This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft File: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft (raw, json) Hash identifier: VRwYy8F5jqpoji3a9L9eNtueOxJLYo3lmXJwiPBPYxw= Subject key identifier: 80:3C:97:05:E1:4A:77:C0:06:40:5A:30:CB:27:AE:CD:A1:5F:75:2F Authority key identifier: 9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43 Certificate issuer: /CN=9a48c1d8008cdc059db0b27aa9514799c06d5443 Certificate serial: 019AF0516552EFF58D1E30FE5468D750BB73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft Manifest number: 12D1 Signing time: Fri 05 Dec 2025 21:00:57 +0000 Manifest this update: Fri 05 Dec 2025 21:00:57 +0000 Manifest next update: Sat 06 Dec 2025 21:00:57 +0000 Files and hashes: 1: GS3n997-WSAnBFI5sxW4oYhya68.roa (hash: 9uLSgMiqXXeu2TS+gBYSbYKO48DlZM21pWe2MUShNG8=) 2: K1RZ-_Fg9dSZIebCMUhpe6gbgJc.roa (hash: DeEJ/lwM2EUWvyFmV2osr5NnI9rnfMu9oAVwUv2cQPg=) 3: mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl (hash: Nn/o6UT69TuJkUkXSgFvFlHIDDutEXfuanPMLfqoG/g=) 4: tKjpgYt3F1U92FlxxtExmwv_VJA.roa (hash: PCobIxyuHsntJ/hl1UTuu1qlban1/mIdUKP0z5QY3l0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:65:52:ef:f5:8d:1e:30:fe:54:68:d7:50:bb:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a48c1d8008cdc059db0b27aa9514799c06d5443 Validity Not Before: Dec 5 21:00:57 2025 GMT Not After : Dec 6 21:00:57 2025 GMT Subject: CN=803c9705e14a77c006405a30cb27aecda15f752f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:57:59:4c:fa:6d:b0:93:5a:b1:35:60:c7:6f: 95:3a:c5:0c:67:67:80:f8:9b:aa:5f:5a:98:67:23: 04:36:a6:7c:4e:e1:6b:d8:f9:5d:94:2c:99:1e:7f: 72:57:9c:81:be:9c:f9:f9:bf:ef:cf:78:7b:56:20: 7f:30:0e:c3:61:04:9f:0f:a0:a9:c5:c7:d8:8f:9b: 36:95:6f:85:82:96:4c:42:25:dd:4a:cd:5e:11:34: b4:1d:91:7e:e5:0d:f3:a9:46:fe:e0:69:55:9d:4e: 5b:39:ed:c5:bf:60:17:80:bb:bd:48:20:aa:f9:8e: 10:a5:bd:d0:61:3e:7b:ad:e2:63:f3:75:75:26:fa: d7:53:56:05:fb:87:60:e2:1e:e2:c0:38:ea:f0:94: 24:fe:76:09:5c:bf:e0:51:a8:aa:b1:ba:cd:2c:a5: ed:d5:c0:a3:fc:00:7e:da:3d:bf:7a:be:c6:0d:d0: db:53:0b:06:2a:4b:c9:16:89:c9:99:3b:a5:ef:c8: 25:da:3f:80:d4:8b:4e:e3:56:ae:e5:08:6a:52:b2: e9:a7:dd:80:05:57:57:a5:b1:23:e1:6c:a7:42:ad: 29:ec:26:e4:b9:dc:93:13:f9:08:68:41:bb:86:03: 2a:b9:b3:7e:23:9f:05:64:88:14:9f:56:0a:77:89: 05:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3C:97:05:E1:4A:77:C0:06:40:5A:30:CB:27:AE:CD:A1:5F:75:2F X509v3 Authority Key Identifier: keyid:9A:48:C1:D8:00:8C:DC:05:9D:B0:B2:7A:A9:51:47:99:C0:6D:54:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/cb614c-495e-410e-8730-5a366315c166/1/mkjB2ACM3AWdsLJ6qVFHmcBtVEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:70:32:e5:a8:92:70:56:d3:53:c7:01:0a:8b:ec:cb:30:f6: eb:72:79:60:86:eb:b0:6f:a9:19:34:7f:1f:59:f4:64:b5:4e: 8b:dc:5f:40:cc:4b:74:dc:d7:75:52:a7:58:77:3e:ad:20:97: 40:eb:22:fa:20:c7:66:70:03:8d:bf:da:47:6a:16:ea:63:b0: 6b:d6:73:e2:a4:25:c8:e3:42:0b:aa:4c:9a:0f:9d:ad:7c:d4: 2d:07:50:33:9e:9b:f7:af:17:cf:dc:d2:ef:15:ad:31:e0:30: 5a:37:cd:eb:d1:22:d0:6d:02:30:92:e1:84:35:d9:15:5f:15: 04:7d:7e:ba:26:f8:c6:ff:65:41:de:79:6e:64:03:24:de:7c: b5:28:72:e3:5e:75:c4:ef:23:9e:fa:c5:46:2f:21:58:42:61: df:ba:7e:cc:ee:c5:a1:85:24:44:5c:ca:41:52:26:df:37:74: 7d:da:69:28:1e:df:16:4e:aa:08:19:19:7d:97:8e:d3:61:c1: 1c:47:32:f0:d3:d8:e5:22:65:8f:9e:9e:86:45:69:99:23:b3: a3:6b:68:25:34:cc:c5:25:10:ce:4a:14:8b:a2:91:e2:7b:0b: 47:91:eb:5e:ad:0f:c2:e2:2c:22:01:f1:2f:b1:a5:5a:94:de: 2a:11:aa:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUWVS7/WNHjD+VGjXULtzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNDhjMWQ4MDA4Y2RjMDU5ZGIwYjI3YWE5NTE0Nzk5YzA2 ZDU0NDMwHhcNMjUxMjA1MjEwMDU3WhcNMjUxMjA2MjEwMDU3WjAzMTEwLwYDVQQD Eyg4MDNjOTcwNWUxNGE3N2MwMDY0MDVhMzBjYjI3YWVjZGExNWY3NTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VdZTPptsJNasTVgx2+VOsUMZ2eA +JuqX1qYZyMENqZ8TuFr2PldlCyZHn9yV5yBvpz5+b/vz3h7ViB/MA7DYQSfD6Cp xcfYj5s2lW+FgpZMQiXdSs1eETS0HZF+5Q3zqUb+4GlVnU5bOe3Fv2AXgLu9SCCq +Y4Qpb3QYT57reJj83V1JvrXU1YF+4dg4h7iwDjq8JQk/nYJXL/gUaiqsbrNLKXt 1cCj/AB+2j2/er7GDdDbUwsGKkvJFonJmTul78gl2j+A1ItO41au5QhqUrLpp92A BVdXpbEj4WynQq0p7CbkudyTE/kIaEG7hgMqubN+I58FZIgUn1YKd4kFjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIA8lwXhSnfABkBaMMsnrs2hX3UvMB8GA1UdIwQY MBaAFJpIwdgAjNwFnbCyeqlRR5nAbVRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAt NWEzNjYzMTVjMTY2LzEvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jYjYxNGMtNDk1ZS00MTBlLTg3MzAtNWEzNjYzMTVjMTY2 LzEvbWtqQjJBQ00zQVdkc0xKNnFWRkhtY0J0VkVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANnAy5aiS cFbTU8cBCovsyzD263J5YIbrsG+pGTR/H1n0ZLVOi9xfQMxLdNzXdVKnWHc+rSCX QOsi+iDHZnADjb/aR2oW6mOwa9Zz4qQlyONCC6pMmg+drXzULQdQM56b968Xz9zS 7xWtMeAwWjfN69Ei0G0CMJLhhDXZFV8VBH1+uib4xv9lQd55bmQDJN58tShy4151 xO8jnvrFRi8hWEJh37p+zO7FoYUkRFzKQVIm3zd0fdppKB7fFk6qCBkZfZeO02HB HEcy8NPY5SJlj56ehkVpmSOzo2toJTTMxSUQzkoUi6KR4nsLR5HrXq0PwuIsIgHx L7GlWpTeKhGqcg== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:18 2025 by rpki-client