This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft File: mjk-8WAn_AO8XARf-SidS7t_82Q.mft (raw, json) Hash identifier: bNOn4owOFQxg2zmx6aSR96ZdLJH2XB8cSib8C3mivPo= Subject key identifier: 0C:44:7F:F3:AD:11:45:08:44:9F:16:CE:8A:78:C8:5B:6B:85:35:70 Authority key identifier: 9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64 Certificate issuer: /CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364 Certificate serial: 019AF12D976B9784DD594295A8557469A98E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft Manifest number: 13AA Signing time: Sat 06 Dec 2025 01:01:28 +0000 Manifest this update: Sat 06 Dec 2025 01:01:28 +0000 Manifest next update: Sun 07 Dec 2025 01:01:28 +0000 Files and hashes: 1: 1-clNUolPp_tHK-YnMn1XJMAOUjs.roa (hash: KJW40p6GcC71WhI5WuddxJyJBJzYeaQczvMIzcE32ao=) 2: ThrNo6kiekZ1KA2l01FtFpnY2fk.roa (hash: sguoljLucbHptttLjY2jSVxQGOBsjlswaEqE7sugblE=) 3: cV3BD5-gE9KIDxyMlti5rVaXSy8.roa (hash: PvTekp3dawXrC4YtfV0s/U4et5tU6tfVspZ3Sv6BzkQ=) 4: mjk-8WAn_AO8XARf-SidS7t_82Q.crl (hash: xvjo/KGHpLkQM2PmDeDkzPgpBxnPPjB4HZzGh0Y3DOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:97:6b:97:84:dd:59:42:95:a8:55:74:69:a9:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a393ef16027fc03bc5c045ff9289d4bbb7ff364 Validity Not Before: Dec 6 01:01:28 2025 GMT Not After : Dec 7 01:01:28 2025 GMT Subject: CN=0c447ff3ad114508449f16ce8a78c85b6b853570 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5e:7f:db:5c:aa:10:e7:24:27:cc:a5:6e:94: 16:2b:78:49:b6:31:6b:3b:78:62:09:09:17:6f:45: 6b:a2:58:f5:b1:74:8c:24:fd:94:ec:a5:60:ec:fa: 05:e8:03:72:dd:8e:f6:cf:84:5d:64:a6:6e:24:c4: 43:cb:29:4d:2c:47:39:eb:2a:b6:d5:8d:23:6a:3f: 04:66:0d:92:bc:05:95:6e:b3:de:9d:c7:95:98:2f: ec:bf:fb:5c:ca:c0:78:f1:c0:b1:fe:78:27:96:11: 36:e9:40:01:92:3a:ae:b1:01:27:85:03:8f:91:08: 2e:1c:40:1a:73:00:1b:3c:38:52:bd:01:82:81:71: d3:f8:d5:0b:6f:e8:32:e9:e8:16:33:77:d4:fa:df: 36:35:dd:ee:d1:cb:5b:f7:de:b5:1b:18:7a:ff:05: 54:ee:c1:ef:65:89:dd:3a:68:69:b5:90:b4:03:fc: 50:23:0e:7d:a4:37:c3:1c:79:a3:f0:c3:d6:49:6c: 30:7f:f9:ad:49:ef:33:96:0e:bd:72:c4:6e:20:c6: 09:3a:cc:4d:f3:0e:75:b0:44:30:f0:21:f1:3d:49: c0:46:82:07:cc:36:72:c7:b3:ab:a2:d7:fe:22:1b: b7:28:4a:10:dd:d0:42:41:b9:b5:e3:eb:fc:c2:93: df:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:44:7F:F3:AD:11:45:08:44:9F:16:CE:8A:78:C8:5B:6B:85:35:70 X509v3 Authority Key Identifier: keyid:9A:39:3E:F1:60:27:FC:03:BC:5C:04:5F:F9:28:9D:4B:BB:7F:F3:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mjk-8WAn_AO8XARf-SidS7t_82Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c6d984-6bfc-4602-9d58-ab2d5e7d4a7b/1/mjk-8WAn_AO8XARf-SidS7t_82Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:7f:63:df:56:65:26:c0:76:4b:cb:ad:77:d8:91:24:2a:f6: 97:28:8c:70:7d:7d:f8:f0:be:c7:e5:3d:80:82:07:b6:f8:c3: 02:ce:ce:72:56:ee:d6:d1:27:42:30:75:80:a3:7f:7c:2c:09: b1:eb:20:92:9f:42:7f:c0:09:da:5e:d2:7a:56:2f:aa:72:9b: d2:f1:8e:a4:38:08:dc:65:94:8a:65:c7:7b:ba:83:2f:af:58: e5:75:89:cb:d1:20:34:a8:8c:14:d5:5c:f6:78:ce:08:2f:ab: 34:26:8e:75:37:d4:b1:8c:28:b3:9d:51:75:85:19:8c:ab:4b: ca:8d:27:8f:ae:07:1f:83:5e:bb:68:bc:a0:8b:68:d5:94:6a: f6:bf:fa:00:2b:f2:1a:7a:cf:86:5e:eb:b2:ac:36:7d:2c:eb: 7e:6b:7e:be:39:6d:76:14:55:88:f0:51:e7:52:05:ed:6a:d4: 15:7a:38:df:24:67:3e:8f:fc:04:05:95:7f:01:5a:c3:dd:22: e6:9a:06:74:a8:59:17:c9:cd:5f:4d:2c:54:44:b5:b0:2a:a5: c1:d1:2c:4d:45:48:5d:24:42:e9:6b:44:dc:ed:95:3b:cd:b8: 33:20:d4:fc:69:e5:38:ec:bd:db:96:8d:0d:74:4c:f7:f9:54: a7:2a:4a:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZdrl4TdWUKVqFV0aamOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMzkzZWYxNjAyN2ZjMDNiYzVjMDQ1ZmY5Mjg5ZDRiYmI3 ZmYzNjQwHhcNMjUxMjA2MDEwMTI4WhcNMjUxMjA3MDEwMTI4WjAzMTEwLwYDVQQD EygwYzQ0N2ZmM2FkMTE0NTA4NDQ5ZjE2Y2U4YTc4Yzg1YjZiODUzNTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzF5/21yqEOckJ8ylbpQWK3hJtjFr O3hiCQkXb0Vrolj1sXSMJP2U7KVg7PoF6ANy3Y72z4RdZKZuJMRDyylNLEc56yq2 1Y0jaj8EZg2SvAWVbrPenceVmC/sv/tcysB48cCx/ngnlhE26UABkjqusQEnhQOP kQguHEAacwAbPDhSvQGCgXHT+NULb+gy6egWM3fU+t82Nd3u0ctb9961Gxh6/wVU 7sHvZYndOmhptZC0A/xQIw59pDfDHHmj8MPWSWwwf/mtSe8zlg69csRuIMYJOsxN 8w51sEQw8CHxPUnARoIHzDZyx7Orotf+Ihu3KEoQ3dBCQbm14+v8wpPfVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxEf/OtEUUIRJ8Wzop4yFtrhTVwMB8GA1UdIwQY MBaAFJo5PvFgJ/wDvFwEX/konUu7f/NkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgt YWIyZDVlN2Q0YTdiLzEvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jNmQ5ODQtNmJmYy00NjAyLTlkNTgtYWIyZDVlN2Q0YTdi LzEvbWprLThXQW5fQU84WEFSZi1TaWRTN3RfODJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYX9j31Zl JsB2S8utd9iRJCr2lyiMcH19+PC+x+U9gIIHtvjDAs7Oclbu1tEnQjB1gKN/fCwJ sesgkp9Cf8AJ2l7SelYvqnKb0vGOpDgI3GWUimXHe7qDL69Y5XWJy9EgNKiMFNVc 9njOCC+rNCaOdTfUsYwos51RdYUZjKtLyo0nj64HH4Neu2i8oIto1ZRq9r/6ACvy GnrPhl7rsqw2fSzrfmt+vjltdhRViPBR51IF7WrUFXo43yRnPo/8BAWVfwFaw90i 5poGdKhZF8nNX00sVES1sCqlwdEsTUVIXSRC6WtE3O2VO824MyDU/GnlOOy925aN DXRM9/lUpypK4g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:44 2025 by rpki-client