This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft File: mk2qT2rA5rwQK2iECirGu1QbQPw.mft (raw, json) Hash identifier: PUq9UiNMUtick2ow1FHjb5uhQFcqNmiNaE45JUEj3u0= Subject key identifier: C8:06:A6:72:D2:72:89:2E:BB:96:E7:EB:05:93:7B:22:E7:6C:D5:2D Authority key identifier: 9A:4D:AA:4F:6A:C0:E6:BC:10:2B:68:84:0A:2A:C6:BB:54:1B:40:FC Certificate issuer: /CN=9a4daa4f6ac0e6bc102b68840a2ac6bb541b40fc Certificate serial: 019B32D6675A18E3D07593EE8E589E0D3853 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk2qT2rA5rwQK2iECirGu1QbQPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft Manifest number: 0779 Signing time: Thu 18 Dec 2025 19:01:10 +0000 Manifest this update: Thu 18 Dec 2025 19:01:10 +0000 Manifest next update: Fri 19 Dec 2025 19:01:10 +0000 Files and hashes: 1: j0Asbb5ngsOWlyvv7kth_3yoBYM.roa (hash: O/JfF/netiv5OyRHt3hhhICYzLbMzCW+fJQdQl7HVfM=) 2: mk2qT2rA5rwQK2iECirGu1QbQPw.crl (hash: Qanlv1CmZNkZB9X987SdxQ5Fju8w+OBRb3xFe8FkjYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.crl rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft rsync://rpki.ripe.net/repository/DEFAULT/mk2qT2rA5rwQK2iECirGu1QbQPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:67:5a:18:e3:d0:75:93:ee:8e:58:9e:0d:38:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a4daa4f6ac0e6bc102b68840a2ac6bb541b40fc Validity Not Before: Dec 18 19:01:10 2025 GMT Not After : Dec 19 19:01:10 2025 GMT Subject: CN=c806a672d272892ebb96e7eb05937b22e76cd52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:8d:45:03:de:29:c8:d3:a6:e3:c1:b3:fb:62: 93:38:ea:94:64:0b:ae:7f:3f:ba:33:88:c6:bd:73: 7c:1c:40:d4:74:36:02:0a:82:89:88:3f:b9:27:9c: f8:ad:5a:1e:94:90:20:61:0c:a5:07:78:a4:3f:f6: 85:7a:70:be:55:ca:fe:d4:06:de:8c:5d:eb:53:25: 27:fe:76:0c:59:a5:ed:3d:7e:b9:aa:d4:32:f4:11: af:35:53:99:c1:6d:77:cc:2e:d1:b3:75:72:61:04: 84:b5:2e:dd:4b:0d:46:dc:e9:d8:42:74:96:67:22: 21:6a:62:0e:46:35:be:88:17:fd:78:1c:f4:d6:a2: bc:79:ac:a0:ef:33:ae:04:19:c1:99:3e:d7:69:bf: 3c:b5:49:de:48:91:c0:ee:e3:84:c3:f8:67:a5:11: f1:ce:2d:71:93:02:29:8a:ed:3c:8e:3f:10:3e:37: 1e:f3:e4:f5:11:8e:32:b4:c7:ff:d8:4d:18:c9:8d: 0c:00:6e:bb:37:69:30:26:8e:2f:97:ad:36:55:c2: d4:b4:57:75:80:25:7c:66:e5:26:d2:3e:86:15:d0: dc:5a:d3:06:04:84:7e:39:06:5c:9b:cc:58:d7:16: c2:81:df:5c:b2:99:0f:5d:c6:ee:30:fa:77:a8:90: f8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:06:A6:72:D2:72:89:2E:BB:96:E7:EB:05:93:7B:22:E7:6C:D5:2D X509v3 Authority Key Identifier: keyid:9A:4D:AA:4F:6A:C0:E6:BC:10:2B:68:84:0A:2A:C6:BB:54:1B:40:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk2qT2rA5rwQK2iECirGu1QbQPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:46:a9:75:47:bf:ff:d7:9b:30:03:bc:a5:f5:d6:e5:37:a4: 0d:33:24:0a:8c:5b:b0:ba:97:f4:be:41:27:25:a4:0f:62:9a: 63:b2:8a:2b:14:45:98:b8:f3:77:e5:11:84:62:24:d0:81:2b: 15:d7:dd:32:b0:b0:ab:e9:0b:36:d6:04:53:cf:86:a7:b9:f5: af:90:38:a7:ce:c2:6b:21:7b:83:7d:22:0b:62:ab:c6:cb:e1: 44:6e:cb:15:81:11:ae:94:b7:85:ae:53:2b:5d:ef:e3:c5:74: 8e:53:37:4f:82:63:37:1d:51:c2:5c:91:c8:f1:42:5f:0e:5b: 29:90:95:3d:4b:40:c6:f9:1a:05:97:2a:33:65:76:87:9a:ba: c1:f7:88:58:82:80:b0:a6:74:26:0b:9d:89:d1:12:95:cd:3f: 5d:40:7c:bb:72:a8:04:2d:1d:b5:57:5a:80:d2:4d:3f:60:00: 8b:50:57:5f:53:a3:d0:b7:2f:0a:ee:78:c2:b1:0d:6e:f8:f4: f1:db:04:ad:44:64:5c:4e:08:d3:da:45:02:79:d7:28:8f:94: 46:f0:ab:28:66:80:2f:db:31:73:ac:ed:77:eb:ce:7b:0a:4d: 2d:e0:23:b9:5e:bf:4f:a9:cf:2e:42:1f:60:6c:aa:6f:d5:9c: 85:22:bc:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1mdaGOPQdZPujlieDThTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNGRhYTRmNmFjMGU2YmMxMDJiNjg4NDBhMmFjNmJiNTQx YjQwZmMwHhcNMjUxMjE4MTkwMTEwWhcNMjUxMjE5MTkwMTEwWjAzMTEwLwYDVQQD EyhjODA2YTY3MmQyNzI4OTJlYmI5NmU3ZWIwNTkzN2IyMmU3NmNkNTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1o1FA94pyNOm48Gz+2KTOOqUZAuu fz+6M4jGvXN8HEDUdDYCCoKJiD+5J5z4rVoelJAgYQylB3ikP/aFenC+Vcr+1Abe jF3rUyUn/nYMWaXtPX65qtQy9BGvNVOZwW13zC7Rs3VyYQSEtS7dSw1G3OnYQnSW ZyIhamIORjW+iBf9eBz01qK8eayg7zOuBBnBmT7Xab88tUneSJHA7uOEw/hnpRHx zi1xkwIpiu08jj8QPjce8+T1EY4ytMf/2E0YyY0MAG67N2kwJo4vl602VcLUtFd1 gCV8ZuUm0j6GFdDcWtMGBIR+OQZcm8xY1xbCgd9cspkPXcbuMPp3qJD4cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgGpnLScokuu5bn6wWTeyLnbNUtMB8GA1UdIwQY MBaAFJpNqk9qwOa8ECtohAoqxrtUG0D8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWsycVQyckE1cndRSzJpRUNpckd1MVFiUVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9jZDQ2MjQtNjIwYS00Y2IyLWE0MTYt NmJlOTJiMWFhOGIzLzEvbWsycVQyckE1cndRSzJpRUNpckd1MVFiUVB3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9jZDQ2MjQtNjIwYS00Y2IyLWE0MTYtNmJlOTJiMWFhOGIz LzEvbWsycVQyckE1cndRSzJpRUNpckd1MVFiUVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACkapdUe/ /9ebMAO8pfXW5TekDTMkCoxbsLqX9L5BJyWkD2KaY7KKKxRFmLjzd+URhGIk0IEr FdfdMrCwq+kLNtYEU8+Gp7n1r5A4p87CayF7g30iC2KrxsvhRG7LFYERrpS3ha5T K13v48V0jlM3T4JjNx1RwlyRyPFCXw5bKZCVPUtAxvkaBZcqM2V2h5q6wfeIWIKA sKZ0JgudidESlc0/XUB8u3KoBC0dtVdagNJNP2AAi1BXX1Oj0LcvCu54wrENbvj0 8dsErURkXE4I09pFAnnXKI+URvCrKGaAL9sxc6ztd+vOewpNLeAjuV6/T6nPLkIf YGyqb9WchSK8TQ== -----END CERTIFICATE-----Generated at Thu Dec 18 22:10:05 2025 by rpki-client