlC 4GS0yx+nPP05AqUeZrAjBJzPVVprHaWFYCumRMvZf2DqC6+Vo4HyxiLzpn/mpGR7 V3zC5rEORZ35owHuQxFVH62AudB+xkzMakLLSE3J2UiW6MWrKeaJNifnIIQdNRpC rq68HntD7r7CgyDInsonpHx15wm1MxLLqCerHSt/78yJq9SPpimYutQVswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcFxe2R0CAexk9kmCiqjriFzZIEMB8GA1UdIwQY MBaAFDJO9263kHTmnHMwLOTC4K9H9FMHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWs3M2JyZVFkT2FjY3pBczVNTGdyMGYwVXdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kNGI1NDItNjM5Mi00M2QwLWE4YzIt MmNhZGNmNjY1OGNhLzEvTWs3M2JyZVFkT2FjY3pBczVNTGdyMGYwVXdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9kNGI1NDItNjM5Mi00M2QwLWE4YzItMmNhZGNmNjY1OGNh LzEvTWs3M2JyZVFkT2FjY3pBczVNTGdyMGYwVXdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNFsDCkc q9D+zI4R+2fznaFJ/rbqlcuyRoc7SGOJlwYXPb6q3dTj0DT0AkyyIE6ZIy2VRZQ/ Z9Q8OkPj1tWcLX4Z5jnLKgGcD/NtLaJ+ey6qB/7dkypOn5U1Hkwvl7iOjviLvAFu f/+4s4l0zTVO6T7jfAsMZfX1tWpVzmeO2ifOWLYowybZT7RIpNXAXiGp8QTQhJWj gmWMJg6NOFEIgRmhZmstgRkorjkJIOieWKBa7cFwkLc37oqCCGWa1VymBnniyLMp h93whENx/X7kxgzEhxQZ3jEkDDhFQJmpkRaeWa4pRfm07u5DcqNeb8MoWQn/gQmw zvLPVb2ay64KrA== -----END CERTIFICATE-----Generated at Wed Dec 17 17:04:12 2025 by rpki-client